$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: AJxPW++6Q4LBQW/JHTlEggrOuTX7+AKOJvgf+c6iusA= Subject key identifier: BB:91:3A:45:3A:9A:8B:61:28:3D:50:E9:19:88:9F:00:CF:71:21:2F Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 01A08B6875519FBCFAF623535EDD89F0A186 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 1A50 Signing time: Thu 10 Sep 2026 13:01:13 +0000 Manifest this update: Thu 10 Sep 2026 13:01:13 +0000 Manifest next update: Fri 11 Sep 2026 13:01:13 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: 6WxYg1zOUdLAEVt5ExcgEjdyFpB2iQ+FshZqYnxN0z0=) 2: 2pZ-2FjfKp_AUPJehyyyCmO33Hc.roa (hash: KSo6Uo4KGXQ+gy+hLjBUZoC/tbnGR8dO325Q6LPyilM=) 3: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (hash: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM=) 4: CvuWIkRHjp5wftfGLU8vOGYCRbc.roa (hash: gj4Tk/zdN+anVbu8mIUIWBYC8RgYdvQOlOOsAUK8Sdk=) 5: IRAfjWAlERnsxDrkVza8YXCUxl4.roa (hash: Ubtt3PSH8NxJ1HHW0Bmr9YJAFmecuPEr+JdwoJmMyLs=) 6: JJfaJkgSEBalqFcc3d6GPKEq5c0.roa (hash: FuHxoLmlLp5uuetTQ7lUzLqCBx0iP3lbv/wcUM9OYTE=) 7: Q_rrlmseqjc9c8mfs_9rzyd3284.roa (hash: GSzKRbWz/hHkNfc9qit79if8AoJkjbgwLaFILxum/nA=) 8: lfsA-CiV23r-qpL7I-OyuqCLA7E.roa (hash: IDCu8RiLCmmGO2wQI4VtUyw3k0YFKxR4jBPe/VBgfYc=) 9: nkzcn1sgGDpbfyqNM00anSE1XXM.roa (hash: /+3MitTOfIJS1gt2shgI9n07vci+NIdPgsMA89TtpO0=) 10: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (hash: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720=) 11: qu1WOvTSGJhb9qCrwaoo2MELsDg.roa (hash: sMcBLOOPq2yXaLqHdTpicJZ4I/4D7ujzTrP/m9dXVgg=) 12: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (hash: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo=) 13: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (hash: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g=) 14: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (hash: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA=) 15: yB3ntVub05F4F9i1cWLaKANNBso.roa (hash: zdKl/J+2C305Q7rX/8wtABN6OkAsZKkNZDLRLh5HUdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8b:68:75:51:9f:bc:fa:f6:23:53:5e:dd:89:f0:a1:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Sep 10 13:01:13 2026 GMT Not After : Sep 11 13:01:13 2026 GMT Subject: CN=bb913a453a9a8b61283d50e919889f00cf71212f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fd:39:c5:69:1c:40:58:a0:44:1a:3b:60:c6: 88:4a:46:42:25:ca:a1:2f:2d:06:ed:56:db:25:50: a7:b4:ac:96:2a:e2:24:0b:e6:74:68:b0:02:4a:e1: ad:57:08:54:77:84:3c:80:59:24:96:4e:fd:60:bd: c2:ac:a5:60:f2:e5:40:26:02:6d:db:92:4e:40:08: e0:f1:a6:c5:61:9e:a9:96:43:70:65:49:03:2e:d9: 2e:c8:e3:a3:bd:f2:43:d7:0a:3c:a4:1a:e0:d3:f4: f4:aa:e9:da:67:6b:f8:ba:be:4a:52:54:aa:72:a4: cb:27:b7:3a:ae:5d:d4:be:be:00:8b:55:9e:2e:ae: ba:18:9d:37:9b:0b:c8:dc:f2:ee:a3:35:53:9b:3f: e5:2c:1a:7e:e8:c2:20:37:26:04:5f:af:a9:25:8c: e1:a3:53:c7:89:59:36:f3:a7:1d:a1:52:de:2a:0a: 29:56:bd:db:3b:33:1d:98:07:2b:39:d2:25:9c:7f: 5e:1b:0a:fb:f9:64:5d:b5:32:e7:91:86:ed:7e:98: 02:61:6c:06:10:ff:d6:34:0f:eb:0a:4a:3b:b5:50: e5:66:23:b7:2d:67:b6:f1:04:fa:1f:8f:0e:63:62: f4:41:2d:5c:a6:99:eb:bb:ec:31:7e:22:e2:2f:b5: 20:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:91:3A:45:3A:9A:8B:61:28:3D:50:E9:19:88:9F:00:CF:71:21:2F X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e7:ed:21:bc:c0:0e:6b:f5:e7:62:ea:bf:c3:fc:44:71:50: e6:9f:ee:d8:ac:cc:b4:70:12:88:d8:b0:21:9b:d6:2b:af:24: 2e:5e:5f:8c:c4:13:c3:15:67:43:0a:b9:39:36:8e:50:ae:99: 3d:65:fa:f4:d9:c8:3f:8f:62:3a:62:84:9d:b0:70:09:c6:dd: 80:c5:14:a8:be:64:98:3f:66:85:05:97:6a:23:30:44:3c:59: 02:9a:1b:a2:6d:00:b6:06:6a:1d:64:c1:09:27:bf:b5:8b:93: d6:62:29:41:3a:b7:ce:34:ce:c3:3a:d6:8b:8a:e6:23:dd:fc: 7c:b6:60:c2:e0:e4:4a:48:ec:09:96:71:45:c2:c2:7f:4e:e1: 6c:a9:84:df:dd:01:ba:5c:48:09:fd:1f:1e:fc:ca:f8:74:bc: 97:d8:a0:7e:11:8b:50:a0:42:be:f3:b4:78:6b:00:13:60:12: aa:62:df:86:95:87:86:5f:a4:e0:55:c4:b4:b6:d1:72:9c:d9: 2b:a5:cb:77:9d:64:dc:6e:7d:f6:ee:bf:3a:e3:ed:f7:d1:a2: ca:ff:e5:c9:a6:22:0e:8c:56:11:14:0a:67:f1:8b:93:ee:66: ac:21:48:24:b4:48:8c:1b:3d:f7:66:69:0d:fb:51:37:c5:e0: 22:8f:be:33 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAaCLaHVRn7z69iNTXt2J8KGGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYwOTEwMTMwMTEzWhcNMjYwOTExMTMwMTEzWjAzMTEwLwYDVQQD EyhiYjkxM2E0NTNhOWE4YjYxMjgzZDUwZTkxOTg4OWYwMGNmNzEyMTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf05xWkcQFigRBo7YMaISkZCJcqh Ly0G7VbbJVCntKyWKuIkC+Z0aLACSuGtVwhUd4Q8gFkklk79YL3CrKVg8uVAJgJt 25JOQAjg8abFYZ6plkNwZUkDLtkuyOOjvfJD1wo8pBrg0/T0qunaZ2v4ur5KUlSq cqTLJ7c6rl3Uvr4Ai1WeLq66GJ03mwvI3PLuozVTmz/lLBp+6MIgNyYEX6+pJYzh o1PHiVk286cdoVLeKgopVr3bOzMdmAcrOdIlnH9eGwr7+WRdtTLnkYbtfpgCYWwG EP/WNA/rCko7tVDlZiO3LWe28QT6H48OY2L0QS1cppnru+wxfiLiL7Ug6QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLuROkU6mothKD1Q6RmInwDPcSEvMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+ft IbzADmv152Lqv8P8RHFQ5p/u2KzMtHASiNiwIZvWK68kLl5fjMQTwxVnQwq5OTaO UK6ZPWX69NnIP49iOmKEnbBwCcbdgMUUqL5kmD9mhQWXaiMwRDxZApobom0AtgZq HWTBCSe/tYuT1mIpQTq3zjTOwzrWi4rmI938fLZgwuDkSkjsCZZxRcLCf07hbKmE 390BulxICf0fHvzK+HS8l9igfhGLUKBCvvO0eGsAE2ASqmLfhpWHhl+k4FXEtLbR cpzZK6XLd51k3G599u6/OuPt99Giyv/lyaYiDoxWERQKZ/GLk+5mrCFIJLRIjBs9 92ZpDftRN8XgIo++Mw== -----END CERTIFICATE-----Generated at Thu Sep 10 20:30:17 2026 by rpki-client