$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: xRFaaJVUW3XRRwNoj64DEcFq89yQyGMcChogRRpftZM= Subject key identifier: 80:BA:7F:67:F8:A8:FB:3C:A2:86:BF:80:17:AD:81:98:74:AC:93:48 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019F84FA92FEE497BF464A27D69685E9135A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 11D1 Signing time: Tue 21 Jul 2026 14:00:41 +0000 Manifest this update: Tue 21 Jul 2026 14:00:41 +0000 Manifest next update: Wed 22 Jul 2026 14:00:41 +0000 Files and hashes: 1: 1-wzLZgHvoTtKlJUwiMWH2FcMG2Q.roa (hash: gecXtL6bXbTjxAwUSJNxs49kgp0JytqkT3osewNP9Tg=) 2: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: q1N3nwGB+SZ2M5Fdk+8OlMl3Aigq3s/FC0wfAqN8piw=) 3: K0Zub9dKWzCjs4OtkVc_n0LFVVw.roa (hash: WAtq4VjFyxJkBBrD+rRuoVlhMvETsjV5L4Bhvcl0PsU=) 4: L9TWZulmOgbRwrR8pCdihrCbfKY.roa (hash: kpba41p+9FSP2a4Hqmm3zRooFrFU9Uu5ujkaJiigN30=) 5: LyKLy6uT_WPlcRb0ykSf0GYdO4Y.roa (hash: Ws+t3EfpSQ+jlmW0/VstL/1QYYDtPwZDFVE4WDXtUAE=) 6: ML_7NS0uYkmp6GXXamZ3NSPsWOo.roa (hash: hnjHFSEUgTDrMvjlYwRL85H6sKIUA3yDjfvutZSmzgw=) 7: NMzuJZbxOy1LB40urUAindiN9YQ.roa (hash: BSKmMcbD/mOVfjihHJhWhwgJ1b6f29GirmFpN4Kj09M=) 8: YykfUYmRRbTXt94f_g0l_IynvDo.roa (hash: pI8Hi2Q8oLa5BZOGg0QPtqf72tmXIsLTGFmFi6JksGg=) 9: eMcTcCM26_FBi-jWPaQvXdFHm8Y.roa (hash: CN7UhMJ47ktIz/WCrZvYgOygWoLcj7OT337BtvDzxD8=) 10: f0VpgrAXaT3oVxZDOEU2iV1iNSY.roa (hash: iJgG1N6+Tuj84TVnx/5i89nDxTeYyLA4QQjr6o+oq3c=) 11: iYDni8VjNDDolmH_F5AAYHgrmp4.roa (hash: /oy9SLJqYCjuGSfbl4Oo1wvrMBYnNp3f2GJuXLzrOuo=) 12: jkeoRlUiAeo681KZqVdOpuHmKaA.roa (hash: lXnp/mWSzniqxvseJ8C7/Fc99Ljtz0HvIJlr2A2Qz1U=) 13: sZ0JiVG1Az1Dn7s8zECVmXzJnwo.roa (hash: 6tprys5RYcVu5F7SPPiEgBOyn1Agoq+HAa+NVM9JSXc=) 14: y_l5I-08oYpHriEipp4h8dgrSr8.roa (hash: Sudmmxuxp4Gm0euuCyvwJqn5dRNkNZeSNEf/mCRLjYc=) 15: zVSX18y8o4KRMFIOaBGobLqrbvA.roa (hash: zvGv7P9a7DP9g0eTnYWOdSqXm1zetmk1xuEUE1VYzlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:84:fa:92:fe:e4:97:bf:46:4a:27:d6:96:85:e9:13:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Jul 21 14:00:41 2026 GMT Not After : Jul 22 14:00:41 2026 GMT Subject: CN=80ba7f67f8a8fb3ca286bf8017ad819874ac9348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:4f:f7:f6:2f:b9:d8:8c:f5:e6:d4:6e:4a: aa:f9:59:5d:bd:41:6a:86:5f:67:68:91:61:db:e3: 53:b9:d6:35:e8:0a:70:9b:35:c4:f6:e1:a4:83:43: e8:50:93:b9:98:56:61:5e:f0:b5:df:09:3c:f4:b5: 60:b5:61:54:28:24:36:b5:54:15:41:b1:d8:e2:ff: ef:ad:20:76:b0:d1:73:5c:0e:b2:a8:26:1b:1c:fd: 1a:2e:fa:57:8b:4a:1f:cd:c5:f6:f5:e9:6c:4d:c9: 23:8f:9c:a3:76:02:a1:48:61:c0:77:fc:93:95:74: e2:c1:df:6b:a9:83:e4:8c:64:58:a6:f1:60:26:09: 2f:f5:dc:8e:49:e5:24:46:fa:bb:e6:0a:a0:57:2d: 3c:3e:1b:0d:c9:c2:e7:79:f4:29:23:03:ab:32:bf: 90:49:69:bf:a6:e7:bb:90:b9:b8:7f:1e:7b:26:70: 5a:bf:aa:a5:4d:29:13:00:04:66:14:42:c5:dc:a7: 67:46:24:d9:72:1c:9f:8d:69:81:b4:59:e6:62:48: 8e:b0:58:af:1f:1e:d3:31:65:5d:68:e6:35:36:11: a7:d6:92:bf:17:56:74:d6:28:f0:3c:8c:b7:62:0d: 3e:6a:32:a1:7f:a0:8e:09:58:97:e5:34:a4:7a:4c: cb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BA:7F:67:F8:A8:FB:3C:A2:86:BF:80:17:AD:81:98:74:AC:93:48 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:80:30:e7:ea:1a:10:79:94:18:41:84:ef:79:c0:a1:30:ca: 42:fe:84:a1:2d:06:f6:e1:14:7c:a5:f5:1b:6c:cc:bf:53:02: 75:69:78:b3:05:30:3e:b9:b7:3b:b1:53:2b:4c:54:41:b2:cb: 5c:fa:82:a4:09:cc:6c:75:6b:dc:0e:50:57:2b:df:d0:97:91: 63:ea:db:5f:2e:8a:1e:09:7a:92:70:a7:75:59:53:a1:8b:3b: 49:27:5d:71:68:65:23:71:06:42:dc:6e:a3:0a:ad:ee:a4:3c: 15:61:5f:0b:29:28:4f:dd:39:fe:31:26:3f:b4:c9:28:85:6e: 39:b3:8b:4c:60:9b:5b:92:d4:db:4a:2e:a9:21:88:06:c7:19: 8e:65:9d:e1:80:2e:94:42:29:42:a0:bd:79:17:41:5c:85:24: 3c:59:90:6e:ca:b7:ac:9f:07:7a:3d:f2:69:58:ca:1f:36:18: 35:e4:cf:39:da:a1:74:ac:2b:4b:4a:f5:7f:d9:b9:cf:d5:16: 29:88:6d:27:47:ff:5f:a7:f3:65:ec:28:f3:fd:a4:99:a3:b3: ee:04:b9:1f:1c:18:4c:ce:34:70:ac:3c:76:94:9a:97:9f:e7: d7:ee:d6:22:8b:2c:b4:71:86:87:04:aa:7c:70:f4:a1:6b:c7: 02:b7:79:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+E+pL+5Je/Rkon1paF6RNaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwNzIxMTQwMDQxWhcNMjYwNzIyMTQwMDQxWjAzMTEwLwYDVQQD Eyg4MGJhN2Y2N2Y4YThmYjNjYTI4NmJmODAxN2FkODE5ODc0YWM5MzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun9P9/YvudiM9ebUbkqq+VldvUFq hl9naJFh2+NTudY16ApwmzXE9uGkg0PoUJO5mFZhXvC13wk89LVgtWFUKCQ2tVQV QbHY4v/vrSB2sNFzXA6yqCYbHP0aLvpXi0ofzcX29elsTckjj5yjdgKhSGHAd/yT lXTiwd9rqYPkjGRYpvFgJgkv9dyOSeUkRvq75gqgVy08PhsNycLnefQpIwOrMr+Q SWm/pue7kLm4fx57JnBav6qlTSkTAARmFELF3KdnRiTZchyfjWmBtFnmYkiOsFiv Hx7TMWVdaOY1NhGn1pK/F1Z01ijwPIy3Yg0+ajKhf6COCViX5TSkekzLtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIC6f2f4qPs8ooa/gBetgZh0rJNIMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoAw5+oa EHmUGEGE73nAoTDKQv6EoS0G9uEUfKX1G2zMv1MCdWl4swUwPrm3O7FTK0xUQbLL XPqCpAnMbHVr3A5QVyvf0JeRY+rbXy6KHgl6knCndVlToYs7SSddcWhlI3EGQtxu owqt7qQ8FWFfCykoT905/jEmP7TJKIVuObOLTGCbW5LU20ouqSGIBscZjmWd4YAu lEIpQqC9eRdBXIUkPFmQbsq3rJ8Hej3yaVjKHzYYNeTPOdqhdKwrS0r1f9m5z9UW KYhtJ0f/X6fzZewo8/2kmaOz7gS5HxwYTM40cKw8dpSal5/n1+7WIosstHGGhwSq fHD0oWvHArd5FQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:31:42 2026 by rpki-client