$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: lsIQkLqEPF+qNzWkI9BmV0cW8D6TvZAyFmSpk/4evNc= Subject key identifier: 27:E8:DE:24:3B:FD:37:81:8E:74:D4:2A:BF:64:5A:86:4A:39:87:E4 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 01A0B019423D420A6726C5C97BD189851A87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 10A0 Signing time: Thu 17 Sep 2026 16:00:40 +0000 Manifest this update: Thu 17 Sep 2026 16:00:40 +0000 Manifest next update: Fri 18 Sep 2026 16:00:40 +0000 Files and hashes: 1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=) 2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=) 3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=) 4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=) 5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=) 6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=) 7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: +xAlTVlKQZQQ0NgyjVIdX9hQJDAFiTvr8wFy/KaFHTk=) 8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=) 9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=) 10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=) 11: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=) 12: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=) 13: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 14:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b0:19:42:3d:42:0a:67:26:c5:c9:7b:d1:89:85:1a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Sep 17 16:00:40 2026 GMT Not After : Sep 18 16:00:40 2026 GMT Subject: CN=27e8de243bfd37818e74d42abf645a864a3987e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:61:cc:2e:d5:52:3c:7f:c2:e7:ce:94:1b:f1: 43:2c:9d:77:dd:82:8e:ff:3a:2b:c1:b5:73:b9:84: 27:7c:0f:e2:f0:48:72:5b:89:c1:c7:ec:e2:dc:bb: 65:1e:46:cc:64:37:81:c9:c6:1b:0f:8e:3d:5b:df: c2:b8:22:c4:c5:87:c5:0c:c1:ac:59:43:b5:32:cd: 0a:f8:cd:3e:ce:46:bb:63:cf:18:98:62:80:77:fe: 00:1f:87:af:7d:46:f0:80:00:7d:c3:13:7a:b8:52: b9:9a:19:8d:76:e1:0c:54:9f:6d:9b:86:85:cf:fd: 51:b0:f7:12:aa:1b:f6:50:be:88:c8:d3:4b:8e:36: 6c:bd:87:32:1e:7f:15:19:09:c7:76:0b:06:d5:84: 9a:e0:35:76:4a:09:49:a3:25:0f:1f:b3:4e:0e:29: fc:73:e9:2e:74:5d:b1:d3:5a:28:90:86:db:3b:99: 9f:b5:3e:52:5a:ab:e3:b2:cf:99:63:0a:f1:f3:02: 48:e4:c6:5e:05:1f:c4:aa:16:30:52:02:a8:bc:fb: 21:66:06:4b:0f:5f:34:36:37:7e:4a:f5:3f:f4:c7: b3:f7:08:43:11:96:a4:92:ec:da:9f:40:63:b3:24: a4:01:bf:9a:b7:8e:5b:d2:25:20:74:eb:7a:df:c1: d3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E8:DE:24:3B:FD:37:81:8E:74:D4:2A:BF:64:5A:86:4A:39:87:E4 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:fd:7a:3a:d1:2d:0a:c5:15:10:9d:fd:d6:e8:c0:d9:ff:bb: fc:f3:d7:55:86:59:68:88:47:1d:f6:6a:e2:c7:32:65:04:d5: b0:81:bd:c4:d6:6c:10:0a:c7:6d:e5:f2:c2:35:40:ea:87:90: 07:be:23:d6:4d:20:63:b9:8d:f1:40:42:4b:e3:0b:dc:7e:50: f3:33:d5:97:f7:69:3f:c0:08:dc:f3:ac:69:62:15:c3:b2:e3: ce:ea:b3:14:80:87:1b:af:72:63:15:03:c2:3b:36:99:8f:b5: 45:d4:c4:28:99:78:fd:06:3a:0f:2f:7b:00:41:0c:81:e1:a5: ca:6c:55:e9:39:85:99:72:a9:33:58:77:55:b0:05:cf:46:05: 33:92:1a:7d:59:22:a5:a4:29:25:e0:22:b1:6b:ed:ee:07:63: 1d:4a:19:a6:fe:2e:9e:f3:e3:a9:3e:4d:34:0e:56:4e:22:1f: 5d:57:59:b0:21:f6:3e:47:3b:c7:b8:4b:47:5f:d2:6f:af:8b: a1:ed:cc:70:d8:3a:9f:ab:6c:68:e9:e1:3e:84:be:cb:21:d4: 3e:97:12:33:88:47:9c:19:43:d6:1a:c7:85:53:ac:77:6e:41: 88:f2:a5:fa:ad:75:45:d4:01:f1:8e:35:80:95:5a:33:53:1c: 85:d8:16:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCwGUI9QgpnJsXJe9GJhRqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwOTE3MTYwMDQwWhcNMjYwOTE4MTYwMDQwWjAzMTEwLwYDVQQD EygyN2U4ZGUyNDNiZmQzNzgxOGU3NGQ0MmFiZjY0NWE4NjRhMzk4N2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmHMLtVSPH/C586UG/FDLJ133YKO /zorwbVzuYQnfA/i8EhyW4nBx+zi3LtlHkbMZDeBycYbD449W9/CuCLExYfFDMGs WUO1Ms0K+M0+zka7Y88YmGKAd/4AH4evfUbwgAB9wxN6uFK5mhmNduEMVJ9tm4aF z/1RsPcSqhv2UL6IyNNLjjZsvYcyHn8VGQnHdgsG1YSa4DV2SglJoyUPH7NODin8 c+kudF2x01ookIbbO5mftT5SWqvjss+ZYwrx8wJI5MZeBR/EqhYwUgKovPshZgZL D180Njd+SvU/9Mez9whDEZakkuzan0BjsySkAb+at45b0iUgdOt638HTgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfo3iQ7/TeBjnTUKr9kWoZKOYfkMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFv16OtEt CsUVEJ391ujA2f+7/PPXVYZZaIhHHfZq4scyZQTVsIG9xNZsEArHbeXywjVA6oeQ B74j1k0gY7mN8UBCS+ML3H5Q8zPVl/dpP8AI3POsaWIVw7LjzuqzFICHG69yYxUD wjs2mY+1RdTEKJl4/QY6Dy97AEEMgeGlymxV6TmFmXKpM1h3VbAFz0YFM5IafVki paQpJeAisWvt7gdjHUoZpv4unvPjqT5NNA5WTiIfXVdZsCH2Pkc7x7hLR1/Sb6+L oe3McNg6n6tsaOnhPoS+yyHUPpcSM4hHnBlD1hrHhVOsd25BiPKl+q11RdQB8Y41 gJVaM1MchdgWvg== -----END CERTIFICATE-----Generated at Thu Sep 17 19:19:44 2026 by rpki-client