$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: 3RpTq+n4T5+NVouAtCy6EeVwAugJATsGv+mCf/USP1Y= Subject key identifier: DB:3F:2D:5F:98:DC:DB:E7:3B:66:C7:A8:EC:98:74:52:6A:DF:1D:14 Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 01A03F3C5076247AF2BD10B6293C5044B9C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 12A5 Signing time: Wed 26 Aug 2026 18:01:52 +0000 Manifest this update: Wed 26 Aug 2026 18:01:52 +0000 Manifest next update: Thu 27 Aug 2026 18:01:52 +0000 Files and hashes: 1: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (hash: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=) 2: GNlA9Djc01_DIxMgMXZBVVZA1yU.roa (hash: 7/jOmr8/wXHfFoWsgICU+xbOKLK7NXJAz5aYH9GIqUg=) 3: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: CzrKIEJKi++2By8RS9IeR9d93oAI7sh7HzZVOVxTXmg=) 4: T6tjope32KekAaANH2cDVM3Bd9k.roa (hash: 9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=) 5: TdqSn5WT6bBIWHwKcBQStfLEQ8c.roa (hash: TGw0y4tzt3XMgXJsUXMt46Gd2692xH2itYwdSwfZDS4=) 6: UikTrUC-2DsDHw5Izq7A013vsK4.roa (hash: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=) 7: bxYbt9Cn4R10yajjbMPCKKg_YHc.roa (hash: 8byOzQfwF/KOVbj8pNAWquwbx3xGB2NYpi6Uf3icLsA=) 8: hZiFcW7h5F5XfcXkHDMH450e4sg.roa (hash: D2HtChe92Pq7COg3X4YoKzG61XVo1IcROxs8V7eIHbE=) 9: k-eSrqeXL71w-nhYF8XhonC5sgE.roa (hash: pMZO0gbnwiTypIUzIs1wrF7zpRP+hjOJxinJEWPhOb8=) 10: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (hash: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=) 11: rnlQK5dhYROPwVOz0gIHy2hThyA.roa (hash: ePpSMaFTViP+SRbpfZ7RDlUyIWzyjKKxE4TEHxPptd8=) 12: s0LJxcrA6NEOVotU612Fnf2S5ek.roa (hash: I+fPBNeq55OXeCUKgKO9o96f3LbnL4TA94Ayj0fCu0c=) 13: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (hash: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk=) 14: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (hash: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs=) 15: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (hash: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI=) 16: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (hash: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 18:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:3f:3c:50:76:24:7a:f2:bd:10:b6:29:3c:50:44:b9:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Aug 26 18:01:52 2026 GMT Not After : Aug 27 18:01:52 2026 GMT Subject: CN=db3f2d5f98dcdbe73b66c7a8ec9874526adf1d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6c:06:ae:93:64:df:96:6d:25:72:77:df:9a: 21:67:a5:88:09:da:8b:f0:8b:ab:db:60:2c:4d:20: da:30:d3:b7:5d:25:d4:ca:71:cb:11:86:a2:33:ee: 81:02:f2:44:65:2b:c3:9b:be:e4:d0:65:90:75:d6: 63:08:60:39:d9:e9:8c:bd:9e:23:06:94:9a:b6:eb: fe:f3:51:78:da:b2:37:4a:cd:b2:31:21:45:bc:a2: cd:7e:b9:00:cc:4f:de:6b:a4:95:49:f3:4e:5b:ae: 61:31:27:39:ba:38:fc:cc:e1:86:d6:56:4b:80:aa: 36:94:e9:56:65:b6:ae:49:d3:db:0b:2b:54:87:44: 1d:95:d9:89:79:bf:aa:73:73:94:50:e6:a3:e5:9f: 9c:20:9b:a6:60:13:1c:e9:9e:41:8d:97:a7:af:e5: 62:dd:99:4d:23:2a:13:c3:76:d7:3c:1f:9f:6d:75: d0:c6:d0:5d:0d:3c:f3:49:54:cb:79:76:cb:ce:fd: 6f:87:87:6b:eb:ac:da:c1:64:d7:11:66:76:c8:a8: 8d:c8:09:59:bc:8a:a9:ee:31:72:38:8f:b5:c2:17: 8f:3a:de:ab:73:38:4d:fc:80:53:36:16:0c:ba:75: 41:fc:7d:3e:af:0e:e5:cb:db:25:cb:68:dd:2e:ca: 03:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3F:2D:5F:98:DC:DB:E7:3B:66:C7:A8:EC:98:74:52:6A:DF:1D:14 X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:f7:47:a7:43:1b:5a:c0:61:c7:b2:e7:a8:94:45:1f:90:42: 31:7c:63:57:92:23:a9:33:a6:71:22:0e:49:80:2f:db:a0:52: 57:c2:b6:91:16:96:73:24:fa:06:f9:10:8e:ad:8c:c2:72:b8: e9:70:af:99:80:3f:35:08:06:24:d4:7b:72:95:9e:2e:71:ed: 0f:6f:fd:c8:2d:34:7c:1a:80:e2:a8:ea:0f:ff:a0:91:2f:22: 60:74:a9:11:e6:58:a5:3b:45:ff:35:6b:bc:c7:66:0f:82:4a: df:cf:81:75:e3:34:35:61:9e:a9:33:ac:85:0c:18:4e:36:8d: d7:f1:48:a8:88:11:97:6a:da:05:c1:b2:05:1a:95:95:d8:ae: fa:7b:eb:b2:6b:07:74:89:72:8f:d0:ac:05:96:6c:d0:9b:1d: 58:6e:a5:8e:15:f2:ca:6a:e6:d8:ed:5b:5a:15:d7:5f:5c:f4: ff:9d:5b:3c:24:b4:15:e8:43:78:a7:2d:4f:60:4f:13:50:27: 7a:34:39:ae:52:91:69:cb:43:a5:3a:01:f4:43:f6:c6:9b:b0: b2:c9:58:ba:cf:f0:65:14:2e:fb:d0:27:5e:e6:27:eb:76:e3: 36:20:34:60:2e:14:dc:70:41:75:e4:ec:b4:33:9b:f3:d1:dc: eb:37:e6:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaA/PFB2JHryvRC2KTxQRLnCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwODI2MTgwMTUyWhcNMjYwODI3MTgwMTUyWjAzMTEwLwYDVQQD EyhkYjNmMmQ1Zjk4ZGNkYmU3M2I2NmM3YThlYzk4NzQ1MjZhZGYxZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGwGrpNk35ZtJXJ335ohZ6WICdqL 8Iur22AsTSDaMNO3XSXUynHLEYaiM+6BAvJEZSvDm77k0GWQddZjCGA52emMvZ4j BpSatuv+81F42rI3Ss2yMSFFvKLNfrkAzE/ea6SVSfNOW65hMSc5ujj8zOGG1lZL gKo2lOlWZbauSdPbCytUh0QdldmJeb+qc3OUUOaj5Z+cIJumYBMc6Z5BjZenr+Vi 3ZlNIyoTw3bXPB+fbXXQxtBdDTzzSVTLeXbLzv1vh4dr66zawWTXEWZ2yKiNyAlZ vIqp7jFyOI+1whePOt6rczhN/IBTNhYMunVB/H0+rw7ly9sly2jdLsoDvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNs/LV+Y3NvnO2bHqOyYdFJq3x0UMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfdHp0Mb WsBhx7LnqJRFH5BCMXxjV5IjqTOmcSIOSYAv26BSV8K2kRaWcyT6BvkQjq2MwnK4 6XCvmYA/NQgGJNR7cpWeLnHtD2/9yC00fBqA4qjqD/+gkS8iYHSpEeZYpTtF/zVr vMdmD4JK38+BdeM0NWGeqTOshQwYTjaN1/FIqIgRl2raBcGyBRqVldiu+nvrsmsH dIlyj9CsBZZs0JsdWG6ljhXyymrm2O1bWhXXX1z0/51bPCS0FehDeKctT2BPE1An ejQ5rlKRactDpToB9EP2xpuwsslYus/wZRQu+9AnXuYn63bjNiA0YC4U3HBBdeTs tDOb89Hc6zfmrA== -----END CERTIFICATE-----Generated at Thu Aug 27 04:54:15 2026 by rpki-client