$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json) Hash identifier: N+YLhM+hmRg7DngNkQw616gZI6AuePD8O4W/D67Z3Z0= Subject key identifier: 57:71:DC:DD:B1:85:44:7C:F6:5A:31:79:0C:8E:A6:FB:BE:82:89:1F Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 01A12CFC3E613E2778FE307D6FBB1892DD76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft Manifest number: 1AB8 Signing time: Sun 11 Oct 2026 22:01:30 +0000 Manifest this update: Sun 11 Oct 2026 22:01:30 +0000 Manifest next update: Mon 12 Oct 2026 22:01:30 +0000 Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=) 2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=) 3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=) 4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=) 5: UssRL_azfcBW0-ZAXO28l_WRTQ8.roa (hash: Q1CPH56Bt7FCDBhQza5YAQW6lKSo+XxyyUkTKJFqTBQ=) 6: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=) 7: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=) 8: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=) 9: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: 2k5Jd85uu4oTNo6QZEEAhPhLXkKBi8dibcBTKL7uiLc=) 10: wa9zMyfDDEuwe9jHEEf5XR0rY1U.roa (hash: w6cKFExTNVukVfdOoaJCYRMUgY7AI2mb+j8X2JfaAr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 22:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:2c:fc:3e:61:3e:27:78:fe:30:7d:6f:bb:18:92:dd:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Oct 11 22:01:30 2026 GMT Not After : Oct 12 22:01:30 2026 GMT Subject: CN=5771dcddb185447cf65a31790c8ea6fbbe82891f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:42:7c:84:5e:35:9f:6c:79:c0:b6:8e:78:42: 89:06:d9:ea:f2:20:28:fb:a8:6b:31:f0:e4:4f:d1: c2:6b:4a:61:2b:bd:a9:85:5a:cf:6a:7e:13:78:fa: fb:b5:c2:75:65:d9:b4:c8:6c:cd:d7:f8:c9:27:43: 6d:16:ef:e6:35:ff:8d:0b:4a:6e:62:b3:ba:9a:f5: e9:38:9f:6f:56:e6:5f:ce:2a:18:4e:3a:6c:be:16: fa:d2:bd:70:70:5a:86:cf:08:b7:99:c5:05:50:5b: f5:c9:ac:c0:f3:32:35:f4:79:79:67:41:be:0e:1c: 9b:8e:79:e0:cd:02:6c:e2:e4:7d:8b:66:30:b4:98: 07:da:44:b8:03:e2:13:71:0b:d2:ac:e6:72:0e:41: a0:81:b3:5f:50:04:28:91:75:e7:a9:3e:db:de:3e: 69:b3:cf:39:ac:2f:5a:42:64:63:96:a4:7e:d3:38: c5:3e:5b:ac:80:1b:52:6a:fd:20:52:cb:c0:5b:f6: 2e:43:90:91:02:b8:60:c4:f5:4f:3d:55:22:08:50: 61:68:a3:33:76:a7:89:77:96:cb:15:0e:f6:e7:e4: f8:e8:3a:75:4d:3a:f7:59:9b:1f:28:75:0a:8f:32: 77:9f:96:3b:b6:20:2d:4e:5e:c9:3b:70:e2:35:c1: f5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:71:DC:DD:B1:85:44:7C:F6:5A:31:79:0C:8E:A6:FB:BE:82:89:1F X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:7c:69:22:13:d5:8d:89:65:21:0e:bc:d1:a0:f8:01:d9:36: 92:ca:03:0a:31:9e:d0:3f:b6:e0:96:af:13:cc:40:cc:94:a3: bd:6c:26:2a:2b:fb:31:6c:c3:4b:51:2c:dc:99:a7:ca:d8:e2: 27:87:96:7f:23:b2:a1:db:cf:2d:55:24:38:a0:17:20:34:69: f1:fb:52:fa:2c:45:32:2a:51:80:5d:8f:1b:45:2c:13:3d:fc: 5e:cc:75:4f:e5:6c:e4:fe:c9:75:32:77:15:41:70:4e:e3:33: 5e:cd:e3:70:42:f7:9d:82:da:b4:29:31:b4:ef:bc:18:3d:82: ac:ec:b7:3d:b4:fb:62:29:9b:ab:83:4b:9c:e4:27:24:57:09: 0e:fb:53:ba:21:6d:f9:da:b0:b1:e9:8b:50:ea:2b:cb:57:bd: 96:f7:3a:1d:15:05:5f:94:60:1e:91:fe:f2:4a:b4:97:d7:e6: 9f:79:8e:bf:45:1e:95:5d:97:b0:37:d1:c2:ca:4f:a5:67:a8: 8b:4f:7c:77:b0:d5:ae:2d:8c:01:ee:e4:7b:2e:90:f2:00:b3: b6:13:da:96:03:45:f5:22:59:b0:0a:7e:9d:67:85:28:1d:a8: 8b:7d:73:70:8f:77:4b:8e:29:a1:e0:12:f2:33:ca:7b:ee:b0: 4a:96:c7:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEs/D5hPid4/jB9b7sYkt12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjYxMDExMjIwMTMwWhcNMjYxMDEyMjIwMTMwWjAzMTEwLwYDVQQD Eyg1NzcxZGNkZGIxODU0NDdjZjY1YTMxNzkwYzhlYTZmYmJlODI4OTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EJ8hF41n2x5wLaOeEKJBtnq8iAo +6hrMfDkT9HCa0phK72phVrPan4TePr7tcJ1Zdm0yGzN1/jJJ0NtFu/mNf+NC0pu YrO6mvXpOJ9vVuZfzioYTjpsvhb60r1wcFqGzwi3mcUFUFv1yazA8zI19Hl5Z0G+ DhybjnngzQJs4uR9i2YwtJgH2kS4A+ITcQvSrOZyDkGggbNfUAQokXXnqT7b3j5p s885rC9aQmRjlqR+0zjFPlusgBtSav0gUsvAW/YuQ5CRArhgxPVPPVUiCFBhaKMz dqeJd5bLFQ725+T46Dp1TTr3WZsfKHUKjzJ3n5Y7tiAtTl7JO3DiNcH1tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdx3N2xhUR89loxeQyOpvu+gokfMB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3xpIhPV jYllIQ680aD4Adk2ksoDCjGe0D+24JavE8xAzJSjvWwmKiv7MWzDS1Es3Jmnytji J4eWfyOyodvPLVUkOKAXIDRp8ftS+ixFMipRgF2PG0UsEz38Xsx1T+Vs5P7JdTJ3 FUFwTuMzXs3jcEL3nYLatCkxtO+8GD2CrOy3PbT7Yimbq4NLnOQnJFcJDvtTuiFt +dqwsemLUOory1e9lvc6HRUFX5RgHpH+8kq0l9fmn3mOv0UelV2XsDfRwspPpWeo i098d7DVri2MAe7key6Q8gCzthPalgNF9SJZsAp+nWeFKB2oi31zcI93S44poeAS 8jPKe+6wSpbHjQ== -----END CERTIFICATE-----Generated at Mon Oct 12 02:35:53 2026 by rpki-client