$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft File: SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json) Hash identifier: watLe2bk4OAEo46SdlBDz0Et0xgwsT/pjfSnsUT6mQQ= Subject key identifier: 99:18:49:69:EC:7A:9A:0E:FA:F4:9D:A8:13:B1:37:4B:05:4B:7F:5D Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019F9F5FBC651BEDB9AEFC7CC98F7D6DC4AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft Manifest number: 0F33 Signing time: Sun 26 Jul 2026 17:01:19 +0000 Manifest this update: Sun 26 Jul 2026 17:01:19 +0000 Manifest next update: Mon 27 Jul 2026 17:01:19 +0000 Files and hashes: 1: 8DylJ6bMwHx9Bdrvn2E9Zu5-6Yc.roa (hash: vmfPrDMZxv7M04Wo8WXPZw8AXlVkf20vtyHb5e8KwgU=) 2: 9Cp-MTJ4qLd92W1VLnGQl0LXr-c.roa (hash: 5gwGzTjze+ZsjYP/6JdA+Sy/zd3Nz2uvd4XnkQoXRfg=) 3: CiMQMlsaob6RUwchgCgnZuTjr8s.roa (hash: Ar1fgrhz+dRsI5kSs4y0oWEzM2iAvsmrTdXD/xtv77Y=) 4: E4JbKjh9d4V-tkS22c4Y2xMCkFg.roa (hash: 7djPzKioQUY77MCLFItH4oWSHNi6vM51IHyM3Wgv2dk=) 5: My1lWafqU6ikUvtq4M-ub2MxD1I.roa (hash: UvpW6m+Ws53gXcKKs+IbQFznyrhTBzwk2z9Qv12jd1c=) 6: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: B1GcHToGHe7b/465Q9m4ZY/KB1y7OFJkAtxztRPrl/A=) 7: UVRNeFdK0MFmPktuaxuakdFBiyw.roa (hash: Qe3jYuCQSRz8rrbqzPjF4ta2+ILAQBCmo8wsXzpnbtM=) 8: YfIHk0vhXMsawbQpQSUx4NkqARo.roa (hash: jyjsv+8CT/zFqpfSyQvWtrC5fl6L+Qm0Q0VVf1vxxCM=) 9: _GXs5D3IvlrXACIDGV1jenI0WNE.roa (hash: YXv+qavyugnUTBH4aVvxk6AhP8epVFfWY0KRl4DJGts=) 10: f9XaNrWrnsnye9Nnn2-Ly1K5UOI.roa (hash: W/HCDixp3chA9F+ml8Y61wZheEIzzJOIG7tl8p8DNMs=) 11: iRf_gs5n9xup496QtRtuInpoD-U.roa (hash: BDQw7Ot2/EiioII6Hz7qQJc1eJwtGMRxOvQFtmCg1xA=) 12: jteFQiK73wa6i4lrpiIPNofIe0U.roa (hash: G8t6kOJLv2x/ceaMNLBszGM9PcNzECaWuzPtlc+XAqM=) 13: lHqP6_LNIJjH2DY1nkYIw_wx6vg.roa (hash: HTFvctpryJcVZOxTlZV4EEM5WCYV9Pw93rtuaN3DxLg=) 14: mjB_YwpdfbzEMOoCN657fTyMgX4.roa (hash: zKy3p/lM5a5D8i2Rw65iFKwlrzxpy3cP+UdwJk2L738=) 15: tL4b25zMj6wRdpwgTTYHdF9t4Uk.roa (hash: UpH6SRZNnW0R8ahn4MRnqsFRfwo0pvGLoWtik7wjde0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 17:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9f:5f:bc:65:1b:ed:b9:ae:fc:7c:c9:8f:7d:6d:c4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Jul 26 17:01:19 2026 GMT Not After : Jul 27 17:01:19 2026 GMT Subject: CN=99184969ec7a9a0efaf49da813b1374b054b7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:d5:2d:c7:07:97:c5:ab:60:75:58:db:7c: 14:14:c0:05:10:57:20:e5:ed:e9:17:be:51:a1:53: e8:03:7d:40:0a:02:b0:c7:24:12:26:63:54:f0:c7: ab:61:b7:39:98:77:b9:d2:56:ff:92:26:22:58:00: 82:23:4b:2b:ba:ad:c3:ed:c7:5c:3b:b0:50:0a:f0: 50:9c:e9:7f:85:7c:fc:e1:92:42:b7:ff:e4:d1:73: f9:90:ca:bb:e2:a6:e8:9f:2f:c5:ef:e3:07:9f:e4: 5d:bc:3f:1d:b7:ae:19:fc:da:b0:91:c2:60:2b:72: 2d:cb:02:21:65:3e:39:bd:ea:1f:f0:87:be:90:23: 7c:62:8b:98:54:38:f9:6b:56:56:13:5d:90:6d:cc: 80:7b:54:0a:f5:bc:71:bd:7c:6b:ce:10:c1:26:d4: 20:86:87:b6:30:42:07:96:0d:85:28:01:ef:a2:73: f8:3a:16:07:f3:f4:8c:83:1c:8f:fa:09:16:82:2d: c9:7b:76:fe:15:20:42:43:d0:eb:50:92:93:7c:f0: 57:53:27:db:16:ca:fc:e3:31:05:45:13:a1:db:c4: 73:2d:a5:c2:a1:08:26:94:a8:74:52:a0:dc:2c:ee: 49:05:ef:50:b6:4b:5b:40:e3:34:33:99:0d:6d:7f: f0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:18:49:69:EC:7A:9A:0E:FA:F4:9D:A8:13:B1:37:4B:05:4B:7F:5D X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:cd:6b:44:a8:4e:6c:9b:38:b3:9f:49:87:58:dd:b4:ec:88: df:aa:0d:b3:f2:08:92:51:4a:42:d7:f9:4a:e1:fd:25:e6:07: 27:0b:b6:95:1f:42:ca:24:77:2e:6b:92:e5:3b:2f:3b:19:be: e5:2f:49:f0:00:00:50:a8:4d:bf:04:83:57:2b:41:31:7f:f3: 0e:0c:2a:a0:9f:22:50:68:fe:00:95:ac:05:c8:64:07:ee:dc: 4e:70:74:f1:f6:81:62:95:59:a7:64:34:7d:8e:1a:2c:58:c0: bd:95:01:78:ed:70:6e:89:e9:d6:4a:e2:7e:c7:8b:4e:dd:9a: 94:16:ee:b1:3a:a4:d6:cf:3b:3f:5b:2e:66:39:ea:79:61:7f: 70:ce:4c:18:ef:da:23:e6:b6:f9:5f:ce:58:1b:0c:5d:0e:ae: 5b:9a:7e:d0:06:4e:eb:5f:13:11:d2:6e:ee:dd:0e:d4:f6:32: 2b:ae:08:e6:cb:d1:4a:99:0a:45:09:25:94:38:97:7a:12:f6: 71:ce:ec:ee:d9:d4:2b:33:4b:9a:43:e0:0b:dd:43:e1:27:eb: ef:fb:1c:ee:a8:58:cd:6b:c5:fc:87:9c:f5:9a:ad:1a:10:2b: 6a:71:45:a0:af:eb:f8:65:c1:82:f6:08:6f:a7:ec:2f:99:64: d9:16:15:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+fX7xlG+25rvx8yY99bcSsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwNzI2MTcwMTE5WhcNMjYwNzI3MTcwMTE5WjAzMTEwLwYDVQQD Eyg5OTE4NDk2OWVjN2E5YTBlZmFmNDlkYTgxM2IxMzc0YjA1NGI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta7VLccHl8WrYHVY23wUFMAFEFcg 5e3pF75RoVPoA31ACgKwxyQSJmNU8MerYbc5mHe50lb/kiYiWACCI0sruq3D7cdc O7BQCvBQnOl/hXz84ZJCt//k0XP5kMq74qbony/F7+MHn+RdvD8dt64Z/NqwkcJg K3ItywIhZT45veof8Ie+kCN8YouYVDj5a1ZWE12QbcyAe1QK9bxxvXxrzhDBJtQg hoe2MEIHlg2FKAHvonP4OhYH8/SMgxyP+gkWgi3Je3b+FSBCQ9DrUJKTfPBXUyfb Fsr84zEFRROh28RzLaXCoQgmlKh0UqDcLO5JBe9QtktbQOM0M5kNbX/wUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkYSWnsepoO+vSdqBOxN0sFS39dMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE81rRKhO bJs4s59Jh1jdtOyI36oNs/IIklFKQtf5SuH9JeYHJwu2lR9CyiR3LmuS5TsvOxm+ 5S9J8AAAUKhNvwSDVytBMX/zDgwqoJ8iUGj+AJWsBchkB+7cTnB08faBYpVZp2Q0 fY4aLFjAvZUBeO1wbonp1krifseLTt2alBbusTqk1s87P1suZjnqeWF/cM5MGO/a I+a2+V/OWBsMXQ6uW5p+0AZO618TEdJu7t0O1PYyK64I5svRSpkKRQkllDiXehL2 cc7s7tnUKzNLmkPgC91D4Sfr7/sc7qhYzWvF/Iec9ZqtGhAranFFoK/r+GXBgvYI b6fsL5lk2RYVhw== -----END CERTIFICATE-----Generated at Mon Jul 27 01:52:21 2026 by rpki-client