$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft File: DimJADVf30JUwggx8tfuO-xCm9s.mft (raw, json) Hash identifier: aXhyxjDltsNhOzNjk9nSOzafgMjL3w4nPmD9XVdpud0= Subject key identifier: 41:8B:BB:DA:C2:CC:AF:6F:3F:ED:96:B4:47:64:CE:0C:E9:7F:17:60 Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 01A028EA5521EF734EFF9DC8BA0BA9B06D36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft Manifest number: 0280 Signing time: Sat 22 Aug 2026 10:00:40 +0000 Manifest this update: Sat 22 Aug 2026 10:00:40 +0000 Manifest next update: Sun 23 Aug 2026 10:00:40 +0000 Files and hashes: 1: 5H5HvQv575nFSmKSZOWkpoNmJa4.roa (hash: C7AqddrBTGFSdtwcxzGRSd2Sbb+zBQZFF1QXO0RlcUs=) 2: 5mS0a5DKsKUWo9swyJpnqpHouXc.roa (hash: Ex+vAEyQsrUoaiDO20Pjp4tHdlovsh4eps8dvFj9mfk=) 3: 7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (hash: J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=) 4: AcToql_UqNBfG1rjDk5FIUcSzS4.roa (hash: S2Tpi4kDrEf93PoUW4sACQhMZl5q7cDANwyMjE4r/9E=) 5: DimJADVf30JUwggx8tfuO-xCm9s.crl (hash: eDXc1A9aI6ohgtFS/CmJNj+ZXqSnsPW5jnZfimx/qgA=) 6: I0FnsRSHuCIlE5UfwEVWK3D0hR8.roa (hash: dR+nGhBOUGjcCFb5F8ZxMzX7iIcWLc6xb1ZqHmYGR/c=) 7: IkrFRF3Ttgw4FIDBgBDVg0dJ4b4.roa (hash: WGPpKc4dj5grwNnhEEktJ194QdHxK76K6rqlpp7lrFs=) 8: O-QEXm4qSbt72Nnk4qRQFwvPr_0.roa (hash: vVF+iuhTnkhVo+LKbluIv023EO5M+EyUgI75CD2LSB0=) 9: Yte9L4xekX_uW58axTYZcgt8FmY.roa (hash: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4=) 10: ZbbPFYZ5et4E0DLQLx7QgD_-n_4.roa (hash: kpo5V1Kis4etv3McfweDJYMJDNmzmYsbcpdv1gAavks=) 11: _zcItGlmx6998FM_OkVMktHXtJY.roa (hash: BVU2FfRsrCVxlC5hx2l9rOZ/f3ofzH78ETxGPtN8M6c=) 12: iWbURYC9976jpptISSnJC4qKMnM.roa (hash: 3l4IQnaqkURDoIpOrRXySs9lZm9jAE0fFP3SBTyEQ0Y=) 13: wfJt5mTsUXow9fCWX31R-Dkmuu0.roa (hash: Ogc3m/G0BZohp0lL37SmmZBmPpDZV56wfDB8yNtIYXE=) 14: wxAG3X_yNVOiL2lU8MWKtnA7yu8.roa (hash: 1/q+7+8/xJC9sx0Oq0j0TwpS9hM9lMperyMfuXBmbDg=) 15: x2XYLxaNKJRFn9DehiizW9aYMTk.roa (hash: Osl107YeRkqGDPiFlpVzUDvS4jF+uDx9WoyD7Axzjng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Aug 2026 10:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:28:ea:55:21:ef:73:4e:ff:9d:c8:ba:0b:a9:b0:6d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Aug 22 10:00:40 2026 GMT Not After : Aug 23 10:00:40 2026 GMT Subject: CN=418bbbdac2ccaf6f3fed96b44764ce0ce97f1760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9e:2f:ca:09:f3:8f:91:54:c5:35:2d:be:ec: 17:a3:99:ab:ec:26:cb:8c:64:f9:df:ef:01:d6:f6: 5e:1d:15:38:c4:37:64:29:25:af:4d:11:dd:c8:e0: 4d:65:ab:64:7e:88:96:02:65:87:10:9e:4c:06:b1: e5:4e:6b:3d:32:6a:a9:59:e2:9f:a8:68:fd:eb:55: c2:fa:a0:65:b2:10:e0:65:d5:65:6d:05:6b:f5:4d: 1b:04:5d:2e:43:99:fb:9d:62:9b:b0:d3:bc:e6:94: 0f:f1:6f:f3:8e:d7:36:28:7f:c5:af:f8:5b:43:90: bd:8f:bd:c6:3a:6e:81:34:36:28:be:99:24:75:c5: 70:4f:b9:7e:de:85:db:7b:04:8f:0c:9a:86:a2:12: 91:fa:25:b2:34:74:f6:43:e5:a9:c1:6d:02:65:d4: 7d:a1:7e:a0:dd:1a:b4:38:dd:d6:f3:19:83:ab:41: d0:e4:16:f1:e6:97:e8:57:83:f9:2e:d8:a5:45:55: f4:07:63:02:68:94:75:d2:2b:6b:e7:ae:b0:62:32: 93:cd:76:dd:03:26:9f:3a:c6:53:8d:28:ab:eb:54: 39:be:22:5f:fb:2c:cb:2d:0b:c7:a3:96:95:64:41: c2:78:12:de:73:06:f5:22:57:60:83:f8:61:37:b5: b4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8B:BB:DA:C2:CC:AF:6F:3F:ED:96:B4:47:64:CE:0C:E9:7F:17:60 X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d8:2b:bd:63:e6:c7:ea:08:1f:93:56:82:22:5c:d0:62:c2: 42:a6:36:60:92:98:d6:66:5e:cf:01:72:29:5a:13:92:7e:4a: a5:44:f8:55:00:17:99:21:37:79:2c:72:fc:87:80:10:ae:d6: f0:c6:14:a2:8d:7e:86:ce:98:32:b1:19:63:2c:63:43:c5:2f: e6:0b:44:66:60:0c:f2:68:59:99:25:7b:f9:39:51:b2:6b:8e: 2e:fb:d3:7a:5a:1c:57:ab:ac:e1:74:dc:a0:e5:51:81:95:fe: 9e:93:0b:60:e1:8c:22:8b:42:01:01:95:0f:69:a5:22:23:d9: 53:dd:66:8b:34:f4:5c:a2:66:6a:fc:31:52:9c:a9:23:66:a1: 5e:f4:8b:c4:99:d7:97:31:f5:b6:68:04:e6:ae:df:09:96:9d: 24:4f:59:46:37:9c:e1:29:b3:dd:ff:6f:c8:78:a5:2e:a1:34: d3:74:4f:5d:57:12:b9:d3:bf:1f:2d:7c:9d:dc:65:f5:9e:5a: a8:21:b8:c1:2a:0a:a7:09:69:b7:fd:8a:16:65:4c:c8:4f:07: 9c:f1:79:ac:63:30:87:67:75:bf:6e:e8:bd:55:01:36:f0:2d: 9c:43:2e:18:30:0b:cf:73:5f:10:b9:f0:fd:e3:22:c6:24:70: 95:7d:50:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAo6lUh73NO/53IugupsG02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjYwODIyMTAwMDQwWhcNMjYwODIzMTAwMDQwWjAzMTEwLwYDVQQD Eyg0MThiYmJkYWMyY2NhZjZmM2ZlZDk2YjQ0NzY0Y2UwY2U5N2YxNzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ4vygnzj5FUxTUtvuwXo5mr7CbL jGT53+8B1vZeHRU4xDdkKSWvTRHdyOBNZatkfoiWAmWHEJ5MBrHlTms9MmqpWeKf qGj961XC+qBlshDgZdVlbQVr9U0bBF0uQ5n7nWKbsNO85pQP8W/zjtc2KH/Fr/hb Q5C9j73GOm6BNDYovpkkdcVwT7l+3oXbewSPDJqGohKR+iWyNHT2Q+WpwW0CZdR9 oX6g3Rq0ON3W8xmDq0HQ5Bbx5pfoV4P5LtilRVX0B2MCaJR10itr566wYjKTzXbd AyafOsZTjSir61Q5viJf+yzLLQvHo5aVZEHCeBLecwb1Ildgg/hhN7W0uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGLu9rCzK9vP+2WtEdkzgzpfxdgMB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdgrvWPm x+oIH5NWgiJc0GLCQqY2YJKY1mZezwFyKVoTkn5KpUT4VQAXmSE3eSxy/IeAEK7W 8MYUoo1+hs6YMrEZYyxjQ8Uv5gtEZmAM8mhZmSV7+TlRsmuOLvvTelocV6us4XTc oOVRgZX+npMLYOGMIotCAQGVD2mlIiPZU91mizT0XKJmavwxUpypI2ahXvSLxJnX lzH1tmgE5q7fCZadJE9ZRjec4Smz3f9vyHilLqE003RPXVcSudO/Hy18ndxl9Z5a qCG4wSoKpwlpt/2KFmVMyE8HnPF5rGMwh2d1v27ovVUBNvAtnEMuGDALz3NfELnw /eMixiRwlX1Q5w== -----END CERTIFICATE-----Generated at Sat Aug 22 19:36:05 2026 by rpki-client