$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft File: jNgCUSzLdFsqG48xVxTr45OVQD4.mft (raw, json) Hash identifier: snIjMaYx9g/8krd6pCwnhWAcb3FQzleEyaD0bC0USIE= Subject key identifier: BC:A8:C4:70:5D:74:BF:74:C4:7E:3B:CE:BB:8F:B8:90:A4:5F:1D:5E Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e Certificate serial: 019F4AFB7F42A39D9329DD254E1354441C97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft Manifest number: 0126 Signing time: Fri 10 Jul 2026 07:43:43 +0000 Manifest this update: Fri 10 Jul 2026 07:43:43 +0000 Manifest next update: Sat 11 Jul 2026 07:43:43 +0000 Files and hashes: 1: 7dS3f87b8rClIQfQDt7ZrLOCFN0.roa (hash: jtFM+HhYEhIeATKc9POq4FW4Qi1yjd0neVJZ42IO2dk=) 2: DTxRtWdc02pjlUXaQIgG7uvgReo.roa (hash: GlFAuY0HK+jawCdzfILLS9QTgrRHMLmyfsdh1Tz+gss=) 3: FOFTEst8oF0q0X3OdQgxLZ9oed8.roa (hash: g3Bb+RZcj9ZCWcwsCCB0Hz+Q7AkmMt0+i5iC3617N+w=) 4: NueNRL5wm4cxcYHE_E2Q4bYmOjA.roa (hash: TfRkOz0goqzjaEodDhFwiei8/n8mFcYT40hAji7gK7Q=) 5: RJ_8MLiQcEMQljmCDmVnOOnfQyY.roa (hash: qITG72dsAnXhR2+Wt6OI6k5v+TEp09wmHQrA/LqWJPc=) 6: ZZ4HmXsncRW4Duwlwd9BhGfdvNU.roa (hash: AltMyFS1s/HAyVQ82EJUVtjUQ8FL/MMkrFmI+rDpQvg=) 7: hYM7beFU-i68zuT-E-AP85h8fdI.roa (hash: Q6rivTFhzgG3KkdlD6+HA7Kyl4SyGQidk6P1eN7a4CU=) 8: hp01qqaG6ojwTceGwUYjwpMc_FA.roa (hash: +EoDWRDS7zIW8lYYUpVakjrqTS94dDcew7HVE2+smMs=) 9: jNgCUSzLdFsqG48xVxTr45OVQD4.crl (hash: qtMfrjekfalGX8JIMH/jyvVXlAq2gU0FrwwqIYK8Ja0=) 10: m-IGLnum8ilMrBfDfxTWwYT4dUo.roa (hash: 24oAS4KED0v5cTnbyv83FY9FoeKXcZXgjqplweO9u30=) 11: qbinC6Bue2GJIuNLnptWJaA-Dds.roa (hash: 6HXvSYL8Dx9Ja4sY1cHp96tpfM1YjHJq65VRixXzZSc=) 12: yTtSJ-72gvZbFezzjuP8atI2Y74.roa (hash: wldJRvptVpmVW5JI0I+zGNq+GzlHt2h7rIbCYaZ8Fsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 07:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:4a:fb:7f:42:a3:9d:93:29:dd:25:4e:13:54:44:1c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e Validity Not Before: Jul 10 07:43:43 2026 GMT Not After : Jul 11 07:43:43 2026 GMT Subject: CN=bca8c4705d74bf74c47e3bcebb8fb890a45f1d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6a:0d:54:14:fd:ab:db:12:21:c1:ec:d9:8e: 4b:d7:c4:1c:55:69:56:ab:0f:11:79:09:a9:a4:97: e6:65:7e:be:df:10:11:25:9c:4a:35:25:74:09:e8: 71:89:20:4c:61:4e:05:02:41:72:9e:bf:20:bd:9b: 88:ba:51:b5:58:d6:03:97:66:c8:4a:50:e9:a8:3f: d9:4d:e2:2b:7e:a4:52:56:4a:88:75:f5:73:dd:d4: 82:6c:85:34:03:31:9c:90:24:9b:b3:00:ce:d4:81: 16:17:cd:79:0a:8c:52:e5:8a:d5:e6:59:4a:37:7d: 83:0d:f6:e3:c8:07:a9:11:52:de:13:c1:36:c3:b5: 5f:ef:53:b4:49:7f:86:1d:ba:10:62:3c:3c:8c:65: 93:1c:e6:75:03:e1:f6:37:53:57:d7:28:41:41:1f: 9e:a6:ac:20:a7:6d:83:4a:c4:f2:6b:29:ad:a7:9c: 22:c8:81:77:58:2d:d0:e4:94:a0:fd:53:b1:1c:bd: c5:a2:56:7c:a8:33:40:cd:31:15:7b:29:d3:3a:75: fa:57:7f:9b:a7:8e:8f:59:9a:c0:49:11:f0:0b:82: da:b1:71:c6:a4:98:81:96:03:5a:0f:92:7f:16:91: ae:bd:01:f6:1b:7c:79:07:04:ab:67:d1:8c:24:ca: df:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A8:C4:70:5D:74:BF:74:C4:7E:3B:CE:BB:8F:B8:90:A4:5F:1D:5E X509v3 Authority Key Identifier: keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b7:94:7f:be:6f:68:df:33:3e:a0:36:10:d4:f7:ed:cd:6a: 57:73:59:c9:c4:c5:88:fb:7b:e2:5b:20:b9:3f:1e:0b:0d:2b: 9e:59:f8:9d:00:1c:d2:3e:56:6d:bd:20:09:cc:ac:b1:2b:f2: 21:8d:16:13:cb:17:87:c1:99:27:42:5b:d6:25:63:97:b7:37: f1:8f:0d:02:d6:a5:be:94:1e:f9:a1:cb:31:a9:6c:79:7e:29: 17:2f:03:55:0f:bb:5b:05:9b:c6:4e:34:89:b7:b7:82:87:4b: ef:ca:db:37:39:c4:6a:53:34:2e:ba:c4:86:e2:2e:50:0e:fd: bb:53:97:74:50:db:bb:45:ed:14:a6:48:d1:8e:16:1c:dc:5d: c8:e0:17:26:48:62:30:c0:2a:18:4a:a8:16:e0:58:7c:d8:3e: 9d:04:29:e8:b8:da:0b:d3:7a:bf:5e:cc:71:9d:eb:fb:b3:ea: 5e:b4:16:ef:57:c1:7f:35:02:07:88:69:52:42:c8:cf:1a:77: 44:47:21:d4:27:66:f5:a0:ab:fb:1e:2c:01:8e:51:58:95:be: fb:42:0c:1f:af:05:85:a6:f6:0e:e4:23:3a:ce:94:a3:39:85: 8c:dd:d2:d4:b8:c0:a0:19:8f:b0:da:84:28:be:08:b7:a5:03: 5c:77:33:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ9K+39Co52TKd0lThNURByXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDgwMjUxMmNjYjc0NWIyYTFiOGYzMTU3MTRlYmUzOTM5 NTQwM2UwHhcNMjYwNzEwMDc0MzQzWhcNMjYwNzExMDc0MzQzWjAzMTEwLwYDVQQD EyhiY2E4YzQ3MDVkNzRiZjc0YzQ3ZTNiY2ViYjhmYjg5MGE0NWYxZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82oNVBT9q9sSIcHs2Y5L18QcVWlW qw8ReQmppJfmZX6+3xARJZxKNSV0CehxiSBMYU4FAkFynr8gvZuIulG1WNYDl2bI SlDpqD/ZTeIrfqRSVkqIdfVz3dSCbIU0AzGckCSbswDO1IEWF815CoxS5YrV5llK N32DDfbjyAepEVLeE8E2w7Vf71O0SX+GHboQYjw8jGWTHOZ1A+H2N1NX1yhBQR+e pqwgp22DSsTyaymtp5wiyIF3WC3Q5JSg/VOxHL3FolZ8qDNAzTEVeynTOnX6V3+b p46PWZrASRHwC4LasXHGpJiBlgNaD5J/FpGuvQH2G3x5BwSrZ9GMJMrffwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyoxHBddL90xH47zruPuJCkXx1eMB8GA1UdIwQY MBaAFIzYAlEsy3RbKhuPMVcU6+OTlUA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmIt MzhlMDY4NTM2ZTZiLzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmItMzhlMDY4NTM2ZTZi LzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7eUf75v aN8zPqA2ENT37c1qV3NZycTFiPt74lsguT8eCw0rnln4nQAc0j5Wbb0gCcyssSvy IY0WE8sXh8GZJ0Jb1iVjl7c38Y8NAtalvpQe+aHLMalseX4pFy8DVQ+7WwWbxk40 ibe3godL78rbNznEalM0LrrEhuIuUA79u1OXdFDbu0XtFKZI0Y4WHNxdyOAXJkhi MMAqGEqoFuBYfNg+nQQp6LjaC9N6v17McZ3r+7PqXrQW71fBfzUCB4hpUkLIzxp3 REch1Cdm9aCr+x4sAY5RWJW++0IMH68Fhab2DuQjOs6UozmFjN3S1LjAoBmPsNqE KL4It6UDXHczlw== -----END CERTIFICATE-----Generated at Fri Jul 10 16:24:54 2026 by rpki-client