$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: IfNe+rfZAFKoz6uvXkCUZhnkcq7x9Mzzwjs37Dwa96c= Subject key identifier: 18:8E:47:CF:7D:49:CF:EC:46:E9:50:3F:4B:8E:E6:99:58:75:57:B7 Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 01A08A8D9D86CD5DD3A37BE5CF73F96E4F99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 1A53 Signing time: Thu 10 Sep 2026 09:02:11 +0000 Manifest this update: Thu 10 Sep 2026 09:02:11 +0000 Manifest next update: Fri 11 Sep 2026 09:02:11 +0000 Files and hashes: 1: 5MRnKdBJRz0nCym_u2J_XuhbJV0.roa (hash: 0w7W5Douk0FpMsX6Dhx/ZXXVXbqTlMMWFq9w+rROgSg=) 2: BXXFKI13QIjnmOfPn-DjAJ-A154.roa (hash: urOCs6K6oSn1logMMcL9PFqOpqILrWbLQHv74ICPatk=) 3: CSF1WcnLJogzmtvTW4zbdxH149I.roa (hash: /BQ3atXgmkXNs08xQyzVGIUYihhzzloVi9gnBQ4fEf8=) 4: DBQk2xkzH8LUMKGSPsE6YRZwNgg.roa (hash: Ez/l5IHOm/GxqrY07w6s3W0W8MrW87S3E+gbSURGU2Y=) 5: GdXlIc5BP-3XOg-aqWkP_a52ndk.roa (hash: G0Pn5eObq0FpgcplWCouXfdtlhgx0MPfgPeSIk/PGOo=) 6: LfyLZbGl7b5gzJ9zSZ07MTcwQGc.roa (hash: JcRj9d8ulbmAc0W06IEWNBloWUue3HKweCBhCEYuEvs=) 7: Q8i1GCNM8MeAVWMzMN-VkOcL5cc.roa (hash: /F4wQ4+WNm083+DT8dsb+mkUzic0vz1naKYXmlneu4s=) 8: QFuike-stdBR2Qti952hl6TV8BU.roa (hash: 07OxG0G/dsZ56bfjY4mosLLZF6mhYFWxF2zJxp/iqzM=) 9: QMhXPeEiGbtOYJL0N3f4IXIT6ng.roa (hash: 0HWPj54I4hc1a9Dl1XhfG4dlUuFqco3Us2UXObXNoFY=) 10: Q_GDlNF7cK8B95qZojWcrc4afdU.roa (hash: LjEzjQgJhMLQIyhzGC77T1fGxckoIM3+ZyoGULP6VX0=) 11: SaP1nBFhXOE6FH3RW0G8tA8VQjM.roa (hash: cTn11+h/p3mDsKapImFbB/2zblLfIwW6K3OdsJp73RA=) 12: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: 3BVXAT42BdxvmSi5dwBCo3Kx1tI3it+rx1h9luyfD3w=) 13: ZXr4IBxINp27c2uA9OArj4h7ywI.roa (hash: JD+M7Jzo6o0FuV4VqJtxKp+DhghFCIqIjWgxW5/ca+s=) 14: _3eACqWgcDV77Z5GJVk82wrfcAQ.roa (hash: zugyJ9au3EVgX9ZrQItHOQ/dgQnBWoZfW27IbF2rS7o=) 15: cgJUrA7zUIWAeZrM-A-gevZWhKE.roa (hash: E3FKka6J+aK+1x7zSPpnK2SU6NFTg+dv8eZSvTw7VeI=) 16: gJMtWq8wsHqrA-aMuJa4zlTGmHQ.roa (hash: ph6so/OLFpZPFLkaG9kVD8yzMdOCcTKa12b2RAynICM=) 17: gXb1y1F3U2XUAw7hK8QjhFzzPhI.roa (hash: Jzhqn78lmsa3hMGtIBekxLwEnu2AFc5tx6/m0IQS4VU=) 18: j3C7XhWqPqZZHvZkHu3yiqeeCcc.roa (hash: ZjpdDLmy3vgdZP6r/TUUOLjLthI6Y2QCHmwsaun5n3I=) 19: jH_DOyq4ZJejSSLKVID21lO__BA.roa (hash: kR/erK7JPMRLB0nP2bCrqOwwEEt7e8QRyTqOJC2JhM8=) 20: qFB2EJT-dRDHAj_TTnZeCHZ9Gcw.roa (hash: sFTYpyONZM4849OiQuWMraeanFpbFNLi3ztibzARdQc=) 21: tBlYFSzWvbFvxf9f-MzOzaib52c.roa (hash: +QoYpfs3CrNYgE/1grCeAjj1v6GUGqrmR7t3xV7iiic=) 22: ubRPeeTkxSUpNxitZEengxfbjho.roa (hash: fMSmAi5k6+uYv96mJ7QxgFHbu3bUfoKt8MD+l7YHLTM=) 23: xONZTPQjTNAnpv3LpXFk-hZHq58.roa (hash: fMb3Xyl3Jh1WZeQDP8MvYVbT2cKVoCMH4bX5aAbt1YQ=) 24: xxGXfRcmkhBAjROUfzE7wrifgME.roa (hash: TUwE+CjLZWVNW/bdlU4DKJBAW1GHbsJsmhsw/0YlJn0=) 25: yoQlk7EPLkqco8JH4jKypU6v23g.roa (hash: 621ThCmwWv6CPqAuQxvYAjiamlbk6ns+2i1sDVoPtJM=) 26: zjEP4Jlf2NPIUmce29FPyO-6Luo.roa (hash: STXLo8QB1Iuve+MzXt6e+SM6A4TtepvV7fG8YNcWSNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 09:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:8d:9d:86:cd:5d:d3:a3:7b:e5:cf:73:f9:6e:4f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Sep 10 09:02:11 2026 GMT Not After : Sep 11 09:02:11 2026 GMT Subject: CN=188e47cf7d49cfec46e9503f4b8ee699587557b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5e:9f:84:4a:11:75:ae:dd:42:21:e3:ae:28: a1:c1:f5:45:40:24:57:bd:06:d7:c8:ae:f2:d0:a0: 93:14:67:3c:ff:70:6b:cc:57:99:40:85:2b:47:37: 6e:c0:2f:83:17:e1:e0:77:8d:dc:a6:f5:3a:e8:1c: b3:01:5d:54:b3:bf:03:62:03:0f:eb:e1:ef:ce:f0: 28:53:ae:42:5a:4c:59:cc:f1:d2:d2:87:34:99:0e: 14:68:83:d2:de:e8:92:8b:ad:c4:b9:a7:ca:b2:3f: 0a:f2:e0:c7:46:95:25:41:85:10:4e:78:fd:84:1a: 2a:f5:ed:f8:4b:70:2a:dd:b0:43:62:c0:e9:95:fd: c2:0a:69:1a:15:06:6b:7e:03:e2:8b:49:97:ab:f7: fd:ae:f4:fd:fd:40:d4:c7:6b:ad:06:86:34:92:21: 15:08:5c:a5:9a:84:a8:f7:00:e9:83:8e:09:8e:5f: 11:fc:6d:3a:f3:4f:3b:0b:79:88:52:e8:2a:02:b5: 7e:a4:7c:ce:10:cc:c3:32:7d:00:41:d4:9a:1e:4d: 2e:ac:5e:1f:7d:be:41:62:8b:59:e2:d9:4c:6f:d2: f2:b1:92:7a:78:60:39:4e:31:99:19:1e:25:b1:3b: 5a:69:73:76:dd:ea:68:d0:e5:ac:73:cb:1a:11:7e: a3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8E:47:CF:7D:49:CF:EC:46:E9:50:3F:4B:8E:E6:99:58:75:57:B7 X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:6e:63:59:92:3a:8d:01:a6:dc:65:c6:6d:ad:b4:e3:84:bd: 1e:41:35:cc:2c:ff:a7:56:e3:a3:aa:b2:b4:bf:85:46:8f:8c: 91:c0:7f:5a:f9:2f:0f:fd:e6:bc:41:a4:70:93:c4:63:88:56: 7c:61:55:78:11:8f:1f:1f:e4:14:23:03:fe:60:9e:97:53:3a: 3c:e6:3a:0f:6a:36:d9:7d:cd:56:3f:a0:2b:6a:ef:35:f6:a2: d4:98:9e:e4:95:fd:0e:a6:e5:29:cf:f4:53:f5:4f:24:13:37: b3:70:8f:5a:ed:53:d3:68:5b:59:9f:11:7d:74:89:69:7c:9e: c8:05:cb:b2:68:e6:10:eb:ac:0b:b0:a3:7c:aa:fc:1e:3b:99: 86:2f:0c:42:80:8a:d3:51:c3:74:9f:e8:16:bb:b4:1a:3f:ea: 0c:ec:9c:98:5c:40:1f:25:8b:42:ad:f2:7f:f8:8c:d4:42:0c: c9:f9:40:ab:9c:b1:46:64:bd:0e:12:2e:a7:14:fd:26:00:e8: ee:45:8c:0b:91:4d:d3:6c:1a:c2:8f:10:79:8a:ed:ca:09:d2: 1d:30:9a:c5:56:ce:58:b1:bf:85:f8:e7:c3:45:4d:8d:43:cc: f5:45:df:c6:c4:76:29:dd:21:ec:e8:ff:db:8e:85:d4:75:e3: 4a:6b:87:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKjZ2GzV3To3vlz3P5bk+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjYwOTEwMDkwMjExWhcNMjYwOTExMDkwMjExWjAzMTEwLwYDVQQD EygxODhlNDdjZjdkNDljZmVjNDZlOTUwM2Y0YjhlZTY5OTU4NzU1N2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF6fhEoRda7dQiHjriihwfVFQCRX vQbXyK7y0KCTFGc8/3BrzFeZQIUrRzduwC+DF+Hgd43cpvU66ByzAV1Us78DYgMP 6+HvzvAoU65CWkxZzPHS0oc0mQ4UaIPS3uiSi63EuafKsj8K8uDHRpUlQYUQTnj9 hBoq9e34S3Aq3bBDYsDplf3CCmkaFQZrfgPii0mXq/f9rvT9/UDUx2utBoY0kiEV CFylmoSo9wDpg44Jjl8R/G068087C3mIUugqArV+pHzOEMzDMn0AQdSaHk0urF4f fb5BYotZ4tlMb9LysZJ6eGA5TjGZGR4lsTtaaXN23epo0OWsc8saEX6jjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiOR899Sc/sRulQP0uO5plYdVe3MB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALm5jWZI6 jQGm3GXGba2044S9HkE1zCz/p1bjo6qytL+FRo+MkcB/WvkvD/3mvEGkcJPEY4hW fGFVeBGPHx/kFCMD/mCel1M6POY6D2o22X3NVj+gK2rvNfai1Jie5JX9DqblKc/0 U/VPJBM3s3CPWu1T02hbWZ8RfXSJaXyeyAXLsmjmEOusC7CjfKr8HjuZhi8MQoCK 01HDdJ/oFru0Gj/qDOycmFxAHyWLQq3yf/iM1EIMyflAq5yxRmS9DhIupxT9JgDo 7kWMC5FN02wawo8QeYrtygnSHTCaxVbOWLG/hfjnw0VNjUPM9UXfxsR2Kd0h7Oj/ 246F1HXjSmuHAw== -----END CERTIFICATE-----Generated at Thu Sep 10 19:12:59 2026 by rpki-client