$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft File: TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json) Hash identifier: zdhLCn5/gCp7v5uZ3C2gcFOazgv/MZMcqWI06Gu+mrM= Subject key identifier: 35:6B:4E:FF:CD:43:0D:DD:42:37:D1:6B:54:15:C0:CA:8A:2A:99:0B Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 01A0D6B9B343BE8CCA002623F440B8F07FCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft Manifest number: 1A87 Signing time: Fri 25 Sep 2026 04:01:29 +0000 Manifest this update: Fri 25 Sep 2026 04:01:29 +0000 Manifest next update: Sat 26 Sep 2026 04:01:29 +0000 Files and hashes: 1: 02kOZkpvmw6H06A_7TJUg4SFXaQ.roa (hash: TpRuYePLiA4791T1EEAGr2x5CqL+fTtzRjsvGFbZMFE=) 2: 2uonQk8lw16FeBIvKKSSmhsYIS0.roa (hash: 2dNCmgQW6KMhs3bZJLn40BJuFp8E7ETzKi/EDLa0p5s=) 3: 5ziyZMsm-eF8rQKEiPIRLUjKrJc.roa (hash: ST0tOCj/lVMKy70YCsjUG8APQaOubaCeSEbJbdk4mkA=) 4: 8EjBwuh_9in2Z1YECnIBdQ9VNrg.roa (hash: PZyLvuJ766MtPxGWe7ycqZ9uJ2ybPMELzypr1ODKQyU=) 5: FwWBUFukI5sYaoIJXPQl_VpBKGw.roa (hash: 1A5Wlz49N8I7V2ONwfh6sYJRe2syIOSrNYZlIXmZWdY=) 6: Gy-LFbASJWTVYACt4LtWc2cmLuw.roa (hash: ujJsb5LhZ8X8O1ISoHR/MP5k+2QVAPis3/2ApXdZZ3g=) 7: MO6J3ImYDWqYVzymL0l4FvP1thU.roa (hash: e0dvPY/H6He44W+ZncCzFUHFzRAKvhD4nFOOCJSgnhw=) 8: NjCxVetchGZ0XWn7taqHcdtexeY.roa (hash: luZWHi8jfVZ+lGh40HXz9Aj5QcdjwpUbYNovF4whMXA=) 9: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: J4e/YFMN61PIMUpwEpgYqedXDkX+Fl8tzzPmvkwt9Qw=) 10: YtD0hgbunNZVqmVM-mTLvyyQEfg.roa (hash: bXNfm9p7iVN39qRXUc3z+rEBdxvoCN2D2p6tjPh77Uk=) 11: aXSOc-PVHMUBKt_487iYToOm7qo.roa (hash: TgcrpfHL47vgaiMhXn3iuqbilgXgoWpFYf29PAeU7PQ=) 12: esYBbdHlmzNrFPaZHG9t4u-VPHc.roa (hash: lkNqbXeTq7xSvC4HTyeLweRSSMj+JVz2/1P8Io014A8=) 13: fk1NDywalDt7uylAx-JbeK2KndA.roa (hash: GjjjXn/c5RKterLew0goE2oPgtQT51gR0GQhu+Gw67E=) 14: gH8loGqHuQUgS7s-27j8UFtooRI.roa (hash: 3c/uPZsoFkC/+vu1WnVFt+9jcD0vxFLrQc/tSOZVhig=) 15: irMc3rrBTtXnxu6Y6x7SlrREl3k.roa (hash: odarHoY4Wy3X+9/gV/9gi100gxxZ4b3sXjkX8UmBWCw=) 16: jSXCL2nU6ig_-VGukqzzbg83BZk.roa (hash: Az+cF5wKpW/d6F9stZPF4IUccQjeYz6jWseSjP0L2T0=) 17: kYEWFQU5-czKs7zv1vGT343BJ-g.roa (hash: xWtvvMN7qcqpohmug6+MXQLfldtO5B6k2u+O9bf+VTA=) 18: oitUYkAPeYiroXJK68BhqiN_Xek.roa (hash: zYA61o9aLXKLXeSg2vp84zehihqtVq61hd+jWJCYfGg=) 19: rbrxUA36Uj_W2cv5ysZhTVIwxp4.roa (hash: OT7C6O/C6TgYrrzLBRPYDZUiybzraaRPGIJN5wW++Ak=) 20: u0RIuGfpHnx-Tn2Xp-wlaIQU95A.roa (hash: VuT5SalQp4yYIzm6lgKxTmu1Rlv5TD85uBnxUVTY7eo=) 21: yLMV5lCxmugxTcjR0kvs8qTvDQs.roa (hash: VAFUfjT6/8ZbId3UHCjjJDfpK2X5rUeLGtPsXPOBDAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 21:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:b9:b3:43:be:8c:ca:00:26:23:f4:40:b8:f0:7f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Sep 25 04:01:29 2026 GMT Not After : Sep 26 04:01:29 2026 GMT Subject: CN=356b4effcd430ddd4237d16b5415c0ca8a2a990b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:39:d1:9f:d6:15:4d:60:a0:ca:99:f8:c4:59: fc:9f:51:36:fc:83:cb:95:3b:0d:f3:bd:8c:b5:27: 84:5d:dd:81:c6:03:72:74:f4:24:ef:85:3a:6a:e5: 1a:3c:3c:30:ce:61:59:d9:3a:05:74:f9:cb:84:1c: 69:ee:69:45:27:7d:3e:9b:ac:40:a1:b6:2e:ed:ad: 48:8d:0b:7d:4f:13:6a:51:b4:90:85:9e:73:44:19: 26:87:7b:d3:ac:72:49:f5:97:57:4f:63:1a:3d:79: 47:aa:42:ab:56:fa:b7:c3:dd:c4:bc:aa:06:f7:8a: 66:a4:eb:45:eb:c7:40:de:60:35:16:2d:37:d4:21: 91:8a:75:48:83:c7:a6:4b:b6:44:08:48:c0:f6:6e: 80:93:26:ae:53:14:a7:17:37:87:ae:74:53:1a:9f: d8:c6:32:f4:88:f6:5c:e1:02:3b:16:fb:3f:7a:d3: 9a:ca:ba:3c:6b:d1:b6:f5:8a:72:e2:bd:91:97:11: 8a:d4:c8:8d:80:6d:f3:c2:5c:0c:f9:15:66:93:bd: 37:ba:66:ca:fe:b8:c2:0a:85:2f:9b:8d:b7:24:a1: 00:e0:c8:dd:5e:09:d5:7a:d0:05:76:4a:98:59:11: 6d:61:48:85:18:c9:aa:68:8a:1d:17:67:9d:80:21: 9b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6B:4E:FF:CD:43:0D:DD:42:37:D1:6B:54:15:C0:CA:8A:2A:99:0B X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption eb:51:46:39:4d:ba:43:5d:f1:b4:32:cc:09:9c:8b:7b:b1:1a: 84:5e:aa:01:cd:46:c2:3f:ed:f5:c5:fd:6b:bd:50:56:f7:78: 36:bb:02:d8:16:6b:9d:ab:4d:3b:d0:61:9b:1e:af:c9:c4:66: d2:fd:c0:d5:88:d4:89:9c:54:a6:24:bc:f9:ad:35:b4:31:72: 07:b7:1f:23:5d:a0:27:18:98:80:82:7d:36:99:71:f2:58:9e: 05:09:57:04:7c:14:e9:81:88:99:75:a4:ca:42:a6:50:f1:fe: 80:2c:39:4a:f6:a4:98:c2:50:bf:d8:3f:f0:0c:dd:92:12:80: f6:01:e4:e6:18:17:8d:09:9b:ef:bd:ec:04:61:fa:0d:2a:63: 1e:ec:f5:bc:2e:51:f9:54:c5:fe:d1:ba:d9:0b:05:94:f9:64: bc:e9:f3:f0:88:2d:a4:7c:c4:af:6c:2a:11:a2:db:46:e1:b6: 4a:28:13:9a:0a:f6:9e:d5:e9:9f:05:48:3d:d9:40:c4:94:73: bf:29:bc:27:35:0b:d3:b7:58:8e:87:aa:93:5c:3a:2b:2a:29: 0b:11:e1:e8:22:94:87:df:5f:6f:55:b5:3d:7a:36:f0:08:b2: c9:7d:d6:69:81:3a:85:fb:59:90:f6:90:9d:6b:ae:48:07:32: f6:58:40:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDWubNDvozKACYj9EC48H/NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjYwOTI1MDQwMTI5WhcNMjYwOTI2MDQwMTI5WjAzMTEwLwYDVQQD EygzNTZiNGVmZmNkNDMwZGRkNDIzN2QxNmI1NDE1YzBjYThhMmE5OTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DnRn9YVTWCgypn4xFn8n1E2/IPL lTsN872MtSeEXd2BxgNydPQk74U6auUaPDwwzmFZ2ToFdPnLhBxp7mlFJ30+m6xA obYu7a1IjQt9TxNqUbSQhZ5zRBkmh3vTrHJJ9ZdXT2MaPXlHqkKrVvq3w93EvKoG 94pmpOtF68dA3mA1Fi031CGRinVIg8emS7ZECEjA9m6AkyauUxSnFzeHrnRTGp/Y xjL0iPZc4QI7Fvs/etOayro8a9G29Ypy4r2RlxGK1MiNgG3zwlwM+RVmk703umbK /rjCCoUvm423JKEA4MjdXgnVetAFdkqYWRFtYUiFGMmqaIodF2edgCGbMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVrTv/NQw3dQjfRa1QVwMqKKpkLMB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA61FGOU26 Q13xtDLMCZyLe7EahF6qAc1Gwj/t9cX9a71QVvd4NrsC2BZrnatNO9Bhmx6vycRm 0v3A1YjUiZxUpiS8+a01tDFyB7cfI12gJxiYgIJ9Nplx8lieBQlXBHwU6YGImXWk ykKmUPH+gCw5SvakmMJQv9g/8AzdkhKA9gHk5hgXjQmb773sBGH6DSpjHuz1vC5R +VTF/tG62QsFlPlkvOnz8IgtpHzEr2wqEaLbRuG2SigTmgr2ntXpnwVIPdlAxJRz vym8JzUL07dYjoeqk1w6KyopCxHh6CKUh99fb1W1PXo28AiyyX3WaYE6hftZkPaQ nWuuSAcy9lhAUw== -----END CERTIFICATE-----Generated at Fri Sep 25 07:32:04 2026 by rpki-client