$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json) Hash identifier: HPZcYZsd2pRVp3QrOXb0rcGBONjTcNaWE1+a3FdmnwU= Subject key identifier: B7:2D:B4:0B:31:82:C5:06:01:8F:70:4F:9E:C1:BF:3C:87:36:7A:3D Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 01A10391FE807F8C5AC8A0186755EDDCBF3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft Manifest number: 1A8E Signing time: Sat 03 Oct 2026 21:01:01 +0000 Manifest this update: Sat 03 Oct 2026 21:01:01 +0000 Manifest next update: Sun 04 Oct 2026 21:01:01 +0000 Files and hashes: 1: 06KsS95-uc37njfmN_yGJWnyq6U.roa (hash: K4nK55gW5SZLVxc3BcynZpT0UUD5TASwk3Svrgii/lI=) 2: 1dppl4E5LeYed1_ddeBSXFRftKA.roa (hash: pN3g9tWO1Nl1OAJCCKTDocJwUcz7cU9lRTyplesScF8=) 3: 7hii_CBkhWFEcR7PBsbgDyXmQ9Y.roa (hash: VParP3CSdlBKMMaiiyOgc9apoYvJ3aLSGeumM5G2suQ=) 4: 9LHK8v8-9Ckf2KLnnMlZEiqUMBM.roa (hash: 0BBbEj9KrnkzQ7LI3Ja4k/fn10TEbD/JLEqh/Y7YN5Q=) 5: 9zJS2sLQdMyIEXItDHnz9vENCZc.roa (hash: smANRs03fyEMELSZXfc50FOww78+6TO01q3PcjqHhg0=) 6: HZuqAD7c7zD61eQDUNc43p13Rus.roa (hash: CLnSiDlapsSBOMDzZqR931D1WlMkd94ux2JTr6MJ7iY=) 7: MARvCBJj6pQzGNHhjfVRnTPDXRw.roa (hash: W1iO+ZpTnMCy3mYaAEE8YESIC/Lb3z77r6zn9zHVz2Q=) 8: NpN7l3_hUP3xVFpljOuMEBlStvc.roa (hash: T5g6uyNIkE7SmOO57cpKy2aBBJDWlR4fSl0bwzLwido=) 9: ZffOLXHzTQQ9w6R4Acsptb5X-ZQ.roa (hash: nT41EZi54SNK5Qom8A2J9oxN87+LC+L6D9g8JwOo3+E=) 10: b25kHpS94xs5d-Cb2gg_RWdRdqA.roa (hash: UnoS92iWWLeA3lFor4dioIwIwXhzelHfz1mr8ZCSkhY=) 11: bcSgZpZBwtbiIL48flh5F_NGfHo.roa (hash: I/NWDutoo/tdtpPAOJuOwfmfUJCK6YwHRmYnSpUxsCY=) 12: cA6GYxFNrQzJXvnUUCTkZ74uPLY.roa (hash: 9ZlPADtkA5tNsCz6vf4xeuKDXE0oMu2t/mqNk4DDlVc=) 13: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: S4gSsgQtRhTrpmWKnt9t14FaFE/nilfvFnFOZyz7EZ8=) 14: laLTLAZUfnJXL9IgOMNUJBbcIYM.roa (hash: qH+8NsTPRO3q9UjCnJr8tq7a5R+TvAmnEtSTXrLT0C0=) 15: oX2NoeenvY6od0noJwHOC0vVDFU.roa (hash: PaRvm0af3RdwqkLgxZ1C0CNPV7CmkxdUeLl6SbuiQd4=) 16: sPqeNjwkgKgIPC9F-wg4yZRw5vo.roa (hash: gkiNfTfDhe6OjPwvNFzi/YKFCVBUpR1D9DW8GG28M8I=) 17: ww6ypu6XKZLBnCmu95aBOLrx3W4.roa (hash: MJWr+hVoOJcU+dBCIlq6NQXj1hTEMRYcYO7YQk9u0qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:03:91:fe:80:7f:8c:5a:c8:a0:18:67:55:ed:dc:bf:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Oct 3 21:01:01 2026 GMT Not After : Oct 4 21:01:01 2026 GMT Subject: CN=b72db40b3182c506018f704f9ec1bf3c87367a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:db:64:bf:bf:33:56:98:d4:a0:3d:07:8f:64: 4d:1f:7a:ae:fd:1f:8e:ea:4d:c4:98:ef:d4:71:99: ef:65:b4:f9:1a:43:da:5d:46:e3:b3:1f:f3:ab:d0: e8:0a:c0:7b:f4:11:6d:d1:b4:0e:80:cf:68:52:ca: b7:d8:dd:f9:a2:f9:22:15:78:37:57:b3:5b:f4:f0: 73:25:f9:af:90:49:0b:fe:37:71:c0:76:0f:45:03: 72:ae:d9:7f:4c:45:96:ad:b5:f6:1c:f0:d8:92:58: 56:c6:dd:b5:5a:69:6a:ad:fc:db:53:35:bb:dd:e4: 2d:d1:d0:58:f4:12:54:b8:d3:42:42:d5:44:fa:99: 80:04:04:1c:6d:50:81:27:a4:ae:e6:49:cc:ad:1e: 74:5e:33:82:b7:e4:c0:f5:d8:66:a4:1b:1f:fc:1d: a2:a2:f5:51:ed:53:90:cf:7c:39:32:bc:64:7b:6c: 17:bf:3d:15:6d:3d:b8:0e:6c:22:3a:c6:85:79:cf: 64:92:41:b8:bd:29:cc:05:8d:16:16:44:41:22:0f: 2c:05:4f:6b:23:ff:25:dd:3d:fa:66:85:92:6c:96: 5b:76:6a:e7:0e:36:59:0c:1b:07:18:18:d2:06:10: 18:70:9d:72:de:33:87:39:98:7c:43:46:e8:ab:8b: 0f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2D:B4:0B:31:82:C5:06:01:8F:70:4F:9E:C1:BF:3C:87:36:7A:3D X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:60:a8:5e:4a:b3:49:5e:17:3f:b3:c5:3c:27:e5:8b:ac:87: e4:e3:40:4c:9e:cb:4e:32:df:40:13:33:19:69:61:a5:9d:bc: 36:dc:f9:5f:b6:83:7b:d3:b0:e1:47:51:24:17:7b:6c:c8:f9: 0e:a9:92:d4:bd:4e:f4:a2:89:5d:fc:fc:60:dd:dd:be:a3:f8: 60:89:4b:99:f1:f9:64:3d:68:37:7a:95:a9:7f:61:2f:c7:9f: 5c:90:8e:9c:9c:31:3e:10:b0:8b:19:59:e2:31:56:87:71:1b: dc:a0:ff:8b:63:83:0b:f4:c1:ee:b2:e2:1b:78:47:db:b2:e0: c1:7d:54:44:b0:62:db:96:d7:8e:2c:dc:18:bc:f5:e9:1a:0a: a5:f5:65:99:33:e8:47:2d:fe:5f:7c:9e:14:c0:98:b2:de:50: b6:76:cc:09:06:64:da:67:0f:5e:b6:e9:cf:07:18:27:dc:88: 2c:c9:cc:5b:a4:bb:a4:58:14:14:0f:e3:ff:8e:16:53:7b:ef: 2a:93:a4:32:14:f9:07:eb:05:49:9c:5a:40:5d:8f:6f:92:f4: 9c:e0:a4:f0:67:a9:3d:79:9f:54:98:7f:1f:f8:92:99:db:90: 5d:6f:04:52:e7:f3:41:b6:f6:9e:3c:db:e0:66:03:66:0b:1f: 33:a1:3d:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEDkf6Af4xayKAYZ1Xt3L87MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjYxMDAzMjEwMTAxWhcNMjYxMDA0MjEwMTAxWjAzMTEwLwYDVQQD EyhiNzJkYjQwYjMxODJjNTA2MDE4ZjcwNGY5ZWMxYmYzYzg3MzY3YTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29tkv78zVpjUoD0Hj2RNH3qu/R+O 6k3EmO/UcZnvZbT5GkPaXUbjsx/zq9DoCsB79BFt0bQOgM9oUsq32N35ovkiFXg3 V7Nb9PBzJfmvkEkL/jdxwHYPRQNyrtl/TEWWrbX2HPDYklhWxt21WmlqrfzbUzW7 3eQt0dBY9BJUuNNCQtVE+pmABAQcbVCBJ6Su5knMrR50XjOCt+TA9dhmpBsf/B2i ovVR7VOQz3w5Mrxke2wXvz0VbT24DmwiOsaFec9kkkG4vSnMBY0WFkRBIg8sBU9r I/8l3T36ZoWSbJZbdmrnDjZZDBsHGBjSBhAYcJ1y3jOHOZh8Q0boq4sPuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcttAsxgsUGAY9wT57BvzyHNno9MB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsGCoXkqz SV4XP7PFPCfli6yH5ONATJ7LTjLfQBMzGWlhpZ28Ntz5X7aDe9Ow4UdRJBd7bMj5 DqmS1L1O9KKJXfz8YN3dvqP4YIlLmfH5ZD1oN3qVqX9hL8efXJCOnJwxPhCwixlZ 4jFWh3Eb3KD/i2ODC/TB7rLiG3hH27LgwX1URLBi25bXjizcGLz16RoKpfVlmTPo Ry3+X3yeFMCYst5QtnbMCQZk2mcPXrbpzwcYJ9yILMnMW6S7pFgUFA/j/44WU3vv KpOkMhT5B+sFSZxaQF2Pb5L0nOCk8GepPXmfVJh/H/iSmduQXW8EUufzQbb2njzb 4GYDZgsfM6E9qw== -----END CERTIFICATE-----Generated at Sun Oct 4 00:48:56 2026 by rpki-client