$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json) Hash identifier: Lzq5Qkq0Dgpp7k43XUGlCdFbpOA93848QT2gZF99hOE= Subject key identifier: BA:FE:5B:4C:FF:24:8B:A3:97:91:9B:38:D2:9A:9B:11:AD:3C:FF:78 Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 01A0DE05F0B9EA76E924A216440057139995 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft Manifest number: 1A8F Signing time: Sat 26 Sep 2026 14:02:06 +0000 Manifest this update: Sat 26 Sep 2026 14:02:06 +0000 Manifest next update: Sun 27 Sep 2026 14:02:06 +0000 Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=) 2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=) 3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=) 4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=) 5: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=) 6: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=) 7: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=) 8: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: UEWYKx9CLPaNePUO0V6oDPKEdu7q6RohJSjVVgnAh6s=) 9: sUbsaOI44Bi0X3YK1epsVJEDUec.roa (hash: rYaOkD3dBPrS2T2laRzCj+4LsYQ8WlURz0+sfmO0/n0=) 10: wa9zMyfDDEuwe9jHEEf5XR0rY1U.roa (hash: w6cKFExTNVukVfdOoaJCYRMUgY7AI2mb+j8X2JfaAr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:de:05:f0:b9:ea:76:e9:24:a2:16:44:00:57:13:99:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Sep 26 14:02:06 2026 GMT Not After : Sep 27 14:02:06 2026 GMT Subject: CN=bafe5b4cff248ba397919b38d29a9b11ad3cff78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:49:d8:de:1a:8e:9b:64:4a:5a:fc:d4:90:6f: fc:fa:91:68:35:08:27:25:7b:b2:71:ab:15:0f:b9: e1:e4:aa:06:20:5f:0a:5f:c0:c7:54:2b:84:29:4f: 27:09:dd:e7:4e:26:cb:21:c1:61:03:32:22:ea:54: 35:65:27:79:83:f5:36:35:49:98:b6:59:61:9a:c2: f1:93:19:f4:46:94:97:72:06:7b:ff:5a:dc:ba:97: 20:f2:f9:17:b0:83:44:1e:98:ed:ea:38:9e:7c:8a: 57:9e:d4:00:91:da:2a:19:65:16:a5:10:ce:0f:41: ce:f6:4a:43:e5:ad:20:df:59:ea:12:7b:b5:c1:e2: fd:e2:7d:77:f8:e1:16:10:76:b8:51:0f:36:7c:15: eb:d3:6e:28:46:53:da:dc:5a:47:b7:c2:4d:35:c4: 6b:2a:84:0d:6d:81:82:c1:da:9e:ec:e1:61:24:2a: b9:e0:c8:5b:1f:f7:cf:84:a2:c0:12:73:06:e7:37: cb:c4:6c:46:c3:15:96:ed:47:ba:3c:3f:15:fb:f2: 30:c2:7f:ff:b5:71:42:cc:e4:ae:60:e3:d1:1d:1a: 2f:d5:e7:29:2d:69:04:6b:01:46:24:07:92:60:8b: 7a:fc:16:34:2f:24:f1:06:f0:2f:84:fb:e0:5f:c0: cf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FE:5B:4C:FF:24:8B:A3:97:91:9B:38:D2:9A:9B:11:AD:3C:FF:78 X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:09:16:66:1e:97:7c:de:1e:a1:2b:38:ed:3a:78:e7:7c:25: 71:b8:93:58:30:b3:d4:d8:40:51:f1:19:e9:ac:de:91:8a:91: e2:c5:aa:08:a9:bd:98:cc:de:bc:0b:8d:cd:01:b3:e7:a0:9b: 21:19:14:5d:db:a9:dc:be:46:6d:82:ba:65:1e:8d:00:b9:0a: 7d:0a:69:fd:59:05:e8:ea:19:d8:9f:6b:a5:71:17:12:7f:78: 6a:d7:d9:0f:59:49:64:3a:fe:04:69:2d:c8:37:9e:c1:98:7b: 33:20:f0:f0:79:ce:50:63:fc:e1:9f:fb:dc:5d:9e:6c:ed:39: 50:90:6b:03:94:c9:34:c0:de:4c:43:82:30:e9:3d:90:06:b9: 1e:12:af:a9:ce:e6:54:fe:99:d4:5e:04:7c:b9:85:0e:51:0e: 02:36:58:6d:8d:f1:7d:6a:f2:bf:e6:8d:28:a0:ca:b1:bb:ce: d2:a9:55:04:f6:45:30:bd:42:e8:8c:88:11:1d:4f:00:5b:82: 0d:15:47:75:34:8b:87:27:6b:50:00:2c:8a:9d:0d:62:6e:5a: 4b:7d:c5:f5:c7:0f:07:7f:73:9c:d2:76:f6:2f:d8:bc:14:ca: e8:e0:a4:3a:a1:2a:f6:30:e9:2c:65:7c:0e:45:33:f0:8c:15: fd:24:d5:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDeBfC56nbpJKIWRABXE5mVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjYwOTI2MTQwMjA2WhcNMjYwOTI3MTQwMjA2WjAzMTEwLwYDVQQD EyhiYWZlNWI0Y2ZmMjQ4YmEzOTc5MTliMzhkMjlhOWIxMWFkM2NmZjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUnY3hqOm2RKWvzUkG/8+pFoNQgn JXuycasVD7nh5KoGIF8KX8DHVCuEKU8nCd3nTibLIcFhAzIi6lQ1ZSd5g/U2NUmY tllhmsLxkxn0RpSXcgZ7/1rcupcg8vkXsINEHpjt6jiefIpXntQAkdoqGWUWpRDO D0HO9kpD5a0g31nqEnu1weL94n13+OEWEHa4UQ82fBXr024oRlPa3FpHt8JNNcRr KoQNbYGCwdqe7OFhJCq54MhbH/fPhKLAEnMG5zfLxGxGwxWW7Ue6PD8V+/Iwwn// tXFCzOSuYOPRHRov1ecpLWkEawFGJAeSYIt6/BY0LyTxBvAvhPvgX8DPcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLr+W0z/JIujl5GbONKamxGtPP94MB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgkWZh6X fN4eoSs47Tp453wlcbiTWDCz1NhAUfEZ6azekYqR4sWqCKm9mMzevAuNzQGz56Cb IRkUXdup3L5GbYK6ZR6NALkKfQpp/VkF6OoZ2J9rpXEXEn94atfZD1lJZDr+BGkt yDeewZh7MyDw8HnOUGP84Z/73F2ebO05UJBrA5TJNMDeTEOCMOk9kAa5HhKvqc7m VP6Z1F4EfLmFDlEOAjZYbY3xfWryv+aNKKDKsbvO0qlVBPZFML1C6IyIER1PAFuC DRVHdTSLhydrUAAsip0NYm5aS33F9ccPB39znNJ29i/YvBTK6OCkOqEq9jDpLGV8 DkUz8IwV/STVtQ== -----END CERTIFICATE-----Generated at Sat Sep 26 16:40:25 2026 by rpki-client