$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json) Hash identifier: wulp7PfTe0cNqw440e/fEtW7y9GtIK2L6XnPOfOp9ws= Subject key identifier: 2A:65:0C:0E:98:5D:57:8D:B1:1C:00:9B:D3:F8:46:37:A1:FB:B4:FD Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019F85D63792F39CED90798E4F40FD67EC70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft Manifest number: 1AD5 Signing time: Tue 21 Jul 2026 18:00:36 +0000 Manifest this update: Tue 21 Jul 2026 18:00:36 +0000 Manifest next update: Wed 22 Jul 2026 18:00:36 +0000 Files and hashes: 1: 19Q2Dwhtepvh3WfcRXocelqULL8.roa (hash: 5gim+c2a2kpRDHritwN6RumGls9psmp/ew2vMiVkt54=) 2: 4SJJucH40Dscf3Ue62wtU0DfH6E.roa (hash: QGCBTFVXrzql7PtcPo7oGZ6zg9NODVzu4Qj7AspLapc=) 3: 9NFbvxj2w7VM6vxKq1Roz_jojjQ.roa (hash: kit6Kwkn9tJ2JznDgHVoh92jAz03quG3UuogXP7lLQY=) 4: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: fZWVsYV7BUQmVQgPiUcmcnTqnnANMLAgVSZX/ZGMJMU=) 5: Fm8UQDDxRj3AapGVONseve1Vu_c.roa (hash: /MMrY/Cw2vuv3Ihg0AIYNFIDKJbp4cDD3gVv3uf72Gk=) 6: GM3ERJU6CIy7dwdH0zdNwprJcyY.roa (hash: IlzjX1IkwyvBmzjj9sSoXNpn+4Aebe2rR4YjxBC4Rpw=) 7: HOHhNiuwB0cMh5RUFF-1lXt5zw8.roa (hash: k0AGLs0YgoPPmCz6XJ6TT1Z/0Wgwq5Qa6Ym6t+Mb83g=) 8: HmuiSy6DiqyFIS3hKu7LdivnQl0.roa (hash: AUDFtOT4GZ2PlVwxPCH5qqp0l2hQvma3gFblT+w1Ox0=) 9: IKu2yGBkoazXpkiiazb1p4jf3OI.roa (hash: sGPG+CicCuj6ii9AJ1UODtX4hYRlCD8JM7C2FLI0Fac=) 10: RahpEOjDk8JGqVaMnjYNHjqMCDk.roa (hash: 3i16wtfdxMwVP4jwU43s2Etd+QzTAEC6HDDbzF8Ohw4=) 11: TC_eT-_uQmNc7oH25j9ouSW_pbQ.roa (hash: tFzELYSe05eXp55I4gzQwEHo9uvcyGGItcMS2z7uaLI=) 12: oe9__c4vQI-1sLDyADedRP1CO-k.roa (hash: oY6L5eGC8aMPjhIdr6obVmsLpQESXuitNzVikpRUca0=) 13: pXmxylidYiS8qdJ3VaZ9yLskNbE.roa (hash: TusGBQalo9CLc6zboQZGITSpw51x7npY2VYZcmB0+eY=) 14: vOegqKH11j2ljvuv3PcKJ5eKLGQ.roa (hash: Xifos647golhy2/qMNU8LvVXxPFJdsELgOMybMZy3CM=) 15: xBCJBwVBWVhFXMpZnk1hhNHEtus.roa (hash: JhFeug15ySPa9A1JPmxH1r0jpNDX2NFdPlUO6jS53AM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:85:d6:37:92:f3:9c:ed:90:79:8e:4f:40:fd:67:ec:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Jul 21 18:00:36 2026 GMT Not After : Jul 22 18:00:36 2026 GMT Subject: CN=2a650c0e985d578db11c009bd3f84637a1fbb4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:53:a0:07:44:9e:5d:9e:6a:b2:ec:7c:d7:a6: 37:e5:10:63:3c:d1:df:62:80:7b:d9:cd:a7:db:87: f6:15:98:ae:66:b3:2d:ee:c5:27:4c:56:a1:d3:60: ae:19:83:6b:89:e7:8e:c7:c6:75:be:be:72:df:43: 41:0e:c3:89:56:3f:8f:85:3a:47:7a:3c:53:f2:3c: 43:b4:00:82:5d:68:6a:f4:12:b4:2e:b8:7b:27:7d: 43:75:b0:a3:36:98:cd:20:11:a7:1b:28:d0:7c:ca: fa:32:f2:c2:25:0d:bf:82:50:15:52:2d:98:ed:ae: 5d:92:48:93:a8:82:ed:6a:4c:ee:2e:e1:f8:be:74: 7c:33:e7:44:0b:53:19:16:21:24:98:0b:40:ad:82: 5a:9f:aa:ba:3a:82:3f:f5:b4:a7:e7:82:e4:73:57: 76:7b:5a:db:93:ae:44:86:c5:5a:dd:1f:ad:e5:3e: 90:bb:b8:a9:22:aa:ce:91:5a:19:6c:ae:03:6c:40: 80:eb:45:27:be:2c:ef:57:55:e3:41:bf:b5:17:28: 64:55:4c:26:dd:f7:ac:13:d4:e0:fb:8c:47:b8:01: 5f:c8:e9:86:5e:8d:3f:ab:86:11:e0:53:a8:ef:b2: c6:04:31:a4:1c:43:b8:98:e2:d0:6b:f1:6a:09:52: 7c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:65:0C:0E:98:5D:57:8D:B1:1C:00:9B:D3:F8:46:37:A1:FB:B4:FD X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:76:0b:10:9e:94:c4:04:19:3c:20:be:ca:e3:20:1e:2f:b4: 97:2c:a3:bc:26:ee:cb:34:ea:f3:de:8a:39:c9:99:02:cc:27: ca:12:56:90:70:0a:e3:9b:14:d2:35:b7:d6:35:e0:b3:9c:a7: 9c:1a:c5:96:cc:23:07:bc:00:6b:55:73:56:84:c7:de:4e:05: c2:23:59:99:36:80:8c:39:48:ad:3f:7c:d9:cb:0b:2c:6e:0d: 1b:91:bb:d7:a0:60:b7:e6:eb:3a:66:19:fe:e2:26:f6:21:fd: 20:b7:11:2f:21:92:48:e3:6b:15:ec:54:f4:6f:59:06:10:4b: c5:72:52:a1:f5:14:f2:ee:44:70:93:80:0a:77:57:fb:01:07: d9:59:b4:38:51:37:fc:9c:27:a7:49:2a:7f:e2:40:c1:46:37: ed:7f:5c:2e:cf:86:a9:27:69:66:9f:f7:ac:3f:91:e2:d2:66: 5b:6b:18:6e:5c:86:23:60:80:d5:57:f2:ac:2a:af:cc:5b:b9: 9e:de:95:2f:e2:75:b2:11:fb:cc:6e:b7:7c:79:6a:ac:a5:31: bf:e6:b7:3a:89:e0:bb:f7:32:a4:b5:b8:3a:71:41:44:e3:aa: a3:66:0f:6f:64:29:e4:ac:d3:4c:ed:0e:df:97:24:cf:18:4a: 08:d0:02:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+F1jeS85ztkHmOT0D9Z+xwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwNzIxMTgwMDM2WhcNMjYwNzIyMTgwMDM2WjAzMTEwLwYDVQQD EygyYTY1MGMwZTk4NWQ1NzhkYjExYzAwOWJkM2Y4NDYzN2ExZmJiNGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lOgB0SeXZ5qsux816Y35RBjPNHf YoB72c2n24f2FZiuZrMt7sUnTFah02CuGYNrieeOx8Z1vr5y30NBDsOJVj+PhTpH ejxT8jxDtACCXWhq9BK0Lrh7J31DdbCjNpjNIBGnGyjQfMr6MvLCJQ2/glAVUi2Y 7a5dkkiTqILtakzuLuH4vnR8M+dEC1MZFiEkmAtArYJan6q6OoI/9bSn54Lkc1d2 e1rbk65EhsVa3R+t5T6Qu7ipIqrOkVoZbK4DbECA60UnvizvV1XjQb+1FyhkVUwm 3fesE9Tg+4xHuAFfyOmGXo0/q4YR4FOo77LGBDGkHEO4mOLQa/FqCVJ8RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCplDA6YXVeNsRwAm9P4Rjeh+7T9MB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3YLEJ6U xAQZPCC+yuMgHi+0lyyjvCbuyzTq896KOcmZAswnyhJWkHAK45sU0jW31jXgs5yn nBrFlswjB7wAa1VzVoTH3k4FwiNZmTaAjDlIrT982csLLG4NG5G716Bgt+brOmYZ /uIm9iH9ILcRLyGSSONrFexU9G9ZBhBLxXJSofUU8u5EcJOACndX+wEH2Vm0OFE3 /Jwnp0kqf+JAwUY37X9cLs+GqSdpZp/3rD+R4tJmW2sYblyGI2CA1VfyrCqvzFu5 nt6VL+J1shH7zG63fHlqrKUxv+a3Oongu/cypLW4OnFBROOqo2YPb2Qp5KzTTO0O 35ckzxhKCNACGg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:31:32 2026 by rpki-client