$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: Vpgpij/FEqWVjcf0/Zv/xwobfyxvwj0AVVuk0xKANMw= Subject key identifier: 51:33:13:75:A8:FC:63:4D:8C:42:E4:EE:A2:AF:FE:14:99:95:E7:22 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019F826709ED548FE36B80FF83C3FCD264E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 1907 Signing time: Tue 21 Jul 2026 02:00:18 +0000 Manifest this update: Tue 21 Jul 2026 02:00:18 +0000 Manifest next update: Wed 22 Jul 2026 02:00:18 +0000 Files and hashes: 1: DUa5gfrd1mbJghmCA9wsPUgatiA.roa (hash: vgkaB+FL8lKIjouXupzJZRb3iZtU+i3kKGIirTBXniA=) 2: IoSQ968prEWE2iPAfiHq62Q9HRQ.roa (hash: sMFfoE8ew6Os6X7T5w3iP4CHenQCaCmWxqa3HE4kDyg=) 3: Jz8RZAWrUimyuGnjG5ub7oNokXU.roa (hash: IeObP/asysAN8PfUm4Hn659vFyCN9hWBT1PSEjvx9O8=) 4: Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa (hash: NqeN3nGFqChISvovOPomv7J85KVugMZmXFAJ2wHhcOc=) 5: R2uv8D1AC8qkVVlzoluUFlx0Uzc.roa (hash: Px0hZ7oJHqm6VJaRC8v/ew/nIaAHwORSGtXPvMgDntg=) 6: RcBVtc8qZ-WY09LgrXE9UddKRjU.roa (hash: PrGLDOIIW6h+3jbP4QXwCv6loJxjMEdM94B7tYzfRzI=) 7: S4fQra7FyBw6bk4R_f3Q2_hJKXI.roa (hash: RRFhdOKlXoVTT56pkyBH3PAGnDc0y17VQSEe9gDkJk4=) 8: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: 9uaEiBmgV76cigwXe92uhhaDfMRdzpXcQR5KCA+zr90=) 9: Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa (hash: YYmhifcK+2gNYjzHbIMtaIo+1gijW4PRQWGsmCHjKJg=) 10: aUcHGsfbW0LISPIyDevqEjn1Mp8.roa (hash: fbCvEiA8MdH3odLJSEwrCK+swIxRtwa+tYa7l/mkrVw=) 11: biH_EEWeOJOtLOQq6iGC0yelYn0.roa (hash: P54s2GoQrkvwJ9KXymJfJ8rzco9Uv1wsEklV2MlObyE=) 12: gAbatwVqafpDL9WTtIX0TlfDD98.roa (hash: JDzbm14+9mpQN3vnbFMcnevA6T8g7/UNXI8LqyzblhQ=) 13: psnLTq9oj0zoEtX755KpVPy0ws8.roa (hash: 8tn9lCYFdmG1BOJcqSY0wLhBU8frfgy5f/M7MDD6IgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:82:67:09:ed:54:8f:e3:6b:80:ff:83:c3:fc:d2:64:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Jul 21 02:00:18 2026 GMT Not After : Jul 22 02:00:18 2026 GMT Subject: CN=51331375a8fc634d8c42e4eea2affe149995e722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:67:92:59:40:35:b6:18:25:bb:48:43:54:c8: 25:ce:03:d1:2b:56:f5:65:a2:d0:dd:f6:12:6a:83: 9f:e7:0e:91:1a:79:32:87:8b:b4:79:ff:b0:c0:8a: 87:14:36:95:3c:a1:7c:58:7f:95:03:13:ff:62:42: e3:2d:9c:7e:25:e6:72:df:86:4f:07:fa:c4:e2:b1: 33:e5:2f:0b:f6:ca:b1:96:b8:e8:de:b9:08:9a:1c: f1:dd:5b:43:f3:c8:c2:38:04:73:e3:ec:e9:02:01: 2d:a0:12:bd:a7:5d:59:45:50:c1:26:94:9e:82:ca: a0:8b:8c:8a:d2:5c:86:ad:c4:37:46:a2:db:92:02: cc:0a:7f:a3:b6:10:82:6a:84:4f:00:72:9e:af:7e: 70:5e:32:e6:22:54:ab:6b:01:0f:c8:0f:11:1c:2f: 7a:d5:ae:a6:2f:79:ee:10:27:19:88:9c:db:9e:2e: 72:96:6e:86:fd:3b:cf:e7:10:90:6f:c9:ea:c8:a9: 4d:f8:21:34:5a:d2:d5:5a:d9:70:84:1f:15:8d:84: fe:25:d5:37:1a:4f:d1:32:7d:5b:e5:14:e5:b3:96: e9:cb:9a:dc:2b:b2:c5:34:4f:95:11:ce:f6:dc:b0: 9b:38:f8:26:7f:e1:2c:2b:da:22:66:32:6b:da:07: 7d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:33:13:75:A8:FC:63:4D:8C:42:E4:EE:A2:AF:FE:14:99:95:E7:22 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:af:3b:2b:14:11:96:ea:c2:ae:5e:a8:95:72:09:5b:59:30: 5e:4b:9c:70:93:1e:ea:fc:ce:a7:5e:06:e9:de:b3:bb:39:f1: 82:b0:1b:9d:33:00:d1:4b:c0:1f:e3:89:06:bc:5f:cc:e6:02: 22:58:92:17:dc:aa:89:a0:aa:34:72:3e:f9:97:04:3d:fa:83: 4d:ef:af:6e:6d:ed:de:35:a8:89:53:3a:8e:2d:98:b9:fe:5d: be:b7:c0:2c:6f:da:c9:b3:0d:ae:1b:09:64:6c:36:a0:1f:1a: fb:ce:a1:3c:d5:fb:f3:72:a5:7e:4f:59:48:56:c9:3e:a1:87: 6b:d1:87:fb:da:0f:7b:d2:36:99:eb:52:41:bd:8e:75:d0:50: ef:4a:eb:27:c9:6c:c0:6a:94:e3:b1:68:e7:84:6e:d7:4f:8d: 43:24:bb:03:e8:cf:81:8b:17:0a:1f:75:98:1d:14:63:be:f7: e0:23:b2:cb:86:20:c5:60:cf:34:df:b0:35:ca:d0:bd:ff:db: 1d:2a:1d:7d:83:3f:4f:de:f7:01:4e:f3:b1:26:9d:9e:c5:6d: 40:a6:b4:a4:86:01:0d:19:50:cf:c6:e8:9c:c6:3c:23:b1:6c: 4e:32:30:79:41:9a:9a:68:f4:72:60:8c:55:09:b3:82:8b:28: ff:a4:3c:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+CZwntVI/ja4D/g8P80mTmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwNzIxMDIwMDE4WhcNMjYwNzIyMDIwMDE4WjAzMTEwLwYDVQQD Eyg1MTMzMTM3NWE4ZmM2MzRkOGM0MmU0ZWVhMmFmZmUxNDk5OTVlNzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmeSWUA1thglu0hDVMglzgPRK1b1 ZaLQ3fYSaoOf5w6RGnkyh4u0ef+wwIqHFDaVPKF8WH+VAxP/YkLjLZx+JeZy34ZP B/rE4rEz5S8L9sqxlrjo3rkImhzx3VtD88jCOARz4+zpAgEtoBK9p11ZRVDBJpSe gsqgi4yK0lyGrcQ3RqLbkgLMCn+jthCCaoRPAHKer35wXjLmIlSrawEPyA8RHC96 1a6mL3nuECcZiJzbni5ylm6G/TvP5xCQb8nqyKlN+CE0WtLVWtlwhB8VjYT+JdU3 Gk/RMn1b5RTls5bpy5rcK7LFNE+VEc723LCbOPgmf+EsK9oiZjJr2gd9OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEzE3Wo/GNNjELk7qKv/hSZleciMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGa87KxQR lurCrl6olXIJW1kwXkuccJMe6vzOp14G6d6zuznxgrAbnTMA0UvAH+OJBrxfzOYC IliSF9yqiaCqNHI++ZcEPfqDTe+vbm3t3jWoiVM6ji2Yuf5dvrfALG/aybMNrhsJ ZGw2oB8a+86hPNX783Klfk9ZSFbJPqGHa9GH+9oPe9I2metSQb2OddBQ70rrJ8ls wGqU47Fo54Ru10+NQyS7A+jPgYsXCh91mB0UY7734COyy4YgxWDPNN+wNcrQvf/b HSodfYM/T973AU7zsSadnsVtQKa0pIYBDRlQz8bonMY8I7FsTjIweUGammj0cmCM VQmzgoso/6Q8mw== -----END CERTIFICATE-----Generated at Tue Jul 21 03:59:31 2026 by rpki-client