$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft File: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft (raw, json) Hash identifier: q2WcmgKXujw0ySEX5wGQDR2mSYRgEGyBjO5tRm9mavQ= Subject key identifier: EC:6D:63:44:96:65:14:E7:CC:18:C2:33:83:12:B6:4D:3F:83:E2:8A Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68 Certificate issuer: /CN=7db10757cfa3917dbfa5b9be68e978653d414368 Certificate serial: 019F4B7A1415D9E090E67343C6C08420CE0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft Manifest number: 01E1 Signing time: Fri 10 Jul 2026 10:01:59 +0000 Manifest this update: Fri 10 Jul 2026 10:01:59 +0000 Manifest next update: Sat 11 Jul 2026 10:01:59 +0000 Files and hashes: 1: 11GxtSy7oVessoMzmqoa6-GVaFM.roa (hash: dEcJU2H7eMFkWZ5hiqB+aM7WjgMaOQg3rLiI2kSrzMA=) 2: 4mAC2e2naxP6ju3b8JY5KHGq5NQ.roa (hash: EtytVm/6AHxWfObsQVWGolI13NzE3vnrzO+hEwitye4=) 3: 67JDNfAtP9yEkJbfUjQ3vr0JanQ.roa (hash: TMkj0G/KqGW0hoDAPTbK60VfZv79MVnxbAmNA4wAIxY=) 4: B_7QNLEyOLRHkGziKQcoP3jS9N8.roa (hash: wt94oNA2beZskoVPKNrRXzQfjQMHidYZl0oibApgTyU=) 5: Ed26D8U4hy9Q3LQu5_4P5xQ88Fs.roa (hash: kLzLVcajWbXNwZhhTO7Kf1y0Py6ohIR9eaLpz+kos+s=) 6: Ha4FUbT-C5cfgzREP_qKmJdZdNU.roa (hash: OWm/SoXebYfD0ymYVnkD6nJ1M+OinzGR+vHe5dJGhIk=) 7: JoonRKwDkzGDADAYbWqY6h6w-K8.roa (hash: cPQ1mkuIkwhP6i3plXOgbNc6BnD5TBFu2q0RZqT67s8=) 8: ObEFLA71GS6PBSPXvLN1tQxOPjg.roa (hash: CQurRH2QtNh+H5vZ26uy12WpU20lxprNhR0FVldn9Ok=) 9: R0lbPN66JhHTAlizwtgpkO4cz3Y.roa (hash: X9vNqzFtl+nRCTrfZFlpEmLshxNhNE7U0YtwgkXsL6o=) 10: _n6jeEvw1fkyJDmhWTUIcmdEloQ.roa (hash: aygh9B/H+i/ULx64UfP113xepSH3dG8pMCGeRmM4JJ4=) 11: bAiv0w09X4HnDoPXtry_uVbCG9A.roa (hash: 0EeSizCgG9dwzt3jvwALQHRTpOevtke5hHF/nPETtCw=) 12: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl (hash: 6OLd5uhMqWEo+VNJM4ttF1OuvcWzSDTxFp6E69OCi4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 10:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:4b:7a:14:15:d9:e0:90:e6:73:43:c6:c0:84:20:ce:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368 Validity Not Before: Jul 10 10:01:59 2026 GMT Not After : Jul 11 10:01:59 2026 GMT Subject: CN=ec6d6344966514e7cc18c2338312b64d3f83e28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:a0:f2:f8:6f:cc:7d:ea:59:58:e3:63:ad: 6a:47:a9:d7:ad:e1:6c:29:3c:99:97:96:08:5d:e6: 03:12:0c:e7:84:d1:3f:32:50:57:78:80:65:37:69: d3:30:0f:fe:ad:60:b3:d1:2d:a4:ef:17:a0:8d:b7: 9e:2e:70:95:34:b5:df:e6:93:3f:b2:c5:aa:de:e0: 6d:7e:a4:33:45:dd:04:e1:cb:05:a3:14:8c:00:03: 8f:ac:2a:bf:02:5b:be:76:e0:bf:31:4c:a5:93:63: d0:71:ee:09:f4:a5:b6:67:5a:a9:f7:64:30:f5:a2: 28:c9:41:d5:e7:83:6c:51:39:f5:5c:20:a7:20:fd: 58:5d:46:33:d5:59:de:21:2f:ac:08:10:1c:c7:5a: 15:9d:cc:8a:fa:da:d8:f5:eb:fb:46:d8:1f:4e:77: 2f:52:e9:da:8e:9c:b4:15:9d:fb:61:42:5c:5a:c1: 68:1a:d2:80:0e:31:41:78:10:61:ae:bd:ae:61:57: ae:f7:92:a0:16:e6:fe:f2:09:03:d4:03:18:79:e3: 9a:6b:48:0d:6e:b3:be:01:b7:48:d9:7d:2f:5f:44: ed:8f:6e:df:cf:69:7e:c7:9a:d3:e4:5e:2a:e0:03: ce:f2:f1:f8:e5:19:c2:23:c5:06:66:f0:c5:5e:26: 21:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6D:63:44:96:65:14:E7:CC:18:C2:33:83:12:B6:4D:3F:83:E2:8A X509v3 Authority Key Identifier: keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:11:ad:5b:0f:1f:f8:b4:bc:74:03:d7:5a:d3:11:7d:2c:34: dd:f7:69:c1:1a:04:69:e2:5f:ec:ec:b3:49:f0:fd:10:b5:3f: 2e:7e:06:af:f5:06:16:ae:8e:ae:ed:9f:7f:2c:56:49:af:30: ef:c9:95:42:6d:52:25:18:1b:6e:b2:2c:a7:eb:36:d0:4a:a7: c3:9a:bf:9d:48:f9:b4:86:e8:a2:b4:da:7f:5e:78:10:c4:88: 31:0b:0c:c5:a9:49:5c:f8:23:34:68:5a:b3:3b:22:9e:64:98: 5c:59:f9:94:b4:d9:ce:4b:03:d8:8e:39:49:98:58:4c:24:27: b1:a4:02:fe:a8:f4:c7:22:95:d4:68:43:3d:54:ff:75:98:0c: 86:0c:75:8d:23:3c:f6:06:77:c3:ca:84:59:15:57:61:23:8f: 5e:93:55:92:0c:3c:97:52:9c:df:01:64:d4:18:03:de:2d:44: d0:17:94:83:a3:92:06:aa:49:cf:9c:22:59:e6:67:ec:f6:38: 31:a3:df:f2:ab:83:d6:21:2f:4d:9a:64:d4:9c:7a:c7:69:de: d2:28:86:b4:df:10:89:17:73:7e:14:0e:c1:58:41:65:a7:15: 38:15:1a:23:88:5f:8e:ef:5f:55:c6:45:db:62:d3:80:fc:ec: 57:ab:83:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ9LehQV2eCQ5nNDxsCEIM4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYjEwNzU3Y2ZhMzkxN2RiZmE1YjliZTY4ZTk3ODY1M2Q0 MTQzNjgwHhcNMjYwNzEwMTAwMTU5WhcNMjYwNzExMTAwMTU5WjAzMTEwLwYDVQQD EyhlYzZkNjM0NDk2NjUxNGU3Y2MxOGMyMzM4MzEyYjY0ZDNmODNlMjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOqg8vhvzH3qWVjjY61qR6nXreFs KTyZl5YIXeYDEgznhNE/MlBXeIBlN2nTMA/+rWCz0S2k7xegjbeeLnCVNLXf5pM/ ssWq3uBtfqQzRd0E4csFoxSMAAOPrCq/Alu+duC/MUylk2PQce4J9KW2Z1qp92Qw 9aIoyUHV54NsUTn1XCCnIP1YXUYz1VneIS+sCBAcx1oVncyK+trY9ev7RtgfTncv Uunajpy0FZ37YUJcWsFoGtKADjFBeBBhrr2uYVeu95KgFub+8gkD1AMYeeOaa0gN brO+AbdI2X0vX0Ttj27fz2l+x5rT5F4q4APO8vH45RnCI8UGZvDFXiYhsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxtY0SWZRTnzBjCM4MStk0/g+KKMB8GA1UdIwQY MBaAFH2xB1fPo5F9v6W5vmjpeGU9QUNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yYjc4YTktNDExZC00Yzg4LThjY2Qt ZmM0MWQxYzQxNGFiLzEvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yYjc4YTktNDExZC00Yzg4LThjY2QtZmM0MWQxYzQxNGFi LzEvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxGtWw8f +LS8dAPXWtMRfSw03fdpwRoEaeJf7OyzSfD9ELU/Ln4Gr/UGFq6Oru2ffyxWSa8w 78mVQm1SJRgbbrIsp+s20Eqnw5q/nUj5tIboorTaf154EMSIMQsMxalJXPgjNGha szsinmSYXFn5lLTZzksD2I45SZhYTCQnsaQC/qj0xyKV1GhDPVT/dZgMhgx1jSM8 9gZ3w8qEWRVXYSOPXpNVkgw8l1Kc3wFk1BgD3i1E0BeUg6OSBqpJz5wiWeZn7PY4 MaPf8quD1iEvTZpk1Jx6x2ne0iiGtN8QiRdzfhQOwVhBZacVOBUaI4hfju9fVcZF 22LTgPzsV6uDrQ== -----END CERTIFICATE-----Generated at Fri Jul 10 19:57:05 2026 by rpki-client