$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: 4mQTfJByrYUbxtJgyjD4nFZ4KdQ/WZh75PuFbIhF2Ow= Subject key identifier: 05:97:BB:D2:27:A0:B8:E4:C8:FD:5F:73:C3:43:2A:05:D2:A1:9A:5A Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019FB19CA98730C28C6EE1C3D6B23B299D7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 13A5 Signing time: Thu 30 Jul 2026 06:01:01 +0000 Manifest this update: Thu 30 Jul 2026 06:01:01 +0000 Manifest next update: Fri 31 Jul 2026 06:01:01 +0000 Files and hashes: 1: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=) 2: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: H0xkaI8xf3ADq/I2txbViNBPIlE2aqs7NpPED+ufzFo=) 4: M3d-ndtS-EWKNtc6mJwZhcKWXhE.roa (hash: IX96+0wugdLurSubiSiT1icuKiERC0yGvvvWL4yy+fQ=) 5: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=) 6: WyLq5mdKCW2UGDpdqrK7Xp2HJRc.roa (hash: 3yoswgkDWLABDVLm06inU+3X5NuNCflUQTjxzRiweyM=) 7: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=) 8: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=) 9: h3O572ai_eUifMk-F32TUL7VkXM.roa (hash: 66/7jgHjdxS0pR5qYD6CjCTDfR7QgTTO/qDff+KDDOM=) 10: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=) 11: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=) 12: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=) 13: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 31 Jul 2026 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:b1:9c:a9:87:30:c2:8c:6e:e1:c3:d6:b2:3b:29:9d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Jul 30 06:01:01 2026 GMT Not After : Jul 31 06:01:01 2026 GMT Subject: CN=0597bbd227a0b8e4c8fd5f73c3432a05d2a19a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:9f:c7:35:0a:ed:4d:7a:ab:f4:7f:64:a7: e2:e7:85:ac:90:74:4e:ab:4f:e7:61:f5:1d:0b:2b: 93:99:5c:83:13:2a:fa:84:25:38:30:d3:46:f6:38: 66:97:6b:34:c4:3b:e2:c8:c3:e5:12:6f:3a:21:2a: 0b:db:b9:e6:15:b7:ca:c2:31:f8:8d:4d:a1:0a:8b: 1f:5d:ce:b5:31:61:95:66:fa:64:f0:b8:84:7f:e4: 47:32:19:8b:81:de:bb:10:b9:a7:3a:70:30:1c:58: 2c:5f:e9:8b:7b:66:02:88:46:fa:be:66:7e:65:a0: a3:b6:50:1b:a6:fc:b4:92:06:1e:88:58:0d:80:2c: 7a:31:77:f7:9f:28:b1:a2:e8:fb:9c:02:61:d6:a4: f3:e8:79:ab:a2:1e:b1:3e:45:91:3e:d1:e8:7b:fb: 32:a5:6a:43:d9:fe:35:29:83:aa:a9:61:78:77:e5: 7d:3c:c9:23:17:79:75:08:97:52:a6:36:65:22:56: 75:b5:55:ea:8f:cc:12:9e:99:e1:95:5d:91:8e:02: bc:d7:88:d2:bc:9e:9e:5e:7f:e2:8b:43:f0:41:a6: bf:52:5e:77:49:c4:78:c9:7f:37:dd:c6:59:bc:50: b9:8b:e2:a8:25:b7:48:de:ca:f4:d1:e1:85:20:1f: c7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:97:BB:D2:27:A0:B8:E4:C8:FD:5F:73:C3:43:2A:05:D2:A1:9A:5A X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:3b:74:20:c3:1e:7b:b2:2b:03:ac:82:54:9a:8b:b0:56:24: 51:01:bb:17:7d:68:80:32:58:d9:28:ec:38:6b:66:c1:9d:49: 79:79:c6:2c:ea:2f:fe:ad:ff:b8:1a:2b:16:b0:10:60:64:f3: 2c:83:2d:0b:91:a7:42:36:4a:26:f9:fc:7c:46:b7:3b:cc:a7: db:b6:f3:1d:8a:78:02:35:0e:4d:c4:aa:af:c5:13:b2:d0:f3: fb:9e:e3:81:98:9d:43:04:50:8f:15:9f:49:1c:e8:72:d4:20: f8:c9:9d:fc:6f:70:b8:3a:cb:01:be:c2:4c:a5:f9:37:6d:8b: 37:f0:38:7d:f6:d2:af:88:0f:8f:88:8c:16:09:26:7c:0a:4e: af:99:fc:b3:08:e3:1b:33:09:3c:84:96:92:58:61:ab:32:7b: 99:53:cc:5f:f5:5e:bb:0c:fd:34:43:40:ba:cb:0b:59:dd:ab: 16:b1:5a:b6:90:8f:91:17:c6:d0:84:c3:4f:0f:ff:6c:33:67: d8:55:22:79:31:87:3e:2f:d4:80:cd:08:72:f7:3c:90:fd:0c: 8c:5c:16:44:5e:f1:00:1c:ab:99:25:22:ed:97:0f:f0:b9:1f: 51:a4:53:79:6b:49:bd:59:68:6e:ab:0f:60:0f:4c:5b:ec:cd: 02:5c:78:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+xnKmHMMKMbuHD1rI7KZ1/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwNzMwMDYwMTAxWhcNMjYwNzMxMDYwMTAxWjAzMTEwLwYDVQQD EygwNTk3YmJkMjI3YTBiOGU0YzhmZDVmNzNjMzQzMmEwNWQyYTE5YTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S2fxzUK7U16q/R/ZKfi54WskHRO q0/nYfUdCyuTmVyDEyr6hCU4MNNG9jhml2s0xDviyMPlEm86ISoL27nmFbfKwjH4 jU2hCosfXc61MWGVZvpk8LiEf+RHMhmLgd67ELmnOnAwHFgsX+mLe2YCiEb6vmZ+ ZaCjtlAbpvy0kgYeiFgNgCx6MXf3nyixouj7nAJh1qTz6Hmroh6xPkWRPtHoe/sy pWpD2f41KYOqqWF4d+V9PMkjF3l1CJdSpjZlIlZ1tVXqj8wSnpnhlV2RjgK814jS vJ6eXn/ii0PwQaa/Ul53ScR4yX833cZZvFC5i+KoJbdI3sr00eGFIB/H8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWXu9InoLjkyP1fc8NDKgXSoZpaMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjt0IMMe e7IrA6yCVJqLsFYkUQG7F31ogDJY2SjsOGtmwZ1JeXnGLOov/q3/uBorFrAQYGTz LIMtC5GnQjZKJvn8fEa3O8yn27bzHYp4AjUOTcSqr8UTstDz+57jgZidQwRQjxWf SRzoctQg+Mmd/G9wuDrLAb7CTKX5N22LN/A4ffbSr4gPj4iMFgkmfApOr5n8swjj GzMJPISWklhhqzJ7mVPMX/Veuwz9NENAussLWd2rFrFatpCPkRfG0ITDTw//bDNn 2FUieTGHPi/UgM0Icvc8kP0MjFwWRF7xAByrmSUi7ZcP8LkfUaRTeWtJvVlobqsP YA9MW+zNAlx4ZA== -----END CERTIFICATE-----Generated at Thu Jul 30 11:49:38 2026 by rpki-client