$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: dUkH9sUAQt5/p5LEAniYvrRvozo8y9kE9PgLBvZSwjw= Subject key identifier: 82:CD:5B:BF:3B:5E:49:AC:B5:10:72:DD:FE:17:AD:2E:21:67:79:E8 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 01A06E39815239C2B34F1E5D0F3D947C624B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 1983 Signing time: Fri 04 Sep 2026 21:00:57 +0000 Manifest this update: Fri 04 Sep 2026 21:00:57 +0000 Manifest next update: Sat 05 Sep 2026 21:00:57 +0000 Files and hashes: 1: DUa5gfrd1mbJghmCA9wsPUgatiA.roa (hash: vgkaB+FL8lKIjouXupzJZRb3iZtU+i3kKGIirTBXniA=) 2: IoSQ968prEWE2iPAfiHq62Q9HRQ.roa (hash: sMFfoE8ew6Os6X7T5w3iP4CHenQCaCmWxqa3HE4kDyg=) 3: Jz8RZAWrUimyuGnjG5ub7oNokXU.roa (hash: IeObP/asysAN8PfUm4Hn659vFyCN9hWBT1PSEjvx9O8=) 4: Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa (hash: NqeN3nGFqChISvovOPomv7J85KVugMZmXFAJ2wHhcOc=) 5: R2uv8D1AC8qkVVlzoluUFlx0Uzc.roa (hash: Px0hZ7oJHqm6VJaRC8v/ew/nIaAHwORSGtXPvMgDntg=) 6: RcBVtc8qZ-WY09LgrXE9UddKRjU.roa (hash: PrGLDOIIW6h+3jbP4QXwCv6loJxjMEdM94B7tYzfRzI=) 7: SHESg-pXJr_Het0W-3cbbUvLLUk.roa (hash: eBtq6k5xafILrBSAzCCl8DxL+vNsikVlShGU83ALNOQ=) 8: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: IIbonBh3XnmQaBLKM9Ndb0Idoo+lb2NEqvksVkzcSCU=) 9: Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa (hash: YYmhifcK+2gNYjzHbIMtaIo+1gijW4PRQWGsmCHjKJg=) 10: aUcHGsfbW0LISPIyDevqEjn1Mp8.roa (hash: fbCvEiA8MdH3odLJSEwrCK+swIxRtwa+tYa7l/mkrVw=) 11: biH_EEWeOJOtLOQq6iGC0yelYn0.roa (hash: P54s2GoQrkvwJ9KXymJfJ8rzco9Uv1wsEklV2MlObyE=) 12: gAbatwVqafpDL9WTtIX0TlfDD98.roa (hash: JDzbm14+9mpQN3vnbFMcnevA6T8g7/UNXI8LqyzblhQ=) 13: psnLTq9oj0zoEtX755KpVPy0ws8.roa (hash: 8tn9lCYFdmG1BOJcqSY0wLhBU8frfgy5f/M7MDD6IgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 20:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6e:39:81:52:39:c2:b3:4f:1e:5d:0f:3d:94:7c:62:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Sep 4 21:00:57 2026 GMT Not After : Sep 5 21:00:57 2026 GMT Subject: CN=82cd5bbf3b5e49acb51072ddfe17ad2e216779e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:20:c0:51:c1:28:2e:26:27:33:49:e1:38:d5: 36:1e:a9:1d:5a:74:84:51:3c:d4:26:40:56:62:ce: 29:38:82:fd:bc:0a:c6:5e:e7:1b:2c:d4:32:39:cc: a3:f7:75:bf:f4:cd:30:52:8c:60:dc:6f:ac:74:73: 0d:a9:f6:29:9a:8d:b6:2c:60:de:5d:e3:47:95:8d: 45:5e:a5:71:df:0d:9a:04:0b:c9:67:a1:fe:32:e1: 1b:6b:88:cc:91:fd:74:53:b0:92:03:fc:9e:8a:89: 48:eb:73:24:3e:f1:c3:1b:bd:3d:5a:c2:8a:e8:c3: 9d:77:cb:17:4e:32:76:2f:2a:1e:e6:30:ae:e5:86: 8d:35:6f:29:00:ca:92:b7:b4:0f:f7:6b:6f:59:75: 66:ac:66:58:97:e5:13:e5:a5:b0:52:61:db:5b:f9: 54:5f:f3:25:0f:40:5e:38:77:4a:29:43:f1:7b:c5: 80:49:de:42:55:88:4b:83:03:cb:b3:98:9c:c5:82: 93:ca:5c:7c:a8:6e:80:9f:a1:94:b7:4e:1b:1f:2b: 22:f1:ef:06:43:6f:35:ff:bf:9f:75:4b:9a:87:08: c8:bd:26:e9:8e:ff:d6:ed:81:8c:3d:be:14:74:03: eb:19:80:af:8a:08:8a:f8:95:f9:ce:fd:70:9a:2f: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CD:5B:BF:3B:5E:49:AC:B5:10:72:DD:FE:17:AD:2E:21:67:79:E8 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2e:00:93:a7:e5:16:6d:0a:9c:1d:bf:ad:9b:10:91:c5:7c: 4d:15:9e:5f:64:c8:98:7e:40:47:7a:97:c0:de:a3:18:44:cd: f4:47:d8:39:37:2c:1d:4f:05:8c:e5:b1:41:fa:58:6a:07:61: 71:84:52:f7:81:fd:df:48:f5:3d:0f:4b:d8:6a:93:77:7e:e6: 09:23:2b:25:16:44:42:8d:cd:51:09:6e:6b:5f:06:bc:89:a1: bb:16:76:6a:9f:15:d4:06:9c:1b:65:7c:5b:ef:26:66:ef:85: 53:60:9f:51:89:5e:d4:e9:b9:93:5e:89:28:9e:8c:4e:2e:55: dd:e4:24:12:af:68:d1:b1:fc:58:c5:73:f6:38:2e:f1:fb:4b: ca:ae:eb:d9:79:7a:2d:66:c7:9e:d4:58:29:df:c4:42:79:7d: 9e:72:7c:eb:be:4f:8c:ee:65:31:0f:25:b8:69:9c:0b:c5:a6: ac:ef:4d:0c:c1:b4:08:f5:11:97:ff:fc:97:e8:6b:6b:b2:2c: 77:6b:58:56:b6:6f:bb:4e:8a:78:de:fc:d0:40:df:09:0f:42: 21:29:9f:78:0b:69:61:44:c2:07:6e:84:37:a6:30:91:93:27: cf:e6:7d:d1:ef:0f:5b:9f:2d:a5:11:83:bb:70:1d:d6:3a:11: 4e:78:4c:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBuOYFSOcKzTx5dDz2UfGJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwOTA0MjEwMDU3WhcNMjYwOTA1MjEwMDU3WjAzMTEwLwYDVQQD Eyg4MmNkNWJiZjNiNWU0OWFjYjUxMDcyZGRmZTE3YWQyZTIxNjc3OWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSDAUcEoLiYnM0nhONU2HqkdWnSE UTzUJkBWYs4pOIL9vArGXucbLNQyOcyj93W/9M0wUoxg3G+sdHMNqfYpmo22LGDe XeNHlY1FXqVx3w2aBAvJZ6H+MuEba4jMkf10U7CSA/yeiolI63MkPvHDG709WsKK 6MOdd8sXTjJ2Lyoe5jCu5YaNNW8pAMqSt7QP92tvWXVmrGZYl+UT5aWwUmHbW/lU X/MlD0BeOHdKKUPxe8WASd5CVYhLgwPLs5icxYKTylx8qG6An6GUt04bHysi8e8G Q281/7+fdUuahwjIvSbpjv/W7YGMPb4UdAPrGYCvigiK+JX5zv1wmi9/NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILNW787XkmstRBy3f4XrS4hZ3noMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiy4Ak6fl Fm0KnB2/rZsQkcV8TRWeX2TImH5AR3qXwN6jGETN9EfYOTcsHU8FjOWxQfpYagdh cYRS94H930j1PQ9L2GqTd37mCSMrJRZEQo3NUQlua18GvImhuxZ2ap8V1AacG2V8 W+8mZu+FU2CfUYle1Om5k16JKJ6MTi5V3eQkEq9o0bH8WMVz9jgu8ftLyq7r2Xl6 LWbHntRYKd/EQnl9nnJ8675PjO5lMQ8luGmcC8WmrO9NDMG0CPURl//8l+hra7Is d2tYVrZvu06KeN780EDfCQ9CISmfeAtpYUTCB26EN6YwkZMnz+Z90e8PW58tpRGD u3Ad1joRTnhMeQ== -----END CERTIFICATE-----Generated at Sat Sep 5 04:34:05 2026 by rpki-client