$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft File: Us2aZRLb8lpfGbgn16LH4iou6N0.mft (raw, json) Hash identifier: MVchh+HTLj7Czs8r83prNzA7nqAD4pjKIl7hylsGxRU= Subject key identifier: 5D:C7:00:BD:20:CE:41:C3:F5:6A:B8:7C:17:17:5D:04:24:F3:47:B7 Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 019FA0A888612D02B02724D05ADABF9E22DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft Manifest number: 0CA2 Signing time: Sun 26 Jul 2026 23:00:27 +0000 Manifest this update: Sun 26 Jul 2026 23:00:27 +0000 Manifest next update: Mon 27 Jul 2026 23:00:27 +0000 Files and hashes: 1: 1-IlB2CphFhJ1Es2Auj6Y8Pv_wcE.roa (hash: dBSNrPPwvAMKy5o27/nj2blgxOw2PO1uOCPT4ejHFgg=) 2: 2GKmq9a4tbRnyy5v_dzbijUGgpo.roa (hash: 5lV0Dnj2JREu67qpiN4zC8MeQVoN3LVpjCKJ+YsJ3TU=) 3: 2rLUhnluwL6wnKGGvW337qHfa_A.roa (hash: vOmCdy4dcO0yKPbRSBS7H0+V0LqrEgZGLIPDsfuR8RI=) 4: 3JNAFPmuRusA7_P1cHUrpNc8ZWQ.roa (hash: zKy+aXsrA8Z978tqaQi0ynXqJW9mllBBtqQYt4mz8gc=) 5: 3eP-ZYKR74zQteZxg-jYK68KuKU.roa (hash: rI+Q6O08EYSoWZw7Ks588qVsTWbvSuHUC1dp2GQPsEg=) 6: 4_TTRfrA4hvyb8aeVnebRoG9aZ4.roa (hash: 3NbkuqOTF46pDYs4QB6pgruxYNEcPm4QNzecOj1ivnE=) 7: K4nRKzI3t0qU5zPc_fpVXCB6bWc.roa (hash: 0Zeu5WbfkcoRWCcChq+NWwrNo0Y/QIR7cp1J9a7juh8=) 8: KWeUe8stEcRBCfK1V9M1OdEhYVo.roa (hash: 5db5SBY8xLjigcej1g8W2J/cv1YnUc8GiiKN3rxcM4Y=) 9: Px4XmExl2QONyqSP6s8-qLoIeoI.roa (hash: reA0XoIHBbZsGAjNzRWT9dW+9757Ms5dgcUGYfnrDi8=) 10: SY0oaouPknTSy2MmGqSQOcOco4Q.roa (hash: HRxdYO/Iechw+UCcupxpKvFHOwFwn4JRjC6eMfFT/dQ=) 11: Us2aZRLb8lpfGbgn16LH4iou6N0.crl (hash: tCTAtnUrtMt5e65Rw9qZZyR0BZSFAtZnbgJ9mOnuO0w=) 12: b4bnSjrxkGqwlr0zkoxcOijmFkc.roa (hash: fQuLS072q+zjmBm2EgGlUmemoEePNKD15HIZM6Eyfw4=) 13: cwwhcNpzOg_pmBszouIx8h2CHRU.roa (hash: vBJrQQ0ItgE86n69h/fkj396ErwZyqxGCsEUUVNAzdI=) 14: hlAbpQnKYaIDHrjCT-1lNBwSXu0.roa (hash: BILz2oAMGgMF6vZP6W3jaxaaHIODVkHC+m/GaL33QlM=) 15: kPZtrooPlOyF8jQupuEU9Gy1bJQ.roa (hash: KtcI+6F6qPHzsOZYQ0EOD+pODuibLz2OAgS4M/a6Aq4=) 16: oLlQgePRk9yvcOlL0Fl_a56u9H4.roa (hash: Wqock9cGRbZPQGtCkafIuYZm7FqajUuA17fJ83OGRks=) 17: xp9MuE3K7E-Sb2HgnwhKc3yErto.roa (hash: 9FJKEkYOHXVi/GiMh+ZQtwPZthuSJbC+u80wUEZ5uBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a0:a8:88:61:2d:02:b0:27:24:d0:5a:da:bf:9e:22:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Jul 26 23:00:27 2026 GMT Not After : Jul 27 23:00:27 2026 GMT Subject: CN=5dc700bd20ce41c3f56ab87c17175d0424f347b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c4:9e:f6:59:a4:bf:2c:a1:62:80:c0:15:8e: fd:ad:23:0e:55:88:b4:61:df:c8:df:9c:cf:a4:51: 82:93:97:e2:e1:44:a4:8c:69:98:89:f1:69:24:b9: 67:0f:84:6c:92:54:09:a0:ab:68:6f:10:b0:c3:84: 92:d4:dc:38:72:bf:74:89:ab:40:e6:68:04:d0:63: f7:fa:49:0a:bb:f4:97:c0:dd:d5:1b:27:89:16:91: bf:4e:ec:b3:83:81:eb:1f:58:da:18:74:41:94:f7: 2a:3e:0c:0e:36:4e:a6:88:dd:ba:43:89:03:5a:ea: 4c:d7:d2:6c:89:76:6f:e2:b1:66:07:fd:02:3e:2c: 19:76:06:6d:4d:0a:4f:2b:bf:9a:a8:1c:ba:c2:d7: bc:8d:1b:7f:45:85:4d:51:a0:55:f6:8e:3e:89:80: 9b:c3:2e:fa:82:af:52:a1:9d:da:a6:14:13:2b:70: 75:1c:64:ff:d2:e8:70:80:bc:9f:fd:50:c9:f1:a4: 41:4b:33:80:02:8f:fe:82:7e:0c:07:57:43:12:c8: 4e:4a:46:38:b1:c4:c9:f7:56:4e:fd:db:06:ff:aa: 3c:50:41:52:74:d0:a5:f1:5d:e3:80:1d:11:f6:6f: ee:54:56:44:53:80:dd:13:d2:f8:6c:38:8a:83:61: f8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C7:00:BD:20:CE:41:C3:F5:6A:B8:7C:17:17:5D:04:24:F3:47:B7 X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:82:c7:9c:e8:96:bb:fc:a4:82:f0:cc:c6:dd:ae:46:e9:df: ba:10:69:c6:9d:37:b2:31:7a:d0:93:54:cf:c5:7b:ff:a6:51: 28:e4:e1:0a:b8:02:5c:c4:80:e1:d4:f6:47:71:f8:64:24:bd: dd:c3:96:ba:24:89:fb:76:9d:cd:4e:a1:d4:71:0d:94:14:26: d4:1a:5e:d1:4e:2b:9a:c3:67:1c:4e:f4:48:2d:08:96:60:13: e2:73:b6:a2:46:e1:a4:13:df:80:44:27:da:ac:96:83:c1:c4: 27:bf:95:1a:b0:66:b6:7d:3b:88:3a:0c:f7:57:06:6d:7c:d9: 82:14:ea:ec:99:b7:83:73:61:e8:e1:95:20:2e:87:62:f0:9f: b3:48:cf:73:96:b2:56:a4:7c:58:2b:bc:c4:7b:59:71:b4:23: 24:26:f4:08:94:5d:f2:d2:d9:3c:5e:32:70:12:ab:fb:ec:15: 59:ee:ca:13:82:73:92:1a:42:be:c8:3c:f1:84:b6:19:a8:9d: 62:69:6d:b5:08:35:2a:15:92:cf:5a:30:cf:eb:cd:54:5b:06: 81:0c:7d:9b:d9:cb:8a:ac:1e:fe:6a:0c:65:f8:ca:2b:ac:3b: 1f:14:9e:0b:1b:46:27:9d:4d:54:d2:0e:a0:43:a2:66:56:38: 25:78:89:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+gqIhhLQKwJyTQWtq/niLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjYwNzI2MjMwMDI3WhcNMjYwNzI3MjMwMDI3WjAzMTEwLwYDVQQD Eyg1ZGM3MDBiZDIwY2U0MWMzZjU2YWI4N2MxNzE3NWQwNDI0ZjM0N2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MSe9lmkvyyhYoDAFY79rSMOVYi0 Yd/I35zPpFGCk5fi4USkjGmYifFpJLlnD4RsklQJoKtobxCww4SS1Nw4cr90iatA 5mgE0GP3+kkKu/SXwN3VGyeJFpG/Tuyzg4HrH1jaGHRBlPcqPgwONk6miN26Q4kD WupM19JsiXZv4rFmB/0CPiwZdgZtTQpPK7+aqBy6wte8jRt/RYVNUaBV9o4+iYCb wy76gq9SoZ3aphQTK3B1HGT/0uhwgLyf/VDJ8aRBSzOAAo/+gn4MB1dDEshOSkY4 scTJ91ZO/dsG/6o8UEFSdNCl8V3jgB0R9m/uVFZEU4DdE9L4bDiKg2H4qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3HAL0gzkHD9Wq4fBcXXQQk80e3MB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoLHnOiW u/ykgvDMxt2uRunfuhBpxp03sjF60JNUz8V7/6ZRKOThCrgCXMSA4dT2R3H4ZCS9 3cOWuiSJ+3adzU6h1HENlBQm1Bpe0U4rmsNnHE70SC0IlmAT4nO2okbhpBPfgEQn 2qyWg8HEJ7+VGrBmtn07iDoM91cGbXzZghTq7Jm3g3Nh6OGVIC6HYvCfs0jPc5ay VqR8WCu8xHtZcbQjJCb0CJRd8tLZPF4ycBKr++wVWe7KE4JzkhpCvsg88YS2Gaid YmlttQg1KhWSz1owz+vNVFsGgQx9m9nLiqwe/moMZfjKK6w7HxSeCxtGJ51NVNIO oEOiZlY4JXiJnw== -----END CERTIFICATE-----Generated at Mon Jul 27 05:42:26 2026 by rpki-client