$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: eusPcPbQtReqW5vxTjsYvrLRsal/4SEDPQFJrKuHfik= Subject key identifier: 4F:2B:F7:7B:CD:90:B8:AB:53:E0:BF:13:01:30:59:11:A7:02:4D:C9 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019FA3AA6BADE18B6BC0B48C2D5B1FE54340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 19D8 Signing time: Mon 27 Jul 2026 13:01:22 +0000 Manifest this update: Mon 27 Jul 2026 13:01:22 +0000 Manifest next update: Tue 28 Jul 2026 13:01:22 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: e14rLXKATSMjuJj5nyckw7eZ35ihyuf/ktJvjdB2pzU=) 2: 2pZ-2FjfKp_AUPJehyyyCmO33Hc.roa (hash: KSo6Uo4KGXQ+gy+hLjBUZoC/tbnGR8dO325Q6LPyilM=) 3: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (hash: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM=) 4: CvuWIkRHjp5wftfGLU8vOGYCRbc.roa (hash: gj4Tk/zdN+anVbu8mIUIWBYC8RgYdvQOlOOsAUK8Sdk=) 5: IRAfjWAlERnsxDrkVza8YXCUxl4.roa (hash: Ubtt3PSH8NxJ1HHW0Bmr9YJAFmecuPEr+JdwoJmMyLs=) 6: JJfaJkgSEBalqFcc3d6GPKEq5c0.roa (hash: FuHxoLmlLp5uuetTQ7lUzLqCBx0iP3lbv/wcUM9OYTE=) 7: Q_rrlmseqjc9c8mfs_9rzyd3284.roa (hash: GSzKRbWz/hHkNfc9qit79if8AoJkjbgwLaFILxum/nA=) 8: lfsA-CiV23r-qpL7I-OyuqCLA7E.roa (hash: IDCu8RiLCmmGO2wQI4VtUyw3k0YFKxR4jBPe/VBgfYc=) 9: nkzcn1sgGDpbfyqNM00anSE1XXM.roa (hash: /+3MitTOfIJS1gt2shgI9n07vci+NIdPgsMA89TtpO0=) 10: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (hash: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720=) 11: qu1WOvTSGJhb9qCrwaoo2MELsDg.roa (hash: sMcBLOOPq2yXaLqHdTpicJZ4I/4D7ujzTrP/m9dXVgg=) 12: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (hash: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo=) 13: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (hash: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g=) 14: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (hash: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA=) 15: yB3ntVub05F4F9i1cWLaKANNBso.roa (hash: zdKl/J+2C305Q7rX/8wtABN6OkAsZKkNZDLRLh5HUdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a3:aa:6b:ad:e1:8b:6b:c0:b4:8c:2d:5b:1f:e5:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Jul 27 13:01:22 2026 GMT Not After : Jul 28 13:01:22 2026 GMT Subject: CN=4f2bf77bcd90b8ab53e0bf1301305911a7024dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fa:c0:4e:59:0a:36:73:1f:e8:12:91:d9:0c: 68:93:0d:e6:ed:f4:53:05:61:a1:2d:aa:6d:9d:25: aa:96:1e:54:86:cb:4a:01:57:1c:8c:f5:f1:e2:cb: 7c:1e:51:f4:c1:b3:90:de:d8:53:24:6c:15:ec:c2: 69:64:bc:42:82:f5:35:ce:9f:1a:b3:3c:f6:6c:80: 91:49:05:06:7b:ab:0f:f0:c4:3b:97:a3:1f:cf:fe: 7f:61:10:e1:79:48:07:5d:64:2c:d4:44:3f:0d:b3: 19:b7:bb:73:76:51:0e:eb:dc:75:ac:83:7c:21:01: 1e:a4:4b:80:27:ef:7e:83:ba:2f:3a:5b:c9:71:57: 38:f2:39:7d:b0:8b:5d:35:86:50:9f:26:0f:e3:26: b2:7c:4c:a3:68:fa:e3:e7:ac:46:97:49:6c:03:50: d8:dd:77:75:4f:25:ec:df:89:1e:49:58:35:03:00: c5:69:b6:46:1d:1d:a3:e4:1d:23:b6:4a:96:c7:7e: a2:19:eb:11:84:e7:ba:36:80:6c:c8:e7:65:07:26: a9:b7:b9:48:56:be:6d:8e:90:55:85:c7:63:68:be: 5e:5c:db:a0:84:a7:b5:a0:4d:e4:48:3c:48:92:98: ed:65:61:e8:38:69:c5:95:97:1d:cc:0e:cd:8e:29: ee:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2B:F7:7B:CD:90:B8:AB:53:E0:BF:13:01:30:59:11:A7:02:4D:C9 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c6:83:d8:0e:ba:cc:85:6f:28:f7:8b:21:b4:d1:c9:c7:23: f7:56:bb:2c:2b:3d:0a:9e:de:ce:f1:ea:21:4d:d6:20:71:2b: c8:89:ed:d7:2b:97:70:12:25:2e:67:91:2f:13:f3:35:dc:b5: 25:e2:60:3c:50:93:36:ee:66:f7:43:c6:92:f0:2b:d9:53:15: 05:e5:7a:af:24:6a:31:fb:05:e2:10:e6:f4:00:47:6b:46:b2: 0c:9b:1b:08:ac:03:bd:12:b3:a2:52:a4:43:e8:1e:a1:bb:f0: 8b:c6:1e:c9:ec:92:91:11:d6:87:95:8c:40:c8:11:71:03:5f: 98:db:c5:04:74:92:55:a3:80:11:0c:23:db:6d:59:91:8a:e6: 39:69:af:a3:c5:ce:92:59:0b:15:55:1f:75:a0:86:ad:8f:d0: 52:e5:18:57:f6:5d:bc:65:a2:3b:b1:0e:f5:0e:7d:3e:66:04: 95:83:8d:67:59:50:73:31:a2:9d:ab:f6:08:81:f1:5c:b1:67: 89:df:d8:b0:75:22:a6:38:15:d5:73:d6:ca:f2:4d:e7:44:84: 8c:7e:6b:83:d3:75:e3:20:1f:7c:69:ca:e8:03:51:12:ab:d9: 59:82:98:d8:5e:b8:a7:c1:a5:ae:87:ca:9a:f3:e2:89:56:03: b0:e0:9c:04 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ+jqmut4YtrwLSMLVsf5UNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYwNzI3MTMwMTIyWhcNMjYwNzI4MTMwMTIyWjAzMTEwLwYDVQQD Eyg0ZjJiZjc3YmNkOTBiOGFiNTNlMGJmMTMwMTMwNTkxMWE3MDI0ZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/rATlkKNnMf6BKR2Qxokw3m7fRT BWGhLaptnSWqlh5UhstKAVccjPXx4st8HlH0wbOQ3thTJGwV7MJpZLxCgvU1zp8a szz2bICRSQUGe6sP8MQ7l6Mfz/5/YRDheUgHXWQs1EQ/DbMZt7tzdlEO69x1rIN8 IQEepEuAJ+9+g7ovOlvJcVc48jl9sItdNYZQnyYP4yayfEyjaPrj56xGl0lsA1DY 3Xd1TyXs34keSVg1AwDFabZGHR2j5B0jtkqWx36iGesRhOe6NoBsyOdlByapt7lI Vr5tjpBVhcdjaL5eXNughKe1oE3kSDxIkpjtZWHoOGnFlZcdzA7NjinuawIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFE8r93vNkLirU+C/EwEwWRGnAk3JMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcaD 2A66zIVvKPeLIbTRyccj91a7LCs9Cp7ezvHqIU3WIHEryInt1yuXcBIlLmeRLxPz Ndy1JeJgPFCTNu5m90PGkvAr2VMVBeV6ryRqMfsF4hDm9ABHa0ayDJsbCKwDvRKz olKkQ+geobvwi8YeyeySkRHWh5WMQMgRcQNfmNvFBHSSVaOAEQwj221ZkYrmOWmv o8XOklkLFVUfdaCGrY/QUuUYV/ZdvGWiO7EO9Q59PmYElYONZ1lQczGinav2CIHx XLFnid/YsHUipjgV1XPWyvJN50SEjH5rg9N14yAffGnK6ANREqvZWYKY2F64p8Gl rofKmvPiiVYDsOCcBA== -----END CERTIFICATE-----Generated at Mon Jul 27 18:34:56 2026 by rpki-client