$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft File: 6985kESx8cxhzHceibSdI4WCwH0.mft (raw, json) Hash identifier: FptpOWeLNEgrWSwOl/VKKdiZmoW2yo3e6aLoKLAqU7g= Subject key identifier: C3:09:AC:A6:E9:14:D9:D8:56:51:0C:03:D9:B4:8B:91:45:A4:09:03 Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d Certificate serial: 019FA0DFB74690585645F7B84B93AF659F9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft Manifest number: 48 Signing time: Mon 27 Jul 2026 00:00:43 +0000 Manifest this update: Mon 27 Jul 2026 00:00:43 +0000 Manifest next update: Tue 28 Jul 2026 00:00:43 +0000 Files and hashes: 1: 0R8JegqJS72TSxgps8LkSaZO93M.roa (hash: bzPHmYAxh9zxsAi7FMhRtpwbiOeWUj0UvZqNZEFvXuM=) 2: 1fcVWlv-qx152QmoD9YOcrUS7Lg.roa (hash: wlUBrp/1FRbe3QO4vxFglbQf+Jkile5NKFRk8v42yDk=) 3: 6985kESx8cxhzHceibSdI4WCwH0.crl (hash: uFC0XO+RHCLCBeKUzIgkFDxStgIot9qsjWF1OvXuCSA=) 4: A4U-7phwTYkef8mR1dIeFnz9Wvk.roa (hash: gfDOpM+dmbKKBzSCVie0Kkmz1ZyFgU7RfrvMNCIF264=) 5: ACiq7PUnfxPw7VUiJHMeBlWe2W8.roa (hash: dErc7vBkv+mz2i4cCcDjrz1Nr+sQb9Sm3cGcguldqVk=) 6: AZGSfvVF2aBSDRn_ihzcIWfpdcQ.roa (hash: EVb7Mj3OG5H0UMytTB6DQ5yOP2z+yP5zkMEJ8YGMA1I=) 7: R7Pf0EzaX-yFRMbU80A9k7eGd_0.roa (hash: jeXZAN8VxFOPEzKegeMYU59ubOxlTc5uTncI21wjCK8=) 8: XJq96t3AYbRCnfS7nh1tT1GIo2o.roa (hash: DCbCNIcEwYvcic8+avZqalzxQi8AUgdFK18jg339Z7s=) 9: _sgEk7zklCfZtC1O4_dCCLRdlMg.roa (hash: wKMlHNJ1K28OmmB3WsfZYFrOfB6X9R2aDNRCcwZc7Es=) 10: c2w3QKoPlPH3vBuEtnfoEyv9rN4.roa (hash: Zj3hvlJbIFgWC7wJJ6+gJpyVaGnVyiWWtkjmA0jc+ss=) 11: foy3rmrTvDgjTDIvhlnm9qcAC-0.roa (hash: d3xSjhKSrxDttilu81KtUtjLRHSZdD9mi/Rkqyd0zhw=) 12: tSageFEQxzkkdzWrWiPFkT3D-Ec.roa (hash: 62TffehwovUDTyT5E6936YcLFqlIeIdvRZN8MDzVRzY=) 13: uA-waARm5JZjm1RSOdEWi8gtdhw.roa (hash: q2jhBOEKA13+Gi8bblMPwqRhwin9tcNd6S6FnjZqGkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a0:df:b7:46:90:58:56:45:f7:b8:4b:93:af:65:9f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d Validity Not Before: Jul 27 00:00:43 2026 GMT Not After : Jul 28 00:00:43 2026 GMT Subject: CN=c309aca6e914d9d856510c03d9b48b9145a40903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ab:dc:50:7f:37:0b:8f:83:2c:f3:87:88:fa: 61:a1:2e:d2:3a:16:7b:34:d8:77:dc:f3:38:ce:60: 37:f9:e1:7e:9d:88:a4:33:9e:7e:d5:1b:eb:b1:5f: 2a:a8:15:32:b5:9d:54:79:6e:b9:e4:66:e9:d2:29: 69:17:ba:8a:79:28:b9:09:e3:15:54:9e:ae:aa:92: 7f:2a:35:33:20:a3:2a:8e:e3:4d:9e:86:da:96:27: 4c:f4:2b:bd:41:5e:b3:3c:77:b6:d8:f2:0f:68:9c: dc:da:ff:91:8a:3b:2f:0c:84:8e:7b:17:b4:66:3b: 63:d2:ed:c1:05:42:e2:0d:bb:a5:de:3a:92:6b:70: 8d:11:05:bc:37:c5:53:0e:7f:5d:5b:5c:f7:43:fc: cf:20:6f:dd:a3:56:53:21:eb:9a:aa:5c:b8:74:98: ef:32:c7:f3:01:7f:78:b2:a9:7d:0e:24:f8:b5:7e: af:e4:f2:81:aa:50:15:42:bb:04:d8:04:95:97:0e: ff:9c:73:92:35:1f:7d:a5:b0:6c:d5:bb:41:b5:a3: a7:c0:ac:80:1c:98:fd:47:8f:48:94:d3:ec:a0:12: 9c:44:ee:66:8f:dd:d4:4d:b7:5b:4c:43:5d:16:26: e9:17:cd:e9:2f:f9:36:5f:e2:14:64:34:78:4d:39: d1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:09:AC:A6:E9:14:D9:D8:56:51:0C:03:D9:B4:8B:91:45:A4:09:03 X509v3 Authority Key Identifier: keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f4:86:7a:40:3e:55:cd:5d:a3:b6:65:fd:ac:a3:d7:3f:09: e7:af:66:eb:3e:63:b0:1f:f2:0d:47:54:c8:d0:da:34:dc:06: 7a:2a:d2:93:4e:9b:fd:d9:b2:c2:dc:18:f9:de:f8:b0:86:96: a9:1c:01:25:a7:da:a4:7d:4a:e4:3e:17:62:d9:af:76:13:e3: 16:47:b3:58:fc:dc:14:0f:26:40:26:59:94:48:37:5b:83:12: cc:f2:20:6f:3b:f4:0d:6e:cb:a9:7f:26:cf:ad:c3:9c:9c:1b: e5:7b:e6:07:5b:0a:54:77:54:29:6f:83:14:7a:02:e8:a7:15: e9:d2:c4:77:19:ab:e0:3b:7d:c1:3d:2a:b2:e0:22:7b:9f:ef: ea:67:d7:4c:80:62:65:0d:5f:d0:ac:cb:2b:27:de:15:7f:d7: ba:40:60:94:18:43:73:b0:15:c4:c6:72:28:8f:7c:1b:11:0b: 50:93:00:74:7d:6f:2d:93:f4:8a:cd:67:0c:0b:9d:9b:fb:52: a1:84:fc:b1:2f:2e:4c:1f:ad:9d:82:b6:52:9b:52:32:74:77: 0f:2a:35:ee:76:c3:c1:c1:a9:b6:64:eb:e1:97:cc:ed:63:a2: 88:4f:52:94:58:ad:40:ab:2d:2e:31:a1:9a:e7:e8:09:b5:c6: 90:82:10:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+g37dGkFhWRfe4S5OvZZ+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZGYzOTkwNDRiMWYxY2M2MWNjNzcxZTg5YjQ5ZDIzODU4 MmMwN2QwHhcNMjYwNzI3MDAwMDQzWhcNMjYwNzI4MDAwMDQzWjAzMTEwLwYDVQQD EyhjMzA5YWNhNmU5MTRkOWQ4NTY1MTBjMDNkOWI0OGI5MTQ1YTQwOTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqvcUH83C4+DLPOHiPphoS7SOhZ7 NNh33PM4zmA3+eF+nYikM55+1RvrsV8qqBUytZ1UeW655Gbp0ilpF7qKeSi5CeMV VJ6uqpJ/KjUzIKMqjuNNnobalidM9Cu9QV6zPHe22PIPaJzc2v+RijsvDISOexe0 Zjtj0u3BBULiDbul3jqSa3CNEQW8N8VTDn9dW1z3Q/zPIG/do1ZTIeuaqly4dJjv MsfzAX94sql9DiT4tX6v5PKBqlAVQrsE2ASVlw7/nHOSNR99pbBs1btBtaOnwKyA HJj9R49IlNPsoBKcRO5mj93UTbdbTENdFibpF83pL/k2X+IUZDR4TTnRXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMJrKbpFNnYVlEMA9m0i5FFpAkDMB8GA1UdIwQY MBaAFOvfOZBEsfHMYcx3Hom0nSOFgsB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPSGekA+ Vc1do7Zl/ayj1z8J569m6z5jsB/yDUdUyNDaNNwGeirSk06b/dmywtwY+d74sIaW qRwBJafapH1K5D4XYtmvdhPjFkezWPzcFA8mQCZZlEg3W4MSzPIgbzv0DW7LqX8m z63DnJwb5XvmB1sKVHdUKW+DFHoC6KcV6dLEdxmr4Dt9wT0qsuAie5/v6mfXTIBi ZQ1f0KzLKyfeFX/XukBglBhDc7AVxMZyKI98GxELUJMAdH1vLZP0is1nDAudm/tS oYT8sS8uTB+tnYK2UptSMnR3Dyo17nbDwcGptmTr4ZfM7WOiiE9SlFitQKstLjGh mufoCbXGkIIQxQ== -----END CERTIFICATE-----Generated at Mon Jul 27 05:20:52 2026 by rpki-client