$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: /lAwNx0qF0/oP+/k+2PzX5R++/2njoYlWAsW5UGvX5Y= Subject key identifier: 7F:ED:5B:90:D7:1F:8C:86:45:AB:FA:93:DF:08:4D:83:58:6D:A2:DF Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019FBE7D279B1FC32E20687F130BE335A9CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 19FB Signing time: Sat 01 Aug 2026 18:01:40 +0000 Manifest this update: Sat 01 Aug 2026 18:01:40 +0000 Manifest next update: Sun 02 Aug 2026 18:01:40 +0000 Files and hashes: 1: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: jSJ7vZaoquNloxm801NG12PymCYEnlnBgEil/pGMZ+8=) 2: GiXGWF3XbNUka_6eZbMkF4lwUUU.roa (hash: Ghc0ZSrMNmrLcxpN1ogM8Bq5yh44DA/gg5TX6sTsGwk=) 3: Hq4X_7yYD_a8EYI4a9NBlnQVc3w.roa (hash: z+0vTxrgxYAsB4o2ZlASjMWqhGlPslViBNl8Jj/ge4E=) 4: JpWfmu7Zc6MPpU8ubphtHfVf2jg.roa (hash: O/QTbkFDD3rtzSPUctcOhfkfZ3hImjATVsAJ0E69A4g=) 5: Ow_kueRJVip82pUj00XLQYjimrs.roa (hash: 85eWZxYsHFwXWd/YsiQWTMazT60hSpQui9cmEWNnT5M=) 6: RGm2lZRMnSfKm4B97NAwBPy9lYQ.roa (hash: Wjqw6vgltXyXDlwoAetJMPKopD3DI3ppoohYHWiU90I=) 7: VrPDKYMKmnp2V6k_WEnwqOalUuk.roa (hash: ZZB+gfVCQKe+xuNcEMqRNy9VWy20utbLNNHfbV/UCLc=) 8: ZrXDV17uXjinizgfrrPqhQ0dhJM.roa (hash: GN0pZ4GDE0j/JncpGXJQ21uu5AQ3wwUlO2eU3eTfsns=) 9: bUcBfMu_9o4dYCM9sDK4nJufEqY.roa (hash: iEsA+ypslVdiqyHUg8Q2SIRt6ca1DLneY25H0pJSVOc=) 10: fT61awwkD08cT0v6ICZahtW3HFI.roa (hash: OGczwb/UeMWoa3ZnMERuw+jjcJf8SRTCZaw4MXLAhCE=) 11: gndzUxO1CNccN-YEVyYR7nMztTA.roa (hash: 97uyyMTTG7hyUktNtazYQf48Ni/TGW9HZQJtjllnVwc=) 12: j9edvCOgCpRUHjoOk20-cN9wmxg.roa (hash: 6DgXQwbEU+KDyumiNCNLUw/9Wxv+6tWPT8AusYvqDwo=) 13: lTeOVHsdxHYl83EtLLUCZPYWmcw.roa (hash: X7lBPJhBSCWsxS5TEyH3LBZWaqEarDMl83TKFDu1c5M=) 14: wyPD1FfvZSgN54YMSxhg6oBiVDQ.roa (hash: x43Z5uj7ACBLhAYU7mriWUpP8c6bdaVxKIh05vTvKqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 02 Aug 2026 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:be:7d:27:9b:1f:c3:2e:20:68:7f:13:0b:e3:35:a9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Aug 1 18:01:40 2026 GMT Not After : Aug 2 18:01:40 2026 GMT Subject: CN=7fed5b90d71f8c8645abfa93df084d83586da2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6c:b3:5a:2d:f6:84:14:9c:0c:ee:32:94:bc: 36:69:95:5d:d5:ae:9f:9d:93:3e:67:15:7d:85:1c: 56:b6:27:b0:42:b3:22:b5:a0:98:5a:49:b8:b1:d6: 69:39:43:cb:d9:d1:b2:34:ff:87:0e:49:30:47:f5: 23:6b:22:36:6d:30:c3:75:70:60:96:6f:79:6b:90: df:3b:3a:c1:71:79:0f:9a:83:3e:fa:2e:16:c8:56: 6b:c0:24:c6:a7:ac:5b:86:36:9c:66:6b:b2:85:61: 5c:38:be:27:11:b8:d4:2e:52:1e:5d:b1:94:25:a3: 72:8a:1e:21:d9:6a:87:71:e3:b2:a8:f0:4d:03:72: f9:e3:81:c1:18:ff:b5:2a:d8:7f:37:ea:b5:c2:dd: 7f:0e:e4:26:ed:37:74:de:ee:4d:65:f6:fb:f2:bc: 39:37:da:0b:9c:87:3c:6d:a7:11:08:ff:90:87:d1: 91:11:44:9f:ad:ac:bf:3b:1d:d0:0f:1f:e6:1f:1d: 01:35:85:78:e6:b7:7a:cc:95:4a:78:8e:a0:54:c0: 76:a5:1b:5c:46:8f:1e:8f:2c:b1:2a:df:f7:6c:49: 61:24:c6:0c:42:b6:87:f8:e0:c3:1e:bb:c4:b7:a7: c7:76:9c:67:8d:b9:92:dd:16:65:19:a0:25:f9:5c: 7f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:ED:5B:90:D7:1F:8C:86:45:AB:FA:93:DF:08:4D:83:58:6D:A2:DF X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:3b:79:60:cf:ef:9b:db:0e:b8:8f:ad:b8:0a:4e:b9:79:c1: c5:a3:84:b1:0a:41:3b:7d:df:03:3e:25:ef:20:8c:52:1c:dc: 0f:33:f0:df:f7:2e:73:5b:01:dd:86:19:ca:2c:4e:39:d2:18: 55:bb:a3:dd:68:fa:dc:70:84:5c:25:e0:18:72:9c:af:ed:ed: e1:6c:a5:d8:c7:44:cb:2e:a0:cf:75:69:d3:20:ad:65:9f:34: 41:7c:f0:cc:df:8d:d4:94:91:6e:b8:29:b0:2f:99:7a:be:45: b8:9e:9a:e4:d4:61:b2:d5:0b:b9:31:fc:a8:11:43:83:94:95: 5b:90:18:b6:5e:4e:74:0c:f3:12:f0:65:58:66:ad:2f:75:d1: 5b:04:d0:1d:9e:8f:c9:a2:c3:c4:a7:e9:81:e4:6c:d4:23:ca: d2:18:3c:38:d0:f3:94:90:1c:d5:77:96:e9:46:1d:f5:f6:66: 1f:3b:68:5a:f3:1c:21:21:64:48:9c:32:6a:52:94:c9:d1:31: 2b:43:cc:6d:c0:a9:99:38:29:4f:66:c1:be:1b:72:4f:68:1c: 6b:6a:ed:d8:5c:6f:af:c9:82:46:9e:7a:a4:12:6e:6f:3c:7a: 17:05:47:22:8f:c5:8e:9d:2e:ba:8e:59:53:b6:a9:ca:d6:58: 2f:58:a1:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ++fSebH8MuIGh/EwvjNanMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwODAxMTgwMTQwWhcNMjYwODAyMTgwMTQwWjAzMTEwLwYDVQQD Eyg3ZmVkNWI5MGQ3MWY4Yzg2NDVhYmZhOTNkZjA4NGQ4MzU4NmRhMmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWyzWi32hBScDO4ylLw2aZVd1a6f nZM+ZxV9hRxWtiewQrMitaCYWkm4sdZpOUPL2dGyNP+HDkkwR/UjayI2bTDDdXBg lm95a5DfOzrBcXkPmoM++i4WyFZrwCTGp6xbhjacZmuyhWFcOL4nEbjULlIeXbGU JaNyih4h2WqHceOyqPBNA3L544HBGP+1Kth/N+q1wt1/DuQm7Td03u5NZfb78rw5 N9oLnIc8bacRCP+Qh9GREUSfray/Ox3QDx/mHx0BNYV45rd6zJVKeI6gVMB2pRtc Ro8ejyyxKt/3bElhJMYMQraH+ODDHrvEt6fHdpxnjbmS3RZlGaAl+Vx/CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/tW5DXH4yGRav6k98ITYNYbaLfMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0zt5YM/v m9sOuI+tuApOuXnBxaOEsQpBO33fAz4l7yCMUhzcDzPw3/cuc1sB3YYZyixOOdIY Vbuj3Wj63HCEXCXgGHKcr+3t4Wyl2MdEyy6gz3Vp0yCtZZ80QXzwzN+N1JSRbrgp sC+Zer5FuJ6a5NRhstULuTH8qBFDg5SVW5AYtl5OdAzzEvBlWGatL3XRWwTQHZ6P yaLDxKfpgeRs1CPK0hg8ONDzlJAc1XeW6UYd9fZmHztoWvMcISFkSJwyalKUydEx K0PMbcCpmTgpT2bBvhtyT2gca2rt2Fxvr8mCRp56pBJubzx6FwVHIo/Fjp0uuo5Z U7apytZYL1ihhw== -----END CERTIFICATE-----Generated at Sat Aug 1 19:56:31 2026 by rpki-client