$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft File: KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json) Hash identifier: gtpwdwXDYjXIiTCxIQVEOtijNEfKmcdvi25/Lm98dJc= Subject key identifier: BD:74:35:5C:0E:0B:E9:EA:3C:DC:50:64:56:F4:52:AB:39:5E:78:01 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019F82D580A814F0737E4883D2D269F41A82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft Manifest number: 097A Signing time: Tue 21 Jul 2026 04:00:57 +0000 Manifest this update: Tue 21 Jul 2026 04:00:57 +0000 Manifest next update: Wed 22 Jul 2026 04:00:57 +0000 Files and hashes: 1: 07sEtYgDD4P8DDdRCKN5iG4AMmY.roa (hash: 1D7e4u6dPSbKGI3tO20WfhKAQ8qfjqNxZrP0FvNTv4I=) 2: 1qXgqeRwym7VByCjt4dnmoVzCYA.roa (hash: 2+inDA791AGBpU1a4CaMfg8jPit5Dw+MtJ4r3DaAdkE=) 3: 34HMPXP3gEFiutCTD0yGcBkIiXc.roa (hash: bxhgk0bC5DY2ITvwM+gQQ6zIFbXvjkWnDfe1DuZaAkQ=) 4: BkKBEoBuPl12ptQekVldu_PtnTA.roa (hash: DoBPvLm1XOv7qBE48sBP+sgHTxMy7m9SUCSPAi7sn8c=) 5: J3qhVDm59tgGij8FSKNvb_obrQQ.roa (hash: Xmn0IdQ3k4dgxv6WEWS+sFmXZWMyOMaCwrNw7xwruBM=) 6: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: GAsfH8h+krVvx40nF7hYJLuZHaK+J55g7re/FERiBZ0=) 7: S1iRGBPkiYZCIAGWMCC64pE7FgA.roa (hash: dA6xUCDIzGteQYAPQ7wtWp2IPpfZldR/9rLVg9c0QzI=) 8: _bFFpYb8xNQtTH_3yPe_MDsPOZk.roa (hash: kDuaFVmunVmsMM4Jp1RzmY+vtuYMYvEW+p089DaIgrM=) 9: bzSWstjFIYA6blRoFbFSF1OGU6I.roa (hash: 7+JXpzWh9jeKZFp1Mfmg0BBiAYIO4Ce8OyrMvTMG8jY=) 10: e5H8rjjlVKlxfiAJ6IlS4G9OI08.roa (hash: NsnVR6BfsnGaMNfRKxx2wayfw4t4s2vRuzJq672PfAo=) 11: gATtXJLtqL0pyDE7aBGAHapu64E.roa (hash: ybBtdONa/UXYBRo/ca8SLa1FBdD6Jo+wJU9zhUxtzIQ=) 12: io5yyLDlHPGCEzGEMhnAmmdPx5s.roa (hash: jf2AJXsyEXE21uFIryQ83Vk8vd7pT2QW+lohF7eLHiQ=) 13: lYGef5eh_dPL_5pXc_sMbwZ1MIk.roa (hash: RMc34q6yeYcexeqlJrTdbO+FMCTrI7XF87B3QzcXP3g=) 14: pBdOHT5tecjZpCjNpcydOSIR1PM.roa (hash: FLs6R8klsIETpJmcq3AWUpjGlsfTVyV7nd1ia0rcgok=) 15: sipyhYZTDUoVqJQxzsKOL-8LAkw.roa (hash: VV0MN0WQekFnJFeON5niYNrkxCw6xaFz74ZyByZEACQ=) 16: snSTXxhwfXF_fIYPcvtX5TUfp4s.roa (hash: SgcxZ1WIAaLU78YEFmwNxYxKFCEo2F5UZtkVPdymnyk=) 17: t1miWIZwqhFnHm1V8OaiWDQkZvQ.roa (hash: 6fT15sb19FmXqLe9+b0pS8/2omYg2Drcv+bmA7jcy/I=) 18: uEWwBuW9u4pZ2LI5guO_7bWBD88.roa (hash: wpxWCV/FC/jksdFOugHKtsE0yfmtAepcNeFuewpbO6Y=) 19: vTkuXP1Lj0hgsJ2kb0Mr4vhSHB4.roa (hash: 936PpJYOLKkKzEDTt3gNFk26BfcHqznMHt6CO1ILfRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:82:d5:80:a8:14:f0:73:7e:48:83:d2:d2:69:f4:1a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Jul 21 04:00:57 2026 GMT Not After : Jul 22 04:00:57 2026 GMT Subject: CN=bd74355c0e0be9ea3cdc506456f452ab395e7801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:ff:d8:41:7d:48:43:b1:cd:56:17:4f:a5: 1a:40:3d:47:0f:6c:08:29:f8:31:a4:8d:97:1b:f2: 2f:be:8d:6e:72:eb:2e:25:75:8c:8d:9b:49:ae:93: dc:d6:06:3d:e9:39:ee:0a:07:32:55:83:eb:87:d0: 5b:94:e1:5d:12:6c:c3:34:9f:78:61:16:11:79:07: 70:c0:4e:63:d0:9e:f7:e7:54:f9:2c:2b:e1:45:ab: b9:8e:50:0e:3f:22:62:d3:4c:dc:95:7d:ea:b7:ce: 71:3b:94:b5:54:67:85:76:40:55:07:21:33:90:88: d8:b3:9a:c1:d1:cb:37:d5:b6:1f:89:45:07:92:de: 09:28:83:47:14:9b:5f:c5:79:15:37:33:4d:bc:56: cc:a3:31:51:47:88:c5:76:ef:50:d8:bd:b5:91:2e: 1f:e7:47:09:9c:cc:9e:df:7e:3f:5b:77:ee:b4:61: 79:f6:ea:a1:10:4a:ba:21:c9:87:89:ba:b7:f9:81: db:e6:06:36:19:78:e1:4c:e4:c8:94:84:2f:7d:0c: d1:72:33:4e:5a:09:27:99:b2:6e:91:92:b5:45:e8: 93:e8:e2:f8:b1:fc:3c:7b:63:65:e7:16:90:d4:ca: e4:3c:d9:ef:4e:cd:82:b7:1c:b9:c9:32:a3:77:7d: 77:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:74:35:5C:0E:0B:E9:EA:3C:DC:50:64:56:F4:52:AB:39:5E:78:01 X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f2:73:88:b8:89:76:47:22:10:a5:31:d1:4a:c6:2b:d5:83: 88:9e:c3:9e:b0:0b:57:86:29:e2:95:b6:16:7b:b5:0c:1b:51: ca:a8:f7:a8:4d:a3:fa:a9:e1:15:2a:45:0a:63:c8:b7:55:71: d4:cc:d5:be:08:49:55:25:3c:7c:61:76:05:c6:27:9a:6a:9f: 6c:a9:8f:5c:16:52:0a:01:4d:72:90:29:78:bd:0c:df:23:97: 72:1f:69:f7:66:17:a1:bb:83:a1:8c:53:b9:13:1d:cb:69:1f: be:16:1c:0e:51:db:c9:99:00:3d:3f:8a:4d:f3:03:2f:8f:72: 30:3c:65:05:66:2f:d8:4f:a4:90:c2:64:4c:2a:e7:c9:c2:95: 93:dc:70:3b:80:3e:19:41:dc:bb:4c:d1:09:da:0f:28:81:5b: d1:df:0c:c6:26:24:eb:68:e5:df:37:87:e4:ce:53:e7:18:09: 45:79:e8:8d:1a:d7:60:59:73:83:f7:5c:29:14:de:b9:5b:98: b6:f4:4c:d2:8a:72:a5:05:12:e9:fe:68:a8:8c:48:65:05:05: 54:b1:2e:c3:56:a4:55:c6:1e:15:94:22:32:67:3b:ac:cb:4b: d5:7a:8b:bb:4e:cd:e9:86:fd:7d:59:6c:c4:9a:d5:4a:e6:b0: e2:20:af:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+C1YCoFPBzfkiD0tJp9BqCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjYwNzIxMDQwMDU3WhcNMjYwNzIyMDQwMDU3WjAzMTEwLwYDVQQD EyhiZDc0MzU1YzBlMGJlOWVhM2NkYzUwNjQ1NmY0NTJhYjM5NWU3ODAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Tj/2EF9SEOxzVYXT6UaQD1HD2wI KfgxpI2XG/Ivvo1ucusuJXWMjZtJrpPc1gY96TnuCgcyVYPrh9BblOFdEmzDNJ94 YRYReQdwwE5j0J7351T5LCvhRau5jlAOPyJi00zclX3qt85xO5S1VGeFdkBVByEz kIjYs5rB0cs31bYfiUUHkt4JKINHFJtfxXkVNzNNvFbMozFRR4jFdu9Q2L21kS4f 50cJnMye334/W3futGF59uqhEEq6IcmHibq3+YHb5gY2GXjhTOTIlIQvfQzRcjNO WgknmbJukZK1ReiT6OL4sfw8e2Nl5xaQ1MrkPNnvTs2Ctxy5yTKjd313YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL10NVwOC+nqPNxQZFb0Uqs5XngBMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePJziLiJ dkciEKUx0UrGK9WDiJ7DnrALV4Yp4pW2Fnu1DBtRyqj3qE2j+qnhFSpFCmPIt1Vx 1MzVvghJVSU8fGF2BcYnmmqfbKmPXBZSCgFNcpApeL0M3yOXch9p92YXobuDoYxT uRMdy2kfvhYcDlHbyZkAPT+KTfMDL49yMDxlBWYv2E+kkMJkTCrnycKVk9xwO4A+ GUHcu0zRCdoPKIFb0d8MxiYk62jl3zeH5M5T5xgJRXnojRrXYFlzg/dcKRTeuVuY tvRM0opypQUS6f5oqIxIZQUFVLEuw1akVcYeFZQiMmc7rMtL1XqLu07N6Yb9fVls xJrVSuaw4iCvLw== -----END CERTIFICATE-----Generated at Tue Jul 21 09:58:36 2026 by rpki-client