$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json) Hash identifier: USIJuagvh9GN5nexU6ju2LM35Srt5hl6AUxNYthelR0= Subject key identifier: 85:FA:E3:11:FC:4C:F1:38:C7:FC:2C:A8:3B:51:BB:A9:F0:96:C1:6D Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019F8379C67640D894E79C93AA303BE0F69B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft Manifest number: 1A1F Signing time: Tue 21 Jul 2026 07:00:23 +0000 Manifest this update: Tue 21 Jul 2026 07:00:23 +0000 Manifest next update: Wed 22 Jul 2026 07:00:23 +0000 Files and hashes: 1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=) 2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=) 3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=) 4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=) 5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=) 6: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=) 7: 67NPNnvEQ5HB8sJH7z0dUe6Gw40.roa (hash: L8+iE4412JG/GqWOxLjJAzwI6Ft8pIvwH1MR+Hkkdb4=) 8: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=) 9: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=) 10: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=) 11: E7gVR0qJHj_FrMEXG4Yo1G8ig-8.roa (hash: cyGASec5FeaBbarjWYsO54pBqOVobPBGS0ac9+UHUHc=) 12: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=) 13: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=) 14: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=) 15: MxzqwWMUSsptURJMzavxSHfUO8w.roa (hash: poWnPXle6XHD8AxyCDLX0yoA7QSiBEOVvbwg5OVZcvQ=) 16: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=) 17: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=) 18: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=) 19: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=) 20: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=) 21: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=) 22: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=) 23: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=) 24: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: HQVOhY5/Xnrd5koMPJKqOdrC6OGhAW4LA+GjOpnb8aw=) 25: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=) 26: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=) 27: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=) 28: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=) 29: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=) 30: oPoAPW2imYIIhMBjHBjrrJzlTm0.roa (hash: Ai3LKCPihwHhkGrEgiXr64yAeNHxTfkXCv7Ldk/G4cw=) 31: upydEV0ODv-v9FNJbhEvu18F0-I.roa (hash: VtfCIO/Gdxc9uNwon4WUJ3pKbdYHJr5iyQxDnmDVVgE=) 32: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:83:79:c6:76:40:d8:94:e7:9c:93:aa:30:3b:e0:f6:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jul 21 07:00:23 2026 GMT Not After : Jul 22 07:00:23 2026 GMT Subject: CN=85fae311fc4cf138c7fc2ca83b51bba9f096c16d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b2:77:03:b4:d8:f8:2e:c0:f4:bb:ee:d7:05: 94:a3:1a:c5:6d:57:1f:57:63:dd:6d:47:5f:93:d8: 7b:7f:9c:b4:62:9b:2f:55:15:9a:1b:0f:b1:dd:25: 02:3e:d3:4a:da:27:44:55:c3:6a:23:7a:e3:de:7a: c0:10:78:ee:29:14:e1:65:01:fe:40:c1:e3:03:97: ea:69:99:07:c4:92:35:05:19:56:be:40:5a:c3:b0: 74:f5:a9:69:69:9e:3a:34:8f:8a:77:d4:93:53:05: 0c:03:b9:64:9d:41:df:c7:67:f3:1d:15:a1:8a:e9: c6:73:0b:ed:82:d1:d9:58:7a:a0:09:f3:75:0e:64: 3d:16:b3:c4:cc:10:ce:7c:31:7a:09:c2:3f:f9:2f: c5:96:32:12:0f:56:d4:24:b1:57:53:83:ff:1a:b2: 57:da:e1:7f:9c:53:08:9c:d3:b8:92:7d:f3:11:cf: 3e:7c:24:d1:28:10:f5:31:48:df:66:eb:06:b4:c8: f5:82:b3:29:1e:f2:76:25:84:67:c2:44:7c:f0:83: ea:e3:0d:45:c3:04:ef:ac:6d:3e:93:d4:d6:28:48: 49:59:77:d7:6a:19:e5:21:cc:a4:6c:18:85:00:5b: 73:7e:01:a6:bf:24:1d:fe:a0:6e:e9:af:7f:e7:af: ad:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FA:E3:11:FC:4C:F1:38:C7:FC:2C:A8:3B:51:BB:A9:F0:96:C1:6D X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:2a:1f:f1:86:a9:4c:3a:1f:4d:79:47:cc:55:a3:94:90:35: 9b:2e:27:b9:61:82:bb:84:35:92:f3:fb:d0:57:f8:4d:e9:41: 68:45:3b:a2:d8:d9:f1:25:e4:ac:1a:1a:2a:6a:af:ab:66:1d: c7:8a:09:ad:6e:c8:4b:89:93:16:ac:ec:a6:2e:4f:92:8a:52: 63:17:fc:3c:d8:31:fa:4c:9e:60:c8:8f:42:3f:01:16:c5:d1: 4a:92:e2:0b:b6:f1:9d:1c:bc:81:b1:c3:16:58:bd:34:ba:62: 41:ed:08:62:55:4b:b6:91:63:9c:9a:98:d4:cb:f5:2e:17:c7: a8:b8:0f:88:eb:a2:9c:17:f9:0f:88:a4:85:a4:75:58:f3:68: f5:47:36:01:fd:bd:36:e7:4a:b3:39:b3:c1:58:2f:5a:1c:2e: 52:19:b2:a0:c9:39:2f:48:c4:be:8a:98:57:be:3a:d0:31:08: c8:a4:45:11:3e:0f:ee:22:5f:82:fe:4b:25:bf:dd:7f:ca:f5: c1:12:fb:e8:d5:61:70:b5:aa:59:57:fa:c6:7f:3b:2a:92:8c: 2f:df:a6:d7:47:dd:8f:7b:e6:b1:d2:3a:42:68:78:b7:36:f1: c6:ff:5b:66:d2:5b:88:a8:6e:b8:5b:36:0b:10:55:46:f8:11: 2b:5a:82:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+DecZ2QNiU55yTqjA74PabMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwNzIxMDcwMDIzWhcNMjYwNzIyMDcwMDIzWjAzMTEwLwYDVQQD Eyg4NWZhZTMxMWZjNGNmMTM4YzdmYzJjYTgzYjUxYmJhOWYwOTZjMTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrJ3A7TY+C7A9Lvu1wWUoxrFbVcf V2PdbUdfk9h7f5y0YpsvVRWaGw+x3SUCPtNK2idEVcNqI3rj3nrAEHjuKRThZQH+ QMHjA5fqaZkHxJI1BRlWvkBaw7B09alpaZ46NI+Kd9STUwUMA7lknUHfx2fzHRWh iunGcwvtgtHZWHqgCfN1DmQ9FrPEzBDOfDF6CcI/+S/FljISD1bUJLFXU4P/GrJX 2uF/nFMInNO4kn3zEc8+fCTRKBD1MUjfZusGtMj1grMpHvJ2JYRnwkR88IPq4w1F wwTvrG0+k9TWKEhJWXfXahnlIcykbBiFAFtzfgGmvyQd/qBu6a9/56+t0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIX64xH8TPE4x/wsqDtRu6nwlsFtMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESof8Yap TDofTXlHzFWjlJA1my4nuWGCu4Q1kvP70Ff4TelBaEU7otjZ8SXkrBoaKmqvq2Yd x4oJrW7IS4mTFqzspi5PkopSYxf8PNgx+kyeYMiPQj8BFsXRSpLiC7bxnRy8gbHD Fli9NLpiQe0IYlVLtpFjnJqY1Mv1LhfHqLgPiOuinBf5D4ikhaR1WPNo9Uc2Af29 NudKszmzwVgvWhwuUhmyoMk5L0jEvoqYV7460DEIyKRFET4P7iJfgv5LJb/df8r1 wRL76NVhcLWqWVf6xn87KpKML9+m10fdj3vmsdI6Qmh4tzbxxv9bZtJbiKhuuFs2 CxBVRvgRK1qCuA== -----END CERTIFICATE-----Generated at Tue Jul 21 09:57:57 2026 by rpki-client