$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: 87cRdv+9ZmlIp3ZlFUUVZG7R8nEi4DsQ3wW+pwAwhkQ= Subject key identifier: 52:D8:A4:5D:72:9B:1E:0F:FE:1A:50:CE:84:BA:3D:3A:87:0C:52:D4 Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019FF8DA7F370FCBDE3B2CFD331434B4042E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 1A0C Signing time: Thu 13 Aug 2026 02:01:36 +0000 Manifest this update: Thu 13 Aug 2026 02:01:36 +0000 Manifest next update: Fri 14 Aug 2026 02:01:36 +0000 Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=) 2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=) 3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=) 4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=) 5: J_a4ymcJIY3L6HOzFARmH41d5es.asa (hash: bpzpa0qKowmOhDsx7cnZXh9EOSP6XWxhHtsK/Z/ggTU=) 6: LfkCmSO1I7GGpJ0of5l-0c5AGBc.asa (hash: UgfWuPDLjqxThrUgxhNFddbI4VXPReh33QeUjBvYjVs=) 7: LuOgAc37LU8V7dGgdj8hy6ymH64.asa (hash: pkN431oI3RFQuibIh8RwZRrzTHAA18y2t6J/hjni00c=) 8: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=) 9: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=) 10: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: 331Eb0vkT+QLeH6U+p5Tb2LjbUMoUWcEkIb5a5ZMVK0=) 11: cIcqaLXZmekavhCmoIAJhBRw3JE.roa (hash: 8QflktthB1MZE1m+SbfCOvT58wwBH/AnF87SL9k5yss=) 12: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=) 13: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=) 14: oaZumtYBqB2DBSwMpqnmqOIkGm0.roa (hash: 9YqR7q1fJK+xrhMWwkV3smWMIV3JZ5y1OxTGOkJ6aPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f8:da:7f:37:0f:cb:de:3b:2c:fd:33:14:34:b4:04:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Aug 13 02:01:36 2026 GMT Not After : Aug 14 02:01:36 2026 GMT Subject: CN=52d8a45d729b1e0ffe1a50ce84ba3d3a870c52d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:69:17:9c:fb:cd:6f:ae:8f:14:ea:d2:06:f2: dd:08:ed:d3:1f:da:a4:82:44:9e:d4:9b:c8:ac:45: 32:7c:07:25:cb:a6:5c:29:a6:45:f3:94:60:75:b1: 74:02:db:90:e7:6d:15:81:49:de:a7:95:c3:41:d9: dc:c5:bf:8b:9e:2f:9d:40:fe:16:34:fc:80:ad:55: 7c:27:f4:6f:d3:b2:d1:b0:a0:bd:cb:a1:39:2a:3f: 81:cb:bb:80:52:c2:ae:66:01:85:40:c0:57:15:a6: af:6a:df:f8:2f:cc:4a:a3:2a:a9:72:d1:a3:c4:43: 83:5a:3c:78:28:cc:96:56:b9:62:28:e6:2a:d8:22: e6:c5:4c:c1:e7:88:2d:bc:10:16:b7:82:38:a5:1f: a7:d4:73:ff:19:56:1a:62:af:5f:91:af:86:fd:cc: 7e:90:e3:53:63:91:ed:be:67:68:e5:71:25:6a:fd: c8:01:c3:a2:44:b2:67:e7:5d:b3:67:1b:cd:5a:03: c9:1f:7b:37:ac:46:8d:30:de:a3:43:64:01:60:1a: 52:81:b2:04:08:56:39:71:f4:b2:37:84:0c:e7:a2: 8a:d6:b9:8a:c3:31:b6:ff:46:f3:c5:af:7c:5e:91: 64:08:03:8d:9e:59:f8:ee:bc:00:02:a6:df:11:4f: 0a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D8:A4:5D:72:9B:1E:0F:FE:1A:50:CE:84:BA:3D:3A:87:0C:52:D4 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8c:eb:dd:53:79:9a:7c:05:29:12:ed:9d:49:03:16:ab:ce: 0a:57:0c:08:b5:28:a4:a3:a9:a3:71:d7:0e:02:0a:06:af:86: db:e8:8e:8c:fb:08:d4:24:08:42:b7:13:8c:8a:a0:b8:89:c8: 34:5a:de:07:2c:d1:ed:f6:93:fd:d9:f9:0c:dd:1a:29:af:45: 80:a4:4e:18:11:1b:93:8b:de:bd:5d:e8:23:cf:15:64:0e:b4: ef:d3:8a:37:f1:fd:f6:34:73:fd:a8:3a:f4:8c:70:3e:ae:ab: 2a:bc:94:f0:6b:69:28:c5:b4:28:d3:bd:df:42:df:22:09:57: a7:03:e9:07:7b:39:38:32:20:b2:77:5e:7f:7d:70:d4:22:da: f5:32:1e:fe:3f:36:63:5a:5c:a2:18:75:58:34:21:be:f1:03: f1:ba:cd:16:98:f1:eb:17:6a:bf:6e:88:af:35:a0:dd:67:c9: 04:0d:9b:13:f7:8d:ab:69:b0:77:8a:86:8c:4b:42:b8:4a:9c: 62:3a:83:63:73:fc:5f:6b:bf:55:ac:cc:85:54:7c:7a:ab:ec: 3a:34:49:30:43:a4:8c:d6:d3:f1:35:c9:da:b0:1e:d2:f4:20: 47:a0:eb:ac:6f:14:9f:a8:c7:27:0c:60:64:fa:14:c1:3e:5c: a3:f1:d9:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/42n83D8veOyz9MxQ0tAQuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwODEzMDIwMTM2WhcNMjYwODE0MDIwMTM2WjAzMTEwLwYDVQQD Eyg1MmQ4YTQ1ZDcyOWIxZTBmZmUxYTUwY2U4NGJhM2QzYTg3MGM1MmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GkXnPvNb66PFOrSBvLdCO3TH9qk gkSe1JvIrEUyfAcly6ZcKaZF85RgdbF0AtuQ520VgUnep5XDQdncxb+Lni+dQP4W NPyArVV8J/Rv07LRsKC9y6E5Kj+By7uAUsKuZgGFQMBXFaavat/4L8xKoyqpctGj xEODWjx4KMyWVrliKOYq2CLmxUzB54gtvBAWt4I4pR+n1HP/GVYaYq9fka+G/cx+ kONTY5Htvmdo5XElav3IAcOiRLJn512zZxvNWgPJH3s3rEaNMN6jQ2QBYBpSgbIE CFY5cfSyN4QM56KK1rmKwzG2/0bzxa98XpFkCAONnln47rwAAqbfEU8KJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLYpF1ymx4P/hpQzoS6PTqHDFLUMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIzr3VN5 mnwFKRLtnUkDFqvOClcMCLUopKOpo3HXDgIKBq+G2+iOjPsI1CQIQrcTjIqguInI NFreByzR7faT/dn5DN0aKa9FgKROGBEbk4vevV3oI88VZA6079OKN/H99jRz/ag6 9IxwPq6rKryU8GtpKMW0KNO930LfIglXpwPpB3s5ODIgsndef31w1CLa9TIe/j82 Y1pcohh1WDQhvvED8brNFpjx6xdqv26IrzWg3WfJBA2bE/eNq2mwd4qGjEtCuEqc YjqDY3P8X2u/VazMhVR8eqvsOjRJMEOkjNbT8TXJ2rAe0vQgR6DrrG8Un6jHJwxg ZPoUwT5co/HZEA== -----END CERTIFICATE-----Generated at Thu Aug 13 08:49:13 2026 by rpki-client