$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json) Hash identifier: WbK3qne/Ozfpo5dz0j6EpvKPws2U8S8+/zCikBmvPJ8= Subject key identifier: D1:59:A5:14:B0:BE:FE:6F:14:1E:C5:B0:93:89:1C:1D:72:77:6C:FB Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 01A08D1F8A8FE5E0D204C9D88C889834E016 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft Manifest number: 10B3 Signing time: Thu 10 Sep 2026 21:00:49 +0000 Manifest this update: Thu 10 Sep 2026 21:00:49 +0000 Manifest next update: Fri 11 Sep 2026 21:00:49 +0000 Files and hashes: 1: 1-8-9AuENiX1nQK68jdWDU7AN2UU.roa (hash: eYe4nG8cfHyj0bQa4PtsDLyspDOBkb74jmYyTxJzxnw=) 2: 2wyh_QhMgMqC_O4n1IvcnhHRGBk.roa (hash: ao/nwpiJU1qsY5iD/g3xyfwFgyAPEV6fkSVForiTS1k=) 3: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: ZathJmTixbFGMvOcPHDlrpIh2YWUe8fH3nueVg9VqYU=) 4: AcP7JE9k0_Nz5fFv3kJCDQhlgm4.roa (hash: /xkgYNVDBtLC88fxRmIeqBVLBwwlx87rKcoHwgUu3dI=) 5: Cbwy7ZTHRdEOY7GRBfFj_luZf7c.roa (hash: 35gqWtEcP4/HxKKbREK7gqnsXOG4vXjbmy1ljsXsfXo=) 6: Cdey4x25Y71jAjsi-w5ror1Em9w.roa (hash: 9Nkc6pZ1LY8cZ4nIVazJu4RFkDfce5y0UNDPuC2XOUU=) 7: Fu5kT9TxojjMx5c9WVqjL4KHnHY.roa (hash: OkWCwFJEccvJXScWm+KM/QkYp8L4OehLKl/qIjl3hPk=) 8: HV2EMgnuAtaqMPLEmHXYarCVNpI.roa (hash: kJvWjQO6p4obvK17uUJOQOaQMh6VU7iH+I1+ZH63XpI=) 9: LvnAY2pckzRLAzMxTjPE9zCN3Ag.roa (hash: woZLLhApCfVxkyZ50HpqXpM/zC7yGzb4mBQNzIbCauE=) 10: Q03PdSGrQJ1a3WGfZ-bc5I0qaws.roa (hash: 2OnqRPuaN0v+Zan9ND6ygbAA1lh/p4DcTNqdYBIoSGo=) 11: RUzsZjQOmWwABCIUkcshejkaol8.roa (hash: RBKNBE9V3LhFEz+JeieM4xs1FwZeU1f7a5C0ApeFYFE=) 12: U0sKMofxXdVOw-0XJTrnhs5_ivw.roa (hash: 2ArYsgltaFdadzwNfrDc7gLpkClQBPjzaHH3uLWf38s=) 13: WcBb746Ge3KAEF-yLyH5I6ZFE0E.roa (hash: QXm/UopRYCraXfnadtlxCqtDzUMyQNtipIGzmPAgbf4=) 14: XUImnZKdlu7MDc0FxppzhVw4AFU.roa (hash: owXiNqfnKaJDDUXdUHghHE0onKUOIoOQu55R09C97Zg=) 15: dXpQm6W-fzeDoM6ANaDna4LeJJw.roa (hash: X+KL+RuBzuWO/Tf7EZrDXYxpoc28BH51yAUJezDMoh8=) 16: q6_QV7_dR_nUmUjkdnn1Ol_C4hk.roa (hash: e/CCQvEkZLvzTnUS4WnPQ1yCXPvY5eeas48ASlaEDPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8d:1f:8a:8f:e5:e0:d2:04:c9:d8:8c:88:98:34:e0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Sep 10 21:00:49 2026 GMT Not After : Sep 11 21:00:49 2026 GMT Subject: CN=d159a514b0befe6f141ec5b093891c1d72776cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:9e:9d:bf:ad:b7:3f:54:2b:eb:13:d4:6b: 08:f9:b8:b0:af:79:90:3a:41:07:71:5a:83:11:bf: 05:f7:e5:4b:17:34:8a:62:cd:e0:65:0c:88:dc:e4: 9e:53:bf:72:e9:4a:d9:4f:4d:d2:72:b5:03:b4:38: c7:67:5d:39:d8:5a:b5:c8:18:9d:1c:03:3e:54:69: 6b:75:1a:5f:c0:47:87:24:a0:4e:72:c3:80:5a:e0: 7f:c0:72:66:3c:37:87:d8:15:fd:43:be:3a:11:b9: 14:31:72:9e:6f:35:e1:f1:4a:54:85:51:0c:88:2e: bb:55:e3:8e:a9:55:6c:3a:0c:a1:e1:49:a0:df:b3: 64:97:0e:7a:1d:bd:63:bd:ad:be:ac:ee:54:37:07: e0:d5:74:d5:07:e9:b1:50:e2:7c:c1:7c:33:ea:d7: 6e:d1:cc:93:04:47:84:92:b8:4d:cf:29:57:7f:5f: 5d:ae:ab:32:f8:25:d5:09:76:8c:e6:a9:ed:36:68: 3a:89:b1:76:bd:6e:6f:bd:a8:28:5b:96:1c:9d:ec: a9:4c:95:24:4f:22:0d:a0:d5:98:27:39:aa:e1:57: e3:39:1e:1d:00:6f:2a:99:1a:b7:a5:07:c2:91:aa: af:86:0d:b0:42:0d:d5:bc:f9:8c:b6:c9:6b:b5:91: 7c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:59:A5:14:B0:BE:FE:6F:14:1E:C5:B0:93:89:1C:1D:72:77:6C:FB X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:82:63:31:2e:c3:e0:91:3e:d5:5b:cd:93:88:10:87:bf:a4: e6:f0:d4:e6:cf:98:1c:bb:ee:6c:19:0a:b0:27:49:e0:16:f5: 4f:18:61:94:ba:b4:aa:06:2d:54:c7:db:b6:a2:b8:79:57:81: 20:d3:27:50:aa:e6:cf:98:ef:1e:1d:2d:1e:69:32:a9:10:0e: fa:3a:6b:40:8b:ee:97:1f:dc:8b:c2:55:e7:9a:dd:f7:0a:a7: d5:e4:f1:0a:a9:66:c2:e7:10:03:57:6e:bc:70:56:25:96:ca: 6b:f9:75:4b:e0:04:d9:bf:34:9a:bb:1f:57:5f:4a:da:87:6d: d5:ba:ae:4c:75:e8:21:7e:87:19:6c:aa:c0:7c:27:bd:bd:a3: 5f:e3:f2:55:09:3c:8c:8b:0f:a5:30:3d:61:a5:c9:25:78:95: 39:10:82:1b:6c:b9:5a:fb:e1:20:d3:0f:a5:63:0d:dc:94:73: 31:ed:05:16:58:f2:6e:22:aa:2d:44:5d:37:2e:b2:64:fb:78: 1f:28:42:4f:96:db:d5:43:3a:d7:c9:de:46:ef:7b:f7:e0:92: 30:c7:9e:24:6f:23:dd:3b:a4:a1:f8:58:a5:20:33:27:8b:6d: 1a:4a:86:8c:c0:73:49:b7:79:dd:76:90:86:37:bf:eb:cf:b5: f4:2d:f0:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCNH4qP5eDSBMnYjIiYNOAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjYwOTEwMjEwMDQ5WhcNMjYwOTExMjEwMDQ5WjAzMTEwLwYDVQQD EyhkMTU5YTUxNGIwYmVmZTZmMTQxZWM1YjA5Mzg5MWMxZDcyNzc2Y2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5+enb+ttz9UK+sT1GsI+biwr3mQ OkEHcVqDEb8F9+VLFzSKYs3gZQyI3OSeU79y6UrZT03ScrUDtDjHZ1052Fq1yBid HAM+VGlrdRpfwEeHJKBOcsOAWuB/wHJmPDeH2BX9Q746EbkUMXKebzXh8UpUhVEM iC67VeOOqVVsOgyh4Umg37Nklw56Hb1jva2+rO5UNwfg1XTVB+mxUOJ8wXwz6tdu 0cyTBEeEkrhNzylXf19drqsy+CXVCXaM5qntNmg6ibF2vW5vvagoW5YcneypTJUk TyINoNWYJzmq4VfjOR4dAG8qmRq3pQfCkaqvhg2wQg3VvPmMtslrtZF8PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFZpRSwvv5vFB7FsJOJHB1yd2z7MB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAloJjMS7D 4JE+1VvNk4gQh7+k5vDU5s+YHLvubBkKsCdJ4Bb1TxhhlLq0qgYtVMfbtqK4eVeB INMnUKrmz5jvHh0tHmkyqRAO+jprQIvulx/ci8JV55rd9wqn1eTxCqlmwucQA1du vHBWJZbKa/l1S+AE2b80mrsfV19K2odt1bquTHXoIX6HGWyqwHwnvb2jX+PyVQk8 jIsPpTA9YaXJJXiVORCCG2y5WvvhINMPpWMN3JRzMe0FFljybiKqLURdNy6yZPt4 HyhCT5bb1UM618neRu979+CSMMeeJG8j3TukofhYpSAzJ4ttGkqGjMBzSbd53XaQ hje/68+19C3wow== -----END CERTIFICATE-----Generated at Fri Sep 11 07:38:44 2026 by rpki-client