$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft File: pnhXc98xO5FxG_a8WxSezCRrnok.mft (raw, json) Hash identifier: GUbvjJd63X47EnRDCCl6ONuLULqz2tFi3EgDTRVqpP4= Subject key identifier: D5:C3:E5:2D:4C:C8:FD:07:BD:C1:04:B3:CA:E4:97:9D:86:39:8A:BB Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 019FA6AAA2F08A35DFD3460626F5F826FC60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft Manifest number: 179D Signing time: Tue 28 Jul 2026 03:00:28 +0000 Manifest this update: Tue 28 Jul 2026 03:00:28 +0000 Manifest next update: Wed 29 Jul 2026 03:00:28 +0000 Files and hashes: 1: C8g7Pi5B0RKpnrlAYnkGNfdVaNI.roa (hash: wxMFCVvSA3tdy7i3OaSOQ9SIAg2wmBIcYz9jkUGPtlk=) 2: Ine_1lLdl47bEMn6aiw9Axcdsgo.roa (hash: S/r8lpXeW/d857boj4AgP81lqUx6Xba1Zs9uDln2Uuk=) 3: L9nqjZgCKM_h4eShTqHdEr9Np6c.roa (hash: m3EOAebEcr3Ec2NVZh7NKfNA+27GisIbFErRrtFBX6k=) 4: NanNAKKpriw1xLHpXZYYWO89_ic.roa (hash: vJoNpzNu5goOWjEeID9l0AJGNtpWeDH6gI91uoAnwIk=) 5: O6JDbaslrGOSZKrdtuCBt6ssF94.roa (hash: 8ty72z4beTGAGlxyLGLA0AACx0Qa5f/MkundTg5sepM=) 6: Wvbb_a2COrZy8u2YHT4IAcPCo7A.roa (hash: JCvZpNcLMyYDQVI9nqJFb7h8bZSYYqo2EDX3T4my9ww=) 7: ZQQkerLBkFsKEtd48dsMSA_rmYI.roa (hash: 6NjK7e1f3uOhtOOeU7twP9rf1tXwX1yAjDALcNdcBDM=) 8: _dst1Xn6SlUI8nUoQkjpnLlhahc.roa (hash: BiPvKLoz5HOyAuWJJP0IXnbLHFFchqo6uteOhXIPeKs=) 9: dDB5YY9PZuYzIK0czNYk6awWuOU.roa (hash: B1+NRVwOUhTIMmxV8tnE89O/MNjbHirt4Fghn1v7gaE=) 10: eFI0tBDLnesndLqlj1NoxqsPUjg.roa (hash: hjKjXxMem27vbAFHspC4BJNh7EJxRAQg9zId7c2baKg=) 11: pnhXc98xO5FxG_a8WxSezCRrnok.crl (hash: UW0BiCTs/rRqEOjBS5RjqmhOirMqFD/z/nlyeEgddsA=) 12: vc_G7KIML4Y1r-1xS8CYjvgQZqM.roa (hash: tS0p7+VSda9ujT1sG9qz+xFqrdY93YlWHLxpRI2nhkg=) 13: vz8HwWs32wz7LdSPq6eo_tOp0to.roa (hash: 6psAckPnQ9/EqCFp17rxTfMjqVmehqU3pMQvhEu8MeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a6:aa:a2:f0:8a:35:df:d3:46:06:26:f5:f8:26:fc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Jul 28 03:00:28 2026 GMT Not After : Jul 29 03:00:28 2026 GMT Subject: CN=d5c3e52d4cc8fd07bdc104b3cae4979d86398abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:25:4b:53:d4:da:c9:c8:ff:f9:f6:e8:fa: 33:73:ae:d6:15:ea:4f:b0:bd:ef:5f:d7:80:df:70: 69:4d:d0:ab:3f:16:cf:e1:1b:9d:61:46:ba:bc:d1: 1a:df:bb:dd:23:ad:26:61:b2:da:3f:d5:ad:e9:a3: f2:8d:37:b6:5c:5b:e2:1f:d4:1f:89:00:34:d7:bc: a8:04:39:e2:c0:64:ab:e3:95:66:d7:96:f0:2a:e3: 8d:c5:05:dc:f2:a1:f1:7f:ec:a4:db:fe:c1:a6:d5: e1:05:48:a9:c2:d6:29:fa:8b:c1:8c:d1:7a:ac:72: 55:bc:35:03:2c:1b:71:fd:8e:21:aa:99:d2:17:08: b8:7a:1b:f4:ed:7a:fa:61:cd:31:6e:e9:6d:86:32: c1:93:2d:08:a7:b1:71:0e:56:ef:3d:8c:d5:4a:b9: e4:56:7b:5f:5d:f7:51:3a:11:9c:38:64:7c:c8:74: 28:74:ac:19:00:65:f4:d4:2c:5c:51:5a:15:eb:b8: a3:7f:d9:20:b9:51:51:cb:74:fa:23:17:4e:9f:44: 46:0b:2e:e6:a5:19:2d:af:10:fc:e8:6f:9d:31:8f: 9c:a2:f2:b7:56:2b:fb:71:2e:fd:5c:c2:de:24:e6: 2b:9d:f9:5a:4b:41:95:f1:4d:ea:4c:76:98:72:6f: 55:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C3:E5:2D:4C:C8:FD:07:BD:C1:04:B3:CA:E4:97:9D:86:39:8A:BB X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:81:86:ee:60:6f:ca:f2:6f:bd:f6:7a:8e:be:d2:70:05:bb: 1f:48:93:a4:cb:bb:1b:9e:0e:85:bc:26:02:51:f5:df:27:21: db:13:76:41:2a:7b:1b:8d:7e:7a:95:e6:47:a5:a5:29:75:34: 0d:4c:bd:5a:d7:72:6b:b2:87:c5:b6:2e:69:5f:d0:7e:d8:75: 10:6c:81:ae:7e:d6:97:14:3c:1a:47:ce:dc:b3:f9:d0:73:b8: 92:73:80:ba:e4:6b:bc:d7:51:37:b6:46:e0:0b:6d:d8:b7:b4: 4d:2a:52:45:7c:4c:5c:2d:de:fc:5d:c5:03:bb:1b:79:1e:17: 9e:13:8a:cb:0a:32:7b:be:61:5b:c0:68:af:e9:75:86:c0:5e: 40:77:61:16:1f:ab:21:e3:07:f6:2d:92:dd:b2:cc:6d:64:b5: aa:62:36:f2:99:e6:aa:6e:de:16:87:8a:36:58:9e:0d:ab:59: 97:e0:fa:f7:a6:73:bb:ce:3b:67:ad:63:4f:0a:ce:66:4d:51: 02:1e:e6:7b:1c:c7:f5:b4:ac:0e:74:81:c4:f9:ae:d2:d6:12: a1:da:c4:4d:d5:9f:46:6f:47:aa:c2:03:b5:3c:06:db:c8:12: 73:30:80:d7:1d:8f:fc:81:d7:aa:f0:29:be:11:ed:75:5e:78: e2:4e:79:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+mqqLwijXf00YGJvX4JvxgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjYwNzI4MDMwMDI4WhcNMjYwNzI5MDMwMDI4WjAzMTEwLwYDVQQD EyhkNWMzZTUyZDRjYzhmZDA3YmRjMTA0YjNjYWU0OTc5ZDg2Mzk4YWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMklS1PU2snI//n26Pozc67WFepP sL3vX9eA33BpTdCrPxbP4RudYUa6vNEa37vdI60mYbLaP9Wt6aPyjTe2XFviH9Qf iQA017yoBDniwGSr45Vm15bwKuONxQXc8qHxf+yk2/7BptXhBUipwtYp+ovBjNF6 rHJVvDUDLBtx/Y4hqpnSFwi4ehv07Xr6Yc0xbulthjLBky0Ip7FxDlbvPYzVSrnk VntfXfdROhGcOGR8yHQodKwZAGX01CxcUVoV67ijf9kguVFRy3T6IxdOn0RGCy7m pRktrxD86G+dMY+covK3Viv7cS79XMLeJOYrnflaS0GV8U3qTHaYcm9VGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXD5S1MyP0HvcEEs8rkl52GOYq7MB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIGG7mBv yvJvvfZ6jr7ScAW7H0iTpMu7G54OhbwmAlH13ych2xN2QSp7G41+epXmR6WlKXU0 DUy9Wtdya7KHxbYuaV/Qfth1EGyBrn7WlxQ8GkfO3LP50HO4knOAuuRrvNdRN7ZG 4Att2Le0TSpSRXxMXC3e/F3FA7sbeR4XnhOKywoye75hW8Bor+l1hsBeQHdhFh+r IeMH9i2S3bLMbWS1qmI28pnmqm7eFoeKNlieDatZl+D696Zzu847Z61jTwrOZk1R Ah7mexzH9bSsDnSBxPmu0tYSodrETdWfRm9HqsIDtTwG28gSczCA1x2P/IHXqvAp vhHtdV544k55mQ== -----END CERTIFICATE-----Generated at Tue Jul 28 08:25:17 2026 by rpki-client