$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json) Hash identifier: kyPokrvmhzrGKRbO3r4PvlpZHSWf6znxgQEL+ZDQbGE= Subject key identifier: FA:03:99:23:81:E0:3A:4F:2F:21:FD:14:87:E0:90:7F:D2:8D:A8:40 Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc Certificate serial: 01A003266D2F17118D2BAC784A1DF83A9FFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft Manifest number: 1A11 Signing time: Sat 15 Aug 2026 02:00:44 +0000 Manifest this update: Sat 15 Aug 2026 02:00:44 +0000 Manifest next update: Sun 16 Aug 2026 02:00:44 +0000 Files and hashes: 1: 1jdP05-NgIwTl3lk44cn8qIQMdc.roa (hash: pQSMoWYjWspbL7UN2RACxWoJYmx2sKJPGc9pWAJvtrU=) 2: GQnHTRMHOOfXf-q1lA1GVsIiYEY.roa (hash: 8NrETMC7ms4hMHOoi8XDcOkhkZOGNojhzo06eNcWX7Y=) 3: KQYzDmlbtLb0TIveiic0hQtg1_8.roa (hash: KwMCQ5pXReeQWpe8C0PWaWWc7IeA3pbKv8Ezi0wF6Rc=) 4: KlidTRE0Ld2vhd7LchTBrjDXtCM.roa (hash: oYu7FrAcgyOmxnR9Y/a2v7qA05r9PwyCGoG1X5C3eMU=) 5: RZLACbFi7DDxMhSVk53rF6u_q5s.roa (hash: qccsIYgKoKoAzDaa1FrisIRqKIFjJKfV6cslpJvk2g4=) 6: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: YygX2l0wFVmk+I/7eEOgb6A87p3zAyGdqE+Jei8EAzw=) 7: VYVttYZ6eh-FVP2l9smUTvzkisQ.roa (hash: aj+lOyE17KCo89DLgPDfN1NkWJX3b/mkunX6W40Tl7g=) 8: WgQuMuWG6iqKymtrS7RKG4E8Phc.roa (hash: 78zxzl+OYIQ0w8bGR6z2jgwELspOuErm4/++owpQ92k=) 9: fXPoY-0-q5iOyYhj9TEia273Zdo.roa (hash: mEk1psIYpULRd0+LS2omMVGz1dNS2p38t/9B8etfgac=) 10: slmMvnIFywHDgwV-wFbQ9dx_MgM.roa (hash: 14u6qAwoGY/eFFNW93mUvg1QcjQ1Oh3qZtQw1ddD8zw=) 11: zmr5Arlo83bz2EZMsCebzBonu0g.roa (hash: 3wLrxDIVVtatk269ndPNrri4rStQIN8G6VIxy0jx5CY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 16 Aug 2026 02:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:03:26:6d:2f:17:11:8d:2b:ac:78:4a:1d:f8:3a:9f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc Validity Not Before: Aug 15 02:00:44 2026 GMT Not After : Aug 16 02:00:44 2026 GMT Subject: CN=fa03992381e03a4f2f21fd1487e0907fd28da840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6b:b9:10:93:6a:eb:03:02:11:de:bc:0f:cb: 34:1d:24:35:cb:db:db:63:7d:25:e6:2b:b1:1c:ed: 2e:26:79:81:0b:d6:97:c6:f3:e4:7e:2a:6d:de:5e: 7f:85:8d:13:3f:66:a8:1e:f6:ac:72:22:23:ac:97: e4:07:37:7c:a3:fd:1b:ac:c0:17:20:bb:5c:63:52: 7a:07:23:ee:de:90:bb:42:b3:12:ed:1b:e6:a1:12: da:f3:e8:ae:9f:9f:0f:c4:72:d7:e5:14:5c:8c:ef: d6:9c:c9:e2:0b:94:86:29:c7:31:a4:8a:3b:7c:d7: 83:0a:2b:ba:51:8c:39:77:e6:4c:1d:13:99:a6:f9: 89:0c:8b:58:a7:ea:5a:56:97:2f:12:7f:af:5c:7e: d4:9f:7f:fd:7b:d3:8e:e6:e2:60:3c:1c:ef:a7:fc: b2:21:89:98:10:45:d4:72:07:c0:bd:e9:0b:81:45: 0f:22:0f:22:b1:38:1a:d3:f4:f7:45:33:9f:68:3a: eb:34:dc:af:31:7d:ba:81:42:88:b0:ad:6f:dd:ab: 31:71:fa:21:9e:4e:d4:4b:0c:7a:a2:1e:aa:4f:96: 20:af:0e:38:70:5b:e5:bf:6d:c1:bb:db:53:ea:e1: 9e:34:88:2a:12:7d:23:ac:3f:a4:04:8a:92:1f:ba: b6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:03:99:23:81:E0:3A:4F:2F:21:FD:14:87:E0:90:7F:D2:8D:A8:40 X509v3 Authority Key Identifier: keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d1:95:56:d4:f8:4c:7a:4f:96:03:f6:a8:67:cb:a0:8c:38: 7a:50:be:7a:12:91:d8:4e:04:0e:d8:dc:77:be:05:6d:35:b7: 5e:5b:e0:12:7b:bb:a0:ba:47:c5:f9:92:1d:70:e9:89:b3:1e: 88:50:cf:4e:79:ca:3c:83:0f:d1:d1:9e:49:d8:d7:88:ab:11: a8:74:91:2b:7e:f3:e1:57:bb:b7:63:04:e4:5e:96:48:c0:eb: fe:d7:e6:07:c7:57:8f:2e:a5:2d:c0:75:b7:0a:0b:d6:51:1e: 28:26:c2:87:0b:c3:da:75:b5:2f:89:12:89:f4:44:f8:4d:d1: 16:ea:37:a6:96:e7:7c:28:0c:09:42:e6:01:87:e2:48:e6:75: 49:f6:e0:68:a7:f6:46:c8:1b:f8:3a:2d:65:d9:2d:24:a9:90: f3:2b:f6:32:32:de:70:0a:3d:e9:ca:e8:ea:64:78:2a:0b:4b: a2:70:8e:4e:df:86:b6:74:12:e2:91:13:89:5b:e8:b4:47:30: 66:19:b5:68:22:37:40:31:75:e0:df:f9:ef:ca:bb:a6:dc:07: 73:c0:2f:9c:65:f8:41:0e:c3:15:ad:d4:f1:84:11:97:f1:b8: c3:ea:29:78:c1:0e:ea:66:a9:34:cb:5e:82:64:75:c2:52:50: 59:04:b3:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaADJm0vFxGNK6x4Sh34Op/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjI2ZjY3MWMyNjQzYTVjMDQ4NDYyNjRmZWUwMWY5NDNh YzJiZmMwHhcNMjYwODE1MDIwMDQ0WhcNMjYwODE2MDIwMDQ0WjAzMTEwLwYDVQQD EyhmYTAzOTkyMzgxZTAzYTRmMmYyMWZkMTQ4N2UwOTA3ZmQyOGRhODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGu5EJNq6wMCEd68D8s0HSQ1y9vb Y30l5iuxHO0uJnmBC9aXxvPkfipt3l5/hY0TP2aoHvasciIjrJfkBzd8o/0brMAX ILtcY1J6ByPu3pC7QrMS7RvmoRLa8+iun58PxHLX5RRcjO/WnMniC5SGKccxpIo7 fNeDCiu6UYw5d+ZMHROZpvmJDItYp+paVpcvEn+vXH7Un3/9e9OO5uJgPBzvp/yy IYmYEEXUcgfAvekLgUUPIg8isTga0/T3RTOfaDrrNNyvMX26gUKIsK1v3asxcfoh nk7USwx6oh6qT5Ygrw44cFvlv23Bu9tT6uGeNIgqEn0jrD+kBIqSH7q28wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoDmSOB4DpPLyH9FIfgkH/SjahAMB8GA1UdIwQY MBaAFFIib2ccJkOlwEhGJk/uAflDrCv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgt YTEyZGUzYTMzNTUzLzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgtYTEyZGUzYTMzNTUz LzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtGVVtT4 THpPlgP2qGfLoIw4elC+ehKR2E4EDtjcd74FbTW3XlvgEnu7oLpHxfmSHXDpibMe iFDPTnnKPIMP0dGeSdjXiKsRqHSRK37z4Ve7t2ME5F6WSMDr/tfmB8dXjy6lLcB1 twoL1lEeKCbChwvD2nW1L4kSifRE+E3RFuo3ppbnfCgMCULmAYfiSOZ1SfbgaKf2 Rsgb+DotZdktJKmQ8yv2MjLecAo96cro6mR4KgtLonCOTt+GtnQS4pETiVvotEcw Zhm1aCI3QDF14N/578q7ptwHc8AvnGX4QQ7DFa3U8YQRl/G4w+opeMEO6mapNMte gmR1wlJQWQSz4g== -----END CERTIFICATE-----Generated at Sat Aug 15 04:24:19 2026 by rpki-client