$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft File: 3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json) Hash identifier: rs55mpOjcmaFNQbE+znhuYB2II0vQiOIo7HjQBNmsNw= Subject key identifier: 7D:EF:58:F1:0F:C6:B2:D6:6D:AB:30:54:A2:84:D4:FB:E5:54:67:91 Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Certificate serial: 01A0EAE557C685B3F10E2D227E96A0667869 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft Manifest number: 1A8F Signing time: Tue 29 Sep 2026 02:01:33 +0000 Manifest this update: Tue 29 Sep 2026 02:01:33 +0000 Manifest next update: Wed 30 Sep 2026 02:01:33 +0000 Files and hashes: 1: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: bmYHj972tHQYXv/Q+oEidYy2Di0jbO//Pl1Iqx/uGZs=) 2: 72Q1egWr6oypefXTdA5CthpoDwA.asa (hash: Ex+nllLw34K8tM+m1tc2SsZ0dGbxERIt7to9fxi4ZLU=) 3: Z0Ol55vmano2z06uUQknUo3QoTc.roa (hash: GkLsLJIYqmg4q6xamUbvEEG9iujsWjsYcEaYmXK7cLE=) 4: _0EsaxZOC_EidYm5nqVbMGv-gwk.roa (hash: iTzRHJQiIkKsfX5vIK1gvYNgM5gQ+IPUGEhDEQTXUs8=) 5: aThxnwCGINMSN5w7Lq386c4Rr0Q.asa (hash: nDmBVTg9NgvFnfHF4bT15FSCd3UeJ1yvkPU8dWHoMcM=) 6: bw9eVtm9c40YW7trBt_TVdzJ5mI.roa (hash: /NTrObUo6IQzapQ0ypDyGs61lXuL+fvbPRbe8yw3Glk=) 7: l2fzBtP72pfYzFsSa2KgK_QMTGw.asa (hash: LgU75FULeZxwY3KKb4OjWA22/9/RJakUfYHdIGrNq7E=) 8: mOZvAMLraqykK52-jzGD-yHlcnw.roa (hash: HgyR01q3fui7+YF0vuXYroeZjeOmGgCJNhWLmBZNBqI=) 9: r_0py4YALAEcOOi0tvRe1NDcIA4.roa (hash: acy4ZAe5LvQuy/j1nyMxhW+v2g0V51OQVWm9ef7WTLI=) 10: sMFJYO9pghdo8vlEJsdIErQh-nk.asa (hash: 3eoRUhv4dICMBmHKDZtNl3L4O/US2KjEN8hQl/0JOUo=) 11: u02qpN14w4yhn2ctE44FwFlaayw.roa (hash: Y86Ae8inVsAjiKn8VpEwH1tTqB45gvur7i/GdDAq5IM=) 12: wU5WB_ji5JrlZ_16qSJUrAilivo.roa (hash: U6udo/ByFFGOCnC5vUVII/ZIrb4fHBpEXgV9OsTbTvw=) 13: xJmLpZQSUqn2p0sl4yH-zTjLxSU.roa (hash: 3C0CJjezLxbHBKLVQeKBHPmtT1qFFsnDxafe76+pogU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 02:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ea:e5:57:c6:85:b3:f1:0e:2d:22:7e:96:a0:66:78:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Validity Not Before: Sep 29 02:01:33 2026 GMT Not After : Sep 30 02:01:33 2026 GMT Subject: CN=7def58f10fc6b2d66dab3054a284d4fbe5546791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:96:c7:65:1d:c4:ce:7f:0b:41:df:40:1c: be:60:1d:c2:b3:d0:2c:7b:b1:69:9f:4f:f3:64:88: c8:e5:ca:7a:78:51:13:fa:d6:75:22:b4:41:fe:0c: 02:08:ca:fb:b6:0f:f5:c9:23:24:82:8e:cd:b8:ef: 19:49:5c:ac:b6:05:3d:a2:37:e5:77:d1:b4:5c:f3: 94:14:f8:93:f4:bc:31:1f:6e:14:30:88:7f:28:2e: 9b:42:ee:08:52:d2:6e:ac:49:c0:68:f3:24:b8:fb: 5e:1f:21:e4:cf:70:19:39:92:ec:de:dd:74:1a:e1: 43:a9:62:65:a8:fd:3e:72:fd:74:83:02:90:1e:9e: 9a:41:24:3a:2a:47:db:01:c6:0f:30:38:23:06:8a: c0:6d:1c:75:84:ba:93:6f:2f:c7:bb:36:b1:15:34: 77:53:88:8b:5e:11:cd:4e:01:44:97:fd:29:09:b0: d7:1c:ab:7e:2d:c7:32:72:ae:88:ae:43:a1:d1:b5: f1:1b:bd:80:56:b2:0f:35:96:76:8d:6a:d3:26:12: c7:5c:91:fe:66:e8:4b:49:b9:96:dd:c1:dc:92:76: 88:18:17:4a:58:35:ec:ad:79:49:22:5a:a8:ea:67: 7f:f2:40:59:b4:ec:80:71:0a:47:eb:64:1c:8e:b6: e3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EF:58:F1:0F:C6:B2:D6:6D:AB:30:54:A2:84:D4:FB:E5:54:67:91 X509v3 Authority Key Identifier: keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1e:0c:11:5f:6f:c1:84:31:8f:b1:43:e1:b4:80:44:2c:5d: 00:92:ef:92:2d:8f:88:19:bf:b3:5d:b8:c1:44:d2:64:31:a1: c8:39:ae:fc:c4:cb:a1:f9:31:45:59:f4:4f:e5:1a:ef:e1:de: 4f:7f:a9:49:a9:3d:dd:cd:0e:75:77:4b:3a:9a:3f:63:30:06: a5:89:02:a6:85:27:34:1f:d6:9d:71:18:2d:86:47:61:cd:0a: 16:30:c9:6a:e2:20:f1:b2:fc:11:af:3a:17:16:da:45:99:c3: 52:9d:03:89:93:2d:c0:60:01:79:53:72:dc:db:f8:47:d0:8c: b4:a7:08:f2:b6:cb:78:30:4e:f2:0d:a1:a5:d5:28:5f:8d:4b: 90:a4:54:ed:3a:16:4a:12:70:90:51:31:68:21:ea:cc:dc:f5: bc:fb:65:5f:b9:bb:c8:f7:c8:57:d9:58:2a:db:8a:b6:ab:67: ba:61:46:78:f7:da:77:8c:f0:5d:a2:cf:e4:25:ec:08:42:c3: bc:85:4c:f3:5d:c0:e2:a5:6b:f6:13:55:01:c5:d1:66:36:c7: d7:df:14:89:85:f5:12:0a:70:b8:72:b3:2e:06:2e:65:72:30: d1:78:00:da:2b:64:16:b8:41:db:67:22:67:d0:4c:9b:d8:23: 5e:19:0f:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDq5VfGhbPxDi0ifpagZnhpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOTBlMGFlZTFlY2MzMTA2NmNiNzQ0ZjhhN2ZlZWRlZmIz Zjc5MzAwHhcNMjYwOTI5MDIwMTMzWhcNMjYwOTMwMDIwMTMzWjAzMTEwLwYDVQQD Eyg3ZGVmNThmMTBmYzZiMmQ2NmRhYjMwNTRhMjg0ZDRmYmU1NTQ2NzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvyWx2UdxM5/C0HfQBy+YB3Cs9As e7Fpn0/zZIjI5cp6eFET+tZ1IrRB/gwCCMr7tg/1ySMkgo7NuO8ZSVystgU9ojfl d9G0XPOUFPiT9LwxH24UMIh/KC6bQu4IUtJurEnAaPMkuPteHyHkz3AZOZLs3t10 GuFDqWJlqP0+cv10gwKQHp6aQSQ6KkfbAcYPMDgjBorAbRx1hLqTby/HuzaxFTR3 U4iLXhHNTgFEl/0pCbDXHKt+Lccycq6IrkOh0bXxG72AVrIPNZZ2jWrTJhLHXJH+ ZuhLSbmW3cHcknaIGBdKWDXsrXlJIlqo6md/8kBZtOyAcQpH62QcjrbjbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3vWPEPxrLWbaswVKKE1PvlVGeRMB8GA1UdIwQY MBaAFNyQ4K7h7MMQZst0T4p/7t77P3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYt MDBiY2Q5YjkxYzFiLzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYtMDBiY2Q5YjkxYzFi LzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfB4MEV9v wYQxj7FD4bSARCxdAJLvki2PiBm/s124wUTSZDGhyDmu/MTLofkxRVn0T+Ua7+He T3+pSak93c0OdXdLOpo/YzAGpYkCpoUnNB/WnXEYLYZHYc0KFjDJauIg8bL8Ea86 FxbaRZnDUp0DiZMtwGABeVNy3Nv4R9CMtKcI8rbLeDBO8g2hpdUoX41LkKRU7ToW ShJwkFExaCHqzNz1vPtlX7m7yPfIV9lYKtuKtqtnumFGePfad4zwXaLP5CXsCELD vIVM813A4qVr9hNVAcXRZjbH198UiYX1EgpwuHKzLgYuZXIw0XgA2itkFrhB22ci Z9BMm9gjXhkPjw== -----END CERTIFICATE-----Generated at Tue Sep 29 11:12:04 2026 by rpki-client