$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: wBHhj7bOsVyyY/wYflUHALA77UV10C98Dap84d90SZs= Subject key identifier: 39:65:25:04:4D:03:DB:CF:B3:63:C6:BB:5C:66:76:11:B9:50:E8:DC Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019FCBCAF5A49520640C881F18C8C71C9CC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 08A5 Signing time: Tue 04 Aug 2026 08:01:43 +0000 Manifest this update: Tue 04 Aug 2026 08:01:43 +0000 Manifest next update: Wed 05 Aug 2026 08:01:43 +0000 Files and hashes: 1: 1D9k8_zt5tU5xEXxx_nTvNFR14E.roa (hash: 5AizICGyxHpJw4Npr0yCLhoJ8ZzNbMev6myVVdUeGOM=) 2: 1zvdcEwkgDgymDIvdRNXraLRNH8.roa (hash: 91ImAvK9cIsr386Uw3vdRaUWjAcGr1Za2u1qM4Wcpbw=) 3: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: DoUnKkRDwtZcFlYUzRJDECL+jB69Kd4c6jpXPIaYWLY=) 4: B_2DlHPjFMc2OFdioV78P7kSKnk.roa (hash: l6A6lmViWSMPIZA6Jqw5d17N6Vzy1rMqG76RVXMx2Xs=) 5: NEyhwNNluRFiY1QGbFu3eQXwHPk.roa (hash: AA+74Vvem1npNtDBL+Wwimm4qpTBdkXoFA2tK525GCQ=) 6: QAQqyGViM6nC5i8XAnkTLj2Fjlw.roa (hash: C9pNA0dXzzng1peuC0V7+/A3P+D1i1wR3XipGNDFMzY=) 7: YhAgOfBxB36OmlW5J6iwNI4pf-A.roa (hash: YgJ931EB8K2m5BcoLz5t++aQe+CzOPxkeIACGG7/szQ=) 8: YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa (hash: /mX+AdWxuRgbJEYcF/jnfYMmQcOrnv5KIh/j9UyP9FA=) 9: _m7nbQwhxW5w0wbnoPwEGZq5xj4.roa (hash: 6vjyJskNxAqxaPWKjJV/dxJmRNdkP5LCRI9f1lfJEJQ=) 10: iacNAwFg_4HGoGsTJn6LHRPtlFA.roa (hash: O2cDspTxotRdN6yj3yrsJmq7e6o/A/FbDoi7W5a9R4s=) 11: rB-GRWPvn3oAjav-7hoWPrGNxdU.roa (hash: rPdzZUH5HWNL3o+DGYQhE29ut122q+EzGXhwG7kfgHE=) 12: rFlRkZEZd5Z1JSMbC-8xSLjTjKU.roa (hash: 5Ca02/lo6NUiWyGcT/F75FOvazcZn0O1kd7Dj1J0NJY=) 13: v8v2OaJG7Hdhmb6VYMUj66YcSY0.roa (hash: B7Lry8kdmTHVcZ/TVSfBhCUi/wQDju0yT/ymY52jHqM=) 14: xeGzSDm-blUsbUt2WamIi2l7bV0.roa (hash: y6IJ/JOLtWfU6f/TY9wb28HI1chMC4cI/lZ982XG47E=) 15: z9ARo-p4RTVhYnYCwUeLQoHNI0c.roa (hash: h3CtyvykuY57x41IgLYTP2ID/rzbFX3Z2i6KoIYgMWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:cb:ca:f5:a4:95:20:64:0c:88:1f:18:c8:c7:1c:9c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Aug 4 08:01:43 2026 GMT Not After : Aug 5 08:01:43 2026 GMT Subject: CN=396525044d03dbcfb363c6bb5c667611b950e8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e9:4c:73:66:c2:5f:91:85:24:a1:2c:85:c8: 31:73:70:85:30:c4:22:26:40:74:d6:c1:d8:4d:19: c5:13:dd:60:56:fc:9e:65:0a:75:02:54:47:f6:31: 15:35:b7:53:a6:17:ab:06:4e:b4:7c:00:d6:a6:29: 62:f5:a3:69:89:b6:53:6d:ad:ed:d2:55:f2:af:01: bb:20:fd:b4:09:df:2e:6f:0d:f8:7e:18:23:3a:f4: 1f:1d:09:89:11:c9:58:f7:f2:a5:d0:a5:01:e6:9b: ed:d3:dc:cb:d8:52:04:e8:11:01:92:9a:7b:c4:d5: f0:27:42:cb:9c:d4:ed:b7:bc:02:9b:ce:c2:11:e0: 7f:37:8f:c4:4e:fe:30:50:93:4b:91:29:cd:f9:1b: 6d:97:15:21:31:80:65:3e:55:a6:77:5f:ec:3f:5e: 3f:35:c0:fe:0b:ee:1f:6f:8e:b9:4e:79:fd:7b:4f: bf:c0:7c:82:ff:ff:02:c6:cd:a1:c7:18:d1:ac:64: 3c:52:b6:35:b6:15:99:33:81:15:16:c5:a9:32:d7: e9:3e:ac:47:4c:23:29:55:82:f9:84:1d:dc:1f:42: d7:5f:74:e0:57:e1:c3:fc:77:b7:9a:30:f8:2c:03: 83:8e:02:70:27:b1:9d:2a:b6:1c:48:fa:6a:04:36: d4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:65:25:04:4D:03:DB:CF:B3:63:C6:BB:5C:66:76:11:B9:50:E8:DC X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e8:57:5f:4c:d0:59:05:48:38:73:87:e3:d5:5b:e1:b3:a4: 64:f0:0c:aa:ca:b4:06:a3:88:c0:35:7b:d8:01:d9:ea:50:d2: f7:e5:b7:70:e8:ad:f5:1e:1b:e1:60:46:a6:a8:56:42:a2:49: bb:c9:9f:57:d5:9f:0c:8c:08:54:ea:80:60:1e:f0:c5:98:d6: 80:83:0c:37:32:b5:9d:f2:32:2d:98:37:d0:29:d2:89:dc:68: 0d:2c:95:d9:87:98:ea:60:0f:30:5e:6e:e8:96:0e:6e:1b:44: 69:c1:c3:63:1b:7f:ea:12:8f:a3:98:05:3e:bb:ad:44:e8:71: 2e:77:58:2d:36:dd:1c:14:bc:82:87:bd:31:c6:d2:8d:0a:3c: 75:33:25:9d:88:fe:d3:aa:bf:c3:47:fa:5e:4b:8a:42:69:6d: 8d:b0:71:2a:e9:22:42:fc:38:a4:0e:4c:db:ef:3d:57:81:72: b3:a1:3c:9e:07:39:7e:94:8c:29:81:bd:05:36:b2:3a:20:fa: 96:2c:fe:8c:84:08:b4:dd:ea:3a:9d:58:ee:11:aa:9e:82:b8: 6f:08:79:20:62:7e:8e:bd:c2:1f:79:f0:33:1c:18:2a:28:01: bf:f0:6e:0e:2d:ad:42:d7:6d:d3:21:c9:cd:3a:0c:cc:44:a9: 72:c6:f5:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/LyvWklSBkDIgfGMjHHJzGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwODA0MDgwMTQzWhcNMjYwODA1MDgwMTQzWjAzMTEwLwYDVQQD EygzOTY1MjUwNDRkMDNkYmNmYjM2M2M2YmI1YzY2NzYxMWI5NTBlOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnulMc2bCX5GFJKEshcgxc3CFMMQi JkB01sHYTRnFE91gVvyeZQp1AlRH9jEVNbdTpherBk60fADWpili9aNpibZTba3t 0lXyrwG7IP20Cd8ubw34fhgjOvQfHQmJEclY9/Kl0KUB5pvt09zL2FIE6BEBkpp7 xNXwJ0LLnNTtt7wCm87CEeB/N4/ETv4wUJNLkSnN+RttlxUhMYBlPlWmd1/sP14/ NcD+C+4fb465Tnn9e0+/wHyC//8Cxs2hxxjRrGQ8UrY1thWZM4EVFsWpMtfpPqxH TCMpVYL5hB3cH0LXX3TgV+HD/He3mjD4LAODjgJwJ7GdKrYcSPpqBDbUBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDllJQRNA9vPs2PGu1xmdhG5UOjcMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADehXX0zQ WQVIOHOH49Vb4bOkZPAMqsq0BqOIwDV72AHZ6lDS9+W3cOit9R4b4WBGpqhWQqJJ u8mfV9WfDIwIVOqAYB7wxZjWgIMMNzK1nfIyLZg30CnSidxoDSyV2YeY6mAPMF5u 6JYObhtEacHDYxt/6hKPo5gFPrutROhxLndYLTbdHBS8goe9McbSjQo8dTMlnYj+ 06q/w0f6XkuKQmltjbBxKukiQvw4pA5M2+89V4Fys6E8ngc5fpSMKYG9BTayOiD6 liz+jIQItN3qOp1Y7hGqnoK4bwh5IGJ+jr3CH3nwMxwYKigBv/BuDi2tQtdt0yHJ zToMzESpcsb1Kg== -----END CERTIFICATE-----Generated at Tue Aug 4 18:08:49 2026 by rpki-client