$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: OwSeG+3XlQG/RIuqDRw7FVtxRfB7Psj6jqHBmGdJg70= Subject key identifier: 6D:9D:C1:D7:4A:A5:38:1F:C5:6A:23:4E:E1:6B:4B:86:2D:0A:0B:D0 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019F6F4EBAF18C9B7E1461919B488654DA52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 1569 Signing time: Fri 17 Jul 2026 09:00:58 +0000 Manifest this update: Fri 17 Jul 2026 09:00:58 +0000 Manifest next update: Sat 18 Jul 2026 09:00:58 +0000 Files and hashes: 1: BK_uZd5RIdvcCcnIrkl91Qf2mFw.roa (hash: wV2RNnXCJX3V+Medw8LdpmAEbR5QwEUgTvufx7pFq14=) 2: FtL8JAR5L3QuiWjveQYYqx5Vysc.roa (hash: TDzblppwWN3R0n7X/3t6Y/QCHzmL0n6aO41HLuZVCKU=) 3: G9O4g34wmhpRqqqyNq64bnjh27k.roa (hash: lYlheaBAaMmywrolWQWx4QnBFOXnz365592aJuQe6Mw=) 4: NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa (hash: edl6dCh63hg4Y8AUvmK5tlCPTiU0Nu0TVS0oTDNYUII=) 5: XppJI7pSNx6BdFrEbdtPboTQL6o.roa (hash: Cty7u06Lt5vOCxE5CLtni9wB/17m9CZOi2zJp+IGXYM=) 6: ZmU2dSStEk_zeXSWwEBaw5tcl0Q.roa (hash: Y1sWpxD5SobS8QA6Ihwhvzg6iQQ+93Pu+DpnTFJR+xM=) 7: hHQPymz7nrurWK651cK6wH1WQB4.roa (hash: dwQ4oAHDFe0oAQKlctscRR06w5cemCjD8MkqMj9iTyk=) 8: hn8HZ87MGm21OeAakwo0L7epBvo.roa (hash: K2tDb7I5NoqsKa5/k7EGMMNhy8l68r1VCX67mnoFnXs=) 9: kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa (hash: lYivRiiWhdQqSTdJmm6RVAol+uwcwmFLCfnYj2bvGyA=) 10: th-tx_kJ7veQ1scNgs5J6K1YnW4.roa (hash: CptKWeu/KjIE3Xe0fo+dZtItTKDZJuUjeV7GErUniCg=) 11: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: Zl7ZKiyq1bJ8oVvjQBcyCWzw6fPkvn3igH1OfV0h0Y8=) 12: uibhPc4NbRy01honmhOVxxl-SbI.roa (hash: aerci+cgin2TuEzTcnRWk0Cjk81xvvnVy7gKs1IvnLQ=) 13: utkmbyJ1-9TI5Iy29JQnzvwfdgw.roa (hash: MQitkqvZxc85BEfsLrabuKg5Cbpd+JVUjJLsFQDLJCQ=) 14: xxR8mx-20J_lo55Rh1660v5SUI4.roa (hash: 2Y9dBCwd98Bba/rHT3QIRjMGiqefSe3zB38HBIRd3qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Jul 2026 08:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:6f:4e:ba:f1:8c:9b:7e:14:61:91:9b:48:86:54:da:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Jul 17 09:00:58 2026 GMT Not After : Jul 18 09:00:58 2026 GMT Subject: CN=6d9dc1d74aa5381fc56a234ee16b4b862d0a0bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:04:7a:45:63:65:87:fd:0e:90:ce:05:8f:11: 3b:d6:ba:93:63:38:0d:8e:51:3c:82:c4:40:09:3b: 0e:2c:49:83:05:01:44:88:a2:93:2d:6b:1c:c6:ad: b8:ed:d9:a7:13:a6:13:46:78:71:06:d2:a6:fb:a0: b9:4f:4d:e8:8b:c7:20:bb:74:a6:f1:54:89:9a:54: 48:37:25:30:b8:fd:9e:3c:d5:1b:5c:31:0f:c6:29: b3:7a:4e:57:95:c7:94:de:73:d1:e7:00:1a:9c:4f: 76:72:0a:e9:4b:0c:60:41:c2:3f:05:21:73:3c:14: f3:f4:05:aa:7f:ec:ee:de:ab:d2:fd:4b:40:5d:8a: d1:48:0b:d8:eb:b0:9d:02:d7:b3:3a:e0:c0:39:c2: 38:53:d1:6e:14:ef:7b:15:62:c4:33:89:1f:90:b4: db:72:70:66:06:9e:4f:25:aa:77:78:18:6d:b3:ba: e8:8b:98:5b:2b:04:0d:4f:c4:13:a9:6c:44:e8:08: 23:4b:b1:c1:65:ae:0a:2a:f2:b2:29:05:21:fa:7a: b4:dc:fc:55:8d:c3:ee:c3:0d:b5:54:a1:03:87:51: 7d:7a:85:ab:87:28:a2:39:e3:81:e6:43:e1:dc:86: 0b:be:ab:aa:28:60:da:c8:8b:ee:ad:8a:8b:a6:15: d5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9D:C1:D7:4A:A5:38:1F:C5:6A:23:4E:E1:6B:4B:86:2D:0A:0B:D0 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d5:63:65:f1:29:16:84:68:5d:ad:90:9b:be:b7:ad:34:31: 6f:74:db:6a:e7:8f:7e:60:13:d1:8c:f9:b1:59:f7:c0:20:45: a5:bb:fa:76:93:28:1e:27:a5:ea:2d:ce:16:bb:62:7a:60:81: c0:d4:d5:fc:46:0a:9d:28:cf:a4:36:e0:7a:37:f1:ab:8b:85: 13:bf:f7:44:2a:4d:c6:aa:be:81:1f:47:6f:28:1d:78:dd:97: f0:7f:87:10:18:33:14:e7:0f:97:ba:4d:0a:05:a6:55:cf:0c: 4c:cc:63:7b:1c:3d:95:34:5a:06:ca:3f:34:ab:56:0c:61:a9: 00:9c:96:cb:14:52:f2:c0:b3:93:92:d5:fb:06:d3:f8:40:28: d3:64:50:2e:bf:23:6e:51:d2:ab:63:68:dd:0a:00:3f:7c:e5: b1:9d:88:8a:a4:ad:5c:0b:92:9c:17:09:4b:b2:b6:55:e9:52: e9:c2:3c:c1:bd:7c:81:3c:ae:4b:e6:9a:f9:10:ad:2e:a0:29: bd:37:e9:4a:9f:51:e2:7b:21:dc:75:49:7f:8b:4b:35:9e:6d: 1f:46:02:a2:01:44:42:21:ab:c5:60:bf:06:b0:85:af:c8:b5: e6:ae:54:b2:72:06:8b:dd:6d:ab:c1:f3:84:5f:86:73:c8:25: 66:19:de:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ9vTrrxjJt+FGGRm0iGVNpSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwNzE3MDkwMDU4WhcNMjYwNzE4MDkwMDU4WjAzMTEwLwYDVQQD Eyg2ZDlkYzFkNzRhYTUzODFmYzU2YTIzNGVlMTZiNGI4NjJkMGEwYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQR6RWNlh/0OkM4FjxE71rqTYzgN jlE8gsRACTsOLEmDBQFEiKKTLWscxq247dmnE6YTRnhxBtKm+6C5T03oi8cgu3Sm 8VSJmlRINyUwuP2ePNUbXDEPximzek5XlceU3nPR5wAanE92cgrpSwxgQcI/BSFz PBTz9AWqf+zu3qvS/UtAXYrRSAvY67CdAtezOuDAOcI4U9FuFO97FWLEM4kfkLTb cnBmBp5PJap3eBhts7roi5hbKwQNT8QTqWxE6AgjS7HBZa4KKvKyKQUh+nq03PxV jcPuww21VKEDh1F9eoWrhyiiOeOB5kPh3IYLvquqKGDayIvurYqLphXV8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2dwddKpTgfxWojTuFrS4YtCgvQMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtVjZfEp FoRoXa2Qm763rTQxb3TbauePfmAT0Yz5sVn3wCBFpbv6dpMoHiel6i3OFrtiemCB wNTV/EYKnSjPpDbgejfxq4uFE7/3RCpNxqq+gR9HbygdeN2X8H+HEBgzFOcPl7pN CgWmVc8MTMxjexw9lTRaBso/NKtWDGGpAJyWyxRS8sCzk5LV+wbT+EAo02RQLr8j blHSq2No3QoAP3zlsZ2IiqStXAuSnBcJS7K2VelS6cI8wb18gTyuS+aa+RCtLqAp vTfpSp9R4nsh3HVJf4tLNZ5tH0YCogFEQiGrxWC/BrCFr8i15q5UsnIGi91tq8Hz hF+Gc8glZhnefw== -----END CERTIFICATE-----Generated at Fri Jul 17 17:15:14 2026 by rpki-client