$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: VK8F3VxMi4rOtxtPnljX9bE1X7nc87GlL6fEOyFm+MM= Subject key identifier: F5:1B:5A:EA:9A:A3:04:39:AC:9E:B7:6F:D8:30:53:EE:48:52:9A:44 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019F84C3E2BB0927FEC6E05381789619C209 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 160E Signing time: Tue 21 Jul 2026 13:00:57 +0000 Manifest this update: Tue 21 Jul 2026 13:00:57 +0000 Manifest next update: Wed 22 Jul 2026 13:00:57 +0000 Files and hashes: 1: 2CUChmUOOT29mGMWY66DWvJh2WQ.roa (hash: zU1VWPSaWCzOeazo96kB3sWhetiBsHBnhrLCkL6ZTdA=) 2: 2ngTJwoTyX1Nz5fKPJKsViXxDHk.roa (hash: Ir7bv4VELFAPGwsqBM/ur+v9Fopro+iM13JltIh4cX4=) 3: 6rWzroD3N7hgAXbNo3yuEEQJsfI.roa (hash: E8YwvFkIVbhynhPsVej9fShdrkMGkyiT775U87D7jFU=) 4: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: hFHmqPQ/Qy1eNj1BAL59Ib5AtVbhCowBYDzLCEizbL8=) 5: 7G49o5z8bi7Lcd53h1h0bVLCJZ4.roa (hash: xDGbGchiaLKjcl8d608rUMISo9V9+y1tYFZNtiJzodk=) 6: DcHyP-EvL5JB0AR6TgnEamGEyXw.roa (hash: 2EXmDj8EeuQdqWCdMyXvAF2OldfFdCBOuc9rEPVXwD8=) 7: OoWh-cPJxIo9-JnYWW14PlGkMmw.roa (hash: cwPQ8D+hZiBjw4HTvZt5RVfnCwIHlW6ts6eZs3ca5ro=) 8: SFT1d23h5s56wOshvucHEdfHMus.roa (hash: VF+VBV1f8xNTi+BzW8c6Ab0X5I99oWpbTy8oGRDDLo4=) 9: UkgHwb4aR-vfEVW_chFXeZM7ufs.roa (hash: EApidgvlTKfdDWwQPs4AF7dQdfTiN6dGaqCve1W5gyA=) 10: WGjiujLOuuOMzeq5qZIClszPW1M.roa (hash: O/EAhkWdzhGmiMAnV0b4Fh9oCWFKJcMW6EgTymaPAQY=) 11: Y6USBv7EsN_hgdgW0uW5KbpmRN4.roa (hash: tv5XftYxR3URBlazOVai0U6SyL0OPoC8TTkoFI5KZuM=) 12: cC6SDRV9V0p2_NMV4sw_ptq5Hlo.roa (hash: jEMYUPIGrPy+Y+xLvCOsQ36XF8oj9iEL636o4Kzme40=) 13: cJiubHQvHYR5Esd1XVcnoAH7nVc.roa (hash: FMFv+8H/z6shQKfY24LWmw315shSovkbNLpCdkTVVts=) 14: fxFIclzOclkDebowO2HCdBIp7JU.roa (hash: kKrwCtFqATS4Q0FX0wGNL2DdvolnBDZchK0yi2jbTGw=) 15: hOLoSAjKi_Ysduv-PJ2ejNql5Ok.roa (hash: lHppC78Yz/GWXK8KxKeoOvZZKZRlVzNZc6B6F5euHEc=) 16: lfuF0jCiq554Dy69uuASsTOPZ58.roa (hash: 6OAF0vEeoAJWYtA3vCDPsWGl38QU6NBLN+OCMZmyOUQ=) 17: xgcIl72OMRsTXzMLl7PIGrHb2sQ.roa (hash: 2SWmpy8UdVqECkthus0V0cF6NslAcNvMaIDq36UHafw=) 18: yJInE-fPhdu-ABKOdKIoShinhzo.roa (hash: skD34yjii/PhcEF3U0syiUJjraUYJpJM6Jt4QrA1zs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:84:c3:e2:bb:09:27:fe:c6:e0:53:81:78:96:19:c2:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Jul 21 13:00:57 2026 GMT Not After : Jul 22 13:00:57 2026 GMT Subject: CN=f51b5aea9aa30439ac9eb76fd83053ee48529a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:83:6b:22:b9:4c:3a:02:c0:af:4a:a7:c8:bb: 8a:95:6f:7e:18:dc:07:a3:5c:6a:10:ff:8f:ad:33: 08:43:dc:dc:08:d9:39:86:84:b1:91:83:20:24:4b: 28:61:23:02:66:9d:0c:f5:d7:98:e3:d2:7a:b0:b2: 1a:9f:7e:1c:33:84:b2:ed:52:87:16:24:7f:fc:72: d8:01:6a:4b:fe:f1:7e:0b:d1:0d:d7:96:4e:f3:fd: 24:3c:55:c4:47:2d:53:8c:36:2c:7b:ee:e7:93:47: 36:4d:e2:bc:0b:e3:4a:5e:a7:78:f3:e5:c5:c8:7b: 90:75:ff:a1:84:e3:51:bc:39:5f:59:5b:2e:73:d6: b4:43:b2:bd:27:b0:63:be:35:73:69:b5:01:3c:4b: 41:7e:cf:68:46:e9:01:a4:1e:ca:43:b3:cc:00:5b: cc:cd:08:e8:a9:30:48:72:8a:48:6b:37:3d:65:e3: 00:91:3a:03:96:e5:75:43:d2:cd:cb:c0:23:ea:6d: 7f:38:cf:e1:15:21:55:59:e7:3c:e0:60:0a:84:46: d4:98:49:5f:33:39:02:ff:fe:69:17:d9:46:b2:e2: f1:fe:71:4d:ce:8b:28:e9:b1:c6:eb:f6:6c:a6:1e: 22:a7:49:3d:14:18:0d:c4:bd:56:70:cc:f5:30:1e: 75:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1B:5A:EA:9A:A3:04:39:AC:9E:B7:6F:D8:30:53:EE:48:52:9A:44 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:0c:b7:3c:30:b0:7d:61:97:76:20:02:44:83:0e:01:27:89: 32:38:36:7d:60:9f:c6:2d:d5:cd:75:15:c3:f4:38:74:68:14: b2:d6:a4:0a:e4:39:4c:de:d1:ea:ec:22:e1:54:d0:63:50:da: 5e:c2:22:d7:69:90:7a:7a:94:39:fb:93:9f:e8:66:60:e6:94: cc:eb:16:9a:76:eb:2b:14:b3:a6:e8:b5:4e:01:dd:d9:0a:4b: e4:0f:0a:87:41:b9:d9:50:f4:9f:fa:42:5d:f8:41:a0:fd:ad: cf:3c:3c:3f:fd:49:ac:1b:19:25:dd:8b:ad:0b:67:4e:8e:6e: a4:b1:e2:f1:28:0b:04:77:f7:ff:03:1a:08:d4:f4:64:a2:03: ae:00:d5:4e:da:11:26:5b:be:2d:0f:58:5d:d8:c0:c6:68:a7: 11:06:74:64:38:45:7a:bd:50:8a:ba:17:0d:dc:49:6e:ed:82: 1d:e1:8c:02:e5:36:5c:ff:4e:3f:32:db:4f:66:76:35:25:48: 22:0c:bf:26:85:9b:44:89:c7:d0:93:40:3a:0f:51:b1:b5:4e: c8:0a:63:a6:23:a8:3a:c7:6c:5b:91:7f:f9:e5:bf:4e:d0:5c: b9:03:f6:d9:a4:e4:cc:ac:3f:15:44:1a:7d:88:bb:10:19:3f: d2:02:1b:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Ew+K7CSf+xuBTgXiWGcIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwNzIxMTMwMDU3WhcNMjYwNzIyMTMwMDU3WjAzMTEwLwYDVQQD EyhmNTFiNWFlYTlhYTMwNDM5YWM5ZWI3NmZkODMwNTNlZTQ4NTI5YTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYNrIrlMOgLAr0qnyLuKlW9+GNwH o1xqEP+PrTMIQ9zcCNk5hoSxkYMgJEsoYSMCZp0M9deY49J6sLIan34cM4Sy7VKH FiR//HLYAWpL/vF+C9EN15ZO8/0kPFXERy1TjDYse+7nk0c2TeK8C+NKXqd48+XF yHuQdf+hhONRvDlfWVsuc9a0Q7K9J7BjvjVzabUBPEtBfs9oRukBpB7KQ7PMAFvM zQjoqTBIcopIazc9ZeMAkToDluV1Q9LNy8Aj6m1/OM/hFSFVWec84GAKhEbUmElf MzkC//5pF9lGsuLx/nFNzoso6bHG6/Zsph4ip0k9FBgNxL1WcMz1MB51hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUbWuqaowQ5rJ63b9gwU+5IUppEMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuQy3PDCw fWGXdiACRIMOASeJMjg2fWCfxi3VzXUVw/Q4dGgUstakCuQ5TN7R6uwi4VTQY1Da XsIi12mQenqUOfuTn+hmYOaUzOsWmnbrKxSzpui1TgHd2QpL5A8Kh0G52VD0n/pC XfhBoP2tzzw8P/1JrBsZJd2LrQtnTo5upLHi8SgLBHf3/wMaCNT0ZKIDrgDVTtoR Jlu+LQ9YXdjAxminEQZ0ZDhFer1QiroXDdxJbu2CHeGMAuU2XP9OPzLbT2Z2NSVI Igy/JoWbRInH0JNAOg9RsbVOyApjpiOoOsdsW5F/+eW/TtBcuQP22aTkzKw/FUQa fYi7EBk/0gIblA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:32:40 2026 by rpki-client