$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft File: tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json) Hash identifier: hvaucZG5LhzPcLXx+el3TI4dpLXrqjajXiqjB/9GTHo= Subject key identifier: DE:3A:9A:86:A7:24:84:F3:CA:69:72:55:FC:2E:51:FB:11:BB:E8:01 Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 01A085D42060DA2C714E319B271B84905984 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft Manifest number: 13A8 Signing time: Wed 09 Sep 2026 11:01:06 +0000 Manifest this update: Wed 09 Sep 2026 11:01:06 +0000 Manifest next update: Thu 10 Sep 2026 11:01:06 +0000 Files and hashes: 1: 00yjAHUjPi78LWd5NKw2W62obOE.roa (hash: fy76k6hktxmrp/33ybyKcOrtr3l2uBboJQ/aOUgHGR4=) 2: 0BgZTv7QXJlAZiTUHRagH3BQkp0.roa (hash: 1Mi6r34YcOgbA3mJxnRLp1QOHS59HC92Y/0BpqQFJkY=) 3: 10IT0EDsfDguNHDkGFrtmhbO1qY.roa (hash: X4HgTSlDGhlR3AaJ8wC8JFxIPcRAnrG2/sKJRUGMYQ8=) 4: 2O9349WO0t6H0E9ZK0f1QWi3t0Q.roa (hash: 2RhFKguLdx/frIsqfhlZq+St14nwRLDsFvzdspSUCHs=) 5: 5yanEvaCNGmxYIoFSwD5iS2g81s.roa (hash: aMWaHQ8wF/Y1htK9oNbLHRQFbe1aIxUDLSAfigLBhqk=) 6: 7SmXzQd-nWaNe8t8rqOA7438J_s.roa (hash: RMY9iFIYUbgR/WmLppHu9PswGGc4qk7Roiy4Bmlgw3s=) 7: Ci1HRR1T1vCZLHSaKTAAz_CUAxk.roa (hash: /Op8Zu83YdPANx3qD99A65tF36SZGHxy+IgrsvHIHY0=) 8: D7WZ4U1qEm7s7ojiU0DGq7f4zXk.roa (hash: KpStMvfGgVTFEiCM6FyPOYlWTDixlJh6LN27+Q9VRF0=) 9: FWGPVLEYEL9z4Y0F4eDwul13f-I.roa (hash: 9eGAAs0Yq9GvDXlZXDaYYQ2cxOO7RGn2Ur7YsWYhLdM=) 10: FerkNmRdMMqBAxxCWnxbdwDF0fM.roa (hash: X4J4aibstvyyZ1dw044vF6xHdgTuovNe6IxPq/bGSrQ=) 11: LjKK1f-65vQB4rIsaCQyQiYCPTs.roa (hash: vTaQ/XVp2KXj/UG8Xo77u6qkGmXJXRq95DuI4ylz2eo=) 12: PxSCzUoZfMbgHF03TRX3bgmfA-o.roa (hash: THAG3AXxHvAjxWFgeXw9fJRZJAX/p5TBpKYxAMpdazc=) 13: QcOErvGMS1cn9WZR-Glc81vnEy4.roa (hash: k8ZJH0lvcj7vdhHT3kfTzZYRjD0YJ58FOnJqdVF3/+g=) 14: Sd28n5DrQobKs9QgrHCwI1jEfu0.roa (hash: jA8Lm3BQJcKb73ah96i2aKZbD0o0WvynBWhWtqWH5PY=) 15: UkpX7naX1W6QQs1EhAWympeXIXA.roa (hash: NiQVFi6EMDpQQPShB4+6MxwA3TFq+W6JKGkrGvRhF+s=) 16: _sxN__19ZJD-wDLf4-2wxc5ndzI.roa (hash: cDLlnQNW3AtBhQs73FYFH7LRcTVmcIP6AmZwXbvRoBQ=) 17: b8rph-cr35APSGmIzjlav9x-ibM.roa (hash: ewv4AA8yj9deK9EvneGfkLw6HKhasqrB49rsY1tooVU=) 18: bsu95ghiIBpd9cfADiMIa9Yxj6Q.roa (hash: 16b5K9754SCIP/D165OSsKJafJ6ZtxK/WBHz3KMDFr0=) 19: eHEhXfplHp5OWnkRVZyfYq66uqg.roa (hash: yobtOiqegleIgApr90dqG2ZHzBAz77KAG53eGTL4ACI=) 20: fd3VjJzp8CTFunR8EVEEcuemUoc.roa (hash: B+IGGXksTykmWHPUVgNhXWa+PqU4Hpbyxj5vrh76T2s=) 21: hx4DNHJJVHTB5kYsT1IhVCOWqBs.roa (hash: OCAW6qBGPGa2hnxrZkd8qtRZEM1+Yk2/cKQFS7dtqvE=) 22: jg5M5k_6GKNZ9Y2rvZZltaFpNo4.roa (hash: SIMXAPgCs88kIDrWS92r3YG0rKy8dHX8r7UiSduHK9s=) 23: leVaA9OpnPMPUQjVbHEXO4EpxXM.roa (hash: 99aCYwqvn5FoZtfaWVvZyKteYF0Ldho/a157o6Ynt6g=) 24: nJWPR3ijpZMRJhibKnA2bqIBU-0.roa (hash: hkrTvd6KUmz1EfV2glZ262Azwm8Xx7aPhY3VGefvZcM=) 25: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: PdyV9zhq2LY3sVrKAMjfa+LWK2bCOkrjkOi2TvdOumQ=) 26: vB6F4DSif3FKGIjonFMI3O-9o0U.roa (hash: ScfvG0EkU2MZ+DZxbZuD2EbZYNjy/nMdGBqtWefCgOk=) 27: wHn4Idt9pbw0xNqo1xXnrZAME_c.roa (hash: 1V81c+Xq4YaFlhjRvvqZvgJ/aOSF31vxmGkYy8VJT/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:85:d4:20:60:da:2c:71:4e:31:9b:27:1b:84:90:59:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Sep 9 11:01:06 2026 GMT Not After : Sep 10 11:01:06 2026 GMT Subject: CN=de3a9a86a72484f3ca697255fc2e51fb11bbe801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:eb:24:b5:80:db:44:41:c3:7f:98:8a:85:6d: ec:b4:3a:2d:cf:6b:79:77:ea:3a:eb:cd:76:6a:e3: 7b:31:cf:80:e7:58:97:91:6f:80:ea:b4:bf:53:23: f4:11:c9:95:a1:b5:d3:1b:5d:79:7a:34:47:7f:e0: 2a:57:1a:2b:f9:24:64:cb:58:d3:da:57:db:06:c1: 10:1f:0b:0a:ed:4d:d4:bd:3e:7e:55:a7:b6:f1:c0: 49:09:ca:bf:73:05:8f:eb:f6:f7:96:f2:ba:e1:c0: fb:e8:28:4a:69:19:38:90:c4:85:05:fa:bc:91:9a: e8:b9:a1:da:7f:f3:61:9a:66:ea:cc:2e:61:de:7d: be:1d:61:23:4c:10:61:52:9d:fd:68:a7:21:db:5f: fe:f8:8e:85:34:00:77:2a:a5:96:7f:e5:f7:05:98: 90:64:ee:f5:c6:91:60:ba:78:e4:0a:f9:0c:e0:72: 84:51:e3:c3:a2:71:68:51:d6:7d:ba:f6:53:6e:d4: 13:4f:a6:69:88:86:dc:c4:5e:12:fa:e1:d3:9e:cf: a3:00:ee:13:28:d3:1e:7b:2a:b8:5f:88:6a:ae:68: 83:7c:e0:8c:77:2e:8a:69:b1:64:88:be:2e:85:2b: d4:34:4c:1e:d0:c1:a7:7b:a6:f5:98:6b:b3:d3:7a: 94:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3A:9A:86:A7:24:84:F3:CA:69:72:55:FC:2E:51:FB:11:BB:E8:01 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:c9:d3:19:57:4d:b9:79:41:b9:d2:b2:1d:10:0b:3b:9b:4b: db:46:eb:8b:52:bc:0b:62:4c:14:30:02:31:6b:38:cc:e1:ba: 78:0a:92:51:9a:90:87:2d:00:75:c6:ab:11:e9:ed:2d:82:c3: 07:48:08:2f:77:be:0f:d6:06:c7:7b:23:7b:e4:71:d1:68:44: 78:e8:07:96:8c:bc:19:03:4c:d8:a0:49:90:ed:95:f8:f8:d4: 60:86:66:38:b4:b2:b5:2c:23:e5:f1:08:75:89:d8:de:9e:af: 54:d7:82:47:12:21:58:11:54:93:d8:6d:c5:56:aa:6f:38:c2: 33:20:95:56:c3:2a:29:86:22:14:fb:cb:73:ad:e7:d5:74:1f: 9e:02:17:fb:83:8f:0b:4a:6b:ab:2d:8c:19:6f:22:19:d8:b2: 7f:dd:c2:db:da:be:0f:46:1e:72:d0:18:76:2b:f0:3f:25:b4: 0c:e8:77:3c:59:d8:83:1e:cc:51:d6:25:6f:4d:99:f6:88:7f: 3a:3f:3c:f6:71:53:d0:5e:f8:20:92:8e:55:76:b8:82:31:7b: f6:f8:31:3a:6f:fd:3b:e4:79:17:bf:4f:81:01:dc:29:ce:4a: 0e:4d:c3:aa:d1:a3:1d:1a:cf:bc:a2:44:93:e8:f3:5b:eb:e0: 63:b8:ce:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCF1CBg2ixxTjGbJxuEkFmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjYwOTA5MTEwMTA2WhcNMjYwOTEwMTEwMTA2WjAzMTEwLwYDVQQD EyhkZTNhOWE4NmE3MjQ4NGYzY2E2OTcyNTVmYzJlNTFmYjExYmJlODAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlesktYDbREHDf5iKhW3stDotz2t5 d+o66812auN7Mc+A51iXkW+A6rS/UyP0EcmVobXTG115ejRHf+AqVxor+SRky1jT 2lfbBsEQHwsK7U3UvT5+Vae28cBJCcq/cwWP6/b3lvK64cD76ChKaRk4kMSFBfq8 kZrouaHaf/NhmmbqzC5h3n2+HWEjTBBhUp39aKch21/++I6FNAB3KqWWf+X3BZiQ ZO71xpFgunjkCvkM4HKEUePDonFoUdZ9uvZTbtQTT6ZpiIbcxF4S+uHTns+jAO4T KNMeeyq4X4hqrmiDfOCMdy6KabFkiL4uhSvUNEwe0MGne6b1mGuz03qUxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN46moanJITzymlyVfwuUfsRu+gBMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0MnTGVdN uXlBudKyHRALO5tL20bri1K8C2JMFDACMWs4zOG6eAqSUZqQhy0AdcarEentLYLD B0gIL3e+D9YGx3sje+Rx0WhEeOgHloy8GQNM2KBJkO2V+PjUYIZmOLSytSwj5fEI dYnY3p6vVNeCRxIhWBFUk9htxVaqbzjCMyCVVsMqKYYiFPvLc63n1XQfngIX+4OP C0prqy2MGW8iGdiyf93C29q+D0YectAYdivwPyW0DOh3PFnYgx7MUdYlb02Z9oh/ Oj889nFT0F74IJKOVXa4gjF79vgxOm/9O+R5F79PgQHcKc5KDk3DqtGjHRrPvKJE k+jzW+vgY7jOHg== -----END CERTIFICATE-----Generated at Wed Sep 9 17:17:21 2026 by rpki-client