$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft File: u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json) Hash identifier: Z8H4aVkMApEG9PNwEwqJUwAV9emXmPPPKQOUawFaePI= Subject key identifier: 93:20:83:1B:60:12:A5:1A:1E:13:35:6A:5A:09:57:4F:A2:3B:8C:CF Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Certificate serial: 019FA14D6A567B4EF7A11414E6B8D42CE95B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft Manifest number: 1A8A Signing time: Mon 27 Jul 2026 02:00:32 +0000 Manifest this update: Mon 27 Jul 2026 02:00:32 +0000 Manifest next update: Tue 28 Jul 2026 02:00:32 +0000 Files and hashes: 1: 096oU7e0E8HrowP4gJPAu4Yvq7w.roa (hash: h6GJyY7se9YHyBgaTMbTYiFCIPloa8qIM1tvJFasblQ=) 2: 7urEzTsKBLxb5onYBj-aFpyop_U.roa (hash: gb459gbapFxHlbK0J2K7Bvt5uguuHwVrigvvlQxP67E=) 3: MKYrJvGzvZyRvU-YTMKw33sMjbA.roa (hash: zitB1QIdSvuwxE4jXL1s8PUZB8yK6i+xpiMCf2djBrI=) 4: MxcZV9q1XM_oLFPhwS7xTgduXcs.roa (hash: lUq9YnS1Sc7e3dppUauYyDheGtMUtzY+2WuoDWvRh1k=) 5: PF5StOvcjBtJpPkWMQC42y_-7lw.roa (hash: +5ZUq1SbcccJBEuKBRND5IHUBd0bwJSPmUEVlNBAa5I=) 6: Pk0nYBXMibYGfeTa8KuAnDZqEJA.roa (hash: hjjTFQRkGi+Q5QO7W0JHJgrLPllKcASVVsrIkHritU0=) 7: TqC5cslAjOBidLHAZI8XGLZ-bAQ.roa (hash: bLuUwhyQVd1VS9DwSq655y43wtPrqbuVYv80UPVmwic=) 8: nAG5lZSxj6V-wheZnmYE_Q6WWfU.roa (hash: tMCGq6CAVBv6m8gzjuzDgfNy/wvlZB8HIzsnhiNlqsg=) 9: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: +HPnkMB4qOu/w5QUdYOZzlg18QFXrMplPb9gd+h66Yg=) 10: y4_D6Qio_R6p7o2KXWCnWybEys0.roa (hash: mUX1ZbSigKnFsHWLnR+/SQCMcTKlzqfR36hp2kv3WSg=) 11: zoz2o6V8v-pZ3rm_TVWUy2Mtt38.roa (hash: /e9GDLeuGl688HzU36fMz9iRnDyyAkt0kfM3UnT5a8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:4d:6a:56:7b:4e:f7:a1:14:14:e6:b8:d4:2c:e9:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Validity Not Before: Jul 27 02:00:32 2026 GMT Not After : Jul 28 02:00:32 2026 GMT Subject: CN=9320831b6012a51a1e13356a5a09574fa23b8ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0f:11:26:db:ba:48:6e:5e:45:a1:f8:85:f4: 40:78:89:ea:19:6a:9d:23:48:7b:98:19:b1:4e:62: 93:cc:4f:9a:b9:42:8e:aa:ec:d5:ef:f0:9a:67:92: 8f:c4:79:eb:a0:23:a4:62:66:f6:a6:08:2d:74:25: 10:0f:64:4e:50:7c:88:c6:0b:07:7d:ab:da:0e:6f: 61:b8:0e:d6:2f:18:59:6c:73:7c:10:b8:36:b9:3b: fa:25:ca:51:6a:f1:60:81:2f:15:98:59:f3:63:74: 16:bb:95:db:71:b4:5c:24:d0:a2:d3:bf:e6:58:eb: 94:c3:49:b5:5a:eb:84:92:15:e8:3a:2d:a9:cf:d2: 4b:eb:46:aa:c5:f6:4a:1d:74:3e:e1:64:0b:44:f4: 92:69:b2:83:8b:da:8d:61:00:39:07:4a:42:b0:9d: ef:50:bb:ab:43:6b:c8:82:b3:fe:cc:fb:55:f0:fc: 71:ce:f3:67:00:cf:c6:71:2b:0a:20:dc:ec:be:f4: 3f:a1:ba:09:e7:60:ad:0a:41:7c:f7:6c:5f:3b:df: aa:97:1f:a2:ed:d5:7a:32:88:29:1b:50:2e:2c:ff: 12:4e:3a:da:b4:83:67:cf:4d:86:fa:b8:60:6e:7c: 47:fa:47:b9:53:8f:92:bf:1e:ba:08:21:6e:5e:eb: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:20:83:1B:60:12:A5:1A:1E:13:35:6A:5A:09:57:4F:A2:3B:8C:CF X509v3 Authority Key Identifier: keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:57:cf:63:4d:7b:58:e9:d7:fb:50:3b:42:2b:1e:67:6e:64: 10:f5:25:7b:dc:a2:bd:bf:b3:f8:ad:17:21:b1:6b:d4:3a:50: c7:93:a0:a3:3a:f4:f0:5a:f6:04:fd:aa:de:fd:7e:52:c0:92: bd:fa:22:98:47:42:47:82:ea:18:ac:d5:d0:38:2e:a2:d6:13: 8d:b3:2a:28:ea:05:7c:44:66:a3:8c:4c:ad:42:cf:8a:9c:c8: c6:4f:43:a1:59:17:69:bd:e8:97:bd:8e:6d:b6:c4:6a:be:99: 57:30:45:f6:96:0d:81:1b:ba:14:ab:b4:f3:cb:0d:00:1a:cd: b0:b1:d6:ef:f6:40:78:b6:97:c5:3e:4e:a9:db:dd:d5:69:e0: 80:6f:c3:bb:8c:62:bb:c2:c5:8d:cd:6b:19:87:c0:44:89:9e: fa:9a:a4:f1:69:23:25:5f:28:a9:f7:37:e4:24:90:81:27:41: 02:93:9b:66:f7:68:47:72:c1:c3:45:a4:f7:4d:54:5b:f3:0c: ed:db:79:c6:4d:4c:2d:d0:aa:97:6f:6c:15:8f:8e:8f:c5:e0: 6f:f2:1e:30:ca:be:89:21:c1:2b:44:cd:44:1f:a7:c6:64:2f: 33:4e:d1:da:80:d8:fe:e9:b1:40:77:ed:52:5d:f1:aa:19:29: 01:59:53:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+hTWpWe073oRQU5rjULOlbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl YWNkNDAwHhcNMjYwNzI3MDIwMDMyWhcNMjYwNzI4MDIwMDMyWjAzMTEwLwYDVQQD Eyg5MzIwODMxYjYwMTJhNTFhMWUxMzM1NmE1YTA5NTc0ZmEyM2I4Y2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9g8RJtu6SG5eRaH4hfRAeInqGWqd I0h7mBmxTmKTzE+auUKOquzV7/CaZ5KPxHnroCOkYmb2pggtdCUQD2ROUHyIxgsH favaDm9huA7WLxhZbHN8ELg2uTv6JcpRavFggS8VmFnzY3QWu5XbcbRcJNCi07/m WOuUw0m1WuuEkhXoOi2pz9JL60aqxfZKHXQ+4WQLRPSSabKDi9qNYQA5B0pCsJ3v ULurQ2vIgrP+zPtV8PxxzvNnAM/GcSsKINzsvvQ/oboJ52CtCkF892xfO9+qlx+i 7dV6MogpG1AuLP8STjratINnz02G+rhgbnxH+ke5U4+Svx66CCFuXuu3xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMggxtgEqUaHhM1aloJV0+iO4zPMB8GA1UdIwQY MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt MTE5ZWZjYmIyMDIzLzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1fPY017 WOnX+1A7QiseZ25kEPUle9yivb+z+K0XIbFr1DpQx5Ogozr08Fr2BP2q3v1+UsCS vfoimEdCR4LqGKzV0DguotYTjbMqKOoFfERmo4xMrULPipzIxk9DoVkXab3ol72O bbbEar6ZVzBF9pYNgRu6FKu088sNABrNsLHW7/ZAeLaXxT5Oqdvd1WnggG/Du4xi u8LFjc1rGYfARIme+pqk8WkjJV8oqfc35CSQgSdBApObZvdoR3LBw0Wk901UW/MM 7dt5xk1MLdCql29sFY+Oj8Xgb/IeMMq+iSHBK0TNRB+nxmQvM07R2oDY/umxQHft Ul3xqhkpAVlTOQ== -----END CERTIFICATE-----Generated at Mon Jul 27 06:49:05 2026 by rpki-client