$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: HGfmHSJgAdpGBQf5Jib6lTZ3xX1Of2bSubfrYNDhLbk= Subject key identifier: FC:5B:71:B4:DD:90:CF:2F:02:CB:F3:8E:E7:2C:B3:CC:82:48:9E:37 Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019F4FC3E3F46DB2170B2F63E45E998A77D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 1228 Signing time: Sat 11 Jul 2026 06:01:05 +0000 Manifest this update: Sat 11 Jul 2026 06:01:05 +0000 Manifest next update: Sun 12 Jul 2026 06:01:05 +0000 Files and hashes: 1: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (hash: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=) 2: GNlA9Djc01_DIxMgMXZBVVZA1yU.roa (hash: 7/jOmr8/wXHfFoWsgICU+xbOKLK7NXJAz5aYH9GIqUg=) 3: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: CMYRxtcpJYZcIRq2oCht1/Uuchv5co8hlKKWkAt/nyQ=) 4: T6tjope32KekAaANH2cDVM3Bd9k.roa (hash: 9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=) 5: UikTrUC-2DsDHw5Izq7A013vsK4.roa (hash: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=) 6: bxYbt9Cn4R10yajjbMPCKKg_YHc.roa (hash: 8byOzQfwF/KOVbj8pNAWquwbx3xGB2NYpi6Uf3icLsA=) 7: hZiFcW7h5F5XfcXkHDMH450e4sg.roa (hash: D2HtChe92Pq7COg3X4YoKzG61XVo1IcROxs8V7eIHbE=) 8: k-eSrqeXL71w-nhYF8XhonC5sgE.roa (hash: pMZO0gbnwiTypIUzIs1wrF7zpRP+hjOJxinJEWPhOb8=) 9: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (hash: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=) 10: rnlQK5dhYROPwVOz0gIHy2hThyA.roa (hash: ePpSMaFTViP+SRbpfZ7RDlUyIWzyjKKxE4TEHxPptd8=) 11: s0LJxcrA6NEOVotU612Fnf2S5ek.roa (hash: I+fPBNeq55OXeCUKgKO9o96f3LbnL4TA94Ayj0fCu0c=) 12: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (hash: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk=) 13: tbcmmXBw3ZIYzwt4SULlG4fEW4c.roa (hash: 1XrkcGJtOYvvhy1+G9sGbL7q4EKrPWSn1X+QN9f+LUQ=) 14: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (hash: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs=) 15: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (hash: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI=) 16: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (hash: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 Jul 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:4f:c3:e3:f4:6d:b2:17:0b:2f:63:e4:5e:99:8a:77:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Jul 11 06:01:05 2026 GMT Not After : Jul 12 06:01:05 2026 GMT Subject: CN=fc5b71b4dd90cf2f02cbf38ee72cb3cc82489e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:89:8a:b2:6f:67:df:65:4e:7c:ae:3e:89:98: 2a:09:e7:81:15:a7:f7:81:3a:0b:88:5d:93:2d:fb: 78:ee:14:5c:b8:f2:21:64:9e:f3:df:d7:06:27:6f: ea:57:81:8a:f9:0d:a9:27:5a:fb:b0:9e:0a:8a:d6: 8b:da:70:9a:e8:68:d6:ef:90:c0:ea:86:87:b9:6e: 07:45:81:43:17:04:d5:98:97:58:92:ce:5f:86:af: f8:ec:84:bb:40:62:56:fc:04:1a:6c:85:64:96:9b: 36:b3:1b:aa:17:78:21:1c:ae:3a:b0:89:2d:f3:c9: 07:9e:a0:80:b6:5c:17:18:b0:b8:5c:cb:3c:1f:e0: 97:a4:62:90:21:b4:1e:36:02:49:79:e8:b6:fb:fd: 85:35:80:d7:05:83:c7:fb:2a:dd:a1:1b:e9:c3:7f: 63:4a:e9:40:70:d5:c8:5c:d8:99:95:de:75:d8:cf: c4:29:67:f3:a3:9f:59:94:5d:16:2b:f1:11:41:6f: 99:86:3a:78:c3:a9:d7:4f:f6:53:34:a9:0e:a0:99: be:9f:34:86:e1:4f:9d:90:7a:f5:56:df:8e:5d:46: b4:f8:94:59:80:17:56:85:9f:82:78:7e:71:d3:4a: f4:10:a9:7d:5f:c3:27:9c:7c:3d:54:2c:43:9e:6a: 4b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5B:71:B4:DD:90:CF:2F:02:CB:F3:8E:E7:2C:B3:CC:82:48:9E:37 X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:aa:e5:cf:32:bc:db:cf:f2:66:b2:c8:f7:03:7a:09:40:54: bd:94:1a:1b:24:87:cd:87:d0:0c:56:c7:8b:8e:03:ef:a5:dc: e2:e9:17:60:4d:0f:23:7f:7d:b5:5b:38:a2:bd:ce:19:c4:34: 03:5a:dd:3a:9e:df:0d:99:be:0d:46:9b:84:24:ad:30:8f:cd: 48:0e:66:91:13:03:60:53:76:cb:75:dc:5b:7a:96:85:a9:c0: 5e:b2:a5:41:8e:cf:4b:9b:d2:e0:e1:cd:cd:8e:4a:0a:10:4f: 64:f3:04:c7:55:fd:09:4c:1f:3d:bd:7e:9b:42:85:5f:38:74: 13:a5:ba:32:5e:24:79:77:f9:2b:bf:85:c7:0c:85:87:c7:ab: d0:70:4a:5e:76:11:50:a7:39:79:26:15:ab:61:82:f6:a4:5b: 48:a7:64:f0:37:b6:33:3a:bb:e4:28:33:78:73:69:13:a5:40: f6:2e:8d:e8:6b:0c:97:bc:d6:03:c4:5d:d5:8d:de:c4:48:b6: de:49:84:a1:08:94:3a:d6:15:2b:5d:98:17:d9:fb:97:f8:70: 5b:ac:3e:74:37:2d:f5:f7:ed:fa:54:91:73:3f:97:55:ba:ee: 8b:9b:8f:58:b6:9b:d2:9a:e1:07:29:6d:02:d7:d7:04:ac:c3: 90:f6:59:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ9Pw+P0bbIXCy9j5F6ZinfXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwNzExMDYwMTA1WhcNMjYwNzEyMDYwMTA1WjAzMTEwLwYDVQQD EyhmYzViNzFiNGRkOTBjZjJmMDJjYmYzOGVlNzJjYjNjYzgyNDg5ZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04mKsm9n32VOfK4+iZgqCeeBFaf3 gToLiF2TLft47hRcuPIhZJ7z39cGJ2/qV4GK+Q2pJ1r7sJ4KitaL2nCa6GjW75DA 6oaHuW4HRYFDFwTVmJdYks5fhq/47IS7QGJW/AQabIVklps2sxuqF3ghHK46sIkt 88kHnqCAtlwXGLC4XMs8H+CXpGKQIbQeNgJJeei2+/2FNYDXBYPH+yrdoRvpw39j SulAcNXIXNiZld512M/EKWfzo59ZlF0WK/ERQW+Zhjp4w6nXT/ZTNKkOoJm+nzSG 4U+dkHr1Vt+OXUa0+JRZgBdWhZ+CeH5x00r0EKl9X8MnnHw9VCxDnmpLjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxbcbTdkM8vAsvzjucss8yCSJ43MB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKrlzzK8 28/yZrLI9wN6CUBUvZQaGySHzYfQDFbHi44D76Xc4ukXYE0PI399tVs4or3OGcQ0 A1rdOp7fDZm+DUabhCStMI/NSA5mkRMDYFN2y3XcW3qWhanAXrKlQY7PS5vS4OHN zY5KChBPZPMEx1X9CUwfPb1+m0KFXzh0E6W6Ml4keXf5K7+FxwyFh8er0HBKXnYR UKc5eSYVq2GC9qRbSKdk8De2Mzq75CgzeHNpE6VA9i6N6GsMl7zWA8Rd1Y3exEi2 3kmEoQiUOtYVK12YF9n7l/hwW6w+dDct9fft+lSRcz+XVbrui5uPWLab0prhBylt AtfXBKzDkPZZZA== -----END CERTIFICATE-----Generated at Sat Jul 11 15:01:47 2026 by rpki-client