$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft File: rrZuxejyQF9vjUhuc_uCuN4N7g8.mft (raw, json) Hash identifier: WXONRsfd5SZoE0uj62FGOf8ef5DLZxLe/SlVsFSDBxs= Subject key identifier: A7:F2:AC:EE:B9:33:2A:91:6E:F3:90:8D:22:D3:C0:E3:A7:B2:44:CE Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Certificate serial: 01A05A450A6781F88EF47EBF9424A2BE9DCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft Manifest number: 1A32 Signing time: Tue 01 Sep 2026 00:01:08 +0000 Manifest this update: Tue 01 Sep 2026 00:01:08 +0000 Manifest next update: Wed 02 Sep 2026 00:01:08 +0000 Files and hashes: 1: 1-Pe2TnywVmfaP-WemWu9F6D1uY.roa (hash: TO2cGriDwgxNlyLdj4bg8MbV1G1jK45ogoJF4793fSo=) 2: 1cuv-12cm2QhTHJFihj8rVlWS38.roa (hash: bcoEGOaQcgkLD12rX+LR5QgbfI3SBiV6QabZt9HzI0k=) 3: 2V5uX7zz8rLZM3EIe_aMe1EFHf4.roa (hash: L4MUyeDgRyRa1SAE3WijwMUBcPHzc9BZm/cEJ6tCJQ0=) 4: 60RghjJR7fbMZmTjDd1goDTxFO4.roa (hash: FTGk3AHz/GL0pHnXXED/nhsF8Ezap2Jkso8Zx9XbdsY=) 5: 7v01OOv6lsa5SDVTbq2sDUyqghU.roa (hash: 674pqR/ZC6RweHjRad+sALRIi4soda9NrCU2Y8CRUAk=) 6: VeUDemYMUkamvLNvu71jm8kXCWQ.roa (hash: sDlj2eIeTmzMHoHM8lIyD6YCl1o4NeFPnKRaymevkd8=) 7: ZMcpzSwF8sfXNSwmkOe8TDMBSJw.roa (hash: +y1O8tgMcUGxxeeg9mLZswZb6MR8jtPoqrvAjwcYJzU=) 8: bcQk1dNiHStablJSpfOMgKvzyB4.roa (hash: vRaLHdtxEoTI3K0Ud0h8BsRxBaZPY4lVipsFC/qsS/8=) 9: eEv6Dzp18N3mnwft_tpFzD3jA9s.roa (hash: Bu5vlAgH4Sy8ybAbPwvMy42MlBplqri0XGE/ouWApbI=) 10: exX8D204pUSMlQDRe6-0vKudRw8.roa (hash: hw0brhXYOTSxVJVmx1MBXDRVxmLR1RsTQRFAr9ka18U=) 11: jCzBcgQ2ecHLxm36fGHNj6MQZAY.roa (hash: pXkAi/m1GNEU9RCztBpU/RufugyhkhNnDbgVYNdhfJo=) 12: rrZuxejyQF9vjUhuc_uCuN4N7g8.crl (hash: 71lKSVpDWCJvi+Qbu2NipFcoRy51uCnzFaDPmDv93tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Sep 2026 21:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:5a:45:0a:67:81:f8:8e:f4:7e:bf:94:24:a2:be:9d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Validity Not Before: Sep 1 00:01:08 2026 GMT Not After : Sep 2 00:01:08 2026 GMT Subject: CN=a7f2aceeb9332a916ef3908d22d3c0e3a7b244ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:4a:5a:8d:9e:a9:2c:b4:aa:95:70:e8:79: eb:b3:04:07:93:1d:99:75:aa:7d:10:f3:55:6c:06: 18:de:df:f6:15:d5:2e:5c:fe:16:47:ee:a7:61:2f: ef:f1:1c:10:82:02:ca:47:67:3b:21:81:a2:de:1d: ae:c4:71:88:b5:9b:fa:f7:18:6e:f0:59:d9:50:0a: 6e:e6:2d:66:30:c2:63:e2:d0:b5:e3:20:15:03:d9: a7:29:c7:9f:ac:a9:d7:f6:56:cb:60:d0:83:98:eb: 71:d4:6b:1f:35:84:68:a5:dd:d6:73:71:aa:6c:1b: 14:11:fa:fd:d8:3d:87:b0:f3:8b:c4:05:1d:32:c2: ac:78:02:ef:35:c8:cb:d7:e7:09:37:38:0c:8e:de: 64:15:6c:57:f8:06:50:90:59:47:aa:18:2a:f6:ca: 2c:e6:34:40:99:ec:de:c3:d8:8c:c4:6a:c8:e9:d8: 23:23:00:10:b9:11:af:22:6b:c1:e1:2f:d3:35:82: ab:e7:9e:41:dd:37:e9:bf:c2:cd:99:61:54:b1:97: 1c:92:b2:02:0c:47:f1:3d:64:49:72:2a:98:7e:8a: 4b:c0:79:17:3e:49:2c:80:9f:ab:ed:3f:d7:0c:1a: 54:f8:ac:be:e0:70:96:1d:bb:5a:39:10:6b:43:f6: 2a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F2:AC:EE:B9:33:2A:91:6E:F3:90:8D:22:D3:C0:E3:A7:B2:44:CE X509v3 Authority Key Identifier: keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:6e:f3:34:5c:82:4f:a1:b2:d9:5e:67:0f:1d:04:59:28:d5: f5:66:05:17:70:0d:3c:b9:e7:c0:7f:19:7c:39:02:06:37:32: a8:c8:fa:2c:f6:e9:77:74:0d:33:13:51:b4:3f:89:f4:2b:91: 60:7b:c1:68:53:a0:97:cf:fe:48:18:4f:12:32:ec:3e:01:15: 27:f6:d9:98:a1:f1:fb:2c:e1:3f:ee:87:7e:b5:bc:84:87:f0: 9a:ee:7a:cf:73:b7:76:9b:69:c1:f1:dc:e5:c3:5c:c5:43:7d: 88:37:39:72:66:d9:7a:cd:d2:4d:2a:ca:16:c4:d5:78:60:64: 21:e7:c9:b0:71:cc:e2:43:62:23:2f:01:cd:2b:c2:4b:9d:b1: 8c:68:78:74:3f:a4:b5:03:17:57:7f:a9:f0:59:8d:e2:e0:d0: 5d:4b:40:20:fc:41:d0:fe:a7:da:7f:8d:58:47:0c:0f:9e:87: dd:8c:83:40:eb:02:5f:d9:5a:2d:9d:ad:88:f2:6e:89:23:8f: aa:da:be:93:9f:1b:ff:06:73:cc:a8:6f:18:68:b5:e6:bf:40: fa:0c:fc:3e:67:23:94:19:c1:21:83:e5:05:6d:80:ce:1a:7c: 91:53:4e:9d:9f:d4:f0:28:7c:d6:22:99:6f:c3:29:8b:9a:dd: 4f:ae:d6:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBaRQpngfiO9H6/lCSivp3NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw ZGVlMGYwHhcNMjYwOTAxMDAwMTA4WhcNMjYwOTAyMDAwMTA4WjAzMTEwLwYDVQQD EyhhN2YyYWNlZWI5MzMyYTkxNmVmMzkwOGQyMmQzYzBlM2E3YjI0NGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK1KWo2eqSy0qpVw6HnrswQHkx2Z dap9EPNVbAYY3t/2FdUuXP4WR+6nYS/v8RwQggLKR2c7IYGi3h2uxHGItZv69xhu 8FnZUApu5i1mMMJj4tC14yAVA9mnKcefrKnX9lbLYNCDmOtx1GsfNYRopd3Wc3Gq bBsUEfr92D2HsPOLxAUdMsKseALvNcjL1+cJNzgMjt5kFWxX+AZQkFlHqhgq9sos 5jRAmezew9iMxGrI6dgjIwAQuRGvImvB4S/TNYKr555B3Tfpv8LNmWFUsZcckrIC DEfxPWRJciqYfopLwHkXPkksgJ+r7T/XDBpU+Ky+4HCWHbtaORBrQ/YqVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfyrO65MyqRbvOQjSLTwOOnskTOMB8GA1UdIwQY MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt NmFlYTkwNTdjODAwLzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlG7zNFyC T6Gy2V5nDx0EWSjV9WYFF3ANPLnnwH8ZfDkCBjcyqMj6LPbpd3QNMxNRtD+J9CuR YHvBaFOgl8/+SBhPEjLsPgEVJ/bZmKHx+yzhP+6HfrW8hIfwmu56z3O3dptpwfHc 5cNcxUN9iDc5cmbZes3STSrKFsTVeGBkIefJsHHM4kNiIy8BzSvCS52xjGh4dD+k tQMXV3+p8FmN4uDQXUtAIPxB0P6n2n+NWEcMD56H3YyDQOsCX9laLZ2tiPJuiSOP qtq+k58b/wZzzKhvGGi15r9A+gz8PmcjlBnBIYPlBW2Azhp8kVNOnZ/U8Ch81iKZ b8Mpi5rdT67WhA== -----END CERTIFICATE-----Generated at Tue Sep 1 03:22:46 2026 by rpki-client