$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: Py2QBi+QND76pF5oj0bS1ZI3XXY65a16Kvy2QGR+zew= Subject key identifier: FF:9D:0E:E9:44:C7:66:52:41:BD:32:EA:93:1B:CA:E2:3B:46:AD:25 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 01A08A1EA88475CCACB1CE4083A7280D1110 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 12B5 Signing time: Thu 10 Sep 2026 07:01:00 +0000 Manifest this update: Thu 10 Sep 2026 07:01:00 +0000 Manifest next update: Fri 11 Sep 2026 07:01:00 +0000 Files and hashes: 1: 4aHbMfy3j-ECkrD4rvedcCjTB_0.roa (hash: qusttE+9ZpOBhcPrh6x5LDaTogCO5iBos5RhS/oM6AY=) 2: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (hash: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM=) 3: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: 1oH6i3+UDiv0vdqxakkbBQJJvii/gvxx9nS/VTuGQdE=) 4: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (hash: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU=) 5: ERka-Os6ObqqZqi9cGtA6y93DUc.roa (hash: xLtVOqUw1SdFOzEQIDV0mLPI1VOtVrObVSKBvt+3WeA=) 6: GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (hash: 7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=) 7: Gi7sCCfKR95N2aHicd7FbOjBr8I.roa (hash: OQ/d+3fsf9yQoe//ZYqmXZhSoGbi8dYq3SEHzPc2Mfg=) 8: XhXwZGz_0ot-Yipy5gjWlGapqJg.roa (hash: osMFJv9ESYs8+a8oe5L8opFDI8cvKk+g8mqi6wPX570=) 9: c1WcScQ-iUvtqaFkrNNSIFe5J6Q.roa (hash: 9taVcBd6UWLT46HKsQQ8HZLq62dEzc2Av1/NrgPYxiw=) 10: t3UkDqm89BXYugxzek3H_T2xsnk.roa (hash: 0v05Mtv3fk+yrXhgZl5Oqsbm1YuaJuYan3rzgXnAwAA=) 11: vaGt6qiTwmKyEUcufJFu38Vn_PY.roa (hash: Pv4yo0vrEF77MupbDlB9r9HIwxhjZnbYRveAGoZFjW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 07:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:1e:a8:84:75:cc:ac:b1:ce:40:83:a7:28:0d:11:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Sep 10 07:01:00 2026 GMT Not After : Sep 11 07:01:00 2026 GMT Subject: CN=ff9d0ee944c7665241bd32ea931bcae23b46ad25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:6f:a0:bf:67:91:21:42:cf:8e:3c:42:e5: d6:c3:59:23:ac:fb:96:e5:fe:9a:4f:c6:52:65:44: 0d:6a:c1:dc:e4:7b:e2:19:22:70:a6:81:15:5e:44: bd:fe:ef:e5:1b:b3:72:45:ad:2e:24:b3:61:30:e7: df:8c:58:a1:07:82:70:b3:88:5e:2e:da:9a:e0:1e: 41:92:0c:fd:c6:fb:2f:3b:74:46:76:70:19:46:60: 34:e3:0c:99:d8:32:bb:ff:07:74:61:39:e7:9d:ac: 64:fd:b0:a1:42:52:ec:5d:2c:de:39:b0:74:b4:73: 3e:da:41:50:95:1e:c6:4b:74:d2:09:f5:a8:95:64: a1:ba:84:98:c2:79:a7:1e:cd:89:ee:ca:79:9c:96: 23:2a:35:53:26:b1:7a:1b:68:91:4a:51:30:84:5a: c7:e9:1d:85:c2:67:4c:fe:81:fb:1d:61:d3:fe:b8: 15:94:0e:9a:4a:a1:df:96:2b:65:e1:c6:f8:35:d7: b8:7c:f4:80:44:01:f9:14:e4:b8:e8:da:32:e9:fc: bc:c8:55:96:b7:0b:e7:a0:6e:e2:91:56:ba:89:bb: 80:4c:a3:a2:fc:0a:56:c9:3a:46:54:d2:19:1a:14: 6d:8a:07:d3:6f:7a:fc:1f:7b:9a:c6:d1:17:a0:35: ee:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9D:0E:E9:44:C7:66:52:41:BD:32:EA:93:1B:CA:E2:3B:46:AD:25 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:12:2a:0e:8a:d5:b0:6f:cd:87:96:45:82:4b:ed:76:44:2b: 83:55:c8:d2:36:e8:6a:4e:40:85:f6:7f:45:d7:b6:f6:e0:7d: 2b:d9:8f:67:9b:71:d6:f3:8d:cf:00:4d:a2:23:b7:8f:94:d7: c4:49:86:5c:f3:f7:01:e6:83:c8:b1:f2:03:87:0c:59:b4:93: d8:40:d6:8b:55:69:b8:7c:82:be:e2:0e:6e:b6:8d:f2:30:55: bc:06:d1:f5:a7:08:0f:eb:0a:c0:68:26:22:35:8c:8a:ab:cf: f4:96:76:d2:20:82:a4:af:00:5f:e3:57:14:b1:85:d0:77:f9: 22:f1:2b:b0:18:4e:1a:d3:5f:01:02:3a:9c:ae:bf:fc:de:3f: 73:c4:ac:c2:6c:bb:b0:48:ad:99:2e:88:45:1c:3e:08:8a:78: f8:57:dd:d3:01:92:94:84:c6:34:d2:d9:1a:52:b4:d3:41:77: a3:30:79:47:39:6f:57:03:07:fd:d5:e7:bf:3a:2f:e0:cd:7f: bf:6b:5f:c4:ea:63:e0:02:f2:34:1e:0f:f7:3d:79:68:a2:2d: 02:70:8c:a4:99:0d:00:d6:b7:b1:b3:18:c3:96:86:11:2d:46: 68:5a:a7:98:db:17:6a:71:ef:80:e4:a3:60:99:f7:0d:44:9b: 53:10:7b:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKHqiEdcyssc5Ag6coDREQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwOTEwMDcwMTAwWhcNMjYwOTExMDcwMTAwWjAzMTEwLwYDVQQD EyhmZjlkMGVlOTQ0Yzc2NjUyNDFiZDMyZWE5MzFiY2FlMjNiNDZhZDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYFvoL9nkSFCz448QuXWw1kjrPuW 5f6aT8ZSZUQNasHc5HviGSJwpoEVXkS9/u/lG7NyRa0uJLNhMOffjFihB4Jws4he Ltqa4B5Bkgz9xvsvO3RGdnAZRmA04wyZ2DK7/wd0YTnnnaxk/bChQlLsXSzeObB0 tHM+2kFQlR7GS3TSCfWolWShuoSYwnmnHs2J7sp5nJYjKjVTJrF6G2iRSlEwhFrH 6R2FwmdM/oH7HWHT/rgVlA6aSqHflitl4cb4Nde4fPSARAH5FOS46Noy6fy8yFWW twvnoG7ikVa6ibuATKOi/ApWyTpGVNIZGhRtigfTb3r8H3uaxtEXoDXu4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+dDulEx2ZSQb0y6pMbyuI7Rq0lMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChIqDorV sG/Nh5ZFgkvtdkQrg1XI0jboak5AhfZ/Rde29uB9K9mPZ5tx1vONzwBNoiO3j5TX xEmGXPP3AeaDyLHyA4cMWbST2EDWi1VpuHyCvuIObraN8jBVvAbR9acID+sKwGgm IjWMiqvP9JZ20iCCpK8AX+NXFLGF0Hf5IvErsBhOGtNfAQI6nK6//N4/c8Sswmy7 sEitmS6IRRw+CIp4+Ffd0wGSlITGNNLZGlK000F3ozB5RzlvVwMH/dXnvzov4M1/ v2tfxOpj4ALyNB4P9z15aKItAnCMpJkNANa3sbMYw5aGES1GaFqnmNsXanHvgOSj YJn3DUSbUxB7PQ== -----END CERTIFICATE-----Generated at Thu Sep 10 14:49:34 2026 by rpki-client