$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft File: BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json) Hash identifier: ZWz9EnyXqxHJ6YR2b1cFt8275TTCROdIbjfKsE4wby8= Subject key identifier: 20:0B:F8:D2:7A:2C:22:9B:B9:F4:FB:BB:A4:64:31:25:B1:33:F8:85 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 01A0889F3CBF0712D408F84D3FA8A953B80B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft Manifest number: 18A5 Signing time: Thu 10 Sep 2026 00:02:11 +0000 Manifest this update: Thu 10 Sep 2026 00:02:11 +0000 Manifest next update: Fri 11 Sep 2026 00:02:11 +0000 Files and hashes: 1: 10dcNCG_-MDba38nWmOg4-lXn6k.roa (hash: qCJHM+Bc84ondhlGxroPFWE37OgXYxlzfthfFUOO7WQ=) 2: 2Bz-26WJXsOdub2NFv0tQ13PdRE.roa (hash: QF8IxA/E4ZZtbvv05FsyZ1FueR1nYjHpOtKqqYrP72o=) 3: 3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa (hash: mbq8Pr8PdKSRq7yIi7vQcXKq7HeKQhJfSwx0LhWnGCo=) 4: 5DciNWvtD44nvmowaEInWwk8YZA.roa (hash: 4oBae1cQkYxE+N4xYsBQQveSBxypTMY0DWM/AkkENtk=) 5: 5JKLYCytnUKhdyTa14LHQIEKdFE.roa (hash: eArX0/lwmj4LvmBl8JgKR0ALNuxr1zRBSWvGWN5uFfI=) 6: 5i-KLJS79COzLV51bb0tfcQ1uQQ.roa (hash: PnQ0h19PE6J2No2E8613gpettIVTQSAHkgDKgMMgppQ=) 7: 6JyU7nFUK0tk4VQCPlYI_ZKhXmo.roa (hash: UtIfPnWUVyz8gRBCn75+ObAHW0bhWki1PUUgeHyQ8CM=) 8: 6XFljtVK2V0PF6GXRVQaEjH3Eoo.roa (hash: JvGvYE3ny1jx3z80vidwb1suh41eSZYf4UKZ7JMDcio=) 9: 8Gf4ilOOHDPy8ShRA6DADyswUBw.roa (hash: Gg3fjKtbtCo3yrbVLuhlxWrBwdUSi5rHbyxOcOG2L30=) 10: 8HWIcI9N3AE2x8zYy673Vd_4kfo.roa (hash: LN2KpWeg+Ys04Rwx9lWA0rODgISnXB2tF8WbAfHw9WY=) 11: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: ZdPCMpXApkL3noRX6Gaw1KV8XqaCZcTRoPBtMnW5h2M=) 12: C7ABxIBMFqY6WGHp-m3XASsH6n0.roa (hash: TZooGN1msR75BsEyRl0jLlYrZ8Y6P2v4AI3VUVqOn3U=) 13: CdcIcZHeB0GsHSds771hQUpQ7D8.roa (hash: YpLVoBlHUKYqmx9AhANgdWKDLZYZ8nUhqGpu7awPbPs=) 14: DMF7_LfD1ucYhDO0ohFJTTXvNDA.roa (hash: Cy/e5SaBm31dnw0xEGtIe3MOgTmE56seaObi9TTZpSI=) 15: D_yFeSNCNOPeNuhYpJ8Sj6yMqrw.roa (hash: dRua2mdx0T28GkQVz9QSWEzbAac9dJJsdOTGdnj90kk=) 16: FOLsAunRL-qwRUPITmX7DmjtTVo.roa (hash: 87JXVGkuJmGjpwYzfj6Y+tqb44jgW/uD+mWua5302PI=) 17: IYvPR6-UnbcPyQYUJJWwmHE7NK8.roa (hash: P03T/DLhEWvqxS/8YYp/V2MwoFNKYQGAgYeLfjxTL/Q=) 18: JdeaeLKAu5GEjINGKfvIKWcq3o4.roa (hash: a/heKXP0NtGbMelLoYKvGg/fN+ZyDqH56Dk+P1/eR2g=) 19: Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa (hash: qaufeqdeipVE1r+9GyOAZSAG0hMF1qh7wENk1s7zB2A=) 20: LXr6C48Lxn5qLALMmRCp0Zvklfc.roa (hash: xyDipUJK+J0EWyFs8iYbI4e4T5NfmKMOryR8EWn2OIs=) 21: OjeVFAg212uWEJPR4j0wAB5XdcE.roa (hash: NgMhCybIfen0bwNj/HLLxxGGd68yCqKlN9cakd8bl48=) 22: Ppvy7LfSl_8veNKT3PCYySGa_xM.roa (hash: KAldC7Ag1Jpktoi15FEM8qa7XkOMpiKNKU124uNCHgU=) 23: e4ScI9UDTbjinOVrH-HzMhxxYaQ.roa (hash: z4aixSBMgxj9VOGw7h6LRSs/oKtO4+/kMkfuz35WEDU=) 24: eBOwN9hT4zejM0AoU4iSaIEjz9s.roa (hash: fKITe0XHXVAprxbNBR9M8OQ9t4GQsguRxsVQ9HUhdnE=) 25: hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa (hash: /bY2rtzWMB1/BM4P1MtY/wIJQHWSb2VyMeLJaYe4zIY=) 26: iVkiAHYOg3HtM_uWUc76kLqrONs.roa (hash: XlSThvg6yDDSVBDMohDGUs845WGTZEUqqZulw7z2Ytg=) 27: iwqxgJYL8mBv3G61SG6QzZnZo_k.roa (hash: 3GX+FmWsXoIqZRfY2WtjR43yzm9CJ2GngD6fPIfSxPg=) 28: mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa (hash: W9XfH8Uvi+taIP3eFXkn/Sc4OUtrs4EPnOFSG+QrLlE=) 29: n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa (hash: 12jqzpGaLihSKEn4m7KQUtKkmWE3dp9k5ig5SAQQ3hM=) 30: rc3l3yce_wnaIAhkm-MVLQ6MlQs.roa (hash: nGpl03qXwZbg5LYiikckCucykULVlnfBwTrh22E2cqw=) 31: tPWk-AfReXdc60ikE9-d-q2ml5k.roa (hash: fuXAhmrSQOQKR0hkXAvHwO1y6kpzsA61B3meXSwM1d0=) 32: ugwrkIpRq29-B9wfVBIteF2KEoM.roa (hash: ukdyYgg1YHtbbV6wUaA9eMuBYuW9pmY61DiHuvFC67g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 00:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:88:9f:3c:bf:07:12:d4:08:f8:4d:3f:a8:a9:53:b8:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Sep 10 00:02:11 2026 GMT Not After : Sep 11 00:02:11 2026 GMT Subject: CN=200bf8d27a2c229bb9f4fbbba4643125b133f885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5b:36:83:81:40:db:39:3c:8a:17:3c:fa:bc: 92:91:fb:4f:d7:a7:de:cb:25:85:95:68:fe:30:e2: 37:f8:b0:65:7f:c9:ae:cf:52:6c:87:c3:54:6c:db: b7:2e:35:0d:b8:51:62:8f:98:e3:66:91:17:6b:22: 48:14:61:1d:f5:4e:77:63:f6:3b:4a:ae:36:e7:11: 93:df:18:04:42:cc:07:95:8e:cd:49:43:30:d5:79: 6a:50:13:a1:2b:1f:25:87:23:5c:37:a0:c9:b1:02: 31:40:47:f7:4d:a1:82:11:6f:49:e7:c7:b5:61:8f: 41:22:35:e5:38:87:0f:03:28:46:04:7d:f3:9c:c1: e2:70:ae:f8:4d:83:02:ba:fc:58:d5:17:49:e8:46: b1:a5:4d:08:90:64:24:c6:85:d2:f3:8e:68:30:3c: 0a:37:a8:26:4b:13:da:15:66:eb:94:d0:1e:4b:c7: 5f:64:25:d8:8a:b6:ce:3c:f4:e7:e4:c8:87:61:4b: 6f:cc:42:5e:8f:b3:98:0b:7c:cd:56:1b:8a:90:f5: 6e:24:f1:cf:bb:f6:6b:fb:48:3c:46:4c:d2:da:73: 82:c7:77:06:6e:0f:4e:47:ac:f7:56:5c:72:59:6d: 5c:9e:6c:5c:cc:c8:4e:e4:ba:d1:62:db:52:6f:7a: b1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0B:F8:D2:7A:2C:22:9B:B9:F4:FB:BB:A4:64:31:25:B1:33:F8:85 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d0:ec:95:b7:5b:b7:6f:7a:65:d8:a7:9f:d3:2f:ce:9d:8f: 5b:0b:ec:26:26:03:33:b8:88:7f:9e:ae:54:17:d4:b8:16:15: c9:94:14:7b:4f:6e:00:75:9d:84:6d:68:66:e9:e8:a4:68:05: 46:c4:c5:20:d1:b5:3d:6c:a4:ac:f6:5d:77:af:43:11:3c:d0: ef:ef:63:f9:02:e7:be:39:f9:a6:02:a3:e4:41:5c:6a:05:8c: 3e:5c:52:43:32:89:ab:c8:e9:bb:64:f0:59:09:95:e3:7e:42: 7d:4c:ce:18:24:0c:ee:9b:8d:41:0f:c8:50:6f:40:2b:10:23: 8b:cf:65:7f:f2:93:01:8a:79:e3:ec:76:f2:d8:1c:cb:7b:c8: 1b:a1:8e:c6:f4:f3:38:cd:bd:77:98:19:a4:9b:c2:f8:9d:88: ef:22:f2:84:b9:02:cd:16:1b:e9:68:5f:5b:cf:ff:7d:15:66: 01:35:87:56:d4:08:f7:4d:c5:12:d9:ef:02:42:8b:30:83:c8: f9:e8:a1:b0:2c:64:9f:d2:ba:83:de:f7:8b:f0:ac:f0:45:f6: 3b:8e:0e:57:10:59:9a:a8:51:f9:c8:57:2b:22:98:e4:b8:41: 4d:4f:99:1d:6f:35:80:f3:9e:c7:38:73:ff:7d:bf:0f:ff:58: 7c:70:fe:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCInzy/BxLUCPhNP6ipU7gLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwOTEwMDAwMjExWhcNMjYwOTExMDAwMjExWjAzMTEwLwYDVQQD EygyMDBiZjhkMjdhMmMyMjliYjlmNGZiYmJhNDY0MzEyNWIxMzNmODg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlls2g4FA2zk8ihc8+rySkftP16fe yyWFlWj+MOI3+LBlf8muz1Jsh8NUbNu3LjUNuFFij5jjZpEXayJIFGEd9U53Y/Y7 Sq425xGT3xgEQswHlY7NSUMw1XlqUBOhKx8lhyNcN6DJsQIxQEf3TaGCEW9J58e1 YY9BIjXlOIcPAyhGBH3znMHicK74TYMCuvxY1RdJ6EaxpU0IkGQkxoXS845oMDwK N6gmSxPaFWbrlNAeS8dfZCXYirbOPPTn5MiHYUtvzEJej7OYC3zNVhuKkPVuJPHP u/Zr+0g8RkzS2nOCx3cGbg9OR6z3VlxyWW1cnmxczMhO5LrRYttSb3qxlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAL+NJ6LCKbufT7u6RkMSWxM/iFMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtDslbdb t296Zdinn9Mvzp2PWwvsJiYDM7iIf56uVBfUuBYVyZQUe09uAHWdhG1oZunopGgF RsTFING1PWykrPZdd69DETzQ7+9j+QLnvjn5pgKj5EFcagWMPlxSQzKJq8jpu2Tw WQmV435CfUzOGCQM7puNQQ/IUG9AKxAji89lf/KTAYp54+x28tgcy3vIG6GOxvTz OM29d5gZpJvC+J2I7yLyhLkCzRYb6WhfW8//fRVmATWHVtQI903FEtnvAkKLMIPI +eihsCxkn9K6g973i/Cs8EX2O44OVxBZmqhR+chXKyKY5LhBTU+ZHW81gPOexzhz /32/D/9YfHD+IA== -----END CERTIFICATE-----Generated at Thu Sep 10 10:52:23 2026 by rpki-client