$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft File: fmXasjlAyzlPmqpmT-pNb49C4xg.mft (raw, json) Hash identifier: wFeXU951DXTVuQzObjaFXgvY6s3uYLlf4OYuTn4LBtA= Subject key identifier: C4:69:F6:53:1F:33:58:D6:03:E6:C7:3D:F8:CC:12:A5:B0:17:B1:98 Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Certificate serial: 01A08DFB6C221AC8A96F0DAA76B52F6BD789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft Manifest number: 1A5D Signing time: Fri 11 Sep 2026 01:00:59 +0000 Manifest this update: Fri 11 Sep 2026 01:00:59 +0000 Manifest next update: Sat 12 Sep 2026 01:00:59 +0000 Files and hashes: 1: 5q5ubnYMVDRkzyNHxnu_nVIuH8Q.roa (hash: gL6DKz0ttDjGDqOjSN97aJpmlYSAyuMVOk171iUlWRM=) 2: ATx_EPHk5Vz1v-SpkJd7Yp6y99I.roa (hash: wd0rlsu9n+czEzHQALtAg7xmPAM6xOroSrrnXWF3Lfo=) 3: HYC954OTDUxlzgJW0_84gTMaNZI.roa (hash: 2qPU/JFLc0XCHBKayFD9RxhT6JBfREvLkMlzYOfJmv8=) 4: JO3t4wzj5pMO8pakWAwlzqvqqRM.asa (hash: RPS36XqFSQhGe2AwlqqHc/6mflgEGlaBrX53Fqp34Rw=) 5: U3IMZy1D5zBWCt3QK2mF5n-X2qY.roa (hash: 5ZiutWnvIz69FJnps6BwuT+OeQpLJ6fHB6U2RLmZqhg=) 6: U94b541NpMgAwKP9ouuvvL3DKeY.asa (hash: 3/0upql9LNQyluPXuFCuGStTRhsE9wxGljd6ckKQ/wo=) 7: fX3tPrrAy5l65982bntPZMbTKXM.asa (hash: elpKOW5KwuHELtxjMPO/HnU5rqNl0Ef4AHZpAwWCRy8=) 8: fmXasjlAyzlPmqpmT-pNb49C4xg.crl (hash: WgLsB9ESRTJ4BaGiMhdkISKnbBADTBrFY4OYly6PTpE=) 9: p1pAyUX-fSx4X5xlNyO_Vq2ry7w.roa (hash: 4qf1lMGx7tWHDVof2zNBnir3ltwLgCwXuL9BwrRJPhU=) 10: wr5OBu9Kg5fiAynMByNWWanKodQ.roa (hash: xpQiib4Ztk+0sSwtkw/MfpFjKcsKXQPv65ui0X+24sw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8d:fb:6c:22:1a:c8:a9:6f:0d:aa:76:b5:2f:6b:d7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Validity Not Before: Sep 11 01:00:59 2026 GMT Not After : Sep 12 01:00:59 2026 GMT Subject: CN=c469f6531f3358d603e6c73df8cc12a5b017b198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:96:9c:2a:6e:a3:5e:e1:f2:65:bb:6c:0c: b3:2d:a1:41:0a:b2:3e:6c:77:19:a7:74:ec:db:be: e2:ae:85:e4:60:a2:c9:2c:a2:dc:e3:cb:af:8e:f7: 44:12:76:33:15:02:13:d4:68:20:cc:22:96:00:99: 6d:84:03:ed:b6:8c:26:74:8e:05:1d:96:09:92:61: 2d:32:01:f0:fd:87:45:e8:fd:50:84:44:89:9e:3e: 08:4c:b4:87:f6:cc:a4:83:c5:e3:e7:6c:58:39:30: 03:7e:81:26:ea:56:65:d0:a8:c0:dc:ac:46:0f:6f: 35:fe:ed:45:68:7e:b1:f9:ab:85:d0:61:19:09:ea: a1:df:f5:3f:b6:63:2b:f1:70:2a:3b:f2:71:14:44: 6e:14:18:d6:ac:ff:02:2c:ab:98:63:6d:07:ef:c9: 38:76:16:7e:b7:5f:1e:b2:df:60:bc:bc:1c:e3:8c: 15:c8:86:50:46:06:65:40:a2:ad:cb:89:58:0a:25: 86:9c:d5:6e:a8:18:f3:27:c2:3c:a3:39:48:45:b6: 63:b6:dc:33:0a:52:7a:ee:ff:c8:81:1c:5f:21:f9: 40:a6:14:c8:dd:c2:98:34:70:fa:ba:92:8b:2a:3c: 6b:38:fe:fb:34:56:68:1d:51:48:dd:b5:db:10:d0: 02:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:69:F6:53:1F:33:58:D6:03:E6:C7:3D:F8:CC:12:A5:B0:17:B1:98 X509v3 Authority Key Identifier: keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e9:cb:b2:7c:a0:9b:15:34:36:c7:f1:ee:aa:be:e5:09:f1: 77:05:74:c8:8c:f2:84:91:b8:81:d1:d1:25:1f:a5:40:8f:4c: 50:a6:a4:a7:fd:8d:fa:9c:43:12:c5:8a:77:e9:2a:ad:45:cf: 30:f3:04:73:15:7b:19:63:21:9d:da:79:2a:a1:cc:56:42:05: e3:74:91:c5:ad:08:4b:39:60:7c:b8:05:c4:21:09:7a:ae:16: 2e:58:e0:02:8e:3c:eb:41:14:24:3e:aa:aa:25:24:59:8e:8f: ea:65:a4:dd:aa:fa:af:8d:51:0a:a4:d8:ec:8c:ee:f6:09:c3: 4d:62:72:85:a1:0c:de:55:d6:85:16:65:73:4a:13:7d:dd:b9: 26:e8:71:6f:50:87:16:df:71:0e:df:10:86:7e:7f:e7:61:b7: 14:37:14:82:c3:7d:ec:92:fe:24:7f:46:40:80:7e:aa:f7:dc: f9:53:b0:fe:ac:84:e8:22:0b:ad:15:7a:17:58:30:89:4e:da: d8:5b:18:92:82:13:c8:a7:17:4e:d8:66:b4:53:24:b5:34:80: 75:9d:b5:f1:18:58:da:19:df:b7:ab:87:e2:19:dc:d0:0f:e7: 9c:a7:06:53:2f:96:2e:c3:81:0c:b2:4a:37:23:1f:cc:8c:37: d3:91:86:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCN+2wiGsipbw2qdrUva9eJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNjVkYWIyMzk0MGNiMzk0ZjlhYWE2NjRmZWE0ZDZmOGY0 MmUzMTgwHhcNMjYwOTExMDEwMDU5WhcNMjYwOTEyMDEwMDU5WjAzMTEwLwYDVQQD EyhjNDY5ZjY1MzFmMzM1OGQ2MDNlNmM3M2RmOGNjMTJhNWIwMTdiMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm6WnCpuo17h8mW7bAyzLaFBCrI+ bHcZp3Ts277iroXkYKLJLKLc48uvjvdEEnYzFQIT1GggzCKWAJlthAPttowmdI4F HZYJkmEtMgHw/YdF6P1QhESJnj4ITLSH9sykg8Xj52xYOTADfoEm6lZl0KjA3KxG D281/u1FaH6x+auF0GEZCeqh3/U/tmMr8XAqO/JxFERuFBjWrP8CLKuYY20H78k4 dhZ+t18est9gvLwc44wVyIZQRgZlQKKty4lYCiWGnNVuqBjzJ8I8ozlIRbZjttwz ClJ67v/IgRxfIflAphTI3cKYNHD6upKLKjxrOP77NFZoHVFI3bXbENACWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRp9lMfM1jWA+bHPfjMEqWwF7GYMB8GA1UdIwQY MBaAFH5l2rI5QMs5T5qqZk/qTW+PQuMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYt ODQ5Y2ZjYWJiNjU3LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYtODQ5Y2ZjYWJiNjU3 LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaunLsnyg mxU0Nsfx7qq+5QnxdwV0yIzyhJG4gdHRJR+lQI9MUKakp/2N+pxDEsWKd+kqrUXP MPMEcxV7GWMhndp5KqHMVkIF43SRxa0ISzlgfLgFxCEJeq4WLljgAo4860EUJD6q qiUkWY6P6mWk3ar6r41RCqTY7Izu9gnDTWJyhaEM3lXWhRZlc0oTfd25Juhxb1CH Ft9xDt8Qhn5/52G3FDcUgsN97JL+JH9GQIB+qvfc+VOw/qyE6CILrRV6F1gwiU7a 2FsYkoITyKcXTthmtFMktTSAdZ218RhY2hnft6uH4hnc0A/nnKcGUy+WLsOBDLJK NyMfzIw305GGSg== -----END CERTIFICATE-----Generated at Fri Sep 11 05:08:58 2026 by rpki-client