$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: GyP2Opy59tFw45JDInBPEB3YBFZn5bJUwFlHnMJBPdE= Subject key identifier: BC:7F:D2:B0:81:B2:1C:E4:F6:24:FA:D0:E4:E8:63:95:01:61:DA:11 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019F739973C62D15D1C655A1D611EEE72522 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 19C2 Signing time: Sat 18 Jul 2026 05:01:03 +0000 Manifest this update: Sat 18 Jul 2026 05:01:03 +0000 Manifest next update: Sun 19 Jul 2026 05:01:03 +0000 Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=) 2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=) 3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=) 4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=) 5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: qn89oKy064fxNu7R6HzlwiPB4Ef2zjzxrX1er51zjbQ=) 6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=) 7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=) 8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=) 9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=) 10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=) 11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=) 12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=) 13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=) 14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=) 15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=) 16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=) 17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=) 18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=) 19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=) 20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=) 21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=) 22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=) 23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=) 24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Jul 2026 02:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:73:99:73:c6:2d:15:d1:c6:55:a1:d6:11:ee:e7:25:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Jul 18 05:01:03 2026 GMT Not After : Jul 19 05:01:03 2026 GMT Subject: CN=bc7fd2b081b21ce4f624fad0e4e863950161da11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ba:fb:f5:33:d9:5e:49:1c:20:5e:6d:e3:8b: a8:62:42:7c:51:8d:c4:47:e1:05:fc:76:b8:a8:6f: 9a:68:39:7d:4a:95:67:25:bb:cd:ef:b5:01:d0:17: 56:79:b1:bb:4d:bf:d8:9a:a5:09:25:1c:2f:31:bc: 93:ca:2d:25:2e:11:6b:be:af:f9:b8:0a:ac:09:4b: 18:8f:76:dd:07:d4:7d:2b:f2:93:08:66:51:ad:7e: 3e:21:ce:e2:6f:a9:20:da:51:fc:4c:08:71:f2:21: fc:c1:8d:02:a8:e6:54:a0:ab:b7:31:1d:8a:94:f6: 41:ba:fe:4f:64:82:3b:4b:2c:7e:e9:1e:68:77:00: 7d:33:ed:3a:a7:56:c6:f6:68:8f:d8:3d:48:5f:4c: 55:1a:7f:2f:08:9f:3b:79:ac:34:70:14:6c:eb:95: 5c:d7:24:e1:15:47:a3:40:7c:98:fd:0e:79:6b:17: 48:70:0a:44:4d:b8:16:da:4f:03:4a:dc:ec:6e:72: 9c:af:38:ef:36:20:6c:6a:e1:23:75:79:3c:4d:b5: bf:44:3c:88:56:2f:8d:61:51:02:b1:32:7d:d2:ef: d3:9f:76:b9:26:75:d9:dc:d7:1e:27:9d:5d:8c:b3: cd:19:c9:0b:a0:3a:e1:84:4d:46:54:75:b2:ab:84: 62:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7F:D2:B0:81:B2:1C:E4:F6:24:FA:D0:E4:E8:63:95:01:61:DA:11 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e3:31:0e:a4:89:c2:6d:9f:2c:18:07:e8:8b:6f:06:50:74: b4:92:ff:93:4c:93:8f:db:ce:85:31:55:26:45:2c:45:28:d6: 71:c4:f4:59:03:92:eb:9d:a8:a4:94:32:22:0c:44:9c:34:c0: 8a:23:1f:71:13:80:d3:fd:47:58:88:7f:fd:a6:18:97:df:2f: 8f:7c:26:0f:9e:20:5b:fd:7e:fd:a0:96:d8:e1:89:ea:fe:8c: 50:79:b7:d1:fd:7b:62:93:74:90:47:68:0f:c7:e8:b1:66:6a: 84:d6:57:09:96:f1:9a:57:c2:c9:ef:a5:24:e7:d6:6f:da:d5: f0:4a:2c:53:df:00:ec:93:9b:ce:fb:df:bc:5d:eb:3e:32:d5: a0:dc:77:ae:f6:87:79:ae:dc:6c:90:98:a0:e0:5f:6f:f6:37: c3:66:78:02:c5:60:6c:70:47:7a:ab:92:37:d1:11:12:41:84: 4f:83:2e:28:ff:6a:44:6b:49:83:64:78:e5:46:02:44:8b:50: f3:16:8f:b8:0e:cb:da:b6:ac:b6:10:d2:a3:5e:40:dd:16:ee: 71:1f:2e:d7:85:9c:0a:57:73:c3:85:c3:80:12:a0:36:dc:b7: f9:e7:48:ba:5e:94:20:bc:0d:99:65:9e:49:98:e0:7b:a2:23: a5:c7:e2:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ9zmXPGLRXRxlWh1hHu5yUiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwNzE4MDUwMTAzWhcNMjYwNzE5MDUwMTAzWjAzMTEwLwYDVQQD EyhiYzdmZDJiMDgxYjIxY2U0ZjYyNGZhZDBlNGU4NjM5NTAxNjFkYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7r79TPZXkkcIF5t44uoYkJ8UY3E R+EF/Ha4qG+aaDl9SpVnJbvN77UB0BdWebG7Tb/YmqUJJRwvMbyTyi0lLhFrvq/5 uAqsCUsYj3bdB9R9K/KTCGZRrX4+Ic7ib6kg2lH8TAhx8iH8wY0CqOZUoKu3MR2K lPZBuv5PZII7Syx+6R5odwB9M+06p1bG9miP2D1IX0xVGn8vCJ87eaw0cBRs65Vc 1yThFUejQHyY/Q55axdIcApETbgW2k8DStzsbnKcrzjvNiBsauEjdXk8TbW/RDyI Vi+NYVECsTJ90u/Tn3a5JnXZ3NceJ51djLPNGckLoDrhhE1GVHWyq4RiywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLx/0rCBshzk9iT60OToY5UBYdoRMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuMxDqSJ wm2fLBgH6ItvBlB0tJL/k0yTj9vOhTFVJkUsRSjWccT0WQOS652opJQyIgxEnDTA iiMfcROA0/1HWIh//aYYl98vj3wmD54gW/1+/aCW2OGJ6v6MUHm30f17YpN0kEdo D8fosWZqhNZXCZbxmlfCye+lJOfWb9rV8EosU98A7JObzvvfvF3rPjLVoNx3rvaH ea7cbJCYoOBfb/Y3w2Z4AsVgbHBHequSN9EREkGET4MuKP9qRGtJg2R45UYCRItQ 8xaPuA7L2rasthDSo15A3RbucR8u14WcCldzw4XDgBKgNty3+edIul6UILwNmWWe SZjge6IjpcfiRQ== -----END CERTIFICATE-----Generated at Sat Jul 18 06:54:25 2026 by rpki-client