$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json) Hash identifier: +CMM+XgBlBFB9y8VrF5Aaqqfi0O9le8GrTlcLXQg3D0= Subject key identifier: 3B:E8:E0:C8:DE:09:11:CE:76:FA:6A:14:3B:24:76:71:44:33:B7:E0 Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Certificate serial: 019FD873731839843AC17EB51DA1B0B84FF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft Manifest number: 10B1 Signing time: Thu 06 Aug 2026 19:01:12 +0000 Manifest this update: Thu 06 Aug 2026 19:01:12 +0000 Manifest next update: Fri 07 Aug 2026 19:01:12 +0000 Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: /j71Q4N3cKpDp43h1sd103E+uHy4XXu04hLjjKAMCaw=) 2: 48gsZW50uLUlR46Ix3iYOx-Oil4.roa (hash: +bihXv/kdSh2a1W6VuWuSak9s9bbT1dvAV94HrBufKM=) 3: 7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa (hash: /c/xy57bwbSPlEYy8aSToJUMaj9SVT1GxDFV+ZgmcDw=) 4: IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa (hash: pmaFE96hLCvpJgnKb9xAQ3FBHDszY3+MnDTKdmd2aBc=) 5: J_MD5SMm_jnNcFzVAMqw1B15u58.roa (hash: FIwpk+45oiJmLelvUMKgCrOAF5Q6jpI+BLL5TNzUe60=) 6: KF_n2gzTBU6uDy1SMMT5K8iX9bA.roa (hash: NLc5HhxgKVru6o+xJI4sk97DQHit528jxpHdpZSMptc=) 7: PINsz1ecwdVhJzpxv6fsByeh4kA.roa (hash: ANLsT4S8VzVYj7/i5GCBTF2gWzdZH5BQdzxufPePg5s=) 8: Tvp9UTzcuphuhBetxzC7xnAANpk.roa (hash: XsVJrEsr9FE3t/s8zv/e1FiT9DrBI71L2xkk3P4iSPo=) 9: VqSk2F-cMltec__vt5GWmoZRbOs.asa (hash: DSTYqZUEAVPlYiwOcT/Aj9JtlDMu/1/7b3uouJr7QEg=) 10: fCh5cSZ1ojcXI4Uub3fOR46Ltrs.roa (hash: kJ7GyNYmLyOwu5BhWIvecFe90tFPLUPeOlUI+nps5x8=) 11: kZL9IaKbIXWtSeLhiixRuouVuZw.roa (hash: +8djmGYeV8gJTDYzSfSw3gkTCCP8XO1MSarDOtJj7zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 07 Aug 2026 13:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:d8:73:73:18:39:84:3a:c1:7e:b5:1d:a1:b0:b8:4f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Validity Not Before: Aug 6 19:01:12 2026 GMT Not After : Aug 7 19:01:12 2026 GMT Subject: CN=3be8e0c8de0911ce76fa6a143b2476714433b7e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ba:d7:c6:74:1c:b9:74:83:b8:da:3f:aa:e4: bf:46:c7:c0:76:82:c6:57:f7:bc:d2:cd:a9:8b:ce: ef:59:4a:43:86:d2:03:e5:54:8e:6f:fd:72:8b:f5: d3:db:2d:7f:e7:a0:74:11:7e:3b:55:00:b4:16:4a: 8b:62:24:74:2e:b8:a5:30:c6:e8:17:74:43:58:1a: 50:1f:53:ec:3b:22:3c:ac:ef:18:92:61:34:94:bd: c3:7c:d8:2a:ba:f3:13:df:9b:ea:76:21:15:6e:a3: 2e:82:19:4c:7a:92:46:0a:b0:66:79:e2:58:b6:f4: fd:d0:e2:b3:e9:42:cc:8f:dd:0d:17:be:01:ac:e8: fe:c1:f6:78:a0:6f:fa:da:4a:21:28:c6:7b:41:d9: 70:76:70:ab:fd:08:a7:6b:fc:e4:d2:03:b6:6a:16: 5d:c5:00:1f:bb:45:be:25:91:ef:67:c7:9c:bc:f5: 71:f6:97:d4:97:00:ea:d1:ef:27:17:11:9e:c7:f2: 1a:a9:92:36:fb:ca:4e:6d:e2:ff:f8:4d:a1:fa:d0: d5:9f:61:3a:b9:d9:aa:7e:49:ff:85:72:1a:ee:16: 3c:75:12:4b:5d:6f:09:bd:8b:51:63:9f:04:86:5f: 0a:e5:77:27:37:9f:ee:9b:a7:2a:c2:4d:6d:c0:74: 26:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E8:E0:C8:DE:09:11:CE:76:FA:6A:14:3B:24:76:71:44:33:B7:E0 X509v3 Authority Key Identifier: keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:0d:a5:bc:43:13:7e:a6:eb:f4:68:bf:81:19:0c:ad:c3:a9: 5f:aa:96:a3:a7:12:1a:9b:c0:4b:aa:38:bf:b1:07:3d:20:6e: b7:20:9a:bf:e5:a9:f0:9a:de:91:01:f5:30:eb:9d:56:28:63: 35:f1:91:04:64:2c:fc:a6:84:ec:a8:84:ad:25:b2:62:b7:82: 4e:06:ef:54:f9:d0:4e:90:f7:32:ef:1d:ec:be:c3:16:23:0a: e0:2e:60:24:92:62:e0:c1:25:e2:68:67:1e:cd:1c:6f:26:dd: 73:80:e0:8c:12:1d:bc:ab:32:06:2f:a2:af:bf:9b:7f:11:a8: 88:28:8c:01:fa:73:5c:35:9b:40:59:fe:ad:28:ab:97:72:4a: a7:65:3b:ff:43:76:dc:b2:19:f6:c7:e8:60:b0:ee:3f:89:3b: 82:8c:72:d6:0f:0f:04:35:08:ed:73:21:2e:92:16:c2:e5:3b: cc:71:19:59:15:3b:04:f8:6c:d9:cf:61:18:82:17:13:36:1f: f5:b5:b0:22:72:a9:8f:af:17:bd:82:75:30:88:d8:57:b2:8b: 86:e2:82:cd:4c:4b:37:a5:7f:f3:a6:be:3d:99:31:fe:ad:02: ab:c7:a0:71:98:5b:6e:e2:1f:34:f3:a7:5b:91:c7:55:fe:26: ce:16:f8:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/Yc3MYOYQ6wX61HaGwuE/xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4 YjVjMDUwHhcNMjYwODA2MTkwMTEyWhcNMjYwODA3MTkwMTEyWjAzMTEwLwYDVQQD EygzYmU4ZTBjOGRlMDkxMWNlNzZmYTZhMTQzYjI0NzY3MTQ0MzNiN2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LrXxnQcuXSDuNo/quS/RsfAdoLG V/e80s2pi87vWUpDhtID5VSOb/1yi/XT2y1/56B0EX47VQC0FkqLYiR0LrilMMbo F3RDWBpQH1PsOyI8rO8YkmE0lL3DfNgquvMT35vqdiEVbqMughlMepJGCrBmeeJY tvT90OKz6ULMj90NF74BrOj+wfZ4oG/62kohKMZ7QdlwdnCr/Qina/zk0gO2ahZd xQAfu0W+JZHvZ8ecvPVx9pfUlwDq0e8nFxGex/IaqZI2+8pObeL/+E2h+tDVn2E6 udmqfkn/hXIa7hY8dRJLXW8JvYtRY58Ehl8K5XcnN5/um6cqwk1twHQm6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvo4MjeCRHOdvpqFDskdnFEM7fgMB8GA1UdIwQY MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt MjFhNzAwYzcxMTlmLzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYw2lvEMT fqbr9Gi/gRkMrcOpX6qWo6cSGpvAS6o4v7EHPSButyCav+Wp8JrekQH1MOudVihj NfGRBGQs/KaE7KiErSWyYreCTgbvVPnQTpD3Mu8d7L7DFiMK4C5gJJJi4MEl4mhn Hs0cbybdc4DgjBIdvKsyBi+ir7+bfxGoiCiMAfpzXDWbQFn+rSirl3JKp2U7/0N2 3LIZ9sfoYLDuP4k7goxy1g8PBDUI7XMhLpIWwuU7zHEZWRU7BPhs2c9hGIIXEzYf 9bWwInKpj68XvYJ1MIjYV7KLhuKCzUxLN6V/86a+PZkx/q0Cq8egcZhbbuIfNPOn W5HHVf4mzhb4yg== -----END CERTIFICATE-----Generated at Thu Aug 6 21:51:08 2026 by rpki-client