$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft File: miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json) Hash identifier: D7Vx40gMytChT0y5Tl8SF1LB30Uox+BSlateYYoc+As= Subject key identifier: CF:B1:C7:1E:D6:B3:85:B3:FE:F1:8A:61:CC:6D:40:5C:82:07:29:84 Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Certificate serial: 019FCAB87BCFE5FDEC42C3AC04DF1D09A791 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft Manifest number: 0BB5 Signing time: Tue 04 Aug 2026 03:01:55 +0000 Manifest this update: Tue 04 Aug 2026 03:01:55 +0000 Manifest next update: Wed 05 Aug 2026 03:01:55 +0000 Files and hashes: 1: 4BtZ6ImulGiBNPfFEyIkenVvnSE.roa (hash: 6h+jPwLu4nddov8mWqAqvJNAzlSrWOgSVAeEWaQAHMQ=) 2: 9dGHInAQI-j4vyLy3UUNRAYsuCY.roa (hash: Q9ame2KwxdqQfHrlASmNDuZYejwWS5cB+ic/WNNh4SE=) 3: Gc-zxgRLIzAQa_iFPqWdSCs1AfA.roa (hash: knk2ar6caQbw//JlOcHZhkt4Z0WhcJB+DOpi0h0a7F4=) 4: HUdkOXLhBSaGi7zaB3tiAzHsu2w.roa (hash: SMC3snHw7F/Tr45ZUYM0iuFzgEgu3dYKECc195mdzRs=) 5: ZBdtDqtan4ryfsX_DPoSWN_nnIM.roa (hash: mMR9AMjlqz3mZdhz4HhiNub8llzDHhmNDp6KeOjkBNo=) 6: iMagr2JhNrn6UcBo9-V-8mQcTn4.roa (hash: mQklS7JkHJd3eY4Nb4US8i0zJjbD5uDxAwa3Ul/Mehk=) 7: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: TIzibsWaCU4Y+m4AT9anxVbAGVoUFxCZTVPMMG8TMUw=) 8: pTIdOhwN38ILsZQYi8bIDMjeY4U.roa (hash: GtMRQsNo+pmOf3YedJ1j8ncQIy9S7xqsYIsqepUk4Dw=) 9: tkLKI36bEE_d9mFrnpG75Jz1duc.roa (hash: GQR5CqcIcifEV/UVBCebbmLSOnvxcbQORub4i3S8oOk=) 10: ycU_XNZEXN413MBQCsimYNHq3Uc.roa (hash: Nto1BYyts37ycUiG2XmvVx1RqM7RGKIW4OTTPggZvXE=) 11: zt6aVptNzEemFtVcszL1t-xA0vs.roa (hash: pSOP40u7PQPwSGBic+DInKoefhITjHCDk1ttR6rrtpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Aug 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ca:b8:7b:cf:e5:fd:ec:42:c3:ac:04:df:1d:09:a7:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Validity Not Before: Aug 4 03:01:55 2026 GMT Not After : Aug 5 03:01:55 2026 GMT Subject: CN=cfb1c71ed6b385b3fef18a61cc6d405c82072984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7b:08:dd:f7:8e:ea:aa:60:e7:47:9a:ba:08: 8e:67:fc:de:f7:f2:d7:f2:be:23:9c:c3:93:20:86: d6:de:b8:40:59:50:a3:94:4b:0f:3b:d0:df:1c:be: f4:c6:29:04:da:d0:e7:b2:d4:8c:b2:2e:8f:19:38: 32:23:93:15:38:e8:f0:54:95:06:13:d1:59:23:9d: b4:3b:0e:26:a6:11:e9:0a:36:5e:e4:b4:d3:6d:80: 6c:c1:8d:20:e1:ce:d7:01:c8:5a:1b:64:ed:91:4e: 4b:35:1a:b0:79:b2:33:41:50:6b:5c:65:c6:49:f8: e0:52:3b:52:48:b2:92:4a:9f:c1:aa:d6:9c:50:e3: 37:c0:90:cf:ab:d9:4b:6b:05:41:9e:00:72:41:ab: ad:a1:9a:63:1d:38:dc:d1:a9:0c:02:0b:c5:c2:3c: 1e:14:6b:a9:68:fc:ef:de:32:91:60:67:8b:53:72: 2f:93:0f:86:d3:dc:c7:e1:1a:18:ce:2a:63:8c:3f: 21:99:d2:7d:69:ea:6d:17:58:e7:40:5e:60:97:b9: 3a:b3:9d:cc:f2:5c:77:da:39:6a:4a:24:d0:01:83: 7e:54:38:a0:13:76:d5:f2:01:bd:2e:06:4a:9d:3f: d3:d7:76:77:5f:e2:f4:4e:b3:ae:31:a8:d2:2a:41: 46:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B1:C7:1E:D6:B3:85:B3:FE:F1:8A:61:CC:6D:40:5C:82:07:29:84 X509v3 Authority Key Identifier: keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:62:2b:d7:75:fe:cb:32:f3:d7:17:cd:79:32:c5:c2:0c:ec: 67:d1:0a:b5:12:8e:ac:b2:51:7b:d7:f3:e1:8f:18:01:2c:e3: 46:9a:1d:ff:d4:8e:fd:0d:47:a0:48:6d:00:1b:1b:84:a5:45: 54:6f:31:e9:44:02:62:92:60:7d:d1:f9:98:ec:00:eb:4b:b2: 34:70:eb:ab:b2:65:70:e7:93:36:f1:49:43:63:90:25:90:b1: b0:65:2c:5a:3e:58:bd:2e:ae:c6:76:8b:10:0d:da:8c:a0:ec: ac:40:58:77:b8:f3:90:81:a4:6c:bf:07:d8:a5:21:2e:c5:19: 50:97:5e:8a:5d:4e:a1:2b:e7:fc:7f:77:fb:7c:54:7c:f2:a3: 20:e7:28:e2:62:50:24:aa:46:47:71:d9:fc:41:24:dc:03:92: e8:ab:f5:32:b0:a2:da:b7:80:4b:a4:eb:55:33:15:f1:2a:63: 41:a8:9d:24:44:f6:46:4e:b1:49:df:f1:dc:dc:3a:e1:72:d6: 65:f0:a0:90:09:e6:b8:46:7f:9e:9e:81:bc:83:2b:13:b3:37: 9c:d9:4d:a0:49:b4:66:be:f3:0b:86:4a:9e:56:f6:57:67:57: 48:b5:16:dd:92:bb:e5:76:e8:2e:a5:62:6c:10:0b:b1:84:da: ac:91:42:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/KuHvP5f3sQsOsBN8dCaeRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0 YmY4MDAwHhcNMjYwODA0MDMwMTU1WhcNMjYwODA1MDMwMTU1WjAzMTEwLwYDVQQD EyhjZmIxYzcxZWQ2YjM4NWIzZmVmMThhNjFjYzZkNDA1YzgyMDcyOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHsI3feO6qpg50eaugiOZ/ze9/LX 8r4jnMOTIIbW3rhAWVCjlEsPO9DfHL70xikE2tDnstSMsi6PGTgyI5MVOOjwVJUG E9FZI520Ow4mphHpCjZe5LTTbYBswY0g4c7XAchaG2TtkU5LNRqwebIzQVBrXGXG SfjgUjtSSLKSSp/BqtacUOM3wJDPq9lLawVBngByQautoZpjHTjc0akMAgvFwjwe FGupaPzv3jKRYGeLU3Ivkw+G09zH4RoYzipjjD8hmdJ9aeptF1jnQF5gl7k6s53M 8lx32jlqSiTQAYN+VDigE3bV8gG9LgZKnT/T13Z3X+L0TrOuMajSKkFG2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+xxx7Ws4Wz/vGKYcxtQFyCBymEMB8GA1UdIwQY MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt NDhkNWZmNGJhMjU1LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1 LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2Ir13X+ yzLz1xfNeTLFwgzsZ9EKtRKOrLJRe9fz4Y8YASzjRpod/9SO/Q1HoEhtABsbhKVF VG8x6UQCYpJgfdH5mOwA60uyNHDrq7JlcOeTNvFJQ2OQJZCxsGUsWj5YvS6uxnaL EA3ajKDsrEBYd7jzkIGkbL8H2KUhLsUZUJdeil1OoSvn/H93+3xUfPKjIOco4mJQ JKpGR3HZ/EEk3AOS6Kv1MrCi2reAS6TrVTMV8SpjQaidJET2Rk6xSd/x3Nw64XLW ZfCgkAnmuEZ/np6BvIMrE7M3nNlNoEm0Zr7zC4ZKnlb2V2dXSLUW3ZK75XboLqVi bBALsYTarJFCvw== -----END CERTIFICATE-----Generated at Tue Aug 4 08:45:21 2026 by rpki-client