$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft File: YMb7RHrtcm0u-TGkKWRERWJip_o.mft (raw, json) Hash identifier: zlAwfvCxOhfEoPvYbfVWed1oNe0JlZasD1cZyRAGWBM= Subject key identifier: A4:C4:A2:28:81:C4:0D:C8:9A:0F:46:18:1F:D4:2C:1C:8E:5D:53:59 Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa Certificate serial: 01A05A4464B01A58BED7221537DDF0B3096D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft Manifest number: A8 Signing time: Tue 01 Sep 2026 00:00:26 +0000 Manifest this update: Tue 01 Sep 2026 00:00:26 +0000 Manifest next update: Wed 02 Sep 2026 00:00:26 +0000 Files and hashes: 1: 5jZisInp8TXN2yxl-UfU7WarY0M.roa (hash: 10WHkU96QF3J0hD6hFJYOgRaUbW4Qz52pcw2Yaz9eto=) 2: DgFm4HmChjoVVXbZG_s_bmWikhA.roa (hash: 4f2ipiD6Fix8CP8oeahNwfJlqbWpC48B9lElmTb3ddg=) 3: JzxFmz3Lxsv9r4_qQHlWmgWNVtI.roa (hash: dTmsUkvcV6A8e/27HSCfyw/NpZInwfDk8eJ8C0h4oX8=) 4: LNy8kG7KVF3mkmXJHoBxTCBaoz8.roa (hash: uTCQoqu4tgLl+7hkuwUJH7G5TlRzJ3VCqIlTxihN7Dg=) 5: NMD8IPNFkO_yB9Wza-dDaSkgBgU.roa (hash: x0WGnzY9box2ZKgxlElBXgAV9eE1/18hEUdzs9PwalY=) 6: YMb7RHrtcm0u-TGkKWRERWJip_o.crl (hash: Wb6BUR0YvpWB+UTZaDxnMcgFmsutPufqWJrHxQGKFXA=) 7: cK5MLIirkupuUC--lCax3HKVTiA.roa (hash: RMFQARPnEaD9nD+3pnJxX9R8erur18BY5dnWYniqEqk=) 8: cr0yQUYRZ5XZTIn7LmU6mw3yMFo.roa (hash: W6nw3GNA3oR+cSF8a0fITc1nGlcxnI1/yWAqPf9xzks=) 9: cyswjofwxhiLYURwBc5pQOh-uII.roa (hash: ceigelWuJhlhAehkLt//nXxIwryDIZplSDT94RKb2SI=) 10: jwUITEDlQy87pZEq-SRjBl82u54.roa (hash: HqhHIiWDUiwTfQhbTW0inXFYsA2y/bXGUsSJqG90xro=) 11: knufnAOkhguuSqCyELAEY4TVYpQ.roa (hash: iydBfT3B2FD5xanrqmT5d19Wmngm0cSNjyRo7V3YULA=) 12: m-jsfAdYgsJAa3up1fmZhioWFPA.roa (hash: uM3NhIvRZarm71/Jt0wY702d6NR+jneUoXTmHQ4dPKU=) 13: mRc91Aky3UbvamSLkFdXObfQfbE.roa (hash: fgykKC9Ar9Wj0qpW1XO3tcUvZD2JrUF5e1a0yv+Dl3s=) 14: nhSqVyjNyvOMRtAwW9liT_id7vM.roa (hash: vzkOKT7JS1jke5S4AQx+MFi6AgRTbIyNGxlbHCHGXu0=) 15: oPRftB4EZtrsQBIZftaGLH2JImI.roa (hash: bS7NKvEIFKjKdH8JbKNy6+4FrYZVsFmLR+QRWSJr1d0=) 16: r6JXotIvt8BRtWBlfGRQvAlgC_8.roa (hash: +wGsrs7z85SqSNrKEaw6MjIU3cWbV5TKC4blCEdnvQ0=) 17: uPOU1KIswQbUBvI-71sNI7bH8ZM.roa (hash: 9G7wcV68qtvKtA1uCDdRHeyjoWlmWuoi4hmwzEGp6cI=) 18: ucR12nQaE6xem-rA3wM8WEC58lg.roa (hash: tlJsSb1+n3GHhim2lpZpyqmsxDkCNqWLEQRy+8oWP+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Sep 2026 21:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:5a:44:64:b0:1a:58:be:d7:22:15:37:dd:f0:b3:09:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa Validity Not Before: Sep 1 00:00:26 2026 GMT Not After : Sep 2 00:00:26 2026 GMT Subject: CN=a4c4a22881c40dc89a0f46181fd42c1c8e5d5359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d6:32:eb:5a:ed:c9:52:63:c9:e8:1b:e7:38: b9:60:11:af:a5:c3:b0:af:74:b1:2b:c8:fe:31:29: 32:50:69:4d:92:bc:e8:29:30:bf:67:2f:b1:71:3b: 9f:8f:d3:75:93:0b:12:07:c9:11:7f:15:24:90:e5: c3:c2:b3:eb:33:b9:69:00:dd:33:1e:84:95:9b:1e: 7d:c7:35:f1:52:15:7b:e0:40:34:2b:f5:f4:a4:ab: 35:7c:ac:76:07:e0:8d:96:16:75:ce:b3:9f:01:9c: 2c:9a:af:b2:3e:64:55:d8:aa:69:1b:3d:07:66:96: 5c:8e:36:08:9f:55:4b:64:ed:02:07:a8:44:93:0a: 5d:d5:07:a5:7e:d0:06:9a:af:a9:4c:d6:e2:b1:d8: 51:e0:82:66:65:43:3f:44:d4:4e:bb:d9:50:15:b3: 85:15:a6:a9:ae:e7:f9:2d:ad:6b:f9:0d:3b:ae:a5: f0:af:35:9a:f9:f2:5e:61:e4:c3:ce:38:59:d0:af: 88:4e:37:9d:12:25:82:3f:1a:cb:fb:75:57:bb:dc: 83:19:53:cc:3d:75:6b:5f:a5:76:1e:d3:98:f2:de: 66:43:ed:ab:04:b3:64:01:a9:aa:fd:20:fa:85:13: 4c:a3:48:13:64:95:e0:2a:5c:76:87:72:fc:5c:d3: 4e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C4:A2:28:81:C4:0D:C8:9A:0F:46:18:1F:D4:2C:1C:8E:5D:53:59 X509v3 Authority Key Identifier: keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:63:ba:d2:59:84:4b:5e:4a:a4:4a:b2:3b:ca:2e:b4:6c:21: de:43:05:f5:06:eb:0d:0a:34:1f:cf:d8:4f:ad:6f:ca:ed:ad: ef:38:a7:5b:6f:19:1f:4d:d8:09:bc:ad:4f:31:b3:c5:af:79: 61:ba:73:29:e1:a3:93:46:5b:b5:b7:e9:ee:71:f4:68:54:ab: d1:1f:6b:c5:5f:c1:57:5e:76:04:b2:b7:4b:af:cc:45:24:55: 92:53:9b:a8:5e:54:4c:f7:77:df:09:80:bd:c0:02:df:76:7c: e4:c8:24:6a:78:a2:af:89:e8:b6:b4:6d:16:27:0c:3f:5b:b3: 53:d9:fd:0b:1c:91:9b:25:0a:81:b5:5e:17:14:40:d3:31:75: 10:8b:25:6c:ee:ab:0b:1f:e2:22:e7:e5:1b:d8:08:a3:94:86: 2b:0d:58:e0:f2:d9:4f:bf:31:7c:b8:d2:0c:c8:79:80:41:a0: b5:08:84:75:32:1a:b2:5d:4a:44:25:32:1d:b2:7f:c0:c4:c9: c2:28:21:aa:16:67:9c:00:17:b9:5d:58:1c:6c:bd:5c:3e:31: 63:39:f1:c7:1e:33:45:da:d5:2f:7f:df:0d:20:57:6b:7f:e9: f3:3a:26:20:4c:0f:0c:ee:2e:c8:22:6e:96:52:7d:e9:88:37: 64:d2:3f:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBaRGSwGli+1yIVN93wswltMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzZmYjQ0N2FlZDcyNmQyZWY5MzFhNDI5NjQ0NDQ1NjI2 MmE3ZmEwHhcNMjYwOTAxMDAwMDI2WhcNMjYwOTAyMDAwMDI2WjAzMTEwLwYDVQQD EyhhNGM0YTIyODgxYzQwZGM4OWEwZjQ2MTgxZmQ0MmMxYzhlNWQ1MzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldYy61rtyVJjyegb5zi5YBGvpcOw r3SxK8j+MSkyUGlNkrzoKTC/Zy+xcTufj9N1kwsSB8kRfxUkkOXDwrPrM7lpAN0z HoSVmx59xzXxUhV74EA0K/X0pKs1fKx2B+CNlhZ1zrOfAZwsmq+yPmRV2KppGz0H ZpZcjjYIn1VLZO0CB6hEkwpd1QelftAGmq+pTNbisdhR4IJmZUM/RNROu9lQFbOF Faapruf5La1r+Q07rqXwrzWa+fJeYeTDzjhZ0K+ITjedEiWCPxrL+3VXu9yDGVPM PXVrX6V2HtOY8t5mQ+2rBLNkAamq/SD6hRNMo0gTZJXgKlx2h3L8XNNOVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTEoiiBxA3Img9GGB/ULByOXVNZMB8GA1UdIwQY MBaAFGDG+0R67XJtLvkxpClkREViYqf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWO60lmE S15KpEqyO8outGwh3kMF9QbrDQo0H8/YT61vyu2t7zinW28ZH03YCbytTzGzxa95 YbpzKeGjk0Zbtbfp7nH0aFSr0R9rxV/BV152BLK3S6/MRSRVklObqF5UTPd33wmA vcAC33Z85Mgkaniir4notrRtFicMP1uzU9n9CxyRmyUKgbVeFxRA0zF1EIslbO6r Cx/iIuflG9gIo5SGKw1Y4PLZT78xfLjSDMh5gEGgtQiEdTIasl1KRCUyHbJ/wMTJ wighqhZnnAAXuV1YHGy9XD4xYznxxx4zRdrVL3/fDSBXa3/p8zomIEwPDO4uyCJu llJ96Yg3ZNI/iQ== -----END CERTIFICATE-----Generated at Tue Sep 1 05:30:06 2026 by rpki-client