$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft File: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json) Hash identifier: WBS+SMFiDlTzwg09W23yMS9zTIuODy0dB7jPAIBcEtU= Subject key identifier: 23:32:33:D1:6E:61:B4:FE:9F:44:1B:A0:F7:6D:01:9F:10:61:3F:64 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019F8342BC67D920030657CE0AFBAA24E609 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft Manifest number: 1604 Signing time: Tue 21 Jul 2026 06:00:16 +0000 Manifest this update: Tue 21 Jul 2026 06:00:16 +0000 Manifest next update: Wed 22 Jul 2026 06:00:16 +0000 Files and hashes: 1: 1-5AzWCI6blcjn296O-eolo8GU00.roa (hash: acUzNCfBDIOWeD49PjsAWzkWsWz9auHnnkX7Us4vDpc=) 2: 1-CTT0_CxhciLaRkCJ4DgzsS2sQI.roa (hash: Mn9NJhG5uVMvcY80UVOWe2L3SwusTTL/IyfqCD6b0DM=) 3: 1xo9uRwazGPExjT15gHLTmOfVnY.roa (hash: alhQ3MkblKkYV6C77axeZ7FdHmqDD77jedDHF6Ew1Xo=) 4: 3m3HoU697g1riqEN3srKHe_439M.roa (hash: W+y/B+WZ8ZoxlzmraHW+h6RJwPaH/ClX4IbAIXK6nc4=) 5: 4gNMkZwMrrIrONhxPcj5kIxuYVo.roa (hash: U9OfOqXUmG1mXao3Mm0oiv6aXUXy9X2OeaKROUSRnTs=) 6: 5QbMfhydJVLPSeBf5Ukh6S98i0Y.roa (hash: GBBR+bDf+z5V4go+PrCEmxAQhZa3riT6wkZjr67xnTI=) 7: AJR3ZjQEw3xNx2603rNxTvz_xuo.roa (hash: ZoHn9/Htdy70PIhm8Yqh59EOA15hHtjIaEGcVEgZgoM=) 8: Ah-yE4HGZ3OirKVOmDu8zAhqZTE.roa (hash: E8yorOIrWxqnVYfsNb5/mw8YbBQarLCAuKuOVYATYpg=) 9: AoBRPXbG5pKu5AAvqVysvx9mLiU.roa (hash: O98GwMh4t71nHe2YCs9Jlw2h9chx4Ly2jC1HdVtt8xs=) 10: AtK_HmjBgTQxL2dvI2bWhaSZhlY.roa (hash: pfhtQVDPYLieoSGMbHBUbh6+wfbqsfaBIqLKNtiv5Zw=) 11: Df8y3BfeVMt5ZLw2xy4aecCtU8A.roa (hash: TwViBdIVRcMSXIqZvXA/oRrkj814XWcrMgErtJhOZ3s=) 12: F0ko9p_dX45_UL03Ktzd4OR6o48.roa (hash: ZDeUYGOkL0wPqfJ87AM7peZBWAW9itv89MZgmrjEPPM=) 13: F7x0aSi2_MLwNaDyYuKaGyc_STQ.roa (hash: LB1+XIiMdPu7FCQlcDxyQXa0f+KM8LZC2AuKanD4uQY=) 14: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: 4jPzzeOlCpoW3ARvafsrRwofWRfrtBWqB5KWb4F5XlM=) 15: GeIOKXkutG8FXC6S0uhqDuR2Oyc.roa (hash: L2U7GDQy2AVnBc0bV7pGyVkcsqpiDhD1aFrAWYtZCHA=) 16: GxIHXjt6YycYTUa0XRCVghpAj-k.roa (hash: HhhKZCdKN9/SlwUoWfOdsnSeB0lEPNK2Xjfhma7psx4=) 17: HLNsB1T0fEp8sE8QkmRnuIqq2P0.roa (hash: ntuGjaonHQJAiUd1pWH+WmzWne76FiBOK2IOI8INZRA=) 18: Kb5r6kSdEVYykPlUZTI9ro2Sqi4.roa (hash: 0w7m09MypS3A5iD/C8kuw27OA5mZ8qKaPs6ATFK8K1g=) 19: LqvZMyaViQE8cvR-F47kJnjdaLQ.roa (hash: Gq/ZoEi72BnNGVU9SCunho4/vjXss/Uq7uXk6j5dM08=) 20: MYkvB2GG4KyUbb9t8wtKuudjcUc.roa (hash: StyOsvY6f49b11bzmUAfdI8EpecZB7kX511O4LoHQ4g=) 21: MZ97w73npIcNECx3xDjjos0_7m0.roa (hash: YZTyLgEvSwRovxtafIUavw8i2rxVY2K9vaeTguqjS08=) 22: TlswaEkjGyIFhX9xWdZ6EbegUsU.roa (hash: pzxA5lbFhF5KkSZqcy0U7Lfc21E5mQXr6TmkOaIuhGg=) 23: WFoSqC14BpVH5Cb6k1CJ43Kw9To.roa (hash: JnRiMfd9nwg8jtq238kZzEHpNqXF/fwnpcdjfaQN5R0=) 24: _1agZbDchCwDGrkWbgBDrxVhKeg.roa (hash: Y7QBeAqE66w4+zXwDaoCJTaeXdMPw2WR9F/QcsrFnTE=) 25: gcp8JVoaSaFBYMR0Spw7tSBPycE.roa (hash: EXlX7JSGlYTO8jv6fQCuHBvUsxakUkqSBgk4IVvHb5I=) 26: gf12Uu8Akz7O6ocdD8ZlwFJTd4Q.roa (hash: PyCccM/pMp7WT5yknxMOUGo05NWlo29hqiredCgcI0I=) 27: hzFa5HcRt_SuJXTYDbBlnXBrlms.roa (hash: HYZRCL8yIsfCy/2+UYnMYcElAtbPqegy+2PrFnMr9pY=) 28: iiFfwSof-Ppnt5Jn1VyYe6ltGao.roa (hash: jReOXsdFrikOH9PjdRpSIjaDDshA4y4Yh1LFRBqkSi4=) 29: l60G9RtGQQ6DxTnY-7uGdBT18E0.roa (hash: 7f3s+Mq0G+/ok4ZNqNp75Xktxw69L98MKsHRcjmDKdA=) 30: m9zjHR2IwuP6M_EqtRtBLVSg0D4.roa (hash: yMwu/UQ3rPUyOJCc3eCtP2GKyWlV3Y6SloIA/fcgLfc=) 31: mYQPII2ilkK1oy0MlW-v6JAxGxk.roa (hash: tyuBwPs2VAbnEW0fWN1peF41+ky+lDL1B9PXSQMox8A=) 32: n56eK2wrfpQJh1WUgYk7UXNHpf8.roa (hash: QM9hkPMKejFTGopGuAo0TpNNNmH+bNsiSe7g4tXyQLg=) 33: nQiqXkgEvGy0Ub5bywiIxfiK-B8.roa (hash: Xvjwpfsbr0oWLkmoWen3GJer1ZgTzw4kmXxrwYKGkNo=) 34: oRGU4dD-wRnhsAeXFhYBTl3ahaY.roa (hash: KwxVldnlFQ7swrf5zJ4tkIkoluJnRIq49ZF/vvuzGEk=) 35: pexkcyVPSICPLZN0RiIg0ALWvjk.roa (hash: 0Kygrrr/4SdNr2ZBGUFGg1GzDhK7GU5H16nbpbesFjA=) 36: vnB0ZCvUzeI9LmFJIT8XX_aRpEY.roa (hash: PwD9rUXHKPRtFfN7AB48A4lXtdzXP/3YnqLj0nuj6qM=) 37: xa9xrZNhkrb1go6zH6OKw-38u0I.roa (hash: 3ps/xuw6rQo0GiTBuWC3tdYfVBGy86dcxldZD3sHZwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:83:42:bc:67:d9:20:03:06:57:ce:0a:fb:aa:24:e6:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jul 21 06:00:16 2026 GMT Not After : Jul 22 06:00:16 2026 GMT Subject: CN=233233d16e61b4fe9f441ba0f76d019f10613f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0f:a6:bf:c3:7d:d3:59:d2:ca:83:48:9f:83: ec:b8:4e:8f:14:3b:ce:6b:c2:84:29:05:91:8e:49: 7a:20:84:12:5e:ad:a7:1b:49:d2:35:e8:e9:59:e0: 71:87:09:ff:38:a3:fc:2c:00:80:f9:0c:fe:b1:90: 55:f3:e8:1c:fe:b7:d6:64:0b:42:9c:75:3c:1a:bf: 14:3c:78:dc:18:22:2e:24:b3:1f:88:57:02:1f:35: 88:f5:a0:3e:a6:2b:03:da:4b:c9:03:f8:b8:f1:c6: 5c:e5:a9:41:87:37:f1:18:62:9b:9d:18:0a:05:fe: 58:27:58:73:c3:d7:51:52:3f:34:0d:b6:95:80:31: bf:b9:39:a6:4b:f1:9e:14:e4:5d:33:72:89:5a:4f: 27:7f:c9:79:7c:3c:82:ab:51:16:a1:8a:0e:1f:47: a3:f1:7a:c2:4f:61:6b:43:11:b5:05:cf:b1:41:82: 11:c2:24:fc:2a:97:ea:17:79:6c:b9:75:bd:b3:4a: 48:f3:aa:5d:8b:a3:45:37:96:40:38:7d:7b:b8:51: 5a:db:5c:32:0a:d4:d4:a9:02:2c:e5:5f:ec:4e:98: 24:3b:b5:2f:f0:b8:21:96:cb:b2:5a:e3:33:01:e8: c0:1a:a0:38:83:8d:0f:92:ee:3f:0c:87:2d:c6:88: 55:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:32:33:D1:6E:61:B4:FE:9F:44:1B:A0:F7:6D:01:9F:10:61:3F:64 X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b0:33:54:23:0d:97:a5:dd:b3:c9:9c:30:33:d7:82:e4:6d: d3:56:9a:66:ab:af:5f:74:81:0a:dd:61:5d:93:d4:9a:90:0e: d3:c7:af:bb:1b:12:75:c3:0c:87:f1:ba:ed:ca:cc:47:f6:0c: aa:e8:f2:30:74:be:94:5c:12:97:34:9f:36:16:12:14:0f:e6: e6:6a:48:95:b6:8f:9c:bf:53:01:4e:45:51:2a:9b:dd:c4:b7: 92:68:18:ce:5a:d6:04:2b:e4:3c:e4:2e:2f:5e:61:fe:b7:9b: e4:08:90:f5:66:7f:f0:bd:6b:f8:80:cb:f9:c8:68:5f:12:49: 2b:d8:25:c8:cb:dc:70:78:77:81:75:64:65:a8:d4:33:33:34: 51:07:53:7a:a9:a4:ef:78:06:ec:e5:a1:ac:e5:c0:30:29:2b: a7:1d:b6:31:e6:b8:9f:9a:99:32:ff:8b:f8:e5:77:19:03:9f: b7:f7:50:43:51:6f:60:70:1b:92:ec:98:cd:1c:4e:88:2a:c6: 39:f3:44:b7:36:1e:4d:09:f3:2b:c9:7b:35:a3:4e:ce:8e:d9: d4:e9:d8:75:c5:d5:a6:4b:b2:57:0a:97:bd:e2:dd:d5:b3:f4: cb:a3:02:a8:86:b1:72:f8:bc:4a:70:62:72:51:34:a2:f2:1c: 60:37:8c:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+DQrxn2SADBlfOCvuqJOYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwNzIxMDYwMDE2WhcNMjYwNzIyMDYwMDE2WjAzMTEwLwYDVQQD EygyMzMyMzNkMTZlNjFiNGZlOWY0NDFiYTBmNzZkMDE5ZjEwNjEzZjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA+mv8N901nSyoNIn4PsuE6PFDvO a8KEKQWRjkl6IIQSXq2nG0nSNejpWeBxhwn/OKP8LACA+Qz+sZBV8+gc/rfWZAtC nHU8Gr8UPHjcGCIuJLMfiFcCHzWI9aA+pisD2kvJA/i48cZc5alBhzfxGGKbnRgK Bf5YJ1hzw9dRUj80DbaVgDG/uTmmS/GeFORdM3KJWk8nf8l5fDyCq1EWoYoOH0ej 8XrCT2FrQxG1Bc+xQYIRwiT8KpfqF3lsuXW9s0pI86pdi6NFN5ZAOH17uFFa21wy CtTUqQIs5V/sTpgkO7Uv8LghlsuyWuMzAejAGqA4g40Pku4/DIctxohVPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMyM9FuYbT+n0QboPdtAZ8QYT9kMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7AzVCMN l6Xds8mcMDPXguRt01aaZquvX3SBCt1hXZPUmpAO08evuxsSdcMMh/G67crMR/YM qujyMHS+lFwSlzSfNhYSFA/m5mpIlbaPnL9TAU5FUSqb3cS3kmgYzlrWBCvkPOQu L15h/reb5AiQ9WZ/8L1r+IDL+choXxJJK9glyMvccHh3gXVkZajUMzM0UQdTeqmk 73gG7OWhrOXAMCkrpx22Mea4n5qZMv+L+OV3GQOft/dQQ1FvYHAbkuyYzRxOiCrG OfNEtzYeTQnzK8l7NaNOzo7Z1OnYdcXVpkuyVwqXveLd1bP0y6MCqIaxcvi8SnBi clE0ovIcYDeMQQ== -----END CERTIFICATE-----Generated at Tue Jul 21 15:23:40 2026 by rpki-client