$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json) Hash identifier: 0BcH18YnYT7aCEow67udLTTJrls9PD4GnmJ9Fn6qpIA= Subject key identifier: 97:04:C9:44:A2:02:6D:93:8D:83:30:D6:0E:1B:4B:18:09:92:F5:0B Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 019FF910C8582AF9E97A5F5EAE1C7D8BE8EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft Manifest number: 1A04 Signing time: Thu 13 Aug 2026 03:00:54 +0000 Manifest this update: Thu 13 Aug 2026 03:00:54 +0000 Manifest next update: Fri 14 Aug 2026 03:00:54 +0000 Files and hashes: 1: 06KsS95-uc37njfmN_yGJWnyq6U.roa (hash: K4nK55gW5SZLVxc3BcynZpT0UUD5TASwk3Svrgii/lI=) 2: 1dppl4E5LeYed1_ddeBSXFRftKA.roa (hash: pN3g9tWO1Nl1OAJCCKTDocJwUcz7cU9lRTyplesScF8=) 3: 7hii_CBkhWFEcR7PBsbgDyXmQ9Y.roa (hash: VParP3CSdlBKMMaiiyOgc9apoYvJ3aLSGeumM5G2suQ=) 4: 9LHK8v8-9Ckf2KLnnMlZEiqUMBM.roa (hash: 0BBbEj9KrnkzQ7LI3Ja4k/fn10TEbD/JLEqh/Y7YN5Q=) 5: 9zJS2sLQdMyIEXItDHnz9vENCZc.roa (hash: smANRs03fyEMELSZXfc50FOww78+6TO01q3PcjqHhg0=) 6: HZuqAD7c7zD61eQDUNc43p13Rus.roa (hash: CLnSiDlapsSBOMDzZqR931D1WlMkd94ux2JTr6MJ7iY=) 7: MARvCBJj6pQzGNHhjfVRnTPDXRw.roa (hash: W1iO+ZpTnMCy3mYaAEE8YESIC/Lb3z77r6zn9zHVz2Q=) 8: NpN7l3_hUP3xVFpljOuMEBlStvc.roa (hash: T5g6uyNIkE7SmOO57cpKy2aBBJDWlR4fSl0bwzLwido=) 9: ZffOLXHzTQQ9w6R4Acsptb5X-ZQ.roa (hash: nT41EZi54SNK5Qom8A2J9oxN87+LC+L6D9g8JwOo3+E=) 10: b25kHpS94xs5d-Cb2gg_RWdRdqA.roa (hash: UnoS92iWWLeA3lFor4dioIwIwXhzelHfz1mr8ZCSkhY=) 11: bcSgZpZBwtbiIL48flh5F_NGfHo.roa (hash: I/NWDutoo/tdtpPAOJuOwfmfUJCK6YwHRmYnSpUxsCY=) 12: cA6GYxFNrQzJXvnUUCTkZ74uPLY.roa (hash: 9ZlPADtkA5tNsCz6vf4xeuKDXE0oMu2t/mqNk4DDlVc=) 13: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: GQSaooQIMKjNUMAiYDmprBLVxttBdDJqHaKDEZjO8OA=) 14: laLTLAZUfnJXL9IgOMNUJBbcIYM.roa (hash: qH+8NsTPRO3q9UjCnJr8tq7a5R+TvAmnEtSTXrLT0C0=) 15: oX2NoeenvY6od0noJwHOC0vVDFU.roa (hash: PaRvm0af3RdwqkLgxZ1C0CNPV7CmkxdUeLl6SbuiQd4=) 16: sPqeNjwkgKgIPC9F-wg4yZRw5vo.roa (hash: gkiNfTfDhe6OjPwvNFzi/YKFCVBUpR1D9DW8GG28M8I=) 17: ww6ypu6XKZLBnCmu95aBOLrx3W4.roa (hash: MJWr+hVoOJcU+dBCIlq6NQXj1hTEMRYcYO7YQk9u0qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f9:10:c8:58:2a:f9:e9:7a:5f:5e:ae:1c:7d:8b:e8:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Aug 13 03:00:54 2026 GMT Not After : Aug 14 03:00:54 2026 GMT Subject: CN=9704c944a2026d938d8330d60e1b4b180992f50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9b:4b:78:1b:10:4e:9b:3d:3d:1a:c0:a1:93: 61:2a:a6:a5:9e:14:cd:a3:51:0a:00:84:f4:2f:c5: ec:93:3b:1d:e2:ef:8d:ca:4d:9d:ca:fb:db:34:b8: 82:2c:e6:9b:40:08:15:4f:91:07:b1:b5:dd:5b:3d: 47:17:07:de:93:ce:51:d5:6e:d9:3f:0c:49:b6:2b: 7b:cd:96:05:99:5c:d1:a1:21:86:a9:f8:1d:81:07: f5:4a:da:f7:9d:f6:8f:eb:4d:6d:61:32:10:a7:39: 64:7c:1c:cd:2a:ff:da:46:64:db:1d:5d:52:af:bc: 97:a1:85:d1:62:5b:d0:f9:ee:2d:25:4c:36:a6:81: 4e:d8:c9:9c:ce:4c:a8:ae:43:6a:c7:5b:dd:18:e5: a6:00:08:c8:e9:f4:ca:b9:04:d3:9b:47:48:b4:a5: 0f:bc:d2:c4:ee:9c:b4:9c:66:73:aa:66:97:8b:3a: 69:80:76:b0:8d:78:e6:53:0d:ec:f9:65:38:86:34: 6b:ac:bd:24:31:1f:08:c1:c2:20:02:d4:82:d9:30: 4b:3d:c6:51:ce:9f:cf:89:fb:b6:10:1f:a0:66:35: 69:90:e6:a7:53:9c:be:0f:88:4a:ee:ce:0a:bb:e1: f2:be:ef:83:95:2b:82:dd:7b:c3:f3:55:eb:09:b9: 60:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:04:C9:44:A2:02:6D:93:8D:83:30:D6:0E:1B:4B:18:09:92:F5:0B X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:ee:94:50:ee:e2:b4:e5:69:92:d5:b4:0d:01:e2:c7:e9:87: 42:0d:ce:00:09:48:f4:21:88:95:18:c1:08:55:49:e3:47:69: cb:f3:62:48:2b:de:76:a6:d9:2d:7c:99:58:0e:f4:43:36:4c: 2c:85:5b:83:41:c5:1d:2f:ed:a3:5f:e7:90:cf:ef:95:f0:b6: d0:c2:1a:d0:cb:88:84:89:cc:ed:f2:38:32:d2:bb:17:82:ba: 3e:db:c0:56:65:31:36:71:6f:76:39:8c:b2:96:9b:0d:c0:a2: bb:77:bf:1c:36:8c:53:d6:05:ff:18:5a:ff:72:1d:83:21:ab: 86:99:72:3c:89:3e:99:4a:16:f2:c9:6d:b5:38:8a:98:62:42: 71:1a:a3:9e:9e:15:d7:22:3d:f8:89:1f:5b:86:d2:08:ec:73: 61:45:f5:9a:af:c9:87:2e:aa:8e:2f:f1:11:49:4e:80:9c:d9: f1:0f:a8:97:5c:6b:a1:74:ec:2b:e1:40:12:0d:05:b1:42:b1: 9a:14:e3:9c:e7:4e:42:34:98:e8:6f:30:8c:d3:be:c7:36:c1: 9b:91:02:60:0f:f4:fc:83:ef:b0:4c:85:ac:00:54:35:c2:59: d2:02:fe:2e:f5:c3:70:b6:09:35:20:a4:06:13:59:68:e7:4c: da:5c:c4:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/5EMhYKvnpel9erhx9i+jsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjYwODEzMDMwMDU0WhcNMjYwODE0MDMwMDU0WjAzMTEwLwYDVQQD Eyg5NzA0Yzk0NGEyMDI2ZDkzOGQ4MzMwZDYwZTFiNGIxODA5OTJmNTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5tLeBsQTps9PRrAoZNhKqalnhTN o1EKAIT0L8Xskzsd4u+Nyk2dyvvbNLiCLOabQAgVT5EHsbXdWz1HFwfek85R1W7Z PwxJtit7zZYFmVzRoSGGqfgdgQf1Str3nfaP601tYTIQpzlkfBzNKv/aRmTbHV1S r7yXoYXRYlvQ+e4tJUw2poFO2MmczkyorkNqx1vdGOWmAAjI6fTKuQTTm0dItKUP vNLE7py0nGZzqmaXizppgHawjXjmUw3s+WU4hjRrrL0kMR8IwcIgAtSC2TBLPcZR zp/Pifu2EB+gZjVpkOanU5y+D4hK7s4Ku+Hyvu+DlSuC3XvD81XrCblgfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcEyUSiAm2TjYMw1g4bSxgJkvULMB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz+6UUO7i tOVpktW0DQHix+mHQg3OAAlI9CGIlRjBCFVJ40dpy/NiSCvedqbZLXyZWA70QzZM LIVbg0HFHS/to1/nkM/vlfC20MIa0MuIhInM7fI4MtK7F4K6PtvAVmUxNnFvdjmM spabDcCiu3e/HDaMU9YF/xha/3IdgyGrhplyPIk+mUoW8slttTiKmGJCcRqjnp4V 1yI9+IkfW4bSCOxzYUX1mq/Jhy6qji/xEUlOgJzZ8Q+ol1xroXTsK+FAEg0FsUKx mhTjnOdOQjSY6G8wjNO+xzbBm5ECYA/0/IPvsEyFrABUNcJZ0gL+LvXDcLYJNSCk BhNZaOdM2lzEPw== -----END CERTIFICATE-----Generated at Thu Aug 13 09:00:25 2026 by rpki-client