$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: D5BDz1Lyte0N3IGhbNy1Y0w46Kj7WghlgBixDBKHn5Q= Subject key identifier: 8E:91:B5:E0:89:75:7A:30:6D:0B:F1:EF:5F:1F:53:6B:F3:84:8A:C9 Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019FBD32EFBCBFD180E11AD287EC17F8F448 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 17D0 Signing time: Sat 01 Aug 2026 12:00:59 +0000 Manifest this update: Sat 01 Aug 2026 12:00:59 +0000 Manifest next update: Sun 02 Aug 2026 12:00:59 +0000 Files and hashes: 1: 1-W964s-KtZyiNamSbJ6IP1jbFT4.roa (hash: tyUpzznYouv+Rmk3/StqHsUEFXC/JRLOGyGTS4NNP4Y=) 2: GStnKDxU2VExQ_xcPN4egFEKjLo.roa (hash: siSBOiPXXJh3GCU5grMPMkb/iUn8KcQ7coKcPhWce6E=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: lWSefF68hqt3f5Y1Io5nYuTJ064fFIbhzVtrhtJ3psk=) 4: KzDc8QsMTzvMJxQ96GJ3yCoLi_U.roa (hash: Xkhd86uGm3VF/evalHU0tYC3SzwGKBs1H4sASP/73Pg=) 5: RMWLa9nYNadgqj8fRvJ7gt0vmRY.roa (hash: YPSVWQ4p2Yzt69XO4XRgEZdOa23MUm2U51FrUJbQeG0=) 6: VSrC1QP0T_UaXaaEFdbsOmUjBh0.roa (hash: zTpZ/xLPhwOsaGOqgGhoR4AJouaTmVoH7QdVIfFBLJc=) 7: mju1GTQPLsJiestxJWXcq-E1Bo0.roa (hash: 95gpW7g+cVKJk4QbRN0p3aXkVNHoQsAxKOBXvYSCcxk=) 8: qJD08TGqbLXdbWVjPMA7B5pGkPI.roa (hash: Kx7++AsdN5bNJwCWFiOZcN26zdxHM+ZF2tTRAsBHsXQ=) 9: rg80XbUJLJkTb5OEL1rZgHZ1y6U.roa (hash: vhHXEQRDhmmcuNgaQBq7IXJimIzM9H1G1xvHCsunoqk=) 10: wlkqPCWXMJsz1R99hgzE3_VYv5c.roa (hash: KrKqWLoyfi0cuRqfEdDLZj1DmY6m+y1d1kGaimNA4oE=) 11: xewkVdgaX0V36_1yEpoUi8m7v6c.roa (hash: kF/BrgELi4+Am7OL4A+u/VI4R7I6POdHlx4gpQyUi6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 02 Aug 2026 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:bd:32:ef:bc:bf:d1:80:e1:1a:d2:87:ec:17:f8:f4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Aug 1 12:00:59 2026 GMT Not After : Aug 2 12:00:59 2026 GMT Subject: CN=8e91b5e089757a306d0bf1ef5f1f536bf3848ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7a:8b:c0:e2:53:59:18:f0:77:ea:cd:eb:24: c6:00:20:11:1c:57:1b:af:b7:7e:36:1b:bd:09:ec: ad:e7:d6:3f:4e:c6:8a:1d:4e:fd:29:00:1e:c5:0e: 8a:9c:e3:44:b6:4f:fd:c4:9c:ab:72:58:19:5b:40: ca:22:ae:0b:79:49:9f:3c:c5:b2:2b:ef:64:38:ce: 50:0c:69:a0:7c:c8:1d:c4:e8:45:6a:3c:f0:a5:26: 07:8c:68:c8:c3:16:67:16:89:ad:3b:c7:dc:06:25: 27:e1:17:1e:6b:54:63:bd:5f:42:bf:bd:b2:13:e4: 15:98:e0:75:1e:ed:76:4e:d4:16:00:b1:1b:40:12: 1e:91:4a:d2:8f:02:4d:7f:c8:48:9d:a8:16:df:3e: 20:c6:2c:0c:59:d1:b1:25:62:b7:de:4a:3b:bd:7e: ba:e5:13:43:fd:27:9f:30:b6:f5:1a:35:ee:37:78: 74:8e:9e:69:ee:99:08:b8:15:76:e6:b9:67:cc:db: 5e:05:9b:a8:9b:68:07:49:52:14:f9:22:4e:ca:80: fb:2d:71:2e:c6:e4:83:b9:07:1f:d0:c9:de:f9:ab: 69:c5:82:48:3c:1d:3c:87:76:61:41:fb:e3:3b:db: 6d:97:58:90:50:7f:68:bc:6d:cf:c1:27:d5:7d:1b: 9e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:91:B5:E0:89:75:7A:30:6D:0B:F1:EF:5F:1F:53:6B:F3:84:8A:C9 X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:6d:9c:a8:c9:bd:31:b6:cd:71:8e:53:23:84:76:f0:c2:b4: 27:9c:c6:20:91:35:d1:71:2a:2d:ae:28:d4:56:61:4b:c8:67: 8e:01:32:4a:3c:c5:89:0f:87:9f:06:af:ff:4e:fa:83:17:aa: 6b:00:7f:12:8a:e3:e2:41:84:47:15:2e:99:29:8a:0f:ba:47: 74:db:af:bd:16:84:06:7c:5f:63:7c:a5:dd:c7:06:9d:4f:01: e7:64:31:c6:cb:fe:e4:0c:da:8e:57:e3:7a:e6:ea:b1:cf:63: 96:b9:33:1e:af:62:61:4a:a1:bb:97:24:36:7e:06:52:b2:61: 0d:69:a5:39:60:6d:b5:bf:61:27:69:b5:04:d7:fa:ca:3f:1a: d0:d2:1c:37:37:c3:7a:61:14:4d:10:76:ab:71:5a:c5:9d:17: ca:5f:35:06:31:16:7f:8a:e6:24:ad:e1:ca:60:e5:09:15:c6: 5b:51:27:79:bf:2f:a1:8d:bf:d5:43:ef:f5:b4:59:19:4d:78: 1f:df:e7:3a:f9:60:1f:91:cf:1b:c8:9c:5d:81:4a:2c:84:70: 3f:f9:2a:ee:67:4f:99:31:d6:09:d1:60:d5:34:b9:f3:b7:c9: c4:10:b1:5a:b3:6f:71:2b:b3:08:0e:63:30:99:b4:70:7c:80: 0b:7a:01:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+9Mu+8v9GA4RrSh+wX+PRIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjYwODAxMTIwMDU5WhcNMjYwODAyMTIwMDU5WjAzMTEwLwYDVQQD Eyg4ZTkxYjVlMDg5NzU3YTMwNmQwYmYxZWY1ZjFmNTM2YmYzODQ4YWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnqLwOJTWRjwd+rN6yTGACARHFcb r7d+Nhu9Ceyt59Y/TsaKHU79KQAexQ6KnONEtk/9xJyrclgZW0DKIq4LeUmfPMWy K+9kOM5QDGmgfMgdxOhFajzwpSYHjGjIwxZnFomtO8fcBiUn4Rcea1RjvV9Cv72y E+QVmOB1Hu12TtQWALEbQBIekUrSjwJNf8hInagW3z4gxiwMWdGxJWK33ko7vX66 5RND/SefMLb1GjXuN3h0jp5p7pkIuBV25rlnzNteBZuom2gHSVIU+SJOyoD7LXEu xuSDuQcf0Mne+atpxYJIPB08h3ZhQfvjO9ttl1iQUH9ovG3PwSfVfRueTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6RteCJdXowbQvx718fU2vzhIrJMB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPm2cqMm9 MbbNcY5TI4R28MK0J5zGIJE10XEqLa4o1FZhS8hnjgEySjzFiQ+Hnwav/076gxeq awB/Eorj4kGERxUumSmKD7pHdNuvvRaEBnxfY3yl3ccGnU8B52Qxxsv+5Azajlfj eubqsc9jlrkzHq9iYUqhu5ckNn4GUrJhDWmlOWBttb9hJ2m1BNf6yj8a0NIcNzfD emEUTRB2q3FaxZ0Xyl81BjEWf4rmJK3hymDlCRXGW1Eneb8voY2/1UPv9bRZGU14 H9/nOvlgH5HPG8icXYFKLIRwP/kq7mdPmTHWCdFg1TS587fJxBCxWrNvcSuzCA5j MJm0cHyAC3oB3g== -----END CERTIFICATE-----Generated at Sat Aug 1 15:21:31 2026 by rpki-client