$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: wpMbEyUZjWyGappc03ihrHcUWYofvtYWa+STUP95Mlw= Subject key identifier: C1:A7:98:D1:A2:E6:03:50:5F:B7:E7:54:03:3A:D8:78:28:CD:CB:20 Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019FCF397870CE444A5322D804624FB37AE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 0D4E Signing time: Wed 05 Aug 2026 00:01:17 +0000 Manifest this update: Wed 05 Aug 2026 00:01:17 +0000 Manifest next update: Thu 06 Aug 2026 00:01:17 +0000 Files and hashes: 1: 0jPQz2jIHrU0FvHsrF-XRZUhtzs.roa (hash: W/W8DjgReH/V+5pe/5+3BKwvc8dz5PRxxtmAIvZ373s=) 2: 3h4R6YLSiEPNhWmPNTd7KLX1X3U.roa (hash: LjFP5plUCIY5Si52J4E1UiGHvt4F3YfbtrTK+AdpPww=) 3: 5-J1fvpVb5dSg5m7dEENTI_oJOo.roa (hash: Bf76p0mhCDufIxhGH9tYyhZ/kCkHidGNBcKyGnHkKdg=) 4: AD3DllK0spDacTrZOzUoNjsaEXY.roa (hash: E0XWVs3lhPoRvEa16ZsuDhIGmQin6DlhoQyYSbyhShU=) 5: BM_HgvB1ieY5WUpFTxU63_9kGNo.roa (hash: iddaFlVd9smwAlHjBr7dZr+J/UTaU0dMdguVDg9n9Xg=) 6: HVCa9r5thWjsE4kAoaBRSlvTvK4.roa (hash: QayBo0rlXlFxr86ACWyOG/yDe9UFq1WxBL/y2YeNVL4=) 7: RHDQQEmbcOrqTmjc99mQ-Eu0900.roa (hash: x+3xhE8Ho8gzcy+Ei5kfiLpvFaz62BymEv0joq6kEPs=) 8: ScPX6tqlw5o1ZcCYpkNMnCrj72U.roa (hash: OWPE9KkCxV1y82ynMwT7Wfz+7H4kVGPyxV8fArKWLm0=) 9: WdQ6he_P5F-cOEeRR1TiPU-zU-s.roa (hash: vQjmo6B5bhn28fdIrHICw7DprEul1mU/rEs6H7jrIrc=) 10: n6eR2WfCXImcpQbWii3OXMfT1io.roa (hash: 9i7i+fHrN+OULt3g7OjkSiNbFJDZzaQ5rh/6y0F1XFE=) 11: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: 2x7OrS70iv75jB3BqQerSPJrbnz2JPHrljJrRdTRfvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Aug 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:cf:39:78:70:ce:44:4a:53:22:d8:04:62:4f:b3:7a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Aug 5 00:01:17 2026 GMT Not After : Aug 6 00:01:17 2026 GMT Subject: CN=c1a798d1a2e603505fb7e754033ad87828cdcb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:67:75:a8:01:41:4c:76:e5:38:3b:55:21:d9: cb:b5:26:1f:d4:a0:87:7c:9a:61:ac:1c:9e:e3:21: 7e:8b:fd:84:f1:5e:42:97:78:22:43:c1:c8:98:d8: 49:53:2b:f7:04:02:a8:66:30:c3:86:84:85:9b:61: 6f:ba:59:0f:6d:5f:68:6a:72:28:40:58:26:19:12: 15:3a:6e:29:22:5b:eb:2b:14:66:b5:b8:98:01:a7: d9:7a:fd:c8:f0:25:0a:c3:96:b1:c2:11:e5:7b:0a: 90:c8:dc:f9:50:d9:64:ec:5f:c6:b2:64:c4:46:9a: e7:35:8c:e5:4d:54:7c:0d:bb:ef:59:fa:03:14:2c: fc:b0:9a:9b:2f:25:9c:6b:bc:97:18:a9:5f:25:cf: 0e:0a:6c:d1:a8:9d:ba:fc:69:26:06:1c:5a:99:6c: c1:9f:35:cd:87:dc:95:3d:e3:4d:87:a1:12:81:07: eb:dc:b6:43:7e:ad:d3:d4:73:09:e6:72:a9:2e:f5: fc:53:95:98:83:0f:e1:a8:e6:12:da:82:c7:9c:df: bf:71:f8:72:6d:2c:9c:2a:00:3d:28:f6:6c:2e:8d: a4:09:fe:f1:76:ba:41:5e:ae:ae:70:d2:23:23:a5: c5:40:05:59:cd:ce:34:fe:a2:05:77:3a:a7:5f:ba: fb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A7:98:D1:A2:E6:03:50:5F:B7:E7:54:03:3A:D8:78:28:CD:CB:20 X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:73:52:5d:81:86:cc:97:e3:b1:35:cc:7b:48:39:4f:de:98: 0a:17:79:fa:95:f3:b4:d9:cc:ba:eb:75:c7:a2:ad:ef:2a:85: fd:ea:9a:4d:95:de:51:97:98:36:7c:dc:34:83:5c:b4:9a:de: ae:a1:2a:24:fc:57:eb:c3:5d:0b:6d:41:f8:52:08:af:2b:25: 99:0d:dd:01:70:da:e8:41:9f:bb:49:bc:29:56:cc:34:8a:46: ea:94:ec:0b:d6:61:c1:7d:46:d1:45:cc:c0:c8:b5:13:15:b5: 2e:36:b6:2f:cf:59:7a:18:25:d3:dc:90:39:7a:4d:f4:e4:db: f0:c4:6e:05:e0:c6:c6:00:47:f2:fd:0b:6e:19:19:07:78:e7: d7:05:a5:58:37:24:b0:11:84:79:f8:16:9c:98:0f:ee:77:59: a0:3e:e0:a9:b4:97:36:06:cf:dc:4a:a3:7f:db:62:f1:59:14: f7:d9:14:17:97:f9:62:67:5d:e8:a5:c1:f4:cc:5e:58:01:5d: 4a:f4:68:cb:ea:88:d5:39:56:5c:66:98:d5:d7:d1:38:90:7a: 81:ca:05:63:ad:2b:39:46:89:3b:18:44:18:24:53:2d:3e:0a: 21:cd:c0:16:3c:8d:29:33:7f:a9:88:cf:ca:55:09:31:fd:b0: fa:18:47:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/POXhwzkRKUyLYBGJPs3riMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwODA1MDAwMTE3WhcNMjYwODA2MDAwMTE3WjAzMTEwLwYDVQQD EyhjMWE3OThkMWEyZTYwMzUwNWZiN2U3NTQwMzNhZDg3ODI4Y2RjYjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWd1qAFBTHblODtVIdnLtSYf1KCH fJphrBye4yF+i/2E8V5Cl3giQ8HImNhJUyv3BAKoZjDDhoSFm2FvulkPbV9oanIo QFgmGRIVOm4pIlvrKxRmtbiYAafZev3I8CUKw5axwhHlewqQyNz5UNlk7F/GsmTE RprnNYzlTVR8DbvvWfoDFCz8sJqbLyWca7yXGKlfJc8OCmzRqJ26/GkmBhxamWzB nzXNh9yVPeNNh6ESgQfr3LZDfq3T1HMJ5nKpLvX8U5WYgw/hqOYS2oLHnN+/cfhy bSycKgA9KPZsLo2kCf7xdrpBXq6ucNIjI6XFQAVZzc40/qIFdzqnX7r7twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGnmNGi5gNQX7fnVAM62HgozcsgMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3NSXYGG zJfjsTXMe0g5T96YChd5+pXztNnMuut1x6Kt7yqF/eqaTZXeUZeYNnzcNINctJre rqEqJPxX68NdC21B+FIIryslmQ3dAXDa6EGfu0m8KVbMNIpG6pTsC9ZhwX1G0UXM wMi1ExW1Lja2L89Zehgl09yQOXpN9OTb8MRuBeDGxgBH8v0LbhkZB3jn1wWlWDck sBGEefgWnJgP7ndZoD7gqbSXNgbP3Eqjf9ti8VkU99kUF5f5Ymdd6KXB9MxeWAFd SvRoy+qI1TlWXGaY1dfROJB6gcoFY60rOUaJOxhEGCRTLT4KIc3AFjyNKTN/qYjP ylUJMf2w+hhHqA== -----END CERTIFICATE-----Generated at Wed Aug 5 03:08:06 2026 by rpki-client