$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: af0ihP1p3qlx9hFk/lUjp6jxux4NmuJP2jy9IfTSFso= Subject key identifier: 95:36:F0:C1:BA:5A:A8:8A:05:B8:41:AC:16:C2:67:45:47:2C:14:9F Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019F7C6587F17C6F38C27522870546FDBAEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 1767 Signing time: Sun 19 Jul 2026 22:00:56 +0000 Manifest this update: Sun 19 Jul 2026 22:00:56 +0000 Manifest next update: Mon 20 Jul 2026 22:00:56 +0000 Files and hashes: 1: 1kKPv2wUltItuWIjU1ilVcX9VLE.roa (hash: il+uT7sf8sbrAGYBj61G15BD0mwhGRvyVxYl0y6GFnU=) 2: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (hash: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE=) 3: 8eTvO2TZdJIMeT5I77o8e5hLDyI.roa (hash: RW0q4KTs9SZCv80GUyltUUK1ZfZgWc4IG8Rp/qHyA3g=) 4: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 5: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 6: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 7: JWwcCyO1rTwTxLjbz3l2SouJTAA.roa (hash: AgH3qdVNL3CHi6p+2Mst499KFQUzntafoYHZrzYZW8s=) 8: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 9: Lmglx6k3OhVfB6qXrSYWY-3n7wU.roa (hash: jOlTc86u7s0cDJRLkmCFCCAUXlp7wxNhr83b5DVvky8=) 10: WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa (hash: uW36/EhLhyw8heI0tUnFU6wiInPtS+CcO/PTS29AqYY=) 11: XjjwvZsrXx6sUtsiWwMw-1uwefI.roa (hash: RD/89w2/8ZIshxnP3ME483+xP0ONXiXxPqHiP1Ie+hY=) 12: bV3Qg5HtML1zUsJYAwV_qsAoITg.roa (hash: ZhHWbujHVFO1260mH7gJeRdvHPIcZ7THBcA3XZdsUfs=) 13: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 14: cOMhRxduLw18TIe2EJANKourNbc.roa (hash: vRamlKR5R5SmfC3d0sMnuMWhFKCo/1NfKoqnzL94OGM=) 15: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: EMgB8fxj/rssOCQI1/6vi3R8JL31BwQcFuYNl0vmt98=) 16: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 17: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 18: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) 19: yhFaGf2_vHhBZgwwXE8xm1OTXQE.roa (hash: 3+krivSCZ6wgsfWjmVU3sW4pnSZcLq6UgbbbbMppVNI=) 20: zKma2lZxd28aMOIa5GKySj7K3F4.roa (hash: z2dVlW8SWBq0rqcswBgsfVdqo5mJ3Cgdk6gd4jQUscA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Jul 2026 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:7c:65:87:f1:7c:6f:38:c2:75:22:87:05:46:fd:ba:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jul 19 22:00:56 2026 GMT Not After : Jul 20 22:00:56 2026 GMT Subject: CN=9536f0c1ba5aa88a05b841ac16c26745472c149f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:27:48:4a:04:fd:4b:b8:e6:b6:fe:31:62:d1: a7:2e:fa:6c:7b:f5:b5:d0:71:39:cd:5f:97:5f:92: 74:12:35:b2:85:f4:5c:c2:16:7c:59:65:ed:9a:50: 40:7e:84:e4:c2:3d:a0:18:2d:4e:c8:cc:bb:20:3f: ed:71:0e:12:f6:b0:bd:3e:fd:a4:0f:1e:34:f3:9e: 0d:55:84:81:c9:57:30:40:db:8d:1e:da:6a:c9:a1: d5:ae:d6:1d:53:c8:25:87:23:43:6c:ac:4d:36:9d: f8:df:a1:31:2e:ab:fa:53:1e:bf:b8:3c:ff:bf:ac: 29:f8:7f:59:ce:26:aa:ee:f0:0c:fa:b3:9b:e5:45: 14:10:4f:2e:5a:fa:c4:c2:ff:e1:5b:e0:5b:1f:54: ae:9d:c2:c7:c2:ee:d2:d9:0c:15:8c:0c:ff:29:7c: f7:02:b3:88:35:60:9c:0c:7b:25:71:b8:3f:3a:56: 32:4c:1c:de:dd:81:a6:39:f4:6f:19:b8:e7:90:5a: 22:5c:35:c4:b6:61:ed:20:25:2f:13:7f:6b:56:69: 4e:57:96:ac:c8:43:5c:96:ec:41:74:03:dd:a0:ed: ac:9d:c4:79:b2:ce:04:21:76:d5:d1:e4:48:21:4e: e4:ed:5b:9b:22:96:d2:ac:ef:8b:bf:ce:07:63:a1: d0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:36:F0:C1:BA:5A:A8:8A:05:B8:41:AC:16:C2:67:45:47:2C:14:9F X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f8:74:99:ce:f6:b8:b1:c0:58:72:1e:5e:92:de:b5:2d:85: 85:a5:a9:95:dd:a2:70:47:3b:39:9a:e9:0e:e2:95:38:0f:b9: 5e:5c:c3:a6:ae:62:42:f0:74:d5:df:56:4d:7b:82:31:27:d3: 25:e6:85:4a:37:09:82:98:52:a0:93:f7:ef:aa:b3:bb:36:ac: 13:ba:c7:31:b0:1d:57:6a:dc:66:16:93:44:bb:91:36:34:38: 8a:69:ce:5c:1d:9b:3e:8c:41:98:1d:cc:55:41:e7:96:a2:25: 4a:b8:b0:68:53:b8:80:4f:21:3f:36:d0:c7:76:9b:59:86:e9: 9a:ac:11:27:0d:c5:63:16:dd:fd:74:58:34:92:83:90:b4:44: 47:ca:9f:a1:20:f2:71:8a:c8:f0:76:fd:96:74:b4:ea:36:f1: 7a:da:1e:02:c0:19:68:67:d9:df:c9:24:0c:d6:b9:47:10:88: a6:d6:44:1e:24:03:fa:a3:53:90:9e:4a:e1:f9:b5:c6:ab:6c: 0f:8f:61:27:a5:d5:95:3d:99:9f:81:da:b0:7b:7b:52:8c:96: 09:54:5e:f3:5d:12:9a:03:51:a8:9f:f4:4f:62:22:ec:e1:00: 83:ea:65:1f:2d:60:6e:83:89:97:50:52:2f:f8:4c:e4:b3:9c: c0:44:ce:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ98ZYfxfG84wnUihwVG/brsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwNzE5MjIwMDU2WhcNMjYwNzIwMjIwMDU2WjAzMTEwLwYDVQQD Eyg5NTM2ZjBjMWJhNWFhODhhMDViODQxYWMxNmMyNjc0NTQ3MmMxNDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqidISgT9S7jmtv4xYtGnLvpse/W1 0HE5zV+XX5J0EjWyhfRcwhZ8WWXtmlBAfoTkwj2gGC1OyMy7ID/tcQ4S9rC9Pv2k Dx40854NVYSByVcwQNuNHtpqyaHVrtYdU8glhyNDbKxNNp3436ExLqv6Ux6/uDz/ v6wp+H9Zziaq7vAM+rOb5UUUEE8uWvrEwv/hW+BbH1SuncLHwu7S2QwVjAz/KXz3 ArOINWCcDHslcbg/OlYyTBze3YGmOfRvGbjnkFoiXDXEtmHtICUvE39rVmlOV5as yENcluxBdAPdoO2sncR5ss4EIXbV0eRIIU7k7VubIpbSrO+Lv84HY6HQEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJU28MG6WqiKBbhBrBbCZ0VHLBSfMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafh0mc72 uLHAWHIeXpLetS2FhaWpld2icEc7OZrpDuKVOA+5XlzDpq5iQvB01d9WTXuCMSfT JeaFSjcJgphSoJP376qzuzasE7rHMbAdV2rcZhaTRLuRNjQ4imnOXB2bPoxBmB3M VUHnlqIlSriwaFO4gE8hPzbQx3abWYbpmqwRJw3FYxbd/XRYNJKDkLRER8qfoSDy cYrI8Hb9lnS06jbxetoeAsAZaGfZ38kkDNa5RxCIptZEHiQD+qNTkJ5K4fm1xqts D49hJ6XVlT2Zn4HasHt7UoyWCVRe810SmgNRqJ/0T2Ii7OEAg+plHy1gboOJl1BS L/hM5LOcwETOYQ== -----END CERTIFICATE-----Generated at Mon Jul 20 06:07:31 2026 by rpki-client