$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: IKMdR6UCW8IQyV8vVEDocYiwWf4I8dlVC6FXy22eZek= Subject key identifier: F0:CA:1F:9F:5B:52:60:F1:BE:58:C9:31:15:CB:1F:AF:FD:94:A2:34 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 01A08C0D03076B448CFB510EBDB0713BCF85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 1A5A Signing time: Thu 10 Sep 2026 16:00:57 +0000 Manifest this update: Thu 10 Sep 2026 16:00:57 +0000 Manifest next update: Fri 11 Sep 2026 16:00:57 +0000 Files and hashes: 1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=) 2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=) 3: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=) 4: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=) 5: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=) 6: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=) 7: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=) 8: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=) 9: MR0r-YpSmpXMsH4aFzpiE02h6bo.roa (hash: f4/OYvolIQCytH134KDQmcd51o3N0KRG0eWhuISvPcg=) 10: N3LKuwLRuVKYuFWiGYpHH9iTJDU.roa (hash: +3GE+YLKYRUGq2ir////J+cfvpEdtk9nror7A4YJdrQ=) 11: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=) 12: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=) 13: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=) 14: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=) 15: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=) 16: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=) 17: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=) 18: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=) 19: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=) 20: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=) 21: lh0U2VbssLYHQuI_GeDtu-78fs8.roa (hash: argvv+35DPV6sAk39FUkOQj04x5r0LiO2lKQbHUbgZU=) 22: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=) 23: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=) 24: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=) 25: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=) 26: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: pkkq2r6qNoWx56M0kwzIkLmX4IYbc9GYLhSGuyNiyDk=) 27: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=) 28: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 14:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8c:0d:03:07:6b:44:8c:fb:51:0e:bd:b0:71:3b:cf:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Sep 10 16:00:57 2026 GMT Not After : Sep 11 16:00:57 2026 GMT Subject: CN=f0ca1f9f5b5260f1be58c93115cb1faffd94a234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5a:be:51:72:b3:02:d3:51:b2:96:e7:39:1d: b5:cc:eb:4b:89:3b:1e:bc:c9:11:32:03:7d:1a:24: ea:97:89:5a:8e:62:30:f8:01:aa:f4:6f:fe:16:3f: a1:a0:b9:54:3f:05:09:8b:17:6b:b3:70:40:52:8a: f9:09:e0:d8:4a:fe:11:4e:26:13:09:7e:1c:69:3b: 09:7c:05:2a:c9:ec:d5:64:69:0a:e9:4e:cd:45:70: 10:ec:c3:a7:23:b5:72:6d:12:c9:fc:66:73:2f:2e: 78:ed:ac:ec:49:57:0c:65:9f:54:66:ae:1a:94:07: 71:96:8c:51:4a:49:58:df:30:bc:1b:95:6f:67:56: b9:11:08:6b:c9:09:4c:60:52:8a:d0:95:f4:9d:b4: c0:0f:6c:f6:b5:7f:7d:58:05:b6:80:7e:bd:43:c9: 56:a4:5e:f4:42:b3:82:dd:b9:1c:f5:5e:4a:23:e9: d3:b0:a2:2e:ae:c8:1f:89:b5:7e:ac:f3:9a:88:25: e0:09:51:36:03:9a:c8:c0:61:b9:60:2b:1e:13:f8: b3:ab:7e:58:13:a0:e6:82:75:8e:5f:e5:5b:ee:12: 8c:a5:c8:c0:a0:db:d8:51:be:82:3c:21:f6:98:95: b4:9f:6c:a8:27:9b:d1:54:41:b3:7a:fb:b1:3c:6e: e7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CA:1F:9F:5B:52:60:F1:BE:58:C9:31:15:CB:1F:AF:FD:94:A2:34 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:55:9b:9c:bb:d3:9d:15:1b:05:77:9a:7d:4d:a7:e8:05:9a: ee:9c:e6:79:70:d9:a5:09:8d:67:93:75:5c:18:7e:89:cc:10: 7c:a5:3e:03:cf:9a:2c:5b:e5:53:0c:36:70:e9:e0:66:43:26: 1b:75:64:ac:ca:5d:18:ad:3c:4b:d4:bb:89:12:62:e9:c9:e7: cd:89:34:c5:23:c4:58:79:d5:26:86:25:e9:b6:97:d5:2a:12: 31:65:55:bd:3d:4d:ce:15:5e:8a:8a:41:72:3e:a7:be:e5:8d: fa:51:b4:fd:2a:d4:5b:bd:5e:0d:b1:ee:6a:5e:d8:bc:c0:d1: bf:f8:b6:49:74:c8:7e:cd:32:6e:54:5d:bd:62:a3:eb:8c:06: c2:95:0b:36:dc:e9:16:16:70:c6:13:68:91:9b:3a:64:78:24: 71:47:f1:17:ca:22:89:f5:88:a1:3d:61:a9:3a:a3:7c:1d:6c: 6e:97:f1:d9:08:8c:86:54:4f:84:cb:bc:53:22:58:fd:ed:6e: f9:a5:19:ff:a7:a2:b0:68:a4:2f:20:c5:ab:5f:b5:23:ce:a6: 70:e8:8c:43:cc:20:2f:80:74:0b:38:f3:4c:b5:06:74:7b:0a: fc:ae:a7:d0:2d:39:17:f4:e9:bd:1e:e0:02:1d:0a:3c:a3:ac: 6e:ef:04:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCMDQMHa0SM+1EOvbBxO8+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwOTEwMTYwMDU3WhcNMjYwOTExMTYwMDU3WjAzMTEwLwYDVQQD EyhmMGNhMWY5ZjViNTI2MGYxYmU1OGM5MzExNWNiMWZhZmZkOTRhMjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVq+UXKzAtNRspbnOR21zOtLiTse vMkRMgN9GiTql4lajmIw+AGq9G/+Fj+hoLlUPwUJixdrs3BAUor5CeDYSv4RTiYT CX4caTsJfAUqyezVZGkK6U7NRXAQ7MOnI7VybRLJ/GZzLy547azsSVcMZZ9UZq4a lAdxloxRSklY3zC8G5VvZ1a5EQhryQlMYFKK0JX0nbTAD2z2tX99WAW2gH69Q8lW pF70QrOC3bkc9V5KI+nTsKIursgfibV+rPOaiCXgCVE2A5rIwGG5YCseE/izq35Y E6DmgnWOX+Vb7hKMpcjAoNvYUb6CPCH2mJW0n2yoJ5vRVEGzevuxPG7n4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDKH59bUmDxvljJMRXLH6/9lKI0MB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFWbnLvT nRUbBXeafU2n6AWa7pzmeXDZpQmNZ5N1XBh+icwQfKU+A8+aLFvlUww2cOngZkMm G3VkrMpdGK08S9S7iRJi6cnnzYk0xSPEWHnVJoYl6baX1SoSMWVVvT1NzhVeiopB cj6nvuWN+lG0/SrUW71eDbHual7YvMDRv/i2SXTIfs0yblRdvWKj64wGwpULNtzp FhZwxhNokZs6ZHgkcUfxF8oiifWIoT1hqTqjfB1sbpfx2QiMhlRPhMu8UyJY/e1u +aUZ/6eisGikLyDFq1+1I86mcOiMQ8wgL4B0CzjzTLUGdHsK/K6n0C05F/TpvR7g Ah0KPKOsbu8Eeg== -----END CERTIFICATE-----Generated at Thu Sep 10 18:03:25 2026 by rpki-client