$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: 7J4yYFcOvVdwXKQyq2ZaFxfeqTnGRCYyaU21xyQ9Tyo= Subject key identifier: D3:37:59:4D:EA:FC:CC:58:10:F2:0B:25:22:80:8B:E4:95:EA:95:FC Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019F84FA34873D00E8459409D71A9F991B87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 1962 Signing time: Tue 21 Jul 2026 14:00:17 +0000 Manifest this update: Tue 21 Jul 2026 14:00:17 +0000 Manifest next update: Wed 22 Jul 2026 14:00:17 +0000 Files and hashes: 1: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (hash: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8=) 2: ABhJOuq81aAMPa4_YYIO3v-t4oU.roa (hash: 0eeFSSqt4KgbYUOgEizxWBOCbjrR9YB3YtAIVlPFnN4=) 3: IPWNhyQxn8-D80dsDEI3Muy7j4w.roa (hash: JR2kZnfGEReYvLarJyG91LQRoVZfPpAoA2dBMj0ig2w=) 4: MJk2hRWFPXbWPid66y-yooVzeJI.roa (hash: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=) 5: Mcn8ffph0vFbf5y77sp8qX9cvuQ.roa (hash: oh6B2oDiINNmRv7LyEyRUP7+GJCatnxM+IyU6VV9yRs=) 6: Oi-RJ2dhND8R3bCPKlX2wVza8B4.roa (hash: AY1jUsJQoUBtPYQaCHvczNv8Mdfj3rI4udwi0diUU84=) 7: TXWio7T0yQ8fPQNndu5iMXKIPyk.roa (hash: Ptazack76ll8xJWikp2M96Ej4NUgmKdtpGkA8A7sIE0=) 8: __KT70ir2b12tsfvWsQwOzZ4SWs.roa (hash: U40qvVXwLqE+3d+p8VD5hkkPBVtM5TzS/GB+oxmksS0=) 9: ceKjGHCvCXf_MEK8NMfyXBnLoVU.roa (hash: hhPEmrABIH3Expe/KF3PZ8pAmJCxcVnuEeGLXskO2EU=) 10: dNyetmWu_99kmHhkiZvcLr-cuzU.roa (hash: forzVhrHGmXFVsQJmgLEUSqJW9c/HnLATZaoS4TWk3M=) 11: gnoYrT4knURKrt5KKBfShHVozwM.roa (hash: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM=) 12: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (hash: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg=) 13: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: lMOuppisqsLvB4Ac1LZunTYnkDZjstseVmvnv0HogPw=) 14: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (hash: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI=) 15: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (hash: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU=) 16: vDEzYqBkCfgUY7uwB1YZdOKY4lA.roa (hash: FWKvLV4V8Zp4mvo/6tBcMGGo3HEXFD5ePSPM/5NPrKo=) 17: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (hash: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:84:fa:34:87:3d:00:e8:45:94:09:d7:1a:9f:99:1b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Jul 21 14:00:17 2026 GMT Not After : Jul 22 14:00:17 2026 GMT Subject: CN=d337594deafccc5810f20b2522808be495ea95fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:06:2c:41:98:00:49:c8:62:ea:7a:4a:b9:9a: b0:0c:19:aa:ad:18:ca:0d:8b:cf:e1:ac:25:c1:56: b9:57:b2:79:b0:ab:53:b9:fa:dc:ca:61:94:e6:51: 48:cd:6d:62:a7:b9:cb:f8:81:41:b5:d3:6f:64:f0: b4:fe:ee:c2:74:d6:e6:54:ad:0b:46:30:02:ab:25: b8:a1:e4:e4:d8:7f:ec:01:d2:f6:c0:9e:0b:44:3b: 96:40:fa:45:6a:0e:32:ab:f4:8e:cc:c8:6f:aa:c9: bf:dd:4d:12:0e:86:ac:b6:ff:a5:ab:4d:94:3b:aa: c9:0c:3f:16:44:21:b6:e0:f4:29:fb:1c:4a:0c:07: 4e:99:a3:95:54:bf:24:39:bb:aa:70:0b:72:81:a2: db:87:17:03:c0:90:b5:f0:de:9a:9b:74:96:88:e2: 06:5d:66:cc:88:7c:bd:ac:3a:84:e4:e0:df:43:fa: 7a:12:2a:f2:d7:dc:ef:02:41:fc:1e:76:a1:50:5f: 72:aa:89:3a:2d:fa:2b:0d:12:dc:02:85:81:77:ee: 18:5b:98:c4:af:c7:b6:05:29:5e:66:2c:59:c5:e9: 75:6c:8d:b0:54:4b:4a:cc:cb:47:d6:a3:09:9e:99: 3b:b9:29:99:1c:a3:94:0a:c5:89:17:1a:ec:e9:12: 81:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:37:59:4D:EA:FC:CC:58:10:F2:0B:25:22:80:8B:E4:95:EA:95:FC X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:92:21:92:50:27:3d:72:7f:d2:09:77:d9:fb:9a:de:1c:83: 49:12:90:8e:a6:45:15:db:9b:59:61:0c:fb:43:42:dd:c2:b3: c1:e0:0e:9a:b4:e1:98:86:d1:1a:23:de:1d:03:3c:6f:13:49: df:f1:44:8f:b5:42:5e:74:8d:ce:0a:bf:12:84:75:70:e5:80: 34:28:e6:11:b3:fc:8e:b0:3a:84:c4:9d:46:be:cf:b4:4c:0c: b9:be:ba:ed:41:dd:5c:79:d8:ad:24:1d:25:af:c6:4d:01:2e: da:a9:74:48:d4:0c:ce:e1:26:7b:ca:a6:12:52:a4:b4:8d:31: 20:68:2c:c3:b0:ed:45:42:c5:0d:41:1f:f1:33:eb:a4:1e:8f: 67:79:4b:2c:9c:59:f0:ab:f2:40:2d:22:1c:9b:56:7a:59:c4: 73:f1:26:12:3e:d7:fe:b3:f2:b7:e6:2a:6d:cc:93:5d:7c:80: 33:18:fa:da:09:b1:31:0c:12:74:fc:03:92:6c:08:64:40:80: ef:dc:c3:6b:53:fd:c4:24:9b:3c:98:9b:fc:a4:72:67:16:ec: 54:68:0b:60:9e:8f:ad:a4:58:75:8f:70:1b:70:8f:c1:16:b9: 59:13:e6:23:1b:89:97:f1:6a:91:17:f8:72:56:bb:99:58:a9: c1:04:3f:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+E+jSHPQDoRZQJ1xqfmRuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjYwNzIxMTQwMDE3WhcNMjYwNzIyMTQwMDE3WjAzMTEwLwYDVQQD EyhkMzM3NTk0ZGVhZmNjYzU4MTBmMjBiMjUyMjgwOGJlNDk1ZWE5NWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gYsQZgASchi6npKuZqwDBmqrRjK DYvP4awlwVa5V7J5sKtTufrcymGU5lFIzW1ip7nL+IFBtdNvZPC0/u7CdNbmVK0L RjACqyW4oeTk2H/sAdL2wJ4LRDuWQPpFag4yq/SOzMhvqsm/3U0SDoastv+lq02U O6rJDD8WRCG24PQp+xxKDAdOmaOVVL8kObuqcAtygaLbhxcDwJC18N6am3SWiOIG XWbMiHy9rDqE5ODfQ/p6Eiry19zvAkH8HnahUF9yqok6LforDRLcAoWBd+4YW5jE r8e2BSleZixZxel1bI2wVEtKzMtH1qMJnpk7uSmZHKOUCsWJFxrs6RKBnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNM3WU3q/MxYEPILJSKAi+SV6pX8MB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpIhklAn PXJ/0gl32fua3hyDSRKQjqZFFdubWWEM+0NC3cKzweAOmrThmIbRGiPeHQM8bxNJ 3/FEj7VCXnSNzgq/EoR1cOWANCjmEbP8jrA6hMSdRr7PtEwMub667UHdXHnYrSQd Ja/GTQEu2ql0SNQMzuEme8qmElKktI0xIGgsw7DtRULFDUEf8TPrpB6PZ3lLLJxZ 8KvyQC0iHJtWelnEc/EmEj7X/rPyt+YqbcyTXXyAMxj62gmxMQwSdPwDkmwIZECA 79zDa1P9xCSbPJib/KRyZxbsVGgLYJ6PraRYdY9wG3CPwRa5WRPmIxuJl/FqkRf4 cla7mVipwQQ/Jg== -----END CERTIFICATE-----Generated at Tue Jul 21 17:14:25 2026 by rpki-client