$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json) Hash identifier: daBf95iBHVscnYaMVyxLTv75RsWn74KZMU/A0tXW2Ac= Subject key identifier: 9C:2E:32:01:19:B8:D1:6E:71:87:E0:79:A6:4E:08:A7:92:A7:F1:14 Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 01A12730DB11B0F98ED52CFE649B94E24BD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft Manifest number: 1AB5 Signing time: Sat 10 Oct 2026 19:01:15 +0000 Manifest this update: Sat 10 Oct 2026 19:01:15 +0000 Manifest next update: Sun 11 Oct 2026 19:01:15 +0000 Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=) 2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=) 3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=) 4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=) 5: UssRL_azfcBW0-ZAXO28l_WRTQ8.roa (hash: Q1CPH56Bt7FCDBhQza5YAQW6lKSo+XxyyUkTKJFqTBQ=) 6: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=) 7: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=) 8: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=) 9: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: rHoWNIEsFWtkJT3IoT7Tj09xXDXq5hhupN+sD4shqoQ=) 10: wa9zMyfDDEuwe9jHEEf5XR0rY1U.roa (hash: w6cKFExTNVukVfdOoaJCYRMUgY7AI2mb+j8X2JfaAr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Oct 2026 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:27:30:db:11:b0:f9:8e:d5:2c:fe:64:9b:94:e2:4b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Oct 10 19:01:15 2026 GMT Not After : Oct 11 19:01:15 2026 GMT Subject: CN=9c2e320119b8d16e7187e079a64e08a792a7f114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d6:6d:82:1e:d5:df:69:5d:d7:b7:dd:27:18: 0c:bb:f4:5b:2b:da:9e:5f:0f:78:fb:22:e0:66:b9: b5:4a:dc:b1:4b:e6:58:20:58:59:99:c5:c6:81:ba: e2:aa:9b:8f:d9:90:5d:8a:a1:26:cb:29:57:23:91: 48:d0:42:c5:9b:c5:0c:43:3f:b5:85:53:5a:fd:80: f3:c4:87:d3:a3:f8:06:1c:7f:6b:b3:50:e2:e1:51: f6:cf:8b:f3:fa:e8:4b:0f:c1:13:ec:b1:18:13:42: 5a:f0:eb:3f:42:f2:4b:ce:a6:b3:f7:3a:4e:bc:02: a3:78:db:ea:80:82:11:4d:59:29:f1:6f:46:2b:96: c9:66:19:88:c2:e9:20:a2:1c:98:49:8f:5a:72:ec: 3e:13:b3:0a:61:f4:13:30:53:f5:70:f9:5d:90:f2: 7c:3f:90:81:14:6a:7f:09:21:2b:6d:ec:93:78:a4: a8:24:86:a5:45:c6:74:dc:d0:1c:9d:84:94:9e:8f: 6a:75:5c:1b:b5:f1:a2:1d:39:12:1b:d0:c6:b4:2b: d7:ca:c0:a3:15:ee:74:fe:80:d6:cc:31:53:f3:eb: c2:16:8d:3a:1c:00:b0:63:3e:df:91:d3:1f:4d:0b: be:26:6b:b3:ac:bb:fd:be:45:8b:81:fa:ef:d1:29: a6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2E:32:01:19:B8:D1:6E:71:87:E0:79:A6:4E:08:A7:92:A7:F1:14 X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:38:8b:c5:51:a9:b7:fa:4e:0f:81:29:dc:2c:74:8c:45:8d: a5:ce:2c:3c:b4:c7:d4:5f:5b:4e:f7:07:c0:31:4e:db:5c:04: 34:9b:54:0b:09:ea:c8:c3:52:5a:bc:45:3d:4a:71:fb:80:ba: d5:2c:c3:58:98:78:e6:f5:7a:1c:06:b9:6a:59:56:e1:3a:94: ab:96:b4:12:6d:a1:b8:a2:66:3b:e4:f0:ee:f0:c4:ba:1d:75: b8:ef:28:44:77:be:65:cd:38:dd:40:bc:b6:8b:f3:26:c0:53: 1d:e0:c2:70:12:09:2a:54:b0:a1:78:67:a4:56:4c:b3:e9:f4: df:2a:b8:e1:88:92:9f:33:7d:74:87:da:0d:cb:3f:8b:c2:f3: 1a:03:54:b6:54:62:d4:19:09:7e:f1:b1:4b:08:7d:97:8a:b2: ef:6e:4c:0c:ad:d7:9c:55:30:ef:ee:eb:f2:1e:5d:15:e9:50: f0:28:cc:f7:48:e2:23:95:d1:81:82:f7:56:81:63:5a:11:fc: 00:95:85:b3:43:8e:77:16:4b:67:62:8a:b2:eb:8d:ac:ee:da: ca:76:20:0f:ba:5f:af:84:9c:c6:d1:21:d6:9a:4f:c8:21:e0: e7:12:4b:47:82:11:4b:d8:66:f3:c4:4f:41:2f:d4:89:9e:53: 29:ca:68:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEnMNsRsPmO1Sz+ZJuU4kvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjYxMDEwMTkwMTE1WhcNMjYxMDExMTkwMTE1WjAzMTEwLwYDVQQD Eyg5YzJlMzIwMTE5YjhkMTZlNzE4N2UwNzlhNjRlMDhhNzkyYTdmMTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NZtgh7V32ld17fdJxgMu/RbK9qe Xw94+yLgZrm1StyxS+ZYIFhZmcXGgbriqpuP2ZBdiqEmyylXI5FI0ELFm8UMQz+1 hVNa/YDzxIfTo/gGHH9rs1Di4VH2z4vz+uhLD8ET7LEYE0Ja8Os/QvJLzqaz9zpO vAKjeNvqgIIRTVkp8W9GK5bJZhmIwukgohyYSY9acuw+E7MKYfQTMFP1cPldkPJ8 P5CBFGp/CSErbeyTeKSoJIalRcZ03NAcnYSUno9qdVwbtfGiHTkSG9DGtCvXysCj Fe50/oDWzDFT8+vCFo06HACwYz7fkdMfTQu+JmuzrLv9vkWLgfrv0SmmIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwuMgEZuNFucYfgeaZOCKeSp/EUMB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuziLxVGp t/pOD4Ep3Cx0jEWNpc4sPLTH1F9bTvcHwDFO21wENJtUCwnqyMNSWrxFPUpx+4C6 1SzDWJh45vV6HAa5allW4TqUq5a0Em2huKJmO+Tw7vDEuh11uO8oRHe+Zc043UC8 tovzJsBTHeDCcBIJKlSwoXhnpFZMs+n03yq44YiSnzN9dIfaDcs/i8LzGgNUtlRi 1BkJfvGxSwh9l4qy725MDK3XnFUw7+7r8h5dFelQ8CjM90jiI5XRgYL3VoFjWhH8 AJWFs0OOdxZLZ2KKsuuNrO7aynYgD7pfr4ScxtEh1ppPyCHg5xJLR4IRS9hm88RP QS/UiZ5TKcponw== -----END CERTIFICATE-----Generated at Sat Oct 10 23:19:35 2026 by rpki-client