$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: Nyr8aagt59CZbfbitAlM7pUWhukAl77o39c5bN5mg8I= Subject key identifier: 6F:10:4E:EC:19:C8:97:71:25:8D:6E:21:99:D0:2B:CC:9F:AA:77:21 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 019FA1BB673A30B87B7007BBC96BC4475BF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 1A57 Signing time: Mon 27 Jul 2026 04:00:41 +0000 Manifest this update: Mon 27 Jul 2026 04:00:41 +0000 Manifest next update: Tue 28 Jul 2026 04:00:41 +0000 Files and hashes: 1: TjYcJALyGbmW-x31ry7QsUvdQtQ.roa (hash: knhLPKVdJjwTBCuKiy0BNSL8TQGPgiu2tFYYWRO2204=) 2: baEkayAg80jmYDBU-ExaHSLpuaI.roa (hash: nAErtQy9uElHFQjfJS5ckQ4epiwL6hvpsQEYN9BEeqw=) 3: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: ucMQ+vFCiTDVeKDnckZDSeoBrfQqrV5Nyvs2qR5k8sw=) 4: cGs3UaDvGLQ1Q_TQpZAPaINt4Es.roa (hash: W7uHnT9KoPvCIjHy/wyMQaAb03AUeFyxBB7Do1XvIvI=) 5: ebSZBecc7df92SgP59-y12trz8Y.roa (hash: eWLHCXv7jbIrxX4dZcu1pV/1wCL3MzIiRwN/vf2jitQ=) 6: nmGtGkrhBfqxDaqozTHEU7woU_8.roa (hash: myNlScXFtUNhqDOYxLDED2mEeSRwem2M2mluAw2qbGU=) 7: oRALtbh2nuCRd23sDYqfy35X5z0.roa (hash: jC6NP1kM59PVY3etFPE/j9NV0XqouvnOb2E4RPSGrX4=) 8: pI2S2lg5Mevtnr1gNuhTMLXlTZk.roa (hash: 5cp4WqQX2Fq4/2gG8NNXNJQnzkTkhV+uz8kgPR8ik8M=) 9: pUi-gLSXqZ0JaQPDBRSSYpMiavg.roa (hash: BVbd5i0a2oHy3QrO+gV4ifjJEQxi06QcvV9UBgsyx9E=) 10: pvvItYaD0BkPMVYmwXbvL-utTRQ.roa (hash: O8ehVuL3rG3e1+vU9AU1AJ7dONUierORB47r4BxJ0l8=) 11: rWySjgHmxws3lM6jmie75S8CDBw.roa (hash: At0oBHsNt1VyqDJTW3hMzgCfUrv9SJ/hPxisShjHIa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:bb:67:3a:30:b8:7b:70:07:bb:c9:6b:c4:47:5b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Jul 27 04:00:41 2026 GMT Not After : Jul 28 04:00:41 2026 GMT Subject: CN=6f104eec19c89771258d6e2199d02bcc9faa7721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:e5:0e:3f:bc:f7:ec:67:2d:b7:ec:d4:a3: 7e:19:06:af:7c:b2:6c:5f:c4:a1:4c:66:d6:b3:b2: 3f:71:3e:74:03:9e:62:9a:de:70:6a:08:1f:09:30: 63:87:5a:43:38:cd:ae:c2:26:e9:90:ae:19:4e:b3: e1:a4:4d:8e:cc:50:b4:f7:75:f2:2e:fa:7d:ce:4f: e4:db:10:70:8f:9f:b2:14:5a:d5:75:c8:f0:ed:60: 96:4a:98:2f:d0:59:1d:48:22:2c:83:67:8b:b7:0b: 2e:44:70:1e:50:78:fd:bd:46:09:ef:3e:b7:2b:fb: 0a:37:01:0a:65:3e:a1:f1:0d:15:2f:64:bd:fe:a9: ab:6c:96:10:7b:f3:2e:53:92:d4:e1:9e:2b:e1:0a: e5:87:fb:4e:b8:16:5a:f1:8d:db:d9:14:af:83:2b: f7:22:c0:c4:86:83:8e:22:8c:ae:86:77:62:09:b3: eb:62:71:34:2a:f9:2a:14:13:93:25:64:a9:79:d2: 97:47:64:a5:74:79:a7:e6:a2:41:33:0b:28:92:0a: 8a:63:ce:11:92:40:40:d4:fc:77:4f:37:a6:86:53: 4b:a4:44:77:cf:3e:0d:79:06:2a:6c:a3:24:54:9e: 38:14:f2:85:33:c6:d5:71:19:da:20:3f:54:43:e9: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:10:4E:EC:19:C8:97:71:25:8D:6E:21:99:D0:2B:CC:9F:AA:77:21 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:02:9d:38:36:11:cb:30:06:f6:93:a6:f0:7a:af:70:14:f6: 00:c8:55:4b:d3:31:8a:57:4b:af:23:b6:cd:4b:ad:ee:92:aa: 78:c4:bd:cf:1c:d0:6d:af:0d:0c:d4:17:a8:61:73:f1:f4:bd: d7:b2:8a:62:9e:21:ba:c3:bf:25:d6:d0:da:27:72:8c:3e:ad: e9:3e:f1:55:43:58:76:0d:23:59:9b:39:6b:6c:9f:9d:57:3a: 95:96:35:c9:f2:4e:e3:62:3a:67:9e:6e:80:d0:d8:9d:36:08: 1f:8a:f2:67:fe:77:ec:eb:d4:85:f6:13:d2:68:b4:ab:05:52: 48:37:eb:8e:b1:b5:cf:21:83:e9:98:9d:d0:e0:ce:7e:ba:28: 3e:b6:19:a4:f1:86:13:68:4f:34:f2:d2:a4:ba:4f:a8:fc:dc: 58:3e:d2:ca:ad:c0:b1:9c:75:56:c2:1c:3f:5e:ce:9d:cd:79: 89:68:44:df:7f:b1:ab:0e:45:97:56:80:15:fd:19:c7:cf:41: 4e:3b:83:1e:68:23:8b:9d:74:a1:23:05:b5:60:f7:d3:69:5f: c4:05:3d:92:43:13:76:4a:dc:dc:36:a0:45:a6:b5:6c:8e:cc: 5f:59:9e:a5:97:f2:e2:3c:c2:b7:5f:f1:cb:ef:56:9e:1d:c9: 76:54:24:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+hu2c6MLh7cAe7yWvER1v2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYwNzI3MDQwMDQxWhcNMjYwNzI4MDQwMDQxWjAzMTEwLwYDVQQD Eyg2ZjEwNGVlYzE5Yzg5NzcxMjU4ZDZlMjE5OWQwMmJjYzlmYWE3NzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM7lDj+89+xnLbfs1KN+GQavfLJs X8ShTGbWs7I/cT50A55imt5waggfCTBjh1pDOM2uwibpkK4ZTrPhpE2OzFC093Xy Lvp9zk/k2xBwj5+yFFrVdcjw7WCWSpgv0FkdSCIsg2eLtwsuRHAeUHj9vUYJ7z63 K/sKNwEKZT6h8Q0VL2S9/qmrbJYQe/MuU5LU4Z4r4Qrlh/tOuBZa8Y3b2RSvgyv3 IsDEhoOOIoyuhndiCbPrYnE0KvkqFBOTJWSpedKXR2SldHmn5qJBMwsokgqKY84R kkBA1Px3TzemhlNLpER3zz4NeQYqbKMkVJ44FPKFM8bVcRnaID9UQ+kEoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8QTuwZyJdxJY1uIZnQK8yfqnchMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgKdODYR yzAG9pOm8HqvcBT2AMhVS9MxildLryO2zUut7pKqeMS9zxzQba8NDNQXqGFz8fS9 17KKYp4husO/JdbQ2idyjD6t6T7xVUNYdg0jWZs5a2yfnVc6lZY1yfJO42I6Z55u gNDYnTYIH4ryZ/537OvUhfYT0mi0qwVSSDfrjrG1zyGD6Zid0ODOfrooPrYZpPGG E2hPNPLSpLpPqPzcWD7Syq3AsZx1VsIcP17Onc15iWhE33+xqw5Fl1aAFf0Zx89B TjuDHmgji510oSMFtWD302lfxAU9kkMTdkrc3DagRaa1bI7MX1mepZfy4jzCt1/x y+9Wnh3JdlQk8g== -----END CERTIFICATE-----Generated at Mon Jul 27 10:25:17 2026 by rpki-client