$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json) Hash identifier: y0uLZu4X9yvNi/C258dBR1pVBOP4776ZD2E5I6vWAv8= Subject key identifier: 99:79:D5:FA:CB:B3:53:BC:54:75:94:FE:31:2A:32:B5:D9:F1:0C:F4 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019F829E68BB3860AE863AFEB899E7B9688A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft Manifest number: 027F Signing time: Tue 21 Jul 2026 03:00:47 +0000 Manifest this update: Tue 21 Jul 2026 03:00:47 +0000 Manifest next update: Wed 22 Jul 2026 03:00:47 +0000 Files and hashes: 1: 5bgXaKN4hNNnz1DSnp5RelfVjjU.roa (hash: dYGhF0WHwXTYiuMBvgCo0Nh2zgJTOeCE4oHJREko2dE=) 2: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (hash: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE=) 3: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (hash: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8=) 4: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (hash: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY=) 5: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (hash: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0=) 6: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (hash: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw=) 7: Uv6m5Ze8bGG3Zo-jWPLZit_cFAU.roa (hash: jJYA/CveQeDzpZWlaXQqIIF2Ui2N++3iqqXHakxy7Dw=) 8: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (hash: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE=) 9: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (hash: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4=) 10: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (hash: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c=) 11: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: CdLxUKa8QlGsZda2fM0ZjRzC6cwPsX/SbU2en0megy8=) 12: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (hash: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0=) 13: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (hash: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 03:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:82:9e:68:bb:38:60:ae:86:3a:fe:b8:99:e7:b9:68:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Jul 21 03:00:47 2026 GMT Not After : Jul 22 03:00:47 2026 GMT Subject: CN=9979d5facbb353bc547594fe312a32b5d9f10cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:b1:dd:59:a1:96:fe:f3:70:d4:30:05:5b: c2:dd:be:1f:06:d1:c6:ce:5a:95:02:a8:91:9f:71: 9c:ae:1e:7b:0e:d4:4b:9e:91:ef:37:1c:84:62:96: e1:48:62:87:b3:82:39:45:f1:54:b9:6c:a8:2b:58: fc:bc:de:44:51:e7:e0:f4:0d:46:df:4d:3f:f3:e1: d4:b2:26:7b:6b:55:70:0c:e6:67:30:2a:66:dd:ad: f9:e9:46:dc:ba:f1:13:69:99:ed:f9:30:18:19:20: 33:72:c3:eb:dd:3a:fd:db:7b:d8:d2:f6:b4:5c:b3: 60:45:d6:02:12:a6:0e:c9:5e:93:3f:e1:55:ed:f6: be:d3:c3:95:ae:75:98:ce:82:b4:0c:61:ea:d1:4e: d2:0f:82:0f:ec:4a:66:54:6f:ec:23:85:30:d5:9b: 02:f5:e9:ae:8c:1c:1c:6f:b9:a3:04:62:b7:0b:d1: d5:b0:5f:5c:0d:30:26:8c:85:7a:2d:d1:4b:3b:ef: 55:9a:44:2a:e9:eb:96:20:2d:c1:ee:cd:21:af:2e: 0c:4d:69:f1:d1:8b:03:bf:8e:f8:19:17:b5:18:2a: db:c8:06:86:0f:3c:2a:91:59:ed:61:23:4c:a3:3c: 55:4d:8e:5a:e0:59:c3:5e:c2:be:c5:20:c7:54:c7: 40:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:79:D5:FA:CB:B3:53:BC:54:75:94:FE:31:2A:32:B5:D9:F1:0C:F4 X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:75:37:8a:0e:6e:46:ee:94:5b:10:95:f9:18:36:c9:1f:e5: 42:73:39:5e:ba:d1:00:c9:3c:6c:50:c3:1d:94:51:3f:4c:bf: e3:42:4e:70:cb:ac:ad:45:69:e0:e1:6b:e5:6e:c0:ab:b2:94: 99:1e:4c:19:0c:20:cf:72:2a:ea:35:aa:3a:9c:6e:7a:f2:be: f2:23:d6:ca:9f:ed:35:a1:2f:8e:7c:06:b2:19:80:07:e4:8a: b0:1f:40:01:03:73:f0:df:98:9d:54:ef:f6:b5:b6:f2:19:ce: 6d:f7:b8:76:15:36:aa:36:d9:b3:3a:8b:0b:c7:5b:bc:e1:25: 79:8b:b9:6a:46:03:08:26:2b:56:61:36:47:ca:ca:ca:25:cc: 6f:10:8b:d4:e8:39:b1:08:8b:f2:4d:62:e9:33:a8:b3:99:0b: 58:e6:93:4a:34:c7:75:43:da:8d:a9:b6:4c:00:60:91:4a:1e: 0d:54:37:02:05:ed:0d:e5:26:94:a6:f6:09:c5:1a:b7:02:46: bf:b8:80:da:5d:d1:a0:98:54:e7:72:ec:e2:9c:24:20:1b:34: b2:a3:fa:7c:3c:fc:a4:0e:94:bc:88:74:13:0a:ad:27:69:0e: da:e1:99:15:8a:fb:ac:8f:32:e1:59:06:18:98:90:b6:92:9b: 6e:cd:b8:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Cnmi7OGCuhjr+uJnnuWiKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwNzIxMDMwMDQ3WhcNMjYwNzIyMDMwMDQ3WjAzMTEwLwYDVQQD Eyg5OTc5ZDVmYWNiYjM1M2JjNTQ3NTk0ZmUzMTJhMzJiNWQ5ZjEwY2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodCx3Vmhlv7zcNQwBVvC3b4fBtHG zlqVAqiRn3Gcrh57DtRLnpHvNxyEYpbhSGKHs4I5RfFUuWyoK1j8vN5EUefg9A1G 300/8+HUsiZ7a1VwDOZnMCpm3a356UbcuvETaZnt+TAYGSAzcsPr3Tr923vY0va0 XLNgRdYCEqYOyV6TP+FV7fa+08OVrnWYzoK0DGHq0U7SD4IP7EpmVG/sI4Uw1ZsC 9emujBwcb7mjBGK3C9HVsF9cDTAmjIV6LdFLO+9VmkQq6euWIC3B7s0hry4MTWnx 0YsDv474GRe1GCrbyAaGDzwqkVntYSNMozxVTY5a4FnDXsK+xSDHVMdA2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJl51frLs1O8VHWU/jEqMrXZ8Qz0MB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXU3ig5u Ru6UWxCV+Rg2yR/lQnM5XrrRAMk8bFDDHZRRP0y/40JOcMusrUVp4OFr5W7Aq7KU mR5MGQwgz3Iq6jWqOpxuevK+8iPWyp/tNaEvjnwGshmAB+SKsB9AAQNz8N+YnVTv 9rW28hnObfe4dhU2qjbZszqLC8dbvOEleYu5akYDCCYrVmE2R8rKyiXMbxCL1Og5 sQiL8k1i6TOos5kLWOaTSjTHdUPajam2TABgkUoeDVQ3AgXtDeUmlKb2CcUatwJG v7iA2l3RoJhU53Ls4pwkIBs0sqP6fDz8pA6UvIh0EwqtJ2kO2uGZFYr7rI8y4VkG GJiQtpKbbs241Q== -----END CERTIFICATE-----Generated at Tue Jul 21 10:15:39 2026 by rpki-client