$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json) Hash identifier: 5I+CMsdCNWru5O66w3jFhehEg0r4jtPBXZUh8+fE0gI= Subject key identifier: 68:5F:3B:BB:40:AE:24:32:D9:D9:49:95:92:D8:5A:77:0A:20:4A:E5 Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 01A08B68C835314913CB173033CFBE5FFEAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft Manifest number: 1A55 Signing time: Thu 10 Sep 2026 13:01:35 +0000 Manifest this update: Thu 10 Sep 2026 13:01:35 +0000 Manifest next update: Fri 11 Sep 2026 13:01:35 +0000 Files and hashes: 1: 7gdlonHkctidA_Jgo0e1sPluTfw.roa (hash: L7iWiH+YVCR3BgQWnot+ADKst5Rvum0Fp/JtCnJ65RY=) 2: DQ1yVesejJpDnZvd2JLWH_7gAEU.roa (hash: iuHd9st9MGEOE3UuhPG4vRJ6eBtZs6iPypxGkfqTQSM=) 3: JlpCz-c9i9-Z_17K8F7XjOHLpJ4.roa (hash: MTi7TKa3n0d3E8E52eS58cc9MxnhlLc9ovB9GkQrKSk=) 4: MCv_Njd7Kt1jfUDJcMfP2Ew9zGA.roa (hash: 8slM4ZyNMUTgbPryNd+oyqvRv0X2KMYBpAbZ2g9V2+s=) 5: Pxzwfsnla9WCGgA_5yVN5NBVL14.roa (hash: dRusvivPw89AhWLw883YVx7O+/W5uw+jCzc5VJhBOks=) 6: dnlzr7T-KrzC8dTpRdaUUBCb42k.roa (hash: FlF41xrTHYEZQDWnwHhEl5bQr7qiicPhhj7kefuMDlI=) 7: h3NO-bNRnKL0h-LwaiCjswg7_nY.roa (hash: nge/dAbyC8BEKmPsWUQCbHBH18ANQj9ceVjvT5f7JS4=) 8: le7g6AeqMWo8tC4Pm6_9GuPpA9Y.roa (hash: M3GaptBPUtevgfpamZx3KC2EjkI+htg/GGtdiA7/WxU=) 9: o2KmTBSx7YAGDylX3itL6SdPUZE.roa (hash: lugrh1NUXlse4UYLEWT+hm10hbsF+hFuCCQ7+JOgu7c=) 10: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: Yl2TGzooSmS0XmyIbwzu/Nr2wcwxpHJwKlHrQQNJmhs=) 11: v9V5UdS7W7gv8Mt6_7V1IzHZAiM.roa (hash: oqxmALkOA6EG36s93nwvrqkYRgI5R7v2/8FaBvM3TLU=) 12: zMhciCUgU6J6shiNhaiwocMfw14.roa (hash: c8SQXIzHCbyAhdC6MEvd2MwYwyUckczcTmVUE35TvUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 13:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8b:68:c8:35:31:49:13:cb:17:30:33:cf:be:5f:fe:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Sep 10 13:01:35 2026 GMT Not After : Sep 11 13:01:35 2026 GMT Subject: CN=685f3bbb40ae2432d9d9499592d85a770a204ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3e:f9:70:ec:d4:ad:3f:66:fd:d3:81:41:81: 00:cf:5e:bd:16:75:d0:3f:35:88:79:3d:9c:ef:7a: 9a:d7:c6:85:81:d4:6b:e7:b0:71:3f:52:6a:3c:a7: a7:9f:53:02:7a:36:fb:92:42:b3:7c:36:d0:f8:a5: 11:33:55:8e:e9:20:35:f1:8e:5d:c6:df:df:4b:66: 1d:9b:78:9c:16:67:5d:1f:4d:9e:e8:69:ca:57:01: 87:69:6d:c7:77:72:73:3f:29:4e:65:0a:07:e1:63: 28:87:bf:40:16:6a:7d:14:2e:19:cd:f2:4b:c2:f6: 57:2f:aa:3a:c5:21:59:c2:c6:f5:01:40:3e:a8:70: 62:61:8b:a6:fb:e6:c4:39:69:60:62:e5:1a:e9:e2: 55:36:43:97:66:69:3c:4a:d5:8b:37:bb:93:13:5f: 65:63:7a:ea:1f:c6:3b:5a:c6:81:2d:34:29:9d:ab: 0b:da:4c:2c:95:1b:ad:23:56:c9:55:7a:f7:3a:3c: ee:5c:f1:d5:74:de:bc:96:38:a3:0d:9d:e9:c4:5e: 03:06:73:7e:8e:fd:96:4d:e2:8b:81:96:11:55:57: 86:41:6b:0a:f8:b9:96:2b:ee:71:06:85:5a:9c:58: 9a:ad:2d:28:21:7d:f5:0e:49:f8:21:81:c1:37:ff: 36:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5F:3B:BB:40:AE:24:32:D9:D9:49:95:92:D8:5A:77:0A:20:4A:E5 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:15:47:e3:93:5a:d0:da:22:b0:a8:49:d7:e8:7f:c2:83:69: 21:ee:7b:7b:8b:f0:d0:cf:c6:e2:48:dd:aa:94:4a:04:2d:61: 9c:90:73:60:d8:44:c8:a8:8f:cd:c0:38:2a:c4:af:26:e5:ff: 18:19:11:cb:1d:31:c8:4d:db:48:60:5f:42:6a:68:1d:6e:e9: fa:84:c5:71:be:c0:64:26:d0:db:a0:3f:0a:0f:09:66:2b:e3: 3f:71:19:2b:1d:72:47:90:b6:26:4f:97:19:36:48:d0:a2:55: 10:5f:6a:c7:4a:ca:71:a8:ac:2c:9b:39:85:ad:6c:68:6e:f2: e1:70:a3:e5:a5:8d:a6:c2:dd:bf:fc:db:59:24:d3:01:48:70: b7:b4:73:5f:53:db:ba:4f:05:8b:f1:b8:99:af:46:77:99:97: 30:3a:a0:e8:d0:56:08:72:72:4b:01:30:b7:e1:61:cf:b8:62: a7:7e:90:e6:af:1a:12:59:3a:9e:1a:b7:26:57:07:93:e7:ea: 80:03:5a:ae:18:42:2e:34:c6:06:9f:66:04:cb:8f:37:b6:f7: 03:8f:07:23:4e:f0:76:f9:7b:ac:7b:38:65:13:87:3b:17:d0: 75:af:82:36:30:92:0b:f8:33:57:ee:8b:78:72:cd:f2:e3:1a: 44:f1:37:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCLaMg1MUkTyxcwM8++X/6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjYwOTEwMTMwMTM1WhcNMjYwOTExMTMwMTM1WjAzMTEwLwYDVQQD Eyg2ODVmM2JiYjQwYWUyNDMyZDlkOTQ5OTU5MmQ4NWE3NzBhMjA0YWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz75cOzUrT9m/dOBQYEAz169FnXQ PzWIeT2c73qa18aFgdRr57BxP1JqPKenn1MCejb7kkKzfDbQ+KURM1WO6SA18Y5d xt/fS2Ydm3icFmddH02e6GnKVwGHaW3Hd3JzPylOZQoH4WMoh79AFmp9FC4ZzfJL wvZXL6o6xSFZwsb1AUA+qHBiYYum++bEOWlgYuUa6eJVNkOXZmk8StWLN7uTE19l Y3rqH8Y7WsaBLTQpnasL2kwslRutI1bJVXr3OjzuXPHVdN68ljijDZ3pxF4DBnN+ jv2WTeKLgZYRVVeGQWsK+LmWK+5xBoVanFiarS0oIX31Dkn4IYHBN/82iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhfO7tAriQy2dlJlZLYWncKIErlMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABVH45Na 0NoisKhJ1+h/woNpIe57e4vw0M/G4kjdqpRKBC1hnJBzYNhEyKiPzcA4KsSvJuX/ GBkRyx0xyE3bSGBfQmpoHW7p+oTFcb7AZCbQ26A/Cg8JZivjP3EZKx1yR5C2Jk+X GTZI0KJVEF9qx0rKcaisLJs5ha1saG7y4XCj5aWNpsLdv/zbWSTTAUhwt7RzX1Pb uk8Fi/G4ma9Gd5mXMDqg6NBWCHJySwEwt+Fhz7hip36Q5q8aElk6nhq3JlcHk+fq gANarhhCLjTGBp9mBMuPN7b3A48HI07wdvl7rHs4ZROHOxfQda+CNjCSC/gzV+6L eHLN8uMaRPE3BQ== -----END CERTIFICATE-----Generated at Thu Sep 10 19:31:02 2026 by rpki-client