$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft File: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft (raw, json) Hash identifier: BtwJfoqhehXDK5gfp229ZwB9eRROK3zP7kPJ4QhBwXo= Subject key identifier: 42:FA:03:3A:25:38:03:F1:50:A5:4A:06:16:A0:56:C1:3F:55:6B:63 Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c Certificate serial: 019FA11646FAC9D97C9DAEB11794CFC303C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft Manifest number: 19E3 Signing time: Mon 27 Jul 2026 01:00:19 +0000 Manifest this update: Mon 27 Jul 2026 01:00:19 +0000 Manifest next update: Tue 28 Jul 2026 01:00:19 +0000 Files and hashes: 1: 1KzAL4WrD5dhhGZJOCxuUIPFwOk.roa (hash: aO9dX9fJ0rrae7yQKAQfFledrNyIupTZnT+cq07JYUA=) 2: 2fnNi2RG50nUnV2NcaaKxkNfurs.roa (hash: YjCnMRPFuN3k5TRvL6rGrwmbFWVhQVPPpGvWD61uUkg=) 3: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl (hash: cjP9tPGqe0XjJjocQKCVIuhHnqA9QR7nfbWEnyUktLU=) 4: 88YNLmciNd0j13-H2-rZxVQMdGQ.roa (hash: PZ0hEGC0oEs598gQ8xeAY2EzI4szP3Vs9gNvciW2BKM=) 5: AnqEtz5hZkYAy4yO8qlLikZWRJw.roa (hash: j2OhR3ENDnTZP9Lf8x78QsTXcfAZEG3FS513keiFcpI=) 6: HQdRd7-uxpWaApI_yUxbm_9_dzg.roa (hash: i48eXcWynnm44Ui4IjxVTSgQ+VI6di3z/zykGcaGJUk=) 7: OCuIuLoTyx6UI4cRdqXTZdZqrRE.roa (hash: NtYeBn7vObBSrZet17ESmCNvYRE2bEdCvdV04YI1os0=) 8: RBopAdVF60vgkqykUfTCW-bkIG8.roa (hash: QhamcW1yECyAqJIZtVxwyJIdNVMOgAFF2TzQ8FAjUVo=) 9: RahkU4tOoQngjkSl9mhdDwc4pFU.roa (hash: JWZJdzvFdiQ85WtuycaeUgc1cy9Tzhri/PcDTONVm3Q=) 10: Rsj6R_5dXiHi1eUSKzpDKZzkTiE.roa (hash: nMPA233TUV9gqlw8aP+/RPCmhirOQucfaoSyNAu6fXc=) 11: YUsCKqNl16pDs_8KVE5VLmDFj5M.roa (hash: enLSqBELUYJ70Ss/6MuXxuUTa0RNR44fL5GLxYESEBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 01:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:16:46:fa:c9:d9:7c:9d:ae:b1:17:94:cf:c3:03:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c Validity Not Before: Jul 27 01:00:19 2026 GMT Not After : Jul 28 01:00:19 2026 GMT Subject: CN=42fa033a253803f150a54a0616a056c13f556b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6a:08:44:01:90:9a:67:d7:43:78:c1:58:77: 2d:ee:c9:95:ad:40:dd:60:a8:85:3a:c7:2f:78:1a: 5e:a3:c6:79:4a:1c:95:94:ee:7c:c3:ef:fa:b8:5e: 21:4f:f0:24:8f:13:59:ff:3e:5a:eb:37:ba:44:d8: cd:52:bf:18:81:eb:78:c4:17:12:eb:98:01:ba:af: 6f:fd:ff:1a:c4:e2:f2:93:bc:41:5a:8c:5d:58:ee: 15:3c:cf:97:7b:10:60:fc:ad:3a:df:81:20:df:aa: 58:8b:dc:63:a4:70:f8:f6:80:ce:90:2f:bd:23:22: f9:31:da:ce:29:61:7a:d1:66:6c:63:b6:dc:a8:33: 80:17:4d:f1:f5:f3:b8:6c:d3:cf:fb:20:df:de:86: 85:e3:91:46:8c:70:d1:88:15:25:98:89:1f:4c:22: d1:34:df:69:3b:ed:bd:69:05:f5:25:c8:fa:ef:ba: 49:01:47:7a:6d:6e:68:22:c0:e9:2c:06:2c:75:32: a8:33:9b:ca:19:7e:b9:06:48:b2:90:fb:74:fa:c9: 4d:fd:78:b5:14:16:bc:87:17:a2:83:96:ba:4e:83: de:2b:bb:d3:4c:1a:e2:6d:62:79:65:17:ec:95:aa: 91:8e:a2:fb:48:79:bb:f6:89:e7:ba:f6:ae:26:6a: 4d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FA:03:3A:25:38:03:F1:50:A5:4A:06:16:A0:56:C1:3F:55:6B:63 X509v3 Authority Key Identifier: keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:23:fa:24:33:b7:3a:23:9c:5c:11:f0:f4:44:d8:44:30:af: bf:53:20:58:15:ba:41:81:c3:0c:f5:09:c8:b2:c3:d0:37:e1: 70:f8:ff:88:f5:c8:12:f2:30:29:af:d0:35:c6:d3:11:28:6b: 09:f6:05:af:d6:55:66:e9:6e:ae:19:6c:53:a2:d0:eb:8a:56: aa:be:c8:82:71:a4:75:7f:6b:84:52:eb:c5:fd:65:63:e8:ca: e7:b9:a7:cc:9f:83:b3:56:ad:98:41:c0:34:86:48:47:3a:5b: 2a:a6:52:f0:f3:a2:ca:78:c9:f3:9f:59:8b:43:68:c3:ed:9b: 12:ce:e9:1f:1a:71:68:fb:a8:ef:18:f0:8d:1a:fe:88:0b:ab: 4e:c1:28:4a:1f:03:43:23:e4:c3:fe:7e:87:10:7b:e5:3e:0b: 97:cc:77:4c:40:72:88:66:24:63:83:7d:45:66:a9:a0:fd:3e: c8:dd:6d:6a:71:01:aa:a6:48:ac:d1:a6:f7:ef:0b:8b:d8:d5: d2:fa:f7:93:d4:f6:c9:b5:2d:f3:8d:9f:ef:d1:16:2e:ac:46: 00:dc:2b:89:0c:be:ca:ca:67:e0:7c:b1:b3:77:31:54:e7:4a: 34:af:67:47:23:11:58:d8:ba:ba:c7:b4:03:ac:c7:05:b7:3c: 14:f0:c4:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+hFkb6ydl8na6xF5TPwwPFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0 MTUwOGMwHhcNMjYwNzI3MDEwMDE5WhcNMjYwNzI4MDEwMDE5WjAzMTEwLwYDVQQD Eyg0MmZhMDMzYTI1MzgwM2YxNTBhNTRhMDYxNmEwNTZjMTNmNTU2YjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WoIRAGQmmfXQ3jBWHct7smVrUDd YKiFOscveBpeo8Z5ShyVlO58w+/6uF4hT/AkjxNZ/z5a6ze6RNjNUr8Yget4xBcS 65gBuq9v/f8axOLyk7xBWoxdWO4VPM+XexBg/K0634Eg36pYi9xjpHD49oDOkC+9 IyL5MdrOKWF60WZsY7bcqDOAF03x9fO4bNPP+yDf3oaF45FGjHDRiBUlmIkfTCLR NN9pO+29aQX1Jcj677pJAUd6bW5oIsDpLAYsdTKoM5vKGX65BkiykPt0+slN/Xi1 FBa8hxeig5a6ToPeK7vTTBribWJ5ZRfslaqRjqL7SHm79onnuvauJmpNywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEL6AzolOAPxUKVKBhagVsE/VWtjMB8GA1UdIwQY MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt MjlmMWJlYjJmMjgyLzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCP6JDO3 OiOcXBHw9ETYRDCvv1MgWBW6QYHDDPUJyLLD0DfhcPj/iPXIEvIwKa/QNcbTEShr CfYFr9ZVZulurhlsU6LQ64pWqr7IgnGkdX9rhFLrxf1lY+jK57mnzJ+Ds1atmEHA NIZIRzpbKqZS8POiynjJ859Zi0Now+2bEs7pHxpxaPuo7xjwjRr+iAurTsEoSh8D QyPkw/5+hxB75T4Ll8x3TEByiGYkY4N9RWapoP0+yN1tanEBqqZIrNGm9+8Li9jV 0vr3k9T2ybUt842f79EWLqxGANwriQy+yspn4Hyxs3cxVOdKNK9nRyMRWNi6use0 A6zHBbc8FPDE/w== -----END CERTIFICATE-----Generated at Mon Jul 27 10:26:32 2026 by rpki-client