$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft File: jNgCUSzLdFsqG48xVxTr45OVQD4.mft (raw, json) Hash identifier: SlYIue8+h+VKx9avBHgVB8GHf1kE1gmD1VXQ/xQYtgY= Subject key identifier: E9:7F:EA:21:C3:65:77:8E:0C:41:85:AC:79:8A:E6:50:D1:07:C1:8A Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e Certificate serial: 01A03A8297EB959E30CD896B249F38BB2652 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft Manifest number: 01B0 Signing time: Tue 25 Aug 2026 20:00:32 +0000 Manifest this update: Tue 25 Aug 2026 20:00:32 +0000 Manifest next update: Wed 26 Aug 2026 20:00:32 +0000 Files and hashes: 1: 3OQGKi2yEQLluY9a4w7by9vEGoo.roa (hash: 3V+WG2AvwjKFm44wV8J0ADqQ7/XrLRRtdCze/Kc9N20=) 2: A8zbeGZ_vFlIfUY9owp1LFdY0Qg.roa (hash: sGkTFzp72t2CXwG6Zrb6GXvi4fJs4oeqeT4NK3rHJ/w=) 3: CLhd68__Vp-YyeZEWfPslHaIkCw.roa (hash: m6lDWItDQfzxnVbNp7hXCoSHCG1Mi/r1rMWPQsWFRoQ=) 4: FOFTEst8oF0q0X3OdQgxLZ9oed8.roa (hash: g3Bb+RZcj9ZCWcwsCCB0Hz+Q7AkmMt0+i5iC3617N+w=) 5: RJ_8MLiQcEMQljmCDmVnOOnfQyY.roa (hash: qITG72dsAnXhR2+Wt6OI6k5v+TEp09wmHQrA/LqWJPc=) 6: Sxw-Mo-rafDV0shPebN3B75uBh0.roa (hash: av9Y0PMcBgIjJMb8On2oRvK2d2VAxow0GSsvpmW5Oxk=) 7: TUcYiqaHQaxrNd_59aAcfp5PzUc.roa (hash: UNkyO1RUoB9S8RFsmJ0fXaMIKW0xpN0m4jI2P8DIeTc=) 8: WffXez4tRjvK8i61Xgp9_xyDej0.roa (hash: bMn3sIVFMxXy7m8YFxKTE0In+3PMB96dpHT4q7pYfYw=) 9: _6cKcNAC78ls_BOFqv5zkjaGUrk.roa (hash: hb8IkqOptLcVml4XkmyreMe3ledkJL564+umbnocVXk=) 10: bCAXZjTW2IW_m0N7uzUGvqGo9dY.roa (hash: ROHBAPKH1qmshz6MU7zahyxMKm3XSOUI7AKc0G3MX2s=) 11: elz0WJjsYxFbofiz3y1iAAJK_EM.roa (hash: BrIsc5PixFvDSlwXziognZwHw3nQTaQ45c/0aGBgjy0=) 12: hYM7beFU-i68zuT-E-AP85h8fdI.roa (hash: Q6rivTFhzgG3KkdlD6+HA7Kyl4SyGQidk6P1eN7a4CU=) 13: hp01qqaG6ojwTceGwUYjwpMc_FA.roa (hash: +EoDWRDS7zIW8lYYUpVakjrqTS94dDcew7HVE2+smMs=) 14: jNgCUSzLdFsqG48xVxTr45OVQD4.crl (hash: Do9IZJAFdJcowZgMKn2xO5rHCeIRWc3Iraso1XEt0SU=) 15: vtKFCgLOZ8wS2x-s6VKfUtZdS6A.roa (hash: NB2FmYbPK0dEJHV51l4eabkaH3jjAUfpLoCOp7+GBrM=) 16: y8_zhxLnTyLVMVkKCxv2htwRO6s.roa (hash: 0B0AhLTjiKxRKyJN76TunlKY12o6P7Os0KKG5Yonjjo=) 17: yTtSJ-72gvZbFezzjuP8atI2Y74.roa (hash: wldJRvptVpmVW5JI0I+zGNq+GzlHt2h7rIbCYaZ8Fsc=) 18: zgfGzzEa1O2bUfc-S2mHvFXi2oY.roa (hash: 1UBdrGil3gpUHB0rTN6c1kWbSetkIIDJWjSbwx4apv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 14:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:3a:82:97:eb:95:9e:30:cd:89:6b:24:9f:38:bb:26:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e Validity Not Before: Aug 25 20:00:32 2026 GMT Not After : Aug 26 20:00:32 2026 GMT Subject: CN=e97fea21c365778e0c4185ac798ae650d107c18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d4:55:e5:02:20:e5:cf:1b:c4:72:e8:35:ab: 24:19:e0:ed:29:48:16:36:75:29:cc:d9:87:5c:c3: f2:9c:ef:f3:93:76:92:65:93:61:48:af:bf:14:c1: 40:9c:a0:0f:aa:ce:34:5f:b3:43:a0:9d:55:c3:d8: fe:f7:b2:d3:12:84:3d:0e:2d:4f:88:05:41:30:95: 72:5c:20:64:92:3f:e8:ad:e4:2d:e2:a0:d8:80:aa: 36:91:83:e5:7e:fe:99:61:a2:34:98:a1:95:de:53: 8e:ed:81:ab:45:91:7d:b2:69:78:2d:36:b3:af:3c: 3c:5b:af:64:3c:c5:75:cc:53:04:3b:6a:fa:1f:2c: eb:1d:19:a5:39:b7:da:83:53:51:33:27:b3:74:cb: 60:81:7b:28:43:55:d4:7d:7a:11:44:f8:eb:85:f2: 84:83:e7:36:ef:af:ed:f0:95:f0:8f:70:25:66:f9: 82:84:6f:72:1f:88:52:c4:af:aa:55:d0:cb:48:d5: 10:2e:06:46:45:86:68:4b:2d:5e:44:87:f0:52:bd: 93:65:92:c9:e8:f4:d8:02:5e:54:85:24:9c:17:c8: 11:f3:69:98:2b:4f:fc:cd:92:75:d2:34:1e:02:8b: 0a:de:b2:e8:70:22:72:58:ea:6a:7a:ec:e3:01:d7: 4c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7F:EA:21:C3:65:77:8E:0C:41:85:AC:79:8A:E6:50:D1:07:C1:8A X509v3 Authority Key Identifier: keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:85:e9:c9:81:a8:7f:52:9f:b2:c6:bd:88:88:b3:2d:be:f6: f1:80:bc:9c:6b:fd:93:7a:2f:30:ed:ae:c3:a7:6c:28:2a:ba: 66:3b:ce:29:83:a8:58:d4:0b:53:ec:fa:c5:5f:91:a5:29:bf: fa:29:fd:8f:30:54:a2:b4:83:2b:31:1a:02:c9:f1:e0:98:1d: 04:2e:5e:53:9b:1b:53:1a:a4:f6:5b:77:fe:74:f0:4c:03:1a: bf:44:9d:85:4c:e0:f5:f1:2f:81:2e:eb:55:25:ba:08:1f:b5: 23:c8:8a:d3:7f:2f:87:94:9c:68:9f:c4:ae:5d:71:84:06:8d: ef:e8:c5:b8:1e:ac:d9:b3:58:cd:33:5a:ed:ad:87:6a:23:9d: 24:e6:e7:2e:6a:2b:cf:a0:10:fa:a7:f0:86:76:6f:45:a7:77: 56:b3:24:6b:c9:83:41:ec:f1:8c:5b:3d:95:63:ac:1a:a8:66: 84:83:ae:f7:fd:b3:71:63:ea:03:28:11:f0:b7:9f:93:8a:98: 74:38:03:f2:8b:c7:61:b5:02:32:a6:36:b8:9f:b5:dc:6d:e1: e7:f4:4f:1f:b7:24:7d:f3:5f:fa:cb:2d:03:d6:4d:f9:5d:3e: 9c:55:92:69:d2:62:63:9b:e6:9a:2a:fa:e4:4d:04:2e:95:2d: f0:19:c1:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaA6gpfrlZ4wzYlrJJ84uyZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDgwMjUxMmNjYjc0NWIyYTFiOGYzMTU3MTRlYmUzOTM5 NTQwM2UwHhcNMjYwODI1MjAwMDMyWhcNMjYwODI2MjAwMDMyWjAzMTEwLwYDVQQD EyhlOTdmZWEyMWMzNjU3NzhlMGM0MTg1YWM3OThhZTY1MGQxMDdjMThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9RV5QIg5c8bxHLoNaskGeDtKUgW NnUpzNmHXMPynO/zk3aSZZNhSK+/FMFAnKAPqs40X7NDoJ1Vw9j+97LTEoQ9Di1P iAVBMJVyXCBkkj/oreQt4qDYgKo2kYPlfv6ZYaI0mKGV3lOO7YGrRZF9sml4LTaz rzw8W69kPMV1zFMEO2r6HyzrHRmlObfag1NRMyezdMtggXsoQ1XUfXoRRPjrhfKE g+c276/t8JXwj3AlZvmChG9yH4hSxK+qVdDLSNUQLgZGRYZoSy1eRIfwUr2TZZLJ 6PTYAl5UhSScF8gR82mYK0/8zZJ10jQeAosK3rLocCJyWOpqeuzjAddMKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOl/6iHDZXeODEGFrHmK5lDRB8GKMB8GA1UdIwQY MBaAFIzYAlEsy3RbKhuPMVcU6+OTlUA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmIt MzhlMDY4NTM2ZTZiLzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmItMzhlMDY4NTM2ZTZi LzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoXpyYGo f1Kfssa9iIizLb728YC8nGv9k3ovMO2uw6dsKCq6ZjvOKYOoWNQLU+z6xV+RpSm/ +in9jzBUorSDKzEaAsnx4JgdBC5eU5sbUxqk9lt3/nTwTAMav0SdhUzg9fEvgS7r VSW6CB+1I8iK038vh5ScaJ/Erl1xhAaN7+jFuB6s2bNYzTNa7a2HaiOdJObnLmor z6AQ+qfwhnZvRad3VrMka8mDQezxjFs9lWOsGqhmhIOu9/2zcWPqAygR8Lefk4qY dDgD8ovHYbUCMqY2uJ+13G3h5/RPH7ckffNf+sstA9ZN+V0+nFWSadJiY5vmmir6 5E0ELpUt8BnBLA== -----END CERTIFICATE-----Generated at Wed Aug 26 00:39:21 2026 by rpki-client