$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft File: Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json) Hash identifier: UAzOJsR2Q2BU9rGjOmE3bTSqw1e2A5n19ZKAEn9NzAU= Subject key identifier: 8D:A2:03:C9:6E:30:7D:EF:D0:8A:E5:A7:35:C2:23:67:81:EE:43:CF Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Certificate serial: 019FCC019E730FECB1D969476F1AE84B9D68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft Manifest number: 19B4 Signing time: Tue 04 Aug 2026 09:01:25 +0000 Manifest this update: Tue 04 Aug 2026 09:01:25 +0000 Manifest next update: Wed 05 Aug 2026 09:01:25 +0000 Files and hashes: 1: 1-PF6EFWAJX4SaH2fxcxhFuVNThY.roa (hash: oVDsbBbWR9pJm4t6SkKtb3J+OBhZ8wagxkvIV19w5fo=) 2: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: 2OTkZozNd0DGKBbqs0h/pZZAtsyzDH5InJ/f5I4wpU0=) 3: H_7ICe9bA6bKL6KxaXlnbRtE9DQ.roa (hash: myn2XXBsyfDvjK8OtF68llJ02gjDW6IloTyqRTy6l4w=) 4: Hs51wq2_SIQJ1nds1uh8F6Dx3ik.roa (hash: qxptTNT2o/4UgSRP/kpcf65j1wxXKH/EWbmmjxAt01o=) 5: N2OatwOOlKKioT0NRltvF2MW-2A.roa (hash: AtT0Hq5M6f320Q4NS840MNR01KALlUtkbsCAVvpe4jQ=) 6: OnrSgXShMD1_YxLsr4K4NR2DYjo.roa (hash: bEj/ZTsWrileSoseeV3gIpSqKmunzW5sU0pOXuBCYTw=) 7: P36bForyKz3A1xYxUt5uRvnbjGo.roa (hash: CVAU2pcmHNPpR0Ea2g62GxYoWi/yJ4n8I1Gjfyzzm7o=) 8: UqleOCOfPnolHy26c63w8sv6kxk.roa (hash: TFhiCPhgDCJT/VB/4VLTfoJPPS4mOC/hIwRArT1aGa4=) 9: dQBVu3zWk3nAHNSG6Exad3J7mlM.roa (hash: mGD/nKh2PI3t3mqHrxwywCF6Z+wlDVg8jDBZNwnvzDo=) 10: kTAGdAP94XB_eZK0C7vAHDqzJI8.roa (hash: CuJkjxQNxfp3wO54mRyTZ1oYxOazwRwfQjI9X+1M5ho=) 11: r_euWEHWB_wzU16rSDnkg8NIiGM.roa (hash: 12QG/5iTtnjlTjpFN6Uc829CvAhr4LDM2fjYVha8AqA=) 12: uZHn0r02l2agjVRMRfZ3xICbMLw.roa (hash: YR/6cl0OhmlwCiQwg5TQ7bSWNguLPLl/GP2GOc23T+k=) 13: yYOwtyKahcxZCOoytNIFiE-qAW8.roa (hash: eofnDKszG901n4rKY8DsTQFASkhAGR/8+Zpt3ZNH6qA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:cc:01:9e:73:0f:ec:b1:d9:69:47:6f:1a:e8:4b:9d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Validity Not Before: Aug 4 09:01:25 2026 GMT Not After : Aug 5 09:01:25 2026 GMT Subject: CN=8da203c96e307defd08ae5a735c2236781ee43cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:04:16:fe:e5:eb:0b:b2:28:14:f4:40:ed: 73:17:83:4e:1e:c9:d3:52:2c:fd:97:1a:49:b9:23: da:f4:27:97:d9:54:aa:2c:73:f0:bb:a1:b7:47:50: 40:f0:89:d8:49:31:c2:17:d7:ef:9b:79:57:39:76: 58:c0:7f:58:03:21:a2:28:6d:73:25:0e:b7:f3:ae: 7a:9c:c4:6c:e4:63:97:47:c0:61:77:5d:95:35:56: 2c:e6:46:c3:e2:ba:24:22:a2:2a:66:7f:85:9d:91: 1d:92:de:a1:75:ca:e0:f3:5a:40:04:b4:36:d1:76: 18:e2:f3:dd:69:f8:ce:65:60:5c:3d:7f:c1:67:37: 32:06:8f:1e:2b:f3:d0:83:9a:14:4e:10:72:f3:cf: eb:25:e1:f4:4d:d6:55:96:8b:be:77:55:11:97:1e: 2a:29:ab:fc:63:49:99:ab:ab:e9:ba:2a:c4:fb:50: 9d:79:27:16:2d:66:c0:9e:18:30:41:ab:e2:b9:7a: 4e:9a:4e:b9:75:68:85:86:d4:22:c6:2e:10:bd:cf: e2:86:36:74:3c:35:18:32:b2:10:15:c3:0f:71:5c: 0f:44:5c:c3:10:0c:04:0f:d2:dc:c3:8c:ba:9a:03: dc:fa:18:e2:e8:46:8e:27:5c:60:b3:05:85:a3:96: 16:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A2:03:C9:6E:30:7D:EF:D0:8A:E5:A7:35:C2:23:67:81:EE:43:CF X509v3 Authority Key Identifier: keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:88:f3:dd:b8:64:29:40:85:3b:6e:13:17:45:d4:d4:ad:34: a2:9c:a5:a5:c9:b3:e1:78:03:ac:d4:2e:20:4a:fb:e0:71:c3: 01:1f:02:61:89:df:e4:54:d9:63:47:00:d4:e2:e0:60:d0:76: de:c0:7d:77:30:dc:2e:39:41:69:c3:e5:fe:87:75:8e:ca:46: 20:60:60:c8:8f:61:9b:3b:67:b5:8d:20:68:93:da:bf:83:fb: 72:7b:08:62:31:96:8e:b9:00:54:33:37:51:05:a2:a6:72:7d: b7:8e:0c:22:c6:6c:f2:4e:00:a2:59:65:b4:a5:7e:ed:37:2f: 9f:d4:15:c4:68:5d:f7:49:7d:b6:42:b7:02:44:21:9d:a5:cb: 4b:73:9d:0e:6d:fa:b9:fb:02:99:31:68:09:27:71:33:84:32: 61:f5:40:7a:4d:e1:66:9f:a5:d7:58:9b:1f:1d:9d:ba:2e:ae: 04:05:f0:b6:b5:b3:a4:9c:39:1c:2e:38:98:14:3b:a6:b5:52: dd:00:05:b6:34:c8:06:de:e1:07:06:04:a6:0a:b1:6b:54:29: c4:23:44:12:10:b6:95:0c:4c:7f:a7:d8:02:78:71:fb:5d:83: e6:84:11:63:95:a0:76:57:1d:a1:6d:a6:90:d8:75:c3:21:a2: c1:1d:d6:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/MAZ5zD+yx2WlHbxroS51oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlM2YzMWM5ZWFjZTZmMGE1ZWNjZGI4ZGYyYjAxYzczNTE1 Njg2ODYwHhcNMjYwODA0MDkwMTI1WhcNMjYwODA1MDkwMTI1WjAzMTEwLwYDVQQD Eyg4ZGEyMDNjOTZlMzA3ZGVmZDA4YWU1YTczNWMyMjM2NzgxZWU0M2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNIEFv7l6wuyKBT0QO1zF4NOHsnT Uiz9lxpJuSPa9CeX2VSqLHPwu6G3R1BA8InYSTHCF9fvm3lXOXZYwH9YAyGiKG1z JQ638656nMRs5GOXR8Bhd12VNVYs5kbD4rokIqIqZn+FnZEdkt6hdcrg81pABLQ2 0XYY4vPdafjOZWBcPX/BZzcyBo8eK/PQg5oUThBy88/rJeH0TdZVlou+d1URlx4q Kav8Y0mZq6vpuirE+1CdeScWLWbAnhgwQaviuXpOmk65dWiFhtQixi4Qvc/ihjZ0 PDUYMrIQFcMPcVwPRFzDEAwED9Lcw4y6mgPc+hji6EaOJ1xgswWFo5YW1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2iA8luMH3v0IrlpzXCI2eB7kPPMB8GA1UdIwQY MBaAFA4/Mcnqzm8KXszbjfKwHHNRVoaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYt ZGQ1ZGRkMDVkYjBiLzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYtZGQ1ZGRkMDVkYjBi LzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWojz3bhk KUCFO24TF0XU1K00opylpcmz4XgDrNQuIEr74HHDAR8CYYnf5FTZY0cA1OLgYNB2 3sB9dzDcLjlBacPl/od1jspGIGBgyI9hmztntY0gaJPav4P7cnsIYjGWjrkAVDM3 UQWipnJ9t44MIsZs8k4AollltKV+7Tcvn9QVxGhd90l9tkK3AkQhnaXLS3OdDm36 ufsCmTFoCSdxM4QyYfVAek3hZp+l11ibHx2dui6uBAXwtrWzpJw5HC44mBQ7prVS 3QAFtjTIBt7hBwYEpgqxa1QpxCNEEhC2lQxMf6fYAnhx+12D5oQRY5WgdlcdoW2m kNh1wyGiwR3WMg== -----END CERTIFICATE-----Generated at Tue Aug 4 13:39:32 2026 by rpki-client