$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft File: byNYUxg5hEeanWn0ChlPC4tn4WU.mft (raw, json) Hash identifier: tBSoND2n9VjD10SY6IEsDHbapdz+54N5jDnuHbz4bPc= Subject key identifier: 52:46:24:E7:66:45:A2:F7:D7:CB:4D:19:CE:62:ED:F9:FB:FD:3C:3F Authority key identifier: 6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65 Certificate issuer: /CN=6f235853183984479a9d69f40a194f0b8b67e165 Certificate serial: 019F85D6792E761862DB8CB665C90B217B35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft Manifest number: 3A Signing time: Tue 21 Jul 2026 18:00:53 +0000 Manifest this update: Tue 21 Jul 2026 18:00:53 +0000 Manifest next update: Wed 22 Jul 2026 18:00:53 +0000 Files and hashes: 1: 2EqLOXKNvsGmoj7xpuTEKcOtCrM.roa (hash: RaceEYp+9x/nmRjbttzsLu4fwsF5EmfcJqvuxa0ObDg=) 2: 3MxkJ8oImusR-x6YZIDHo7H63Vw.roa (hash: OGE63mhnkHU2lgMLydoR0MdyRE14meeXr8jQF5XZkts=) 3: 7rKDOU_X7G1OyAk3fqu3KL_eLNo.roa (hash: MQjxwKpRG2tiJ2eQhlWW1RBEP51Pbiw0toODvQ604Ak=) 4: 9EELKgk7YXr6QiSeinApyGlwoOg.roa (hash: 65EuDdRjxCNjT0cpt3YcmI/39MhqamhYj7mC3NNKwG4=) 5: HE9cym3JGcxgW4NHjoPa5RcMp5Y.roa (hash: el4hRvXmm03w/ouApdicwVDgwdfDa1Ax7skb82xPN74=) 6: T_XID6vuukHAvdlVbOkSvdJrmpQ.roa (hash: 3iwmUlZdkQ/+grvrDB6VspRZaoYjMWi/tzaIbi1/oWU=) 7: XCLmZ42Y2x9YN1-Jb94X567tAPE.roa (hash: ltIWBiaNO3Twv3Jxf5yLk7wkuyVnobkAoGRbCxAIl/Q=) 8: XMiRH-9ajAGA_XqcjhtvZrE8-gw.roa (hash: MyDRiichukTa9/2yAU6IIGMytc1TPM1wlbX1da+yjW4=) 9: Z3Otb6ZgfaO0HwVkH7nhUKwZyEA.roa (hash: Upfc+pXKegcvhRzDlXEiNd2VXaPZzzD0Dy/XWAb+Rt8=) 10: ajCoue65wSBqsLOepcqnGK-maoY.roa (hash: YnWPiPKcNfNunm8Lp8arYjMf1qLz2VlLI9iMozyniiE=) 11: byNYUxg5hEeanWn0ChlPC4tn4WU.crl (hash: JhwolD9u8pM05FyCnFpzjjBIfaBq53HZEV62DCb+4oM=) 12: dGMIw7XyljKZ4VAipgRb_Gv3574.roa (hash: 5XpQyNwCpMd1s8manxuLHo6eOOCEr2maqfz0CCW1PAA=) 13: dgzEX6Rn-OqO4kyR10BfdiXHxCM.roa (hash: q0vAO8NsoCVHvKqTdmqncsS0Cbhf2cyWq21pDNvi164=) 14: huXlbPqAA1b9i7ZmKbP4NUymuTI.roa (hash: 2yKN6PVua0m6pjdKSS6mAuCNTQE3dH0rSHmJAsGUQ2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:85:d6:79:2e:76:18:62:db:8c:b6:65:c9:0b:21:7b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f235853183984479a9d69f40a194f0b8b67e165 Validity Not Before: Jul 21 18:00:53 2026 GMT Not After : Jul 22 18:00:53 2026 GMT Subject: CN=524624e76645a2f7d7cb4d19ce62edf9fbfd3c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:32:91:98:3f:bf:be:66:df:b0:07:45:5b:23: a7:96:ba:2f:74:91:e8:c8:98:cf:b0:a0:7a:32:9c: 18:a6:41:21:31:0b:71:0e:80:2b:a1:ef:f8:f2:9e: 18:15:0f:5b:f3:05:bc:a2:f2:8d:3c:35:11:34:0d: db:b9:0b:86:cd:db:c9:78:4d:8f:25:dd:fe:4c:b9: 16:0e:30:87:34:b5:8a:3c:06:1b:c0:e6:a4:a3:44: 30:68:8d:82:d5:16:8f:0a:99:e9:70:51:05:b1:58: f8:f3:ce:8b:77:22:86:da:7f:b9:70:db:29:05:2a: e7:69:20:fb:63:64:4b:89:75:97:e1:e0:44:f0:13: 15:2e:a6:85:44:f2:17:6d:04:f5:60:64:5d:34:7c: 96:7a:b3:e4:78:13:13:f8:d0:7c:be:ee:ea:df:dc: 9c:c0:94:fe:d3:73:20:0d:9e:93:d6:85:bf:80:7d: 50:7e:9a:57:c1:5d:a3:03:d5:58:b3:a5:1e:97:8f: d0:91:ba:83:62:f7:c4:fb:cb:3b:cc:1a:45:39:da: 13:d5:8a:1a:92:11:00:cd:77:30:59:62:78:e8:99: 68:25:94:4a:96:6d:08:ae:b2:25:b5:64:fb:5b:3e: ff:d0:11:b9:0b:cc:ab:8a:6e:01:16:aa:41:19:64: f4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:46:24:E7:66:45:A2:F7:D7:CB:4D:19:CE:62:ED:F9:FB:FD:3C:3F X509v3 Authority Key Identifier: keyid:6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:d1:c6:4e:ab:f4:45:cc:63:b1:20:5d:20:fc:f0:61:9c:fb: 8a:c2:b5:03:68:7f:ba:05:0a:8b:64:f4:4d:92:de:93:40:ed: df:cc:72:35:7e:51:c6:a3:11:eb:af:0d:71:d3:4e:d3:90:bb: 0d:db:eb:f3:bd:1f:17:a7:f6:bb:5a:14:c5:68:00:1b:ea:e9: d7:97:c6:05:0f:a8:66:22:10:8b:03:51:7a:98:e6:ff:6e:c9: 01:f9:d1:55:06:db:8d:7b:27:53:9b:c0:06:63:fc:2d:5c:3b: 7d:67:69:ae:c9:c0:50:e2:ee:99:2b:a4:46:06:1a:77:74:19: 81:17:0e:c8:a6:73:eb:28:94:37:16:d1:a2:82:a1:90:81:d3: fb:b1:84:4f:62:f8:0c:b3:ee:51:f6:86:dc:e7:87:11:7d:95: b1:a0:71:57:ab:a0:8f:80:db:77:6d:51:29:7a:4a:48:9e:72: b7:89:32:cd:f4:b2:78:d9:5a:bb:25:2f:5c:26:44:70:d9:f7: a2:d0:51:5f:fc:d4:09:5b:4a:0d:a1:be:77:8e:64:0c:25:c6: 8c:0b:90:20:f0:59:8b:e0:5c:c9:d0:be:a5:8d:35:6e:ea:29: ab:5f:1f:80:79:71:f8:61:99:52:a3:5e:4b:ee:7b:20:a8:da: 17:64:9b:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+F1nkudhhi24y2ZckLIXs1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMjM1ODUzMTgzOTg0NDc5YTlkNjlmNDBhMTk0ZjBiOGI2 N2UxNjUwHhcNMjYwNzIxMTgwMDUzWhcNMjYwNzIyMTgwMDUzWjAzMTEwLwYDVQQD Eyg1MjQ2MjRlNzY2NDVhMmY3ZDdjYjRkMTljZTYyZWRmOWZiZmQzYzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zKRmD+/vmbfsAdFWyOnlrovdJHo yJjPsKB6MpwYpkEhMQtxDoAroe/48p4YFQ9b8wW8ovKNPDURNA3buQuGzdvJeE2P Jd3+TLkWDjCHNLWKPAYbwOako0QwaI2C1RaPCpnpcFEFsVj4886LdyKG2n+5cNsp BSrnaSD7Y2RLiXWX4eBE8BMVLqaFRPIXbQT1YGRdNHyWerPkeBMT+NB8vu7q39yc wJT+03MgDZ6T1oW/gH1QfppXwV2jA9VYs6Uel4/QkbqDYvfE+8s7zBpFOdoT1Yoa khEAzXcwWWJ46JloJZRKlm0IrrIltWT7Wz7/0BG5C8yrim4BFqpBGWT0gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJGJOdmRaL318tNGc5i7fn7/Tw/MB8GA1UdIwQY MBaAFG8jWFMYOYRHmp1p9AoZTwuLZ+FlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnlOWVV4ZzVoRWVhblduMENobFBDNHRuNFdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvYnlOWVV4ZzVoRWVhblduMENobFBDNHRuNFdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvYnlOWVV4ZzVoRWVhblduMENobFBDNHRuNFdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNHGTqv0 RcxjsSBdIPzwYZz7isK1A2h/ugUKi2T0TZLek0Dt38xyNX5RxqMR668NcdNO05C7 Ddvr870fF6f2u1oUxWgAG+rp15fGBQ+oZiIQiwNRepjm/27JAfnRVQbbjXsnU5vA BmP8LVw7fWdprsnAUOLumSukRgYad3QZgRcOyKZz6yiUNxbRooKhkIHT+7GET2L4 DLPuUfaG3OeHEX2VsaBxV6ugj4Dbd21RKXpKSJ5yt4kyzfSyeNlauyUvXCZEcNn3 otBRX/zUCVtKDaG+d45kDCXGjAuQIPBZi+BcydC+pY01buopq18fgHlx+GGZUqNe S+57IKjaF2SblA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:36:55 2026 by rpki-client