$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: r9B2Ffb3MmLTPp5OjdqZoBFHKdZ+30yUJkr5e7zjp1c= Subject key identifier: 10:33:73:AE:94:85:4D:80:58:9A:6F:6A:98:83:B7:3A:6E:E1:D7:2E Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 019FC9DC3D60CE8921F0780BFA37007E3CC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 19F0 Signing time: Mon 03 Aug 2026 23:01:21 +0000 Manifest this update: Mon 03 Aug 2026 23:01:21 +0000 Manifest next update: Tue 04 Aug 2026 23:01:21 +0000 Files and hashes: 1: 1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa (hash: qtH86zFamX3mvPAvdw+q4UCXn4ioDZi9V1NWUgQSNY4=) 2: FVTkjzWbmN1CXQ1gquYHPct9ixg.roa (hash: O+F6tjESCYzZkWop7KXE+D6dIUDkHaDfPEsn4FO2i5Y=) 3: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: SwpUDm2oklz0ml6V6Hd6//KTOX+MAC2mVKA3byrY9+I=) 4: U_NZYpjmvtYZaAL9QOJbt18Da90.roa (hash: ImEoqLKkocpZGN3jliyG2JmnXa2NgKRx1aFT2s7Ccsg=) 5: XjDc2QA9m4quHMdfD5XNqmD-sRU.roa (hash: hUIq0ryrPFUtWnGVn0EVGNy126+7rvo1zZWi0URfcgg=) 6: b-jvFTusq2yMHvQus-EOGvQIcIU.roa (hash: UEESHc2CoqAdsZBnwreDavJ8dh67qE0F5/NXF/uJif0=) 7: eVf9uWw4an4J37lWXFXCY7TXLRA.roa (hash: TLeYBm2fbdmHg6RfdNeCWlTy8uamiAq/QUF9qcFVMZU=) 8: ossK8NVWIjYFpVS_EefAqYZy2IE.roa (hash: /y0pnw5X9uBmKvZNWFvXcQIM9KTs6u2DfBY5eqhbuoU=) 9: tsRs_smMGnXJS6Ngg5EdidV6amo.roa (hash: s9qZIcL7Vpb5CW9P2b/OUKeQv+DX4uJC5U3wk2Lpo2c=) 10: txvH1TOH6wMQ5yQgLlacwoKKBQ4.roa (hash: edU/OVpHTHKV2scSWmXngs1gD9tCdP7QXrGFexnNs6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Aug 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:c9:dc:3d:60:ce:89:21:f0:78:0b:fa:37:00:7e:3c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Aug 3 23:01:21 2026 GMT Not After : Aug 4 23:01:21 2026 GMT Subject: CN=103373ae94854d80589a6f6a9883b73a6ee1d72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:7c:94:e0:04:93:0b:46:0c:92:b0:6f:2f: e7:a5:f3:1c:3e:ac:8c:26:6e:2c:f5:c1:f3:ae:4e: 12:cc:16:fa:8a:46:18:85:09:bc:dd:d6:9d:28:35: 61:5f:65:c0:b9:44:4a:74:9c:f2:44:46:cb:60:d1: be:8a:68:69:06:72:9c:c9:7b:40:68:6e:f5:0b:3e: 59:96:08:a4:13:d3:a6:48:07:a0:b3:12:4f:6f:93: ec:58:b6:7e:3a:b2:a6:09:68:a7:1a:ab:f5:c3:af: aa:af:9e:f0:3b:54:de:1b:f8:bc:ad:e4:f0:e1:0b: 98:df:b3:b1:a4:94:70:86:84:56:78:37:f5:5b:95: b5:1b:90:bb:52:d4:d5:31:68:fb:0b:73:42:1a:fe: af:22:d3:e3:45:96:3a:cf:0f:21:41:01:1c:f7:19: 2a:64:a1:e0:cd:3d:95:93:f3:8c:d2:2c:31:29:b4: 58:62:40:12:3a:e1:b8:e6:d9:fa:36:55:6a:f7:83: 18:5a:54:6a:c4:5e:9b:19:77:46:01:c5:03:a2:47: 7d:ac:86:72:0e:ef:eb:2b:7a:04:a2:ae:51:f0:3b: dd:59:ad:32:06:20:78:4d:b1:9a:ea:0b:86:1c:2e: 68:c8:9b:f1:6d:7a:63:48:36:1d:c9:33:22:30:82: 31:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:33:73:AE:94:85:4D:80:58:9A:6F:6A:98:83:B7:3A:6E:E1:D7:2E X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:2d:1b:b5:4c:7a:41:bd:7d:f9:25:74:7a:4f:b4:86:60:6c: f9:b3:7b:e8:2f:03:ea:9f:87:fc:0b:21:9f:04:f4:81:d3:c4: 36:ed:5a:d4:c7:92:bd:67:56:7b:50:5b:e9:89:92:25:74:81: f3:a7:e1:c4:ea:44:c5:e9:d9:af:13:75:a8:25:20:d7:e3:79: f8:ae:f0:c0:ca:81:6d:04:34:23:5d:52:33:41:20:75:ab:7f: 6b:7c:4f:25:33:cd:d4:2b:2a:73:7b:d0:75:73:02:8e:f3:e2: 98:07:97:f3:31:35:a4:22:7a:bc:80:36:99:69:c6:09:3d:54: ad:21:ca:02:f2:67:1f:1b:01:59:1a:4d:0a:60:e5:79:83:1f: af:3d:4c:1c:84:d8:e2:65:0e:d2:38:d3:7a:f7:83:9d:64:4d: 24:ad:df:00:56:22:d2:b3:1c:50:e0:55:c9:0f:c2:52:d2:0f: 1a:36:ab:db:04:76:f4:3c:e9:8c:6f:70:02:e7:95:11:f4:25: b3:48:df:65:96:eb:ea:72:0f:04:ae:d9:8a:b5:33:8f:e7:c9: 0e:68:1d:d9:5d:a5:10:d4:51:6f:6a:53:7b:28:2d:bb:55:a9: 47:c7:73:fa:73:2c:65:1b:c4:a9:69:72:e1:21:11:f3:1b:d5: 96:d8:dd:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/J3D1gzokh8HgL+jcAfjzEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjYwODAzMjMwMTIxWhcNMjYwODA0MjMwMTIxWjAzMTEwLwYDVQQD EygxMDMzNzNhZTk0ODU0ZDgwNTg5YTZmNmE5ODgzYjczYTZlZTFkNzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvF8lOAEkwtGDJKwby/npfMcPqyM Jm4s9cHzrk4SzBb6ikYYhQm83dadKDVhX2XAuURKdJzyREbLYNG+imhpBnKcyXtA aG71Cz5ZlgikE9OmSAegsxJPb5PsWLZ+OrKmCWinGqv1w6+qr57wO1TeG/i8reTw 4QuY37OxpJRwhoRWeDf1W5W1G5C7UtTVMWj7C3NCGv6vItPjRZY6zw8hQQEc9xkq ZKHgzT2Vk/OM0iwxKbRYYkASOuG45tn6NlVq94MYWlRqxF6bGXdGAcUDokd9rIZy Du/rK3oEoq5R8DvdWa0yBiB4TbGa6guGHC5oyJvxbXpjSDYdyTMiMIIx0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAzc66UhU2AWJpvapiDtzpu4dcuMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEC0btUx6 Qb19+SV0ek+0hmBs+bN76C8D6p+H/AshnwT0gdPENu1a1MeSvWdWe1Bb6YmSJXSB 86fhxOpExenZrxN1qCUg1+N5+K7wwMqBbQQ0I11SM0Egdat/a3xPJTPN1Csqc3vQ dXMCjvPimAeX8zE1pCJ6vIA2mWnGCT1UrSHKAvJnHxsBWRpNCmDleYMfrz1MHITY 4mUO0jjTeveDnWRNJK3fAFYi0rMcUOBVyQ/CUtIPGjar2wR29DzpjG9wAueVEfQl s0jfZZbr6nIPBK7ZirUzj+fJDmgd2V2lENRRb2pTeygtu1WpR8dz+nMsZRvEqWly 4SER8xvVltjdZg== -----END CERTIFICATE-----Generated at Tue Aug 4 08:50:16 2026 by rpki-client