$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: TYF8F2KMwVl8VmJmvuVtSuUG5cAFuqQqFwtI8ie6UzA= Subject key identifier: 96:22:05:30:3D:14:92:60:71:D7:43:38:98:04:36:A4:A1:C6:A0:79 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019FD2B4744A70159EEA34179844954A9586 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 19FE Signing time: Wed 05 Aug 2026 16:14:29 +0000 Manifest this update: Wed 05 Aug 2026 16:14:29 +0000 Manifest next update: Thu 06 Aug 2026 16:14:29 +0000 Files and hashes: 1: 0VZp4QWne5bvAgKwv7SjoOEfGHs.roa (hash: jYh91mIzIriMnUPh9dL8jbBMf/TyJtraSuS+inHNoWM=) 2: 0pS0ka-H_pjf8zmsDhi1S6g_SD0.roa (hash: 3pwjPiGqhzZ7Y/680vy9pG+yzhMOL9IwvcISv966MT0=) 3: 5gizdFY-AQlhbCdYV0MHkXmuq7M.roa (hash: k9r1XdI4/Lx+2gwOSiva8ziRNB2yu8viuLXNYvO5Vys=) 4: 8HZ9HwPcvCjV2P3D1Xns45l-b7g.roa (hash: DvNeLlKBHFprmUWgVpmbGaSEgyoFZqbsKOxc6r1Ij8M=) 5: 8f4-tHMe1_zfMdQiJbY1PQ5lT3c.roa (hash: 1EfLr/LiMTpt9+tNTY1NQrpFVMSuEtCowZrWCkArzsw=) 6: 8lHTKcd0GYAhajj68n6yCoBLBmg.roa (hash: /WULm6fdsfbYX9Ht5hhngSNry2Eyx0hFZ+HW4F+/kU4=) 7: J3Nb9V1J66BnIsJ0KbxFX94VKXY.roa (hash: wcLCauUWs3bEGu09x4ivSvD/ChTk37avzRoy7sqTCsg=) 8: OZz5Z73RCocTg0hscsirqJpi9Vg.roa (hash: vWpk+fzrrJttr02xG3C/WBrhT9TCYx+ekEsOWrAU8P4=) 9: pAF8GSze9ehTbgJAIF3FBa54cNk.roa (hash: PvFwSg+H0WDB7gVfETtfHniBE9Eh+MMRXqrqan++8pg=) 10: qrK8l-uIuryQmH_-AqhZga8WNz8.roa (hash: eI1rOqGrZ+k2KHlXxvPdF7xmA3oDCvTfj+3Q37y0Fi8=) 11: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: BAGYrkhWwjRXKBmOvXkfwlwL2vmFE2nSQV3fyRqo+g0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Aug 2026 13:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:d2:b4:74:4a:70:15:9e:ea:34:17:98:44:95:4a:95:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Aug 5 16:14:29 2026 GMT Not After : Aug 6 16:14:29 2026 GMT Subject: CN=962205303d14926071d74338980436a4a1c6a079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:87:98:19:f7:8f:a1:94:bb:e5:c6:40:84:3d: 06:9b:89:42:a5:a6:95:ab:b8:cc:92:a0:c9:c8:d0: 4c:d8:a8:33:d3:3f:39:61:96:70:47:62:96:58:0f: e2:22:d0:13:5b:0c:6e:b3:05:b3:fc:bd:4c:35:c2: 2f:54:10:e9:04:32:c1:3d:3f:2c:f8:14:9c:ae:15: 56:17:b7:a1:37:ea:31:49:f0:eb:da:45:0f:c8:f8: 19:02:bc:c2:5e:fa:d4:e0:73:c8:c6:b2:d9:7a:79: 87:e5:c3:05:b0:8e:41:53:65:78:d3:2b:d4:61:4e: f8:e7:14:bb:93:bf:6a:0c:32:0e:26:23:5c:e0:30: bc:c1:e1:5c:f7:4e:48:2e:e2:d3:91:2e:8a:52:b3: 41:aa:8e:79:c5:75:bc:7b:67:89:65:b0:86:a3:6a: 29:96:4f:ff:26:80:d8:78:e0:d7:ff:f0:34:01:dd: 60:ad:aa:9f:e8:5d:9e:62:dc:ea:63:ed:d5:40:c6: 3a:fd:36:c6:f9:06:b2:7d:41:d6:b8:00:c1:68:62: 85:82:d1:1a:44:99:0d:8d:2b:8b:33:1e:76:3d:b0: 9d:8f:f6:ff:9a:9e:06:f7:c4:1e:47:5c:51:2b:57: ef:f4:6b:18:21:7f:5b:95:2c:e8:be:31:90:8b:ca: 70:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:22:05:30:3D:14:92:60:71:D7:43:38:98:04:36:A4:A1:C6:A0:79 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:2a:29:ca:3c:70:4e:cb:06:97:2f:55:9b:6c:e1:c8:f9:0e: 40:ca:49:ff:67:fe:ba:c7:22:26:ff:72:47:3a:c4:a1:5a:a0: ad:5b:14:33:4e:7c:ca:a3:e2:6e:0b:8d:40:b9:88:6c:a3:9c: b5:9a:f7:ad:92:54:47:da:ee:2a:83:24:b0:5f:90:22:26:b5: 46:08:2f:69:71:d4:f1:f9:76:98:b1:75:74:d4:e0:f6:61:7e: d5:a2:f3:b6:62:63:0b:03:9b:ae:ba:04:ec:9b:ab:d1:78:5b: 6d:b9:58:4b:66:32:32:9d:3c:51:07:80:fb:1f:11:b9:be:1c: 74:6b:52:56:8f:a6:6d:69:3f:c6:16:d3:d0:1e:8f:34:81:11: c5:a1:91:56:d6:5f:7e:c9:67:24:9d:3e:ea:c6:bc:00:49:c5: 68:0a:8d:d0:51:90:1e:9b:33:ee:6a:d9:9a:79:28:87:a9:27: 41:94:ce:7b:3e:fa:0d:f2:9f:82:ab:07:eb:77:4b:41:73:90: d9:0f:a8:20:78:72:06:74:3b:f9:ee:32:fb:f2:45:c1:73:ae: 30:d8:30:09:4f:88:6f:86:d9:3a:7e:ca:b6:7d:ed:d9:bd:ee: 60:46:61:93:34:c9:21:7f:af:2f:f0:19:20:23:e5:80:64:7f: 2f:0a:27:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/StHRKcBWe6jQXmESVSpWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjYwODA1MTYxNDI5WhcNMjYwODA2MTYxNDI5WjAzMTEwLwYDVQQD Eyg5NjIyMDUzMDNkMTQ5MjYwNzFkNzQzMzg5ODA0MzZhNGExYzZhMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoeYGfePoZS75cZAhD0Gm4lCpaaV q7jMkqDJyNBM2Kgz0z85YZZwR2KWWA/iItATWwxuswWz/L1MNcIvVBDpBDLBPT8s +BScrhVWF7ehN+oxSfDr2kUPyPgZArzCXvrU4HPIxrLZenmH5cMFsI5BU2V40yvU YU745xS7k79qDDIOJiNc4DC8weFc905ILuLTkS6KUrNBqo55xXW8e2eJZbCGo2op lk//JoDYeODX//A0Ad1graqf6F2eYtzqY+3VQMY6/TbG+QayfUHWuADBaGKFgtEa RJkNjSuLMx52PbCdj/b/mp4G98QeR1xRK1fv9GsYIX9blSzovjGQi8pwRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYiBTA9FJJgcddDOJgENqShxqB5MB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViopyjxw TssGly9Vm2zhyPkOQMpJ/2f+usciJv9yRzrEoVqgrVsUM058yqPibguNQLmIbKOc tZr3rZJUR9ruKoMksF+QIia1RggvaXHU8fl2mLF1dNTg9mF+1aLztmJjCwObrroE 7Jur0XhbbblYS2YyMp08UQeA+x8Rub4cdGtSVo+mbWk/xhbT0B6PNIERxaGRVtZf fslnJJ0+6sa8AEnFaAqN0FGQHpsz7mrZmnkoh6knQZTOez76DfKfgqsH63dLQXOQ 2Q+oIHhyBnQ7+e4y+/JFwXOuMNgwCU+Ib4bZOn7Ktn3t2b3uYEZhkzTJIX+vL/AZ ICPlgGR/Lwongg== -----END CERTIFICATE-----Generated at Wed Aug 5 22:14:14 2026 by rpki-client