$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: 5OroxyDcobsB8V0n4DoufyBurfKrGPTYfLtJZdOujtg= Subject key identifier: D9:91:D6:64:29:74:C3:13:A4:83:07:91:43:90:8F:F5:BF:AE:A7:1C Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019FC4B5CA2130392E73CEF33D867C6C8D30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 14E1 Signing time: Sun 02 Aug 2026 23:01:15 +0000 Manifest this update: Sun 02 Aug 2026 23:01:15 +0000 Manifest next update: Mon 03 Aug 2026 23:01:15 +0000 Files and hashes: 1: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (hash: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo=) 2: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (hash: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=) 3: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (hash: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw=) 4: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: JQugvrwkpQDGXFDibF5tNRyt4BObru5YcLUhJ6XSzlQ=) 5: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (hash: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM=) 6: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (hash: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI=) 7: IDC6oBiyoOmqWKoupYEHrToEWJ0.roa (hash: P+sIHqKmPZPeZmABVBnF51jErpgACaNnVr6b4m3JBoY=) 8: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (hash: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s=) 9: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (hash: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU=) 10: MZ3-_phVg1JFlbxR5OJP-KpStoE.roa (hash: GHqHuGXUotJGH2X0xBNvkiEuBK4TdiZ8BJK/Jxpgz1s=) 11: NEgKW_finEZme1CsPFfQq7C_nGU.roa (hash: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ=) 12: Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (hash: kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=) 13: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (hash: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU=) 14: XjWVgkpqgTJEW3QJe_cj_gwf1hk.roa (hash: vCxycdFszhKJUIekoNSmU0ToJrI8ivYZ04YKT9vTiOY=) 15: j83JngEGhal0kT3zsRIrsplye2w.roa (hash: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I=) 16: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (hash: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8=) 17: rVArIBA7c1EQ5lf2j5Tvez2PtHY.roa (hash: cst+4x1gJZFg3aLrODDuAkaxoUmbFxOd2UVrjyQWI8Q=) 18: yamNx3ecIuPVFeX-kSCh8y4Fx_c.roa (hash: 4qY/8GmsvrTI7IdeRHY7SB9zEjFFEMpgAX8FcHmNPXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 03 Aug 2026 22:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:c4:b5:ca:21:30:39:2e:73:ce:f3:3d:86:7c:6c:8d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Aug 2 23:01:15 2026 GMT Not After : Aug 3 23:01:15 2026 GMT Subject: CN=d991d6642974c313a483079143908ff5bfaea71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:fa:8b:f2:cd:5b:da:c1:b4:ff:b5:3a:51: 06:c1:20:55:60:1c:89:49:74:f9:b5:61:87:40:3a: 45:b7:83:c9:d3:50:72:18:1e:8a:2d:75:41:a9:ee: 16:4c:7c:9a:13:2c:8f:eb:95:8e:df:e1:c4:b7:98: b6:54:44:17:c8:44:bd:d9:b2:5d:9f:5d:47:65:c8: 46:e5:48:85:47:d6:73:c6:a2:51:59:c4:72:e0:2e: ec:c5:5b:1f:8a:9e:d6:e3:88:23:3f:fc:c0:08:67: 3b:d7:0a:c9:81:52:6e:c0:95:ba:66:bb:c6:fb:7b: 9b:48:97:fb:1f:e1:29:6a:c1:1c:28:72:11:7c:0c: 4c:c3:6f:e5:4c:da:a1:76:63:01:27:b4:2b:61:67: 49:f5:35:24:8f:c5:57:33:85:e6:0f:2c:d3:af:a0: 4a:99:c8:49:fc:4c:c8:bf:05:0f:8d:13:c7:f7:5e: 1a:e1:56:dc:7e:35:e0:5d:0c:4f:c9:ee:d2:23:9f: e0:51:c4:36:0c:56:d4:66:27:1d:09:80:60:6d:20: c8:d5:f2:94:cd:b4:39:1d:59:0c:4f:a4:2a:bc:8a: 95:09:04:99:37:92:8f:46:5c:87:73:87:9e:32:e1: fd:58:f3:16:dc:58:d9:a2:70:3d:37:f1:21:cd:07: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:91:D6:64:29:74:C3:13:A4:83:07:91:43:90:8F:F5:BF:AE:A7:1C X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ce:e4:06:1c:5e:7a:53:a3:da:6a:e5:b3:ae:78:9f:89:08: dd:21:12:2e:8d:8e:95:cd:4b:4b:ba:19:6b:bb:90:32:88:2d: b9:49:49:c9:e9:7d:c4:b3:c1:d9:45:79:3a:64:95:0f:e7:14: 9e:cd:bb:c8:29:0b:b7:85:ba:93:0a:61:52:a4:a2:b9:4c:b2: b9:2e:5d:1c:e3:2f:7b:a1:4d:fb:15:c8:4a:85:82:ee:0c:42: 74:9f:6f:fd:da:ca:82:b5:46:60:8f:53:44:3d:20:bc:57:09: c9:b0:25:89:41:8d:08:fc:f9:de:e3:53:fe:b1:a0:f7:bd:67: 1e:81:43:9a:d0:31:d3:5c:f3:9d:4b:98:b7:e7:0b:5c:55:19: 36:cf:28:14:de:d6:2f:d8:e6:8e:f3:37:6e:d3:ac:ec:a9:95: a0:4d:66:f3:db:e6:40:71:92:3b:33:c4:4b:b0:0b:8b:fd:f4: bb:e4:20:8d:d2:60:ca:7c:04:4e:dc:da:ef:2f:9c:5c:49:02: 16:08:18:25:fc:15:f8:ff:0e:eb:e3:2d:ee:af:10:6f:e7:d5: c5:93:a6:c0:f4:f9:11:76:16:92:76:b4:91:d3:f3:ff:99:7d: 8a:f9:87:03:f1:46:79:34:03:d1:0c:37:c9:7f:aa:61:fb:dc: b7:a3:16:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/EtcohMDkuc87zPYZ8bI0wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwODAyMjMwMTE1WhcNMjYwODAzMjMwMTE1WjAzMTEwLwYDVQQD EyhkOTkxZDY2NDI5NzRjMzEzYTQ4MzA3OTE0MzkwOGZmNWJmYWVhNzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuv6i/LNW9rBtP+1OlEGwSBVYByJ SXT5tWGHQDpFt4PJ01ByGB6KLXVBqe4WTHyaEyyP65WO3+HEt5i2VEQXyES92bJd n11HZchG5UiFR9ZzxqJRWcRy4C7sxVsfip7W44gjP/zACGc71wrJgVJuwJW6ZrvG +3ubSJf7H+EpasEcKHIRfAxMw2/lTNqhdmMBJ7QrYWdJ9TUkj8VXM4XmDyzTr6BK mchJ/EzIvwUPjRPH914a4VbcfjXgXQxPye7SI5/gUcQ2DFbUZicdCYBgbSDI1fKU zbQ5HVkMT6QqvIqVCQSZN5KPRlyHc4eeMuH9WPMW3FjZonA9N/EhzQcHqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmR1mQpdMMTpIMHkUOQj/W/rqccMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe87kBhxe elOj2mrls654n4kI3SESLo2Olc1LS7oZa7uQMogtuUlJyel9xLPB2UV5OmSVD+cU ns27yCkLt4W6kwphUqSiuUyyuS5dHOMve6FN+xXISoWC7gxCdJ9v/drKgrVGYI9T RD0gvFcJybAliUGNCPz53uNT/rGg971nHoFDmtAx01zznUuYt+cLXFUZNs8oFN7W L9jmjvM3btOs7KmVoE1m89vmQHGSOzPES7ALi/30u+QgjdJgynwETtza7y+cXEkC FggYJfwV+P8O6+Mt7q8Qb+fVxZOmwPT5EXYWkna0kdPz/5l9ivmHA/FGeTQD0Qw3 yX+qYfvct6MWBw== -----END CERTIFICATE-----Generated at Mon Aug 3 03:46:09 2026 by rpki-client