$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json) Hash identifier: +NXvdjrhNrEv3lwU7WYs5bdNcDwFTkeNrEe1WGzyWgo= Subject key identifier: 64:D7:48:E7:25:0E:D8:83:25:D4:E5:9C:3A:EB:38:AF:77:6C:6A:AA Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Certificate serial: 019FD34D6AEC7615B7FB269B675411C179AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft Manifest number: 1A4D Signing time: Wed 05 Aug 2026 19:01:33 +0000 Manifest this update: Wed 05 Aug 2026 19:01:33 +0000 Manifest next update: Thu 06 Aug 2026 19:01:33 +0000 Files and hashes: 1: 3mj4BF15-QsrQeXNqlhp9O0RF8Q.roa (hash: vXL9dy1/SgEnnpISMc/F/t6U8c7+bWH7fiwFFAUniPU=) 2: AA7Y4sCR7PrpDI85YfPbvxgzrAg.roa (hash: 1b9YLade5wRVtuNh+CLPpHprAJRfPxZf9fkGpaZl+nY=) 3: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: xFRe1QAseZ88CwB23md6G700b/Qs2i4rMu3lQRyniOE=) 4: _OICBSukGvCLBbc9uyxx5OyhMb4.roa (hash: 7AuBd8gg+SvdGvOadXKAAwMx3Pu5AWWquX3/J1ObTWQ=) 5: dDIM-ljTCDKhWIxv1515WUGeQvk.roa (hash: /ksxNXhqwhx98qeq21Eca7WB/KLYXy3qx2dkD35mKTc=) 6: kFLjuN4_tRjI-IILkJq8lcLpDdc.roa (hash: lQTRIEBvMUBY3vX80dFs9U0bSNDBYvB6Uew+srrzZ9A=) 7: pyNvgkFzsg9fIZYcAGIp4TK5i6Q.roa (hash: Z5COLPZ8sBgmHRYMdI9Jy6cVnommi6Y2ZY1mY2+lzkA=) 8: qrG9XLPl84E40eGjaluMQlHH30g.roa (hash: JZCVwj3aTdfzcFTKEfr0xBq4Umu2aHhpSpk1hh5GgSQ=) 9: sNbxwr_VlMceIOoORfjNh48fthg.roa (hash: og1IfOlO+B5tux3x/JdwIjbchpmcSQUOsvTa4SrXgws=) 10: sPyU_Xm3Mi4DrCYd-xCPHCu7Yj8.roa (hash: R+jYi2MX3/3kpxkJYiEg+3YO+SpdTf42NvPMvZti0mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Aug 2026 19:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:d3:4d:6a:ec:76:15:b7:fb:26:9b:67:54:11:c1:79:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Validity Not Before: Aug 5 19:01:33 2026 GMT Not After : Aug 6 19:01:33 2026 GMT Subject: CN=64d748e7250ed88325d4e59c3aeb38af776c6aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:87:ba:f2:d8:28:9f:31:62:ba:be:50:f2:c2: 2e:55:e9:cb:53:86:28:d2:a9:b6:22:e2:2c:df:15: 35:2a:92:3b:c3:28:11:db:ad:89:9a:c5:2a:8e:4c: f4:a3:13:48:5e:1b:8f:8a:b4:cf:27:7d:cf:8d:ad: d3:73:95:a3:10:87:2d:e7:f0:15:c1:c9:76:8b:c3: 69:95:e2:92:8e:55:f1:d4:4a:8f:d7:f0:dd:09:b1: d1:2e:ed:aa:ff:e0:e0:4d:8b:d5:1a:69:7a:33:50: 05:f7:35:35:63:ba:28:3c:ab:41:ab:20:e0:58:06: 75:b1:a8:f5:9d:07:05:c0:b0:df:83:46:4a:25:f0: 34:be:ea:6e:98:54:e2:62:ca:51:ec:22:fa:08:57: e7:c4:97:55:fc:57:2c:15:83:a0:ad:28:b8:48:37: 33:50:c1:c1:c0:a1:fb:79:c2:ad:b4:0e:34:dc:14: 5a:7c:9e:20:e8:99:81:de:31:86:67:8c:00:ef:28: f3:22:d1:22:14:a5:9d:77:7c:20:fb:88:bd:71:70: bc:50:ba:63:7a:12:d1:3f:7a:ca:47:be:2c:e2:71: 27:0d:d9:0c:17:05:98:51:5e:a2:24:9c:70:3d:c2: e4:d8:f7:d2:b4:c1:cd:1f:a7:e7:a7:fa:e3:0b:6c: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D7:48:E7:25:0E:D8:83:25:D4:E5:9C:3A:EB:38:AF:77:6C:6A:AA X509v3 Authority Key Identifier: keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:fd:b0:93:7f:47:b6:cd:5b:3d:0b:18:30:76:04:dd:cc:1e: 58:96:64:31:d1:84:3d:c6:ef:22:58:01:04:6e:e6:8d:22:3c: a7:69:02:56:60:0f:ce:d8:f2:72:e8:43:5f:4c:0e:d6:6b:90: 2e:9e:99:81:a2:ad:84:b0:a7:94:08:52:c2:4c:bb:61:10:2b: 3b:f5:df:36:06:47:97:89:df:c3:e8:8f:55:d8:2f:96:74:9d: f9:8d:22:76:0e:54:26:a8:eb:ea:07:23:37:8c:0b:c6:b2:dc: 65:77:b1:5d:9f:dd:b5:49:a1:2f:03:92:c0:8f:b5:4b:43:f1: 94:21:3d:f3:df:83:93:43:d1:5f:f1:4a:b7:6d:d4:7f:34:11: 9f:2c:90:db:18:7b:ee:b1:42:3a:40:d8:bd:72:b5:3b:ff:c7: e0:be:37:e1:23:7a:0e:73:7e:77:a5:b0:77:d0:fe:28:79:37: a1:0e:d8:89:ce:80:39:2b:d2:d9:db:09:85:c4:a9:41:86:3e: 74:d2:03:60:11:58:25:05:52:ff:01:ff:95:45:6f:65:65:89: 8e:02:48:7c:1f:aa:30:9e:ea:b1:fc:b4:04:b2:0a:da:99:12: 8f:10:3e:95:c5:55:fc:2c:29:4c:e7:30:7f:87:ee:da:84:c0: 86:4b:c8:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/TTWrsdhW3+yabZ1QRwXmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzdmMjdlYjQ5OTdiM2JlZjlmMjgyNjZhMzk2OTQwNTBm ZTc0ZjkwHhcNMjYwODA1MTkwMTMzWhcNMjYwODA2MTkwMTMzWjAzMTEwLwYDVQQD Eyg2NGQ3NDhlNzI1MGVkODgzMjVkNGU1OWMzYWViMzhhZjc3NmM2YWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoe68tgonzFiur5Q8sIuVenLU4Yo 0qm2IuIs3xU1KpI7wygR262JmsUqjkz0oxNIXhuPirTPJ33Pja3Tc5WjEIct5/AV wcl2i8NpleKSjlXx1EqP1/DdCbHRLu2q/+DgTYvVGml6M1AF9zU1Y7ooPKtBqyDg WAZ1saj1nQcFwLDfg0ZKJfA0vupumFTiYspR7CL6CFfnxJdV/FcsFYOgrSi4SDcz UMHBwKH7ecKttA403BRafJ4g6JmB3jGGZ4wA7yjzItEiFKWdd3wg+4i9cXC8ULpj ehLRP3rKR74s4nEnDdkMFwWYUV6iJJxwPcLk2PfStMHNH6fnp/rjC2wlNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTXSOclDtiDJdTlnDrrOK93bGqqMB8GA1UdIwQY MBaAFEw38n60mXs7758oJmo5aUBQ/nT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEt ZWI1YTYyN2U3NmEzLzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEtZWI1YTYyN2U3NmEz LzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaP2wk39H ts1bPQsYMHYE3cweWJZkMdGEPcbvIlgBBG7mjSI8p2kCVmAPztjycuhDX0wO1muQ Lp6ZgaKthLCnlAhSwky7YRArO/XfNgZHl4nfw+iPVdgvlnSd+Y0idg5UJqjr6gcj N4wLxrLcZXexXZ/dtUmhLwOSwI+1S0PxlCE989+Dk0PRX/FKt23UfzQRnyyQ2xh7 7rFCOkDYvXK1O//H4L434SN6DnN+d6Wwd9D+KHk3oQ7Yic6AOSvS2dsJhcSpQYY+ dNIDYBFYJQVS/wH/lUVvZWWJjgJIfB+qMJ7qsfy0BLIK2pkSjxA+lcVV/CwpTOcw f4fu2oTAhkvILQ== -----END CERTIFICATE-----Generated at Thu Aug 6 01:15:25 2026 by rpki-client