$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json) Hash identifier: 9ZCbzYSAGO73NsVcWb1VsHgDbMIdaGV8tC9+JTPmAyI= Subject key identifier: D8:6A:39:C7:67:D4:AF:8A:DD:99:17:D7:E2:6A:83:54:BA:02:61:90 Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311 Certificate serial: 01A0D1247651AA570047B2E1F22E8EB8EB99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft Manifest number: 0AA9 Signing time: Thu 24 Sep 2026 02:00:22 +0000 Manifest this update: Thu 24 Sep 2026 02:00:22 +0000 Manifest next update: Fri 25 Sep 2026 02:00:22 +0000 Files and hashes: 1: 0j8mKPNVQTMhrPMoTB8vqumItaY.roa (hash: RfwfX7kQEbOpbeZ05eE31bx2DYFysCnm/nQLdjd7Xnk=) 2: 1-5SN3I-IsoUjfo8g5-hBdsRRZ9o.roa (hash: s09l3XLrS1nG2HYt50hW4zF2T2VLAEk4Mtf1043eyYs=) 3: 1-kTvZ0CIAu8uTw7fU1T6vT9hc9c.roa (hash: me+ftvQPzHdAUrIuYjuuG8bbQjdCu8RbriElDkqOOBo=) 4: 5obQTKQQdziyHt3lp7e0Ce026vk.roa (hash: Le5yUrWQi3zm2wIsTvW5Oct4jk04f+5rZXXqRfdqn8k=) 5: 8dffgbceyZZN2GD0DQntG3Z8fxU.roa (hash: 7MA6pNhMj3p3AaurB3f6qiL2uGgtlKFoFp4bhK94tNs=) 6: DgRXfU03npME4V1AwAX0ThBtZQ0.roa (hash: 28zui3LwnRaze+dAHIDUkVVoknpCffM0WP9r0d8Uduw=) 7: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: JmrbsMne+aTvJ6x1VlqOoqa19mVK0ZisIAIdHjVmmHI=) 8: MW-Of09W86VTd-ehIdYpnjmPXXs.roa (hash: LD0GodrBLFRUB6lFsPKkTSv+4sIk7vBheqeA3m5nPOo=) 9: RTZmGDdPCU2SBV4lhMEH2Sp_2-o.roa (hash: vYRw7atU1j7YPp403PSxl0yUcReYPk7klM3aD3yLz8o=) 10: XfaQx2F1DQ7dZJr9-a__hDM5coI.roa (hash: Uj4xi+1RpyiVvP8zoS4JaQonnJeBy+gzjAcazMu9DFA=) 11: ZIEMV2zIloE52-qgOXdFi1j85Tk.roa (hash: NwScYVj2gBSbhZaCbwwZMrlWYVdDowjEWEzxULRwSVQ=) 12: bq7p2c5vJ2AuacchZjMY0iRJ4d8.roa (hash: 18rUuCK206j5Kf25J505Px18ULYGnExtH3WZ9ccpOUo=) 13: ihH2jmcAzRuRb0DXObKEK01lyBE.roa (hash: 8lNi9w5SpA0dQSPNcnFbf41In6HTCs+i7pcqGwmC+bY=) 14: zSQtHn132zkYiODR-nP8aHtUQYA.roa (hash: 0IThsqQjeAvQaaBM3736hRL6ffPhT8HNYOS2v2AnKs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 02:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d1:24:76:51:aa:57:00:47:b2:e1:f2:2e:8e:b8:eb:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311 Validity Not Before: Sep 24 02:00:22 2026 GMT Not After : Sep 25 02:00:22 2026 GMT Subject: CN=d86a39c767d4af8add9917d7e26a8354ba026190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a0:97:f1:b8:dc:b1:f3:0b:24:d7:8f:cc:be: 54:80:60:ec:2e:ee:f6:c9:85:8e:a8:54:05:68:75: 26:4c:34:8e:74:fb:1e:a0:e3:0d:be:af:50:48:fe: d6:f3:23:6d:cd:d1:7c:83:56:fe:c5:e4:34:0d:86: ed:71:3a:77:cf:17:8b:87:ca:e9:d6:fc:58:0d:32: 02:92:47:55:bb:13:45:cb:ad:10:92:b7:62:41:c0: ae:30:24:35:7c:0a:49:1f:21:a1:4d:b0:eb:1b:67: f4:4e:93:ba:98:bd:86:39:26:7c:62:04:77:de:58: 5b:63:f7:65:54:75:27:21:66:72:d6:81:08:e6:8c: 34:77:93:6b:bf:d8:48:62:94:2c:0c:9d:5e:9f:0c: 88:e3:1d:74:8e:82:b6:3d:16:fc:5e:3f:d7:20:86: 1a:36:7d:18:8b:ef:81:f2:b2:ee:b2:66:10:8a:88: 86:2d:8c:71:8f:79:02:61:92:5d:86:68:13:1b:85: dc:26:83:df:c6:24:65:9a:cf:b9:99:0b:a3:b0:c5: e9:5d:4c:11:e5:d0:8d:69:7a:e3:2e:55:46:ae:26: 55:d3:12:11:7e:cc:04:a1:1f:54:b9:8a:66:b4:42: 59:15:19:a6:95:8c:ad:8e:04:84:b0:2a:8e:d0:d9: 14:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6A:39:C7:67:D4:AF:8A:DD:99:17:D7:E2:6A:83:54:BA:02:61:90 X509v3 Authority Key Identifier: keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f8:e3:d2:53:b1:5f:23:ad:61:dc:0c:87:33:ce:b4:7d:cb: 30:aa:20:db:77:d6:c1:67:8c:1c:dc:a5:c6:9e:e8:b8:96:73: 5b:92:ec:03:f0:22:e9:4b:92:00:29:df:56:80:ee:16:8f:d1: 95:b2:5d:9d:dd:15:b5:fa:5a:47:e8:03:d1:27:07:6e:7d:ff: f6:6e:97:b9:9b:26:cd:24:fb:0d:e8:03:90:07:22:c8:b6:cb: 61:87:48:c1:b1:22:cd:9e:0f:bd:37:6d:4c:b1:a2:b7:1a:b5: 82:a2:b4:a1:b1:f4:1e:91:d4:00:5e:18:c4:6b:b3:c4:24:f6: da:6f:18:36:1c:2b:7b:1d:02:9f:42:16:06:ac:24:13:6f:97: fd:f5:da:81:db:c6:33:37:50:ab:7d:fa:1b:1b:1c:03:78:c7: 8c:4e:cc:39:91:6b:09:fe:3d:c9:b3:b4:8a:b7:73:7d:d5:cb: a1:1c:61:7d:b5:d1:7a:ce:c4:20:6b:61:42:08:96:a4:e9:dd: 2b:0a:ad:99:2d:18:9f:42:98:85:66:8e:36:79:9d:05:86:8e: 84:6d:58:e0:5e:59:42:51:82:26:66:91:a8:ce:c1:51:b8:51: 5e:29:25:bf:6b:f8:09:be:57:5d:cf:94:7d:ed:09:f4:ae:02: 97:c3:72:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDRJHZRqlcAR7Lh8i6OuOuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNjRmODFiOWUzNmI4NDk5MTc3ODc2NzhkMDE0ZGI0YmZj ZWYzMTEwHhcNMjYwOTI0MDIwMDIyWhcNMjYwOTI1MDIwMDIyWjAzMTEwLwYDVQQD EyhkODZhMzljNzY3ZDRhZjhhZGQ5OTE3ZDdlMjZhODM1NGJhMDI2MTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qCX8bjcsfMLJNePzL5UgGDsLu72 yYWOqFQFaHUmTDSOdPseoOMNvq9QSP7W8yNtzdF8g1b+xeQ0DYbtcTp3zxeLh8rp 1vxYDTICkkdVuxNFy60QkrdiQcCuMCQ1fApJHyGhTbDrG2f0TpO6mL2GOSZ8YgR3 3lhbY/dlVHUnIWZy1oEI5ow0d5Nrv9hIYpQsDJ1enwyI4x10joK2PRb8Xj/XIIYa Nn0Yi++B8rLusmYQioiGLYxxj3kCYZJdhmgTG4XcJoPfxiRlms+5mQujsMXpXUwR 5dCNaXrjLlVGriZV0xIRfswEoR9UuYpmtEJZFRmmlYytjgSEsCqO0NkUcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhqOcdn1K+K3ZkX1+Jqg1S6AmGQMB8GA1UdIwQY MBaAFA5k+BueNrhJkXeHZ40BTbS/zvMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTct YzhmMTgyZTk1ZWE1LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTctYzhmMTgyZTk1ZWE1 LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPjj0lOx XyOtYdwMhzPOtH3LMKog23fWwWeMHNylxp7ouJZzW5LsA/Ai6UuSACnfVoDuFo/R lbJdnd0VtfpaR+gD0ScHbn3/9m6XuZsmzST7DegDkAciyLbLYYdIwbEizZ4PvTdt TLGitxq1gqK0obH0HpHUAF4YxGuzxCT22m8YNhwrex0Cn0IWBqwkE2+X/fXagdvG MzdQq336GxscA3jHjE7MOZFrCf49ybO0irdzfdXLoRxhfbXRes7EIGthQgiWpOnd KwqtmS0Yn0KYhWaONnmdBYaOhG1Y4F5ZQlGCJmaRqM7BUbhRXiklv2v4Cb5XXc+U fe0J9K4Cl8NyUQ== -----END CERTIFICATE-----Generated at Thu Sep 24 11:13:38 2026 by rpki-client