$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft File: A9uVtDb1McTmAvOWEK1T4m_f8VM.mft (raw, json) Hash identifier: GUXp0lsACE+UUNV+UMXrxEEuRF18mQaQ703ysoL9hQI= Subject key identifier: 47:BA:08:AE:11:70:FB:01:0D:29:C3:74:1B:CE:B4:BC:26:D6:17:29 Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53 Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153 Certificate serial: 01A06E3976591574F1A750B3103B5FBB7734 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft Manifest number: 13 Signing time: Fri 04 Sep 2026 21:00:54 +0000 Manifest this update: Fri 04 Sep 2026 21:00:54 +0000 Manifest next update: Sat 05 Sep 2026 21:00:54 +0000 Files and hashes: 1: 5HQWQxWdiy9EfQsIdQfOtGFhqAY.roa (hash: lNpBXc4brXPdyM4KdW/2eUa9on7qU0nbG6K7g8xL5rQ=) 2: A9uVtDb1McTmAvOWEK1T4m_f8VM.crl (hash: bUkA9UAMbAAQX38GKPEVzYAejAtsxOVDcHcNnRPBsWY=) 3: MKwiTdenphsYJ_kfTrcYo6UcD7I.roa (hash: nL9/mDZHDkh6gnqmoDFsouH6WUNsxINNDWtgs1jzkN4=) 4: RNXSHxaUUvDblPcGLgkm4Fo6H6o.roa (hash: b9iwGTQhnBGKAlddBv7VUcrZ47lzTTkkbsL9Gzq0crw=) 5: Tue_PWy7segmnsovxaPWBkZUzrU.roa (hash: 5O5QW8lDnCwWoCWxPj6d01is7KFtD9QmFsNqHDAkbBI=) 6: Udd8VR3v6kWAPxifsBkp_SMlTzs.roa (hash: KfN08etDIWVn0Cz/yeU1yvPeWnaf4FOHuTeCGL/wkRA=) 7: XSfbPkvAFn3bhwJrBb3NgfJrWWE.roa (hash: e15uaNhvcCYBGRuKUIfJisu17/id98Z3TDf9Lo+NzRM=) 8: c0ZhaaZLIq15Oh_EgpTHm1B0c3Y.roa (hash: KT9KE79BSMnOUe9aMNfX3v6pUeJuFhmDw4RlRZ4SGW4=) 9: fJfk9udARV5inAKL917bZTd1EeQ.roa (hash: +ZHDuvPpsboDixA57iFt3QrxGUysB/3TF0CL20bof8s=) 10: lACClWJozZ2tD2fNvzjVVMhwmwI.roa (hash: IjdsAeFrshBWpjF/8m+vmuGJHcJ+aPot1Nr+V0xwglE=) 11: pi-ROLtMli7awGKUJO7UQ8Lvjn0.roa (hash: uwBBbyFPu4jWRTLTB2q1IA2l9Rly7f5Y/eDPv1LfJd0=) 12: q0L4UH47dCCDH60yZ_7AGNsn8qc.roa (hash: R7WRquGBsi9blcrsLvQ+AKqFw8Ezybqro9Uldd7Wbk8=) 13: sxHKxaxeqjCtyAXNtZ5N7PdG5kE.roa (hash: N2Kx7hvudVkhzuQ3LNBFw9LCsukl6jF7WE6axgq0NWY=) 14: uuQfg9kOGM3Zs2fZiwSZJKx0Frg.roa (hash: ccvfSFwgf7wVJZtroZjn/1/gK5jeTRUamoxFt3ZuiG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6e:39:76:59:15:74:f1:a7:50:b3:10:3b:5f:bb:77:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153 Validity Not Before: Sep 4 21:00:54 2026 GMT Not After : Sep 5 21:00:54 2026 GMT Subject: CN=47ba08ae1170fb010d29c3741bceb4bc26d61729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a2:b0:6e:90:83:86:2f:da:a8:14:09:c0:9f: 35:d7:69:f1:de:74:4c:13:d0:b1:d6:df:ef:44:f9: 65:83:50:2b:ab:3e:a3:89:27:69:ac:7b:8a:8f:f3: 31:01:dc:d9:5b:9e:9c:fa:a1:50:96:88:cf:a1:7f: 40:b5:ef:df:83:0e:3c:01:5c:59:8c:0c:83:5a:6d: c8:80:08:0f:ab:ea:c1:5c:ee:6c:1b:9d:bb:a2:da: 48:6f:3d:b9:84:47:98:c7:5b:d5:d9:1d:b8:93:23: bf:58:b3:ea:32:78:82:8c:c4:52:a6:04:57:c8:d7: 12:07:d2:54:ff:0a:f3:44:84:03:36:6b:20:65:01: 4e:e0:10:f1:bd:a0:66:f0:d5:73:a1:b5:36:12:46: e2:09:60:9e:be:e1:31:52:1b:56:4f:bf:e3:8d:c2: 6b:26:ab:8f:07:a8:03:96:af:1e:22:50:76:69:6c: 5a:69:5e:6f:33:1c:16:ad:77:e9:35:07:f5:b1:67: 2c:a6:6b:7f:a7:0c:f6:68:3b:a5:4b:75:fa:da:76: a9:b0:12:da:f6:13:9f:54:95:71:ec:fe:d6:cc:d0: 58:3f:a2:ee:e8:ce:e0:69:55:04:f3:74:e4:cc:51: 6e:be:6a:d7:f3:f1:80:87:4c:35:01:6e:62:37:75: 40:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BA:08:AE:11:70:FB:01:0D:29:C3:74:1B:CE:B4:BC:26:D6:17:29 X509v3 Authority Key Identifier: keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:74:31:0d:cf:75:c1:5f:da:f7:39:dd:e7:f0:5a:79:12:f8: fb:96:f1:f0:6f:58:be:90:1a:20:53:b1:02:97:98:3e:d9:3c: f6:1a:4d:0f:d6:b1:da:fd:ee:e3:b2:86:4e:6f:e9:bd:c3:01: 58:0f:e1:94:c1:81:99:f4:b5:fa:90:0c:4f:d6:f9:54:cf:29: f7:3f:83:d3:7f:e6:bf:31:77:f3:b4:e5:7c:2d:a2:e1:34:51: 61:a1:8b:e9:39:54:2e:8b:a1:cd:c7:f3:8a:30:d8:9d:71:85: 47:97:69:31:d9:6f:62:12:52:ed:3d:97:cf:ea:d5:cd:dd:18: fc:84:4d:9f:5b:31:a0:90:ec:90:c1:f0:02:20:6d:9d:62:4c: e9:c7:b9:cc:da:d1:db:66:2c:9f:a2:90:10:df:f9:a6:cc:f7: e2:6e:dd:f1:f7:f7:1a:65:5e:17:d0:dc:d0:4b:92:e5:96:21: ea:ef:56:51:79:f0:7b:80:e6:38:10:6b:f4:db:7f:31:0a:cf: 65:bd:e2:ed:1e:4d:3d:7a:2b:15:63:cb:c7:95:71:d6:a4:29: 0f:27:61:30:75:a1:ed:cd:fb:6c:f1:51:a3:c9:3e:51:b1:97: c2:b8:8c:04:db:09:fe:56:80:3e:a4:cf:c0:57:c4:8b:21:77: d0:ed:70:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBuOXZZFXTxp1CzEDtfu3c0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZGI5NWI0MzZmNTMxYzRlNjAyZjM5NjEwYWQ1M2UyNmZk ZmYxNTMwHhcNMjYwOTA0MjEwMDU0WhcNMjYwOTA1MjEwMDU0WjAzMTEwLwYDVQQD Eyg0N2JhMDhhZTExNzBmYjAxMGQyOWMzNzQxYmNlYjRiYzI2ZDYxNzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26KwbpCDhi/aqBQJwJ8112nx3nRM E9Cx1t/vRPllg1Arqz6jiSdprHuKj/MxAdzZW56c+qFQlojPoX9Ate/fgw48AVxZ jAyDWm3IgAgPq+rBXO5sG527otpIbz25hEeYx1vV2R24kyO/WLPqMniCjMRSpgRX yNcSB9JU/wrzRIQDNmsgZQFO4BDxvaBm8NVzobU2EkbiCWCevuExUhtWT7/jjcJr JquPB6gDlq8eIlB2aWxaaV5vMxwWrXfpNQf1sWcspmt/pwz2aDulS3X62napsBLa 9hOfVJVx7P7WzNBYP6Lu6M7gaVUE83TkzFFuvmrX8/GAh0w1AW5iN3VAxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEe6CK4RcPsBDSnDdBvOtLwm1hcpMB8GA1UdIwQY MBaAFAPblbQ29THE5gLzlhCtU+Jv3/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTl1VnREYjFNY1RtQXZPV0VLMVQ0bV9mOFZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zMWQyMzgtOTQ0Yi00MjgzLWI3MTAt MzM3MTMzYWJiM2UwLzEvQTl1VnREYjFNY1RtQXZPV0VLMVQ0bV9mOFZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8zMWQyMzgtOTQ0Yi00MjgzLWI3MTAtMzM3MTMzYWJiM2Uw LzEvQTl1VnREYjFNY1RtQXZPV0VLMVQ0bV9mOFZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHQxDc91 wV/a9znd5/BaeRL4+5bx8G9YvpAaIFOxApeYPtk89hpND9ax2v3u47KGTm/pvcMB WA/hlMGBmfS1+pAMT9b5VM8p9z+D03/mvzF387TlfC2i4TRRYaGL6TlULouhzcfz ijDYnXGFR5dpMdlvYhJS7T2Xz+rVzd0Y/IRNn1sxoJDskMHwAiBtnWJM6ce5zNrR 22Ysn6KQEN/5psz34m7d8ff3GmVeF9Dc0EuS5ZYh6u9WUXnwe4DmOBBr9Nt/MQrP Zb3i7R5NPXorFWPLx5Vx1qQpDydhMHWh7c37bPFRo8k+UbGXwriMBNsJ/laAPqTP wFfEiyF30O1wrQ== -----END CERTIFICATE-----Generated at Fri Sep 4 22:58:22 2026 by rpki-client