$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft File: afomI7Ii0I2TVpdQRLlAe1_qSLo.mft (raw, json) Hash identifier: 6ojgm2Xs0SzILDo5Vbi6xjbUlKUsWQxP574Eqex7BjM= Subject key identifier: CA:13:8B:E2:06:50:CF:7A:58:7B:50:C8:9E:C9:A6:55:44:12:59:F8 Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba Certificate serial: 019F829E791919CF99F7CBD219083A064DD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft Manifest number: 3B Signing time: Tue 21 Jul 2026 03:00:51 +0000 Manifest this update: Tue 21 Jul 2026 03:00:51 +0000 Manifest next update: Wed 22 Jul 2026 03:00:51 +0000 Files and hashes: 1: 01b9RY2Fu1lHntnJT3pNtUlOxDQ.roa (hash: Vv31j2T6PEJDGj5zXrQrLiZ0MXVVZbGbZJb6hh8+CQQ=) 2: 035ln37YeqsWXEgvqkRCVHt3Ri8.roa (hash: R/WkyEtwI6D0vokhj8mKQ0vbvvnYXtwev6BJkOiTzLc=) 3: 1--siGC9v_UvUxOAFafv_Fn5B77s.roa (hash: LDHSvCANEcsAHTe65oB9R5YLbeer2QU8Ak6a9D9BBjk=) 4: 2yu0ObbMzefwvoYMAE7hgfoDBu8.roa (hash: 7IliMuEfTd77oAXdQXi1jLMCuSMXg0z01MPP8W+nMCE=) 5: 4MCAetrKgVOgziX3eUQM1qCMcoA.roa (hash: pKEGkBvTYQ30ve6Dr1u+ev6XKEMVVvkV1Qtxo8jX2fg=) 6: 5HIB4XdFvUnYx8q0lLws_OpypiI.roa (hash: SmHZRFszjS8iXB/TCR3lbdZL3Jg43B7hycjvKJTAA7g=) 7: Az605-Xi4-85FYu6feBXQ1SOYt4.roa (hash: whVjTw7Oo6IjmdNZa7tDCs1+dbsJYo3zqsCYIoKzP7U=) 8: BcxI73p8ErEeQ0hukRaoWm0fhjA.roa (hash: eNJkC6bVkAW9TwdngXUYqa/fXCyz5L/k5yc9vvGi7Oc=) 9: Fi4AB2k5RVSdMb4GHgw0ckyjigo.roa (hash: 3ZHSAL4bzQYAmn/XzcARd3JSpHYZITnPX09te0ZOJe8=) 10: HMnJVGsw1KKSHSxZYJQk0PPJv4A.roa (hash: cmHnOSBKknYL6Ik8PCsxIYH0OUFFybK95ALGrR3Wsno=) 11: HoZNHcVftjja-8LWzF2TgzwYskM.roa (hash: WYbQQFrey7c2u2+oSYYECV6iIWkitnDN5rYtWg7W/FU=) 12: HrMj_GnwQIFuTnfdxxyIjE-1fTA.roa (hash: C0n20k3l0t5enAnvei+Ir6HCzxKKQiDD91+lXP6nt/Y=) 13: Il-I_QraKvZn9F3LshcILYbL6Hg.roa (hash: jBPG9OSjW23p/4tSxkYDhOvf3qNw9HtJVamuxECSc1o=) 14: OKg9lDRnR4jN86ZPv2a9kDmE6ko.roa (hash: wivGX1Ju7hjNkdPElNOh+99tkUZ/3DE5nZF6Omx8P8Q=) 15: PIK_cDodINI0iYBstXmbPX8NmbU.roa (hash: wsh8RB6vngnvVEJooLnSoxpJFfQxV9+OAGAxc8EZhQ8=) 16: RF_oJzedGN9LU1qV2KxS5kPzKzs.roa (hash: XTT+vMGxme3MjsXfUunv0kvDQOhrCp5uohUm6aDJtgA=) 17: RrqPvUz_GYCamBFzWT4cys7iUNE.roa (hash: F67+gbhSPp0wa9EF3KodY5zDvi+U+0QuAVg1KrC+CXY=) 18: Txs6_HSShzslxSEnb_V2cEpgnGU.roa (hash: gbJLn9T5ZMo97yRRx+iLp2ECvFVQ33SP7nTRm5E5ZEw=) 19: VgOMDG7UZtHB1CKshYGZFj4Cqic.roa (hash: xzzAiNera9mLgzvG+jPZ47RQagAdP1jBC2IGHubscMU=) 20: X6GDvsh_wT4Bzq3QdVomARBsHOw.roa (hash: urWTsIN+xxnNEPbJOMCoifFltW+NmhF15UAZYa0NG/4=) 21: a-B1eF8bX3q8DFUBeQ5ww6i7i7g.roa (hash: 9frCu7ndcC7bDDjZ+NFrem18KkQFSf9jJ7NMejNua+g=) 22: afomI7Ii0I2TVpdQRLlAe1_qSLo.crl (hash: YL8D0mOGxQ/opSi27ps0KtsNOsDZEAGVGiOPULEdU/c=) 23: bYRPNTCOMEmRi6pRGIqF833I-9g.roa (hash: 9Srf/yc4WPXYXqjKVX7LPywlcq8OAZ7JMmRdXXnb2oc=) 24: gLDg5wMg6SC_pUFobFAIg1PePE8.roa (hash: +vkIi4zezkFj5sHevBIL/3+BvZs6Qyrwqf9sfJ/UqQA=) 25: kIboR4QgmfAIaRZxJyA4OskOO_4.roa (hash: hv6Xi3tRRRD+BBRVihVt2befifvoeUqJAbapAtcXzA0=) 26: nqNiVlcnTsEAzaX737y8-4ABceE.roa (hash: exmeRmprROseDzh2DPQ445sV4HkcVczO7R6fRKpDb0E=) 27: oKt2Cid9yLvhIC5MK3q_6cG1q5g.roa (hash: i3gzQ6XHE8PbwTvwhvxi9lLYpqn8rRftO7aMWIOG900=) 28: q0v9xLBgr75QZWxQbxIDsm_5auE.roa (hash: qOcGp9/tV8D5cBFVGmxsTN9zUnDfYAT6E1ABiK0+n00=) 29: rc3oRKtt_90HxvD3LaPWU6Xr7EA.roa (hash: 29YVA6UeJ1gESTqULKlwFc5LGe3kSzimUyOz6HnaNbI=) 30: sIjAOtdWNZFJ1L7t6oTrXjd2hTg.roa (hash: dZ67afs0E26jtSXGJwEB7GzsGE9DKlrkIzAjyaWF/bo=) 31: v1eEtmAqh7DLq6r5odUm3kae1oc.roa (hash: Mr2A+DP00TZTbOJcOBNPWcOqmgh2Ko+qAajSURN8csY=) 32: zsmBCvMBFiLh5zI01XSmpVHLzac.roa (hash: py2QFHBhaxOUQ3FH29RNTtBqgRB2pECPvs4I/DnYCyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 03:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:82:9e:79:19:19:cf:99:f7:cb:d2:19:08:3a:06:4d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba Validity Not Before: Jul 21 03:00:51 2026 GMT Not After : Jul 22 03:00:51 2026 GMT Subject: CN=ca138be20650cf7a587b50c89ec9a655441259f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8c:df:a1:7b:10:47:d3:6e:6b:bb:8d:42:cd: d6:7a:6e:f3:2b:37:03:ed:9e:7b:89:2a:6c:fc:3d: d5:bf:c1:0f:e6:2d:9f:d5:28:12:1e:6b:13:94:75: 9f:2d:c2:58:39:29:52:e6:72:c9:e7:0f:bf:d2:69: 60:6d:55:47:bb:0b:f8:38:b6:ea:72:89:ba:0c:e0: 16:c2:f0:29:ad:df:29:7a:48:80:c2:54:30:63:46: b7:4f:de:f7:8b:5b:7a:8a:9e:38:83:94:d6:4f:e3: b9:03:92:12:3d:cf:db:cb:3f:94:86:39:ac:c8:c5: 5c:bc:c8:ea:72:d6:5a:4f:7c:c9:34:0f:68:b2:34: 86:47:7f:aa:ad:42:18:f6:65:96:9f:b9:ef:81:b8: 61:4e:ad:bd:be:e3:7a:40:31:f6:11:25:8b:31:15: 4b:fb:31:9f:e0:e9:00:a7:6c:7c:97:d1:50:3a:e0: 93:fb:0b:d0:ee:72:dc:af:c5:f8:09:25:39:74:31: 4a:a3:52:c9:6a:ff:1f:74:3b:b1:bd:da:e9:70:84: 78:2d:14:b0:e0:8b:58:3e:af:49:fc:23:fb:05:e9: 1f:ec:18:70:1a:80:8a:e5:94:82:a2:70:47:3d:de: 03:00:f8:99:fc:eb:57:0e:74:0d:0d:4a:77:2b:c2: bc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:13:8B:E2:06:50:CF:7A:58:7B:50:C8:9E:C9:A6:55:44:12:59:F8 X509v3 Authority Key Identifier: keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:87:bd:c4:f5:82:bf:22:32:c8:8b:82:39:27:5c:13:48:55: 45:1d:99:fd:24:4a:89:6c:61:d4:fc:ad:fb:ce:4c:78:2f:4f: 0b:27:5b:bf:87:31:67:1e:e6:ce:3a:f9:18:0f:6e:5b:37:26: 7d:a2:05:fc:d9:9d:ca:79:17:3b:16:03:e3:47:62:9b:88:f6: b2:19:d0:e4:93:81:70:17:e5:d1:ec:45:db:42:44:72:94:a5: 28:d9:e4:73:e1:8d:35:d4:dd:c0:fd:0c:cb:b1:a9:1e:a1:f2: 56:0e:99:e9:ce:b0:11:99:e6:27:09:07:08:76:29:47:59:ad: b0:c6:d4:6d:38:6f:b5:64:28:9d:71:10:87:86:79:1e:84:f8: 4a:d7:8a:cb:9f:74:a8:db:bf:0f:e2:1b:b5:79:09:73:43:ca: 39:d2:12:9e:30:83:bb:a8:88:37:06:ba:4e:37:cf:c9:6b:a4: 25:f1:c4:cc:e1:e8:fd:fe:6f:c7:4b:35:b3:db:79:41:48:0a: 87:a1:c9:5b:db:d3:4b:3e:95:2e:e1:0b:f5:a6:93:ab:15:fa: 47:3f:df:86:6f:72:e5:74:c6:e5:90:83:00:29:41:df:dc:e5: 19:a7:e9:5c:f0:b9:81:94:e9:10:33:54:8a:8a:8a:d6:e5:54: 75:ea:90:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+CnnkZGc+Z98vSGQg6Bk3ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZmEyNjIzYjIyMmQwOGQ5MzU2OTc1MDQ0Yjk0MDdiNWZl YTQ4YmEwHhcNMjYwNzIxMDMwMDUxWhcNMjYwNzIyMDMwMDUxWjAzMTEwLwYDVQQD EyhjYTEzOGJlMjA2NTBjZjdhNTg3YjUwYzg5ZWM5YTY1NTQ0MTI1OWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YzfoXsQR9Nua7uNQs3Wem7zKzcD 7Z57iSps/D3Vv8EP5i2f1SgSHmsTlHWfLcJYOSlS5nLJ5w+/0mlgbVVHuwv4OLbq com6DOAWwvAprd8pekiAwlQwY0a3T973i1t6ip44g5TWT+O5A5ISPc/byz+Uhjms yMVcvMjqctZaT3zJNA9osjSGR3+qrUIY9mWWn7nvgbhhTq29vuN6QDH2ESWLMRVL +zGf4OkAp2x8l9FQOuCT+wvQ7nLcr8X4CSU5dDFKo1LJav8fdDuxvdrpcIR4LRSw 4ItYPq9J/CP7Bekf7BhwGoCK5ZSConBHPd4DAPiZ/OtXDnQNDUp3K8K8ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoTi+IGUM96WHtQyJ7JplVEEln4MB8GA1UdIwQY MBaAFGn6JiOyItCNk1aXUES5QHtf6ki6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYt NzJmYjk3ZDU5Y2U0LzEvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYtNzJmYjk3ZDU5Y2U0 LzEvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoe9xPWC vyIyyIuCOSdcE0hVRR2Z/SRKiWxh1Pyt+85MeC9PCydbv4cxZx7mzjr5GA9uWzcm faIF/NmdynkXOxYD40dim4j2shnQ5JOBcBfl0exF20JEcpSlKNnkc+GNNdTdwP0M y7GpHqHyVg6Z6c6wEZnmJwkHCHYpR1mtsMbUbThvtWQonXEQh4Z5HoT4SteKy590 qNu/D+IbtXkJc0PKOdISnjCDu6iINwa6TjfPyWukJfHEzOHo/f5vx0s1s9t5QUgK h6HJW9vTSz6VLuEL9aaTqxX6Rz/fhm9y5XTG5ZCDAClB39zlGafpXPC5gZTpEDNU ioqK1uVUdeqQkQ== -----END CERTIFICATE-----Generated at Tue Jul 21 09:56:41 2026 by rpki-client