$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: OXisyPFJFAc3ueYs0TO8L4NiUMmvlryO5lEKd/C/Zc0= Subject key identifier: 0C:E1:2B:03:1E:D8:86:3D:AB:66:9F:89:9A:18:7E:7A:FE:1A:4B:88 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 01A15F9F18DC80FE7F0ECA87A9BF9B3927B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 1A01 Signing time: Wed 21 Oct 2026 18:00:24 +0000 Manifest this update: Wed 21 Oct 2026 18:00:24 +0000 Manifest next update: Thu 22 Oct 2026 18:00:24 +0000 Files and hashes: 1: 3FT0Q8HYAJshK2YTHraizTTtl68.roa (hash: pANleIvpMGxlEA0HNwGBfCJZkP0QnPfNivkJewRQ0Wo=) 2: 47sWOPTHnZb9BF-ya3p9tYZmQl0.roa (hash: RBzAZuMSt44/uQERR1k3fKGneZwh+1kpWY7wx6/NCk0=) 3: DUa5gfrd1mbJghmCA9wsPUgatiA.roa (hash: vgkaB+FL8lKIjouXupzJZRb3iZtU+i3kKGIirTBXniA=) 4: IoSQ968prEWE2iPAfiHq62Q9HRQ.roa (hash: sMFfoE8ew6Os6X7T5w3iP4CHenQCaCmWxqa3HE4kDyg=) 5: Jz8RZAWrUimyuGnjG5ub7oNokXU.roa (hash: IeObP/asysAN8PfUm4Hn659vFyCN9hWBT1PSEjvx9O8=) 6: Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa (hash: NqeN3nGFqChISvovOPomv7J85KVugMZmXFAJ2wHhcOc=) 7: R2uv8D1AC8qkVVlzoluUFlx0Uzc.roa (hash: Px0hZ7oJHqm6VJaRC8v/ew/nIaAHwORSGtXPvMgDntg=) 8: SHESg-pXJr_Het0W-3cbbUvLLUk.roa (hash: eBtq6k5xafILrBSAzCCl8DxL+vNsikVlShGU83ALNOQ=) 9: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: mQCnyaGWQE31L0ptoD6SNt4DTp0YPzobu9zl9VA1Oao=) 10: Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa (hash: YYmhifcK+2gNYjzHbIMtaIo+1gijW4PRQWGsmCHjKJg=) 11: aUcHGsfbW0LISPIyDevqEjn1Mp8.roa (hash: fbCvEiA8MdH3odLJSEwrCK+swIxRtwa+tYa7l/mkrVw=) 12: biH_EEWeOJOtLOQq6iGC0yelYn0.roa (hash: P54s2GoQrkvwJ9KXymJfJ8rzco9Uv1wsEklV2MlObyE=) 13: gAbatwVqafpDL9WTtIX0TlfDD98.roa (hash: JDzbm14+9mpQN3vnbFMcnevA6T8g7/UNXI8LqyzblhQ=) 14: psnLTq9oj0zoEtX755KpVPy0ws8.roa (hash: 8tn9lCYFdmG1BOJcqSY0wLhBU8frfgy5f/M7MDD6IgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:5f:9f:18:dc:80:fe:7f:0e:ca:87:a9:bf:9b:39:27:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Oct 21 18:00:24 2026 GMT Not After : Oct 22 18:00:24 2026 GMT Subject: CN=0ce12b031ed8863dab669f899a187e7afe1a4b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:30:79:a9:e5:67:3f:b2:9d:f2:40:a6:a8:bb: 00:44:bc:bb:f5:c0:25:75:61:60:a6:17:5f:48:85: fd:b4:e4:7e:e4:2f:7b:c9:8f:49:5f:ff:d8:77:23: 73:72:b5:39:e5:74:f9:48:89:27:54:ae:eb:45:23: 2b:76:75:8d:ef:62:03:45:f8:04:cc:d5:ef:a0:05: 64:33:97:db:82:65:73:36:91:37:75:32:2c:b2:5c: dc:86:d5:67:6d:e4:d4:c1:4b:c7:dc:c3:73:14:bf: 40:d4:1b:18:b0:2c:3d:fb:c8:67:e5:9e:fe:87:7a: a8:ff:58:76:97:dc:72:84:7b:f7:9a:c0:35:81:c3: 9f:ce:0a:d9:18:2e:ac:de:61:fa:eb:f0:e6:5a:08: a8:9d:9d:92:7b:70:62:51:aa:68:fd:d0:f6:f7:c1: 87:5c:9a:e9:41:eb:3b:40:ab:10:8a:c4:51:5f:22: 09:20:37:a2:d7:da:44:3e:e9:46:60:84:45:5b:8b: 75:9b:04:86:65:a2:d6:62:17:f2:09:32:31:73:22: e9:12:96:17:36:33:d5:7d:19:ac:7b:86:3a:dd:9f: 5f:19:d0:2a:ff:6c:7f:a0:6e:8a:05:c2:84:6a:25: a4:eb:c4:ac:a1:6d:51:7b:79:65:aa:f8:05:34:25: c3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E1:2B:03:1E:D8:86:3D:AB:66:9F:89:9A:18:7E:7A:FE:1A:4B:88 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:de:4d:b0:6c:69:c2:fd:b4:91:5f:9c:e5:a9:e3:09:2c:ae: 20:55:87:83:22:bc:fe:a8:f0:b8:f9:fc:18:5a:3b:59:40:2a: 73:c9:5a:19:de:d0:5a:11:33:89:c5:01:3c:7b:1e:cc:a7:61: d6:3b:8a:10:b9:6a:eb:b2:67:e5:1a:8c:c1:ce:5f:e9:85:8c: e2:5f:6b:b7:32:0b:70:e5:f7:fe:52:43:1d:bd:9a:61:98:80: 1b:a4:c0:e6:11:ad:96:68:68:1c:fc:3d:6f:f8:62:37:a8:88: 7d:9d:ca:9b:4c:be:5c:ce:71:48:be:6d:16:ff:5e:de:91:30: a4:9a:97:4a:4b:2e:ac:f5:fb:64:e0:20:9d:09:18:52:4c:34: 06:a1:c5:cf:ed:f9:ad:31:61:47:de:33:30:10:9b:d3:59:e6: c6:41:d7:d8:4f:0d:e4:86:9b:34:b7:ea:ee:7a:1b:e0:c0:da: 16:c9:d1:97:54:9c:44:a4:0e:2c:47:bc:64:89:9e:04:e8:62: 2b:10:51:13:e7:73:69:a5:7b:dc:df:80:b0:ef:02:d6:3f:e2: 71:fc:c7:fc:f2:85:4d:e3:cb:49:25:12:14:42:02:84:85:f5: a8:ab:b2:0c:c6:11:1d:ca:66:e9:d2:ca:d9:74:9c:3e:89:18: 3a:74:4c:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFfnxjcgP5/DsqHqb+bOSe5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYxMDIxMTgwMDI0WhcNMjYxMDIyMTgwMDI0WjAzMTEwLwYDVQQD EygwY2UxMmIwMzFlZDg4NjNkYWI2NjlmODk5YTE4N2U3YWZlMWE0Yjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjB5qeVnP7Kd8kCmqLsARLy79cAl dWFgphdfSIX9tOR+5C97yY9JX//YdyNzcrU55XT5SIknVK7rRSMrdnWN72IDRfgE zNXvoAVkM5fbgmVzNpE3dTIsslzchtVnbeTUwUvH3MNzFL9A1BsYsCw9+8hn5Z7+ h3qo/1h2l9xyhHv3msA1gcOfzgrZGC6s3mH66/DmWgionZ2Se3BiUapo/dD298GH XJrpQes7QKsQisRRXyIJIDei19pEPulGYIRFW4t1mwSGZaLWYhfyCTIxcyLpEpYX NjPVfRmse4Y63Z9fGdAq/2x/oG6KBcKEaiWk68SsoW1Re3llqvgFNCXDaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzhKwMe2IY9q2afiZoYfnr+GkuIMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ95NsGxp wv20kV+c5anjCSyuIFWHgyK8/qjwuPn8GFo7WUAqc8laGd7QWhEzicUBPHsezKdh 1juKELlq67Jn5RqMwc5f6YWM4l9rtzILcOX3/lJDHb2aYZiAG6TA5hGtlmhoHPw9 b/hiN6iIfZ3Km0y+XM5xSL5tFv9e3pEwpJqXSksurPX7ZOAgnQkYUkw0BqHFz+35 rTFhR94zMBCb01nmxkHX2E8N5IabNLfq7nob4MDaFsnRl1ScRKQOLEe8ZImeBOhi KxBRE+dzaaV73N+AsO8C1j/icfzH/PKFTePLSSUSFEIChIX1qKuyDMYRHcpm6dLK 2XScPokYOnRMYw== -----END CERTIFICATE-----Generated at Thu Oct 22 03:18:06 2026 by rpki-client