$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json) Hash identifier: NWaKBUtaK/epun09iBI2ilumLQQBNnyQ2GUaN0kOPZ8= Subject key identifier: 79:1B:24:EF:14:91:21:00:60:28:8F:FC:39:52:F9:39:11:02:5B:E7 Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 01A08A8C48B5474EBFB6D0AF1C1C2C37E34A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft Manifest number: 1B4D Signing time: Thu 10 Sep 2026 09:00:44 +0000 Manifest this update: Thu 10 Sep 2026 09:00:44 +0000 Manifest next update: Fri 11 Sep 2026 09:00:44 +0000 Files and hashes: 1: 0r3kkbCIc2trczoA0tV0PpuHTqk.roa (hash: hYQwD9eKL8aadDbtj9scQfTVqsN0ThTdN4voLWbulpc=) 2: 1-HMehk4Z5593y_16dRGWIQyy-Ng.roa (hash: EurbSdpdbDWY2LP7kxCHMWSabQW2ttzuwZ+l6NbR48o=) 3: 7BOKK6Tl9KRbFdrQtKoSEGrM2ns.roa (hash: 0WZmcRa658Us5LFqpepkQ3ZD0Z3AX8LDSbJ/uzthFek=) 4: CDjWTyoS71DXASo2Nj7eHKZDgBU.roa (hash: 0MjLF8Ccc2qdY2KgDxvd+hMdzbz7ozx3zfAkryxvvg0=) 5: EPBqQkdx7GD5hYF24Z7UGR81Qo8.roa (hash: d9xe8thzz0W/d4MTXJUjxHzBqyaFRNrSeI5OVZiP6OY=) 6: J1bOpzfz9N73oSFlFV1z4QDm-64.roa (hash: h6M5XtZ8RlW37k6FxTv2spT98MJgWMzY1tvdNHQE2Vg=) 7: KVv7_M50V2iyBxYsG_dQpH_S9tQ.roa (hash: RkhZYcx1K+qPGt8mNSXPpba3hYgNZEfnfscSk3pS5x0=) 8: KXN5i1ksyLJ3gWuszNVJ4lkPFkA.roa (hash: yrzgi/xgwBaka39UCK/DNXA3vvLMwfJcozcKOOGIcnk=) 9: KdrCfLVD5w7yEsbqRNIHxnRBV1U.roa (hash: 7kkTNpurW7ovwPOEHHf7JVghG0bKfPeVVb6gJUM+74E=) 10: LRk25r9LuPknCpeQnQqi40l9kvk.roa (hash: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q=) 11: NRslGXwzqXLsPOGISDrIoXtcmqY.roa (hash: DEaiL5GBQA1ssRMigPA8Fc7/Qa4ewlIX8LGF5gSXnqI=) 12: O1La2Mo1MYQY3pYzpawz3q36YWQ.roa (hash: 9nFQCGf5z1AV/WxHQinreWL3Ers41lsBCvkG3xts94o=) 13: OID3-h0E9NS9k14gHMrZ8yh6ycU.roa (hash: BA4lyJFHWXpMYsG73bQjPscgyCJa/nGXeiHKEdwKdHE=) 14: Xk9NYhdXTr3rd3NYRXydtLgFRbs.roa (hash: 5i33Vv91iUeFK5+uzl8a/uVNcXnYM4QXT7Iz6UOmTNs=) 15: YKk6KvjeY_RwM6-fGT6G4_ZJVx4.roa (hash: CjTmvkWgMsl3+rELzvl+uMCWJONzTqE5DK9lcYaQMF0=) 16: _yYeoQViTIjqsYE0h5QCAQRGd04.roa (hash: ZBg3y/n8GjKrQaC1IigA7ZREsnmFDIrXAnas9eg3WXo=) 17: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: oRyY/GsTDf1RuJVMnEhtvC2fOWKr0seCJWAGv9pqYuM=) 18: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (hash: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0=) 19: m8JrVpoNYFe6r8CVAdMoHF3wnCE.roa (hash: JPLFA7c7BuHIJXMiW+CczCcnzd/BQTgVn9malVbSP1s=) 20: tbUhg7rUfXFYYfYb_lSW_GU4nIM.roa (hash: iEf9/3LdpD/pQVMxYUZBzp5gwic0pOcGWaOr9ht0nlk=) 21: uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (hash: 039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=) 22: x2-UOiQ1JkGjRhg5Y3BKO6HEghI.roa (hash: Sqa+wceVkaOOyPhxXULzb2svO17UJ0RHxLUOfuxIaDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 09:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:8c:48:b5:47:4e:bf:b6:d0:af:1c:1c:2c:37:e3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Sep 10 09:00:44 2026 GMT Not After : Sep 11 09:00:44 2026 GMT Subject: CN=791b24ef1491210060288ffc3952f93911025be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:54:e6:b0:f5:58:3c:d3:b6:ab:4d:9d:37:1a: c1:b8:09:b3:d5:b2:7f:fe:f2:47:ed:b1:71:e7:36: f2:2e:17:be:d9:a3:f4:45:09:1b:40:de:76:2b:35: 5b:52:08:26:e9:a3:91:c4:5a:e2:2b:65:29:64:f2: e2:d7:b3:e4:87:1e:07:49:b0:14:63:4c:0e:b7:e0: b2:ae:a9:eb:3d:ed:e4:5b:95:50:49:c0:aa:66:2d: c6:5e:20:5e:de:3c:e7:60:17:4e:00:64:17:3b:15: b7:de:02:a9:23:07:a8:33:23:47:61:72:96:9a:3e: af:88:2b:df:0f:18:21:b4:0c:b3:df:2e:9f:9b:d0: e2:cf:43:84:e3:9d:aa:41:1b:df:a5:6e:5d:41:ef: 95:3b:e2:56:6f:58:56:2c:21:59:bd:96:0d:4d:b6: e7:0c:dd:a3:93:d4:53:ca:0d:1d:9f:c3:b2:52:2b: 57:ce:66:b0:53:80:a3:93:6e:b8:d3:f6:ab:bf:ee: bd:a4:64:96:04:41:17:a5:d9:c9:3b:4e:d4:4a:ad: 7a:01:81:d1:57:d7:aa:65:4e:a6:36:31:3e:7f:15: f4:bd:5b:89:77:8a:54:c9:79:14:fc:af:31:28:64: 6a:58:2f:3a:52:52:67:28:cf:3a:4e:e0:86:a9:ec: c0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1B:24:EF:14:91:21:00:60:28:8F:FC:39:52:F9:39:11:02:5B:E7 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:fc:06:44:1f:ac:40:b2:4c:d7:8b:1a:d4:89:a5:32:21:40: e1:fb:3f:3d:00:8c:d0:95:9e:b0:40:01:69:a1:c9:25:94:55: e7:33:6c:85:3b:aa:69:86:a6:6e:b5:f2:c8:b0:2c:74:75:4c: ca:05:2d:93:e2:7c:36:b0:d3:c3:21:cd:8d:ab:46:a5:c3:d5: 34:7c:53:f9:6c:8a:0b:9b:41:10:19:0e:87:6a:82:cc:b0:7d: 41:d1:16:20:62:c0:2e:65:82:ee:98:99:8a:fc:90:38:29:f9: 5b:6c:5d:f4:8f:4a:9e:61:fa:b2:f3:cc:0b:a9:13:0c:8a:12: c6:f0:4f:77:b2:eb:94:1a:ea:40:df:28:5d:3b:3e:f0:e0:cd: 55:92:c6:4d:06:b4:7d:5c:dd:87:be:4d:84:46:02:91:d2:45: bf:8e:0d:99:ed:09:09:6f:53:f6:8e:ce:31:12:9a:f7:ee:5b: 88:7c:83:14:cd:d4:00:59:10:6c:ce:24:ae:8a:4b:8b:6f:82: 62:39:a6:66:9f:b7:3b:06:43:80:61:96:00:df:df:e8:e7:0f: 1e:a8:10:c2:36:5b:7d:37:29:dc:86:7c:65:58:5e:fd:5e:84: 7d:4e:c9:83:07:c9:5e:7e:e9:40:80:8e:87:7b:15:4c:64:6d: 59:ad:58:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKjEi1R06/ttCvHBwsN+NKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwOTEwMDkwMDQ0WhcNMjYwOTExMDkwMDQ0WjAzMTEwLwYDVQQD Eyg3OTFiMjRlZjE0OTEyMTAwNjAyODhmZmMzOTUyZjkzOTExMDI1YmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1TmsPVYPNO2q02dNxrBuAmz1bJ/ /vJH7bFx5zbyLhe+2aP0RQkbQN52KzVbUggm6aORxFriK2UpZPLi17Pkhx4HSbAU Y0wOt+CyrqnrPe3kW5VQScCqZi3GXiBe3jznYBdOAGQXOxW33gKpIweoMyNHYXKW mj6viCvfDxghtAyz3y6fm9Diz0OE452qQRvfpW5dQe+VO+JWb1hWLCFZvZYNTbbn DN2jk9RTyg0dn8OyUitXzmawU4Cjk2640/arv+69pGSWBEEXpdnJO07USq16AYHR V9eqZU6mNjE+fxX0vVuJd4pUyXkU/K8xKGRqWC86UlJnKM86TuCGqezATQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkbJO8UkSEAYCiP/DlS+TkRAlvnMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPwGRB+s QLJM14sa1ImlMiFA4fs/PQCM0JWesEABaaHJJZRV5zNshTuqaYambrXyyLAsdHVM ygUtk+J8NrDTwyHNjatGpcPVNHxT+WyKC5tBEBkOh2qCzLB9QdEWIGLALmWC7piZ ivyQOCn5W2xd9I9KnmH6svPMC6kTDIoSxvBPd7LrlBrqQN8oXTs+8ODNVZLGTQa0 fVzdh75NhEYCkdJFv44Nme0JCW9T9o7OMRKa9+5biHyDFM3UAFkQbM4kropLi2+C YjmmZp+3OwZDgGGWAN/f6OcPHqgQwjZbfTcp3IZ8ZVhe/V6EfU7JgwfJXn7pQICO h3sVTGRtWa1Y9g== -----END CERTIFICATE-----Generated at Thu Sep 10 19:11:40 2026 by rpki-client