$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json) Hash identifier: W1DiQU9SWuvuS0rQjIh51MM9OxCv3ZeKWjLTVPqqk9s= Subject key identifier: ED:2D:9D:62:19:3F:B5:03:F6:F1:6B:47:F7:2A:CD:22:C1:87:AA:A3 Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Certificate serial: 019FCF39CD3EFD004196FD8DCF99D5806FCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft Manifest number: 19F4 Signing time: Wed 05 Aug 2026 00:01:39 +0000 Manifest this update: Wed 05 Aug 2026 00:01:39 +0000 Manifest next update: Thu 06 Aug 2026 00:01:39 +0000 Files and hashes: 1: 044xYX9HsasQkNnZ6gNIrDun9Kk.asa (hash: QqGXRDWhRxy4fIleJhf8VPuBnT0lLwsILfpI5ZVk2bI=) 2: 21UC4Dg27lTwnVnoP-1hWx8Jrac.asa (hash: P5jYP5ImmwlHStzib0wGM6vyZuqyna1VWXgPkWJ521s=) 3: 3j6ITLuEAtzvq7lDDH-_99jLsyw.asa (hash: emyDEkQmvd9qMUG9y8IBKAbGI4wIM9zsTIQoNhtKSiU=) 4: 4blS8i-IvJFmYcw1UMVYU50adH4.roa (hash: PH25rQxOqMdKEUIOyGDzXkRgbKvHvrgDiCAwjxsY21M=) 5: Bv2hzFMshraYJZMhKiNAPQW5yzo.roa (hash: mozy1oa9z+5oxHPkAdcnEjtIYIUHTFuELC5cUHnd2ds=) 6: FXZzLUTLI2bnJX3HE0iocMnGK24.asa (hash: 0jHNXzmBRRsiRYGYoiH0GyC90Hc/n11rPyQ1ORy1E6M=) 7: GN5fvWr40gdv3JGN6vxjkZjGr-M.roa (hash: opZrG09Q9xFPvDT9n75han8TkL1qCnmykUVsSTdQ9Hw=) 8: ONEBxRFqRY2aPMMFa_3ak7_LP04.roa (hash: 6sHhfn9wB3VfYGqWY+wewX0hRZU1FUHpsvmiMpmOan0=) 9: SpVJq_aWC8IH5JWeljASL-sUdR4.roa (hash: WWb4Srs1EjuxCuzB13EtjRKgil05qhr6qF6kWwF7M7g=) 10: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: pxb9C7sukqOExTyx77D2fKoSq6oncihbYM5kNotn/Mc=) 11: l5bd30j_MQRGXqfWahBHTqJdoFc.roa (hash: t0VGEeZo8Fahoj1ko4o+rBeCd1Be3+5NalKn7WyM9tU=) 12: lwxC-jH6X2q9Mt74lepdPD3W9EM.asa (hash: 4RgSfjSU8Flpmo/qpEf1hYBnqzjBw2dPRj3BdEOkib8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Aug 2026 00:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:cf:39:cd:3e:fd:00:41:96:fd:8d:cf:99:d5:80:6f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Validity Not Before: Aug 5 00:01:39 2026 GMT Not After : Aug 6 00:01:39 2026 GMT Subject: CN=ed2d9d62193fb503f6f16b47f72acd22c187aaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c4:6a:95:fd:0c:6e:f6:bd:15:20:b1:f1:ab: 6d:13:19:b8:4a:11:67:1d:39:80:5f:1f:a6:62:de: 1c:56:d2:af:b1:7e:15:88:4a:fd:83:06:6a:d6:3d: 5d:9e:52:9b:9a:e8:63:0d:7a:10:86:12:7e:e4:41: 3c:3f:16:24:e4:fb:0f:ae:c5:e1:af:c4:da:96:6a: ca:d8:d3:0e:4c:3a:e0:e2:83:14:a2:c6:cb:ed:da: c6:f6:17:38:2e:ed:52:5d:a3:c8:09:b5:6e:1c:77: 51:f8:36:44:83:56:c4:d5:da:5c:47:e4:ac:78:0c: 53:fb:b9:3f:57:73:c0:0e:8a:6d:f5:88:0a:41:5e: d3:8a:6a:b6:53:c3:83:9f:ff:cf:b6:ce:77:c0:e2: 4c:5c:b9:6c:f4:ab:9a:24:87:08:ca:fa:55:3b:d4: f4:65:1d:ca:bf:94:19:f9:f7:33:01:c9:a4:aa:b3: f8:b9:fc:72:12:ad:ec:fe:cf:48:72:d3:72:d8:4f: d7:a1:5e:cc:46:9a:fd:53:4b:23:65:5c:27:45:06: c2:ec:80:bd:c9:46:59:89:ed:ae:ca:f9:ad:ae:3a: cc:40:0b:b5:1b:33:6a:c5:52:60:d8:ec:75:90:2b: 7c:d8:a5:5f:84:a9:51:65:63:48:e2:51:3d:e9:8f: 99:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2D:9D:62:19:3F:B5:03:F6:F1:6B:47:F7:2A:CD:22:C1:87:AA:A3 X509v3 Authority Key Identifier: keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d7:29:50:ec:74:9d:f9:b0:bd:3b:2b:cc:6e:ef:a7:04:60: 41:c6:95:3f:11:7e:05:79:3d:a8:2d:0a:9a:de:d5:3d:f3:99: 24:7b:35:9a:4f:b4:36:c9:78:ee:46:41:52:32:41:38:ca:5a: 50:bf:e8:52:f6:df:cf:dc:8f:72:bc:e3:1e:dc:8c:22:29:7c: 19:cd:f8:b5:02:b5:a4:48:bb:a5:47:01:da:15:90:43:4d:f6: ac:20:3a:45:d4:c4:ef:c3:c0:4b:f6:a7:11:bb:f1:a6:88:b5: 26:6a:b9:d3:9b:6e:03:6b:f1:4d:90:e2:a8:93:d9:04:ae:76: 6f:ff:ed:d3:94:b2:55:83:b4:58:ac:45:52:5c:16:b4:c9:30: 30:d1:ff:23:3e:ec:05:e3:3e:b4:1d:97:5d:9d:1a:52:c5:28: 47:2e:d6:9a:bb:af:86:ab:dd:68:30:e4:25:bf:e1:3a:a1:93: 34:76:11:12:77:5d:e1:ce:eb:4a:4e:c7:de:f0:f7:fe:d3:db: 37:8f:23:4b:3a:bd:ae:7a:5e:f2:9a:a6:ed:c4:db:a5:53:b2: 6c:94:dd:c3:81:c9:f1:22:3d:ae:09:8b:65:de:10:fa:da:f0: e0:20:33:6a:fc:a6:fd:68:e3:69:44:c7:c5:91:0f:d6:f5:16: 69:5c:65:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/POc0+/QBBlv2Nz5nVgG/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4 MGIxZTMwHhcNMjYwODA1MDAwMTM5WhcNMjYwODA2MDAwMTM5WjAzMTEwLwYDVQQD EyhlZDJkOWQ2MjE5M2ZiNTAzZjZmMTZiNDdmNzJhY2QyMmMxODdhYWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsRqlf0Mbva9FSCx8attExm4ShFn HTmAXx+mYt4cVtKvsX4ViEr9gwZq1j1dnlKbmuhjDXoQhhJ+5EE8PxYk5PsPrsXh r8TalmrK2NMOTDrg4oMUosbL7drG9hc4Lu1SXaPICbVuHHdR+DZEg1bE1dpcR+Ss eAxT+7k/V3PADopt9YgKQV7Timq2U8ODn//Pts53wOJMXLls9KuaJIcIyvpVO9T0 ZR3Kv5QZ+fczAcmkqrP4ufxyEq3s/s9IctNy2E/XoV7MRpr9U0sjZVwnRQbC7IC9 yUZZie2uyvmtrjrMQAu1GzNqxVJg2Ox1kCt82KVfhKlRZWNI4lE96Y+ZzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0tnWIZP7UD9vFrR/cqzSLBh6qjMB8GA1UdIwQY MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct ZmZiNzA5Zjc2NjhjLzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtcpUOx0 nfmwvTsrzG7vpwRgQcaVPxF+BXk9qC0Kmt7VPfOZJHs1mk+0Nsl47kZBUjJBOMpa UL/oUvbfz9yPcrzjHtyMIil8Gc34tQK1pEi7pUcB2hWQQ032rCA6RdTE78PAS/an Ebvxpoi1Jmq505tuA2vxTZDiqJPZBK52b//t05SyVYO0WKxFUlwWtMkwMNH/Iz7s BeM+tB2XXZ0aUsUoRy7WmruvhqvdaDDkJb/hOqGTNHYREndd4c7rSk7H3vD3/tPb N48jSzq9rnpe8pqm7cTbpVOybJTdw4HJ8SI9rgmLZd4Q+trw4CAzavym/WjjaUTH xZEP1vUWaVxlcQ== -----END CERTIFICATE-----Generated at Wed Aug 5 04:03:05 2026 by rpki-client