$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: y5msgHigAFXDikt3544PwspdttpNrBCGUjqM2c6uflA= Subject key identifier: D9:06:8E:AC:01:32:DE:46:5B:3B:AC:9F:DE:0A:CE:98:A4:9E:DC:3A Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019FC2FECFD45BE18BEE23D040D85A15D3B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 1025 Signing time: Sun 02 Aug 2026 15:01:46 +0000 Manifest this update: Sun 02 Aug 2026 15:01:46 +0000 Manifest next update: Mon 03 Aug 2026 15:01:46 +0000 Files and hashes: 1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=) 2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=) 3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=) 4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=) 5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=) 6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=) 7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: nyTu9T1lbfE+n4Bu+kmmh9aZ/AA5KPhrvdqHDP4qvNM=) 8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=) 9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=) 10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=) 11: f2waKQNAA11ZmElzUDNQuE551eg.roa (hash: 9wNIMlJ6NAZfEpbuK9ToCkHc8eGXpYOSuShsA99Z1G8=) 12: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=) 13: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=) 14: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 03 Aug 2026 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:c2:fe:cf:d4:5b:e1:8b:ee:23:d0:40:d8:5a:15:d3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Aug 2 15:01:46 2026 GMT Not After : Aug 3 15:01:46 2026 GMT Subject: CN=d9068eac0132de465b3bac9fde0ace98a49edc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:78:4a:e2:f6:f4:b7:30:30:f1:d2:d3:fc:f9: 4b:56:2d:eb:91:99:41:48:5e:8d:26:04:60:3b:5a: cd:b6:15:ca:77:30:b4:5d:c6:79:a6:d6:9a:ab:2f: 8c:b3:67:f9:be:45:d6:38:de:9c:79:8f:ca:9c:92: ab:96:3e:e1:e6:ca:1c:06:6e:4b:f0:eb:a6:c8:fd: 72:5d:08:a1:99:93:ee:23:c3:59:7b:b9:fc:3b:cc: ac:3e:d1:ef:0f:cb:7c:ff:6c:3d:66:bc:62:d1:c9: ce:c6:ac:c2:62:8d:f3:2d:2d:44:2c:5e:10:3e:aa: 16:43:e1:d5:56:5c:30:14:1a:ce:b2:9b:e9:35:52: 5e:df:7a:98:70:0c:2c:f6:0e:db:36:5c:b6:38:50: 6c:c3:e5:29:b3:5a:86:32:8b:98:38:09:f9:43:90: 42:2b:bf:21:70:49:80:c1:c6:91:f4:24:6e:fa:39: 70:88:35:c4:a8:36:c5:f2:66:5d:f7:95:a7:86:67: 97:07:61:74:c1:05:2f:0c:0a:1d:44:93:e1:42:43: 10:b7:e5:c9:5f:aa:e6:d6:88:8e:d9:99:17:01:35: eb:44:47:4f:f9:b3:03:58:af:6e:59:d9:a7:79:21: 98:bc:08:8e:c5:a8:92:fd:0e:06:66:48:9c:93:86: a0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:06:8E:AC:01:32:DE:46:5B:3B:AC:9F:DE:0A:CE:98:A4:9E:DC:3A X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d0:8e:e4:35:ed:8d:ca:75:7a:8b:42:41:80:be:f0:7a:47: 4b:d9:d6:28:9a:36:a9:b5:f2:36:57:43:b2:2c:5e:a5:b6:6e: db:4d:90:bc:30:4b:06:a3:89:3f:7b:e8:07:72:e3:76:78:b6: ff:57:56:9a:aa:99:27:f3:23:51:6f:fd:18:76:44:6b:1f:b3: 13:9f:b5:9b:0d:1e:08:73:7d:fa:09:c2:a3:8a:51:dc:88:24: 52:6c:dd:8c:c2:0f:7a:8d:38:9d:c0:6c:81:5b:80:3c:e6:3d: 55:58:f2:ab:a7:c8:d5:c2:1f:77:af:2f:c6:d0:17:c0:52:a5: 71:ed:c0:bf:8a:47:c1:63:51:42:64:90:d8:65:87:3f:3f:8a: 75:f8:47:8e:a4:53:8f:0f:c8:5a:e1:4e:9f:5d:4c:2c:f0:50: 7c:ff:63:cd:4d:f0:08:cb:06:59:8d:f0:09:8f:09:a2:34:bf: 8e:13:15:95:a7:2d:54:ea:81:11:53:6f:37:ca:cd:8f:dc:d0: 29:86:f4:e1:69:f9:0a:cf:b9:ab:e9:8f:1b:9b:a5:5d:91:d0: 5f:0c:68:6f:42:a7:9c:d1:8b:cf:87:5c:46:b8:ca:d5:56:b8: 87:11:12:bd:06:14:85:76:fd:dd:9b:ca:f8:c2:44:1e:48:37: 44:97:92:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/C/s/UW+GL7iPQQNhaFdO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwODAyMTUwMTQ2WhcNMjYwODAzMTUwMTQ2WjAzMTEwLwYDVQQD EyhkOTA2OGVhYzAxMzJkZTQ2NWIzYmFjOWZkZTBhY2U5OGE0OWVkYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3hK4vb0tzAw8dLT/PlLVi3rkZlB SF6NJgRgO1rNthXKdzC0XcZ5ptaaqy+Ms2f5vkXWON6ceY/KnJKrlj7h5socBm5L 8OumyP1yXQihmZPuI8NZe7n8O8ysPtHvD8t8/2w9Zrxi0cnOxqzCYo3zLS1ELF4Q PqoWQ+HVVlwwFBrOspvpNVJe33qYcAws9g7bNly2OFBsw+Ups1qGMouYOAn5Q5BC K78hcEmAwcaR9CRu+jlwiDXEqDbF8mZd95WnhmeXB2F0wQUvDAodRJPhQkMQt+XJ X6rm1oiO2ZkXATXrREdP+bMDWK9uWdmneSGYvAiOxaiS/Q4GZkick4agWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkGjqwBMt5GWzusn94Kzpikntw6MB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNCO5DXt jcp1eotCQYC+8HpHS9nWKJo2qbXyNldDsixepbZu202QvDBLBqOJP3voB3Ljdni2 /1dWmqqZJ/MjUW/9GHZEax+zE5+1mw0eCHN9+gnCo4pR3IgkUmzdjMIPeo04ncBs gVuAPOY9VVjyq6fI1cIfd68vxtAXwFKlce3Av4pHwWNRQmSQ2GWHPz+KdfhHjqRT jw/IWuFOn11MLPBQfP9jzU3wCMsGWY3wCY8JojS/jhMVlactVOqBEVNvN8rNj9zQ KYb04Wn5Cs+5q+mPG5ulXZHQXwxob0KnnNGLz4dcRrjK1Va4hxESvQYUhXb93ZvK +MJEHkg3RJeSGA== -----END CERTIFICATE-----Generated at Sun Aug 2 23:31:31 2026 by rpki-client