$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: fgxI5il886EqjDVBWr1VheG0GmT14K2REtQJ508/XII= Subject key identifier: 7E:C0:98:D6:29:77:D7:93:5E:85:17:B8:75:5B:2D:17:22:67:77:6D Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 01A06800CC55AA03D3B505927F8F06CE53E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 17E1 Signing time: Thu 03 Sep 2026 16:01:17 +0000 Manifest this update: Thu 03 Sep 2026 16:01:17 +0000 Manifest next update: Fri 04 Sep 2026 16:01:17 +0000 Files and hashes: 1: 1kKPv2wUltItuWIjU1ilVcX9VLE.roa (hash: il+uT7sf8sbrAGYBj61G15BD0mwhGRvyVxYl0y6GFnU=) 2: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (hash: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE=) 3: 8eTvO2TZdJIMeT5I77o8e5hLDyI.roa (hash: RW0q4KTs9SZCv80GUyltUUK1ZfZgWc4IG8Rp/qHyA3g=) 4: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 5: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 6: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 7: JWwcCyO1rTwTxLjbz3l2SouJTAA.roa (hash: AgH3qdVNL3CHi6p+2Mst499KFQUzntafoYHZrzYZW8s=) 8: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 9: Lmglx6k3OhVfB6qXrSYWY-3n7wU.roa (hash: jOlTc86u7s0cDJRLkmCFCCAUXlp7wxNhr83b5DVvky8=) 10: WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa (hash: uW36/EhLhyw8heI0tUnFU6wiInPtS+CcO/PTS29AqYY=) 11: XjjwvZsrXx6sUtsiWwMw-1uwefI.roa (hash: RD/89w2/8ZIshxnP3ME483+xP0ONXiXxPqHiP1Ie+hY=) 12: bV3Qg5HtML1zUsJYAwV_qsAoITg.roa (hash: ZhHWbujHVFO1260mH7gJeRdvHPIcZ7THBcA3XZdsUfs=) 13: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 14: cOMhRxduLw18TIe2EJANKourNbc.roa (hash: vRamlKR5R5SmfC3d0sMnuMWhFKCo/1NfKoqnzL94OGM=) 15: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: 7HR46AcezKezU5URk1Skl5h6UpCejinKXndlpn8waTQ=) 16: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 17: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 18: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) 19: yhFaGf2_vHhBZgwwXE8xm1OTXQE.roa (hash: 3+krivSCZ6wgsfWjmVU3sW4pnSZcLq6UgbbbbMppVNI=) 20: zKma2lZxd28aMOIa5GKySj7K3F4.roa (hash: z2dVlW8SWBq0rqcswBgsfVdqo5mJ3Cgdk6gd4jQUscA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Sep 2026 13:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:68:00:cc:55:aa:03:d3:b5:05:92:7f:8f:06:ce:53:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Sep 3 16:01:17 2026 GMT Not After : Sep 4 16:01:17 2026 GMT Subject: CN=7ec098d62977d7935e8517b8755b2d172267776d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7c:1f:d3:01:c0:7c:fd:c5:55:40:16:a9:c4: f0:4e:29:ae:f0:74:74:cd:60:06:57:2a:d2:13:f7: ef:b7:91:8f:49:86:1d:e9:f8:93:c1:80:9a:a4:0b: da:cc:06:e5:5e:c4:6f:ca:ef:78:06:54:44:c4:93: e1:45:2a:35:a2:33:13:17:d3:35:20:39:3e:c6:71: 32:2e:ae:90:d8:89:3a:57:9e:5d:c9:76:bf:94:d5: b3:b9:4d:52:2e:89:47:bb:44:0d:e5:d6:90:a8:12: 40:39:26:5b:d6:48:39:d1:8b:76:f2:60:d3:46:6b: 68:37:39:31:28:33:98:42:4f:ce:40:f1:1f:b3:b4: 78:79:da:10:46:9e:21:87:59:e2:58:0b:ca:2a:31: 43:2a:6c:90:d7:a0:06:61:75:19:61:7c:1f:b5:30: 6e:86:50:ca:15:af:b2:c5:80:7f:55:f9:ee:02:ab: 18:86:1f:fd:13:c7:4f:0b:35:fd:72:28:51:d8:2d: 05:64:7a:fc:36:67:cd:82:d3:f5:56:ce:a3:90:39: e6:d0:4a:24:40:ed:95:24:70:d5:eb:ac:d3:91:b6: 91:e3:54:c2:1a:db:a0:11:4e:ac:a7:0a:28:fc:03: cf:bf:05:e5:e5:74:3b:42:40:ff:b4:f1:39:88:5c: b0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C0:98:D6:29:77:D7:93:5E:85:17:B8:75:5B:2D:17:22:67:77:6D X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:53:25:18:a1:b5:b5:f9:e1:a3:35:1f:3b:e8:c7:ff:48:86: 6c:b7:fb:94:cc:8e:6e:67:43:ae:8c:b1:15:c7:36:1f:87:b0: 13:4f:81:19:f9:97:54:bd:16:c6:b2:02:f4:9a:1b:6d:92:32: 4e:bc:41:2a:2d:fb:92:09:45:34:1d:87:6f:5f:0d:bd:1e:74: c5:df:08:7c:c8:d8:a0:ea:92:2e:5d:c2:23:47:a9:9e:c7:1e: 7d:35:03:4c:a8:ae:c6:9d:d9:59:41:ce:61:7e:f6:d1:f2:f9: 73:f0:bd:a5:46:cb:d4:09:c3:44:5b:c5:d6:56:81:5b:89:77: 06:a6:19:96:81:dc:43:57:d2:83:de:80:50:d7:73:ee:5c:9a: 73:ed:c0:a1:1d:ef:fe:8d:f4:24:37:39:ef:9a:04:e2:2e:0a: 35:81:41:82:28:bc:a7:5d:2d:58:23:30:61:51:35:c9:ed:08: eb:96:dd:92:9f:56:19:f6:07:02:38:71:14:1a:e8:0b:63:ec: ac:e4:f0:39:61:fc:46:64:d8:dc:11:66:32:8b:26:3f:fb:ce: 3c:29:02:05:0c:b4:49:31:ba:2a:87:ca:64:4f:4b:16:a7:7b: b8:ff:d8:b9:fe:25:ba:c8:1d:0b:f1:59:a5:d6:0d:80:14:a2: df:4a:48:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBoAMxVqgPTtQWSf48GzlPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwOTAzMTYwMTE3WhcNMjYwOTA0MTYwMTE3WjAzMTEwLwYDVQQD Eyg3ZWMwOThkNjI5NzdkNzkzNWU4NTE3Yjg3NTViMmQxNzIyNjc3NzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHwf0wHAfP3FVUAWqcTwTimu8HR0 zWAGVyrSE/fvt5GPSYYd6fiTwYCapAvazAblXsRvyu94BlRExJPhRSo1ojMTF9M1 IDk+xnEyLq6Q2Ik6V55dyXa/lNWzuU1SLolHu0QN5daQqBJAOSZb1kg50Yt28mDT RmtoNzkxKDOYQk/OQPEfs7R4edoQRp4hh1niWAvKKjFDKmyQ16AGYXUZYXwftTBu hlDKFa+yxYB/VfnuAqsYhh/9E8dPCzX9cihR2C0FZHr8NmfNgtP1Vs6jkDnm0Eok QO2VJHDV66zTkbaR41TCGtugEU6spwoo/APPvwXl5XQ7QkD/tPE5iFywSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7AmNYpd9eTXoUXuHVbLRciZ3dtMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVMlGKG1 tfnhozUfO+jH/0iGbLf7lMyObmdDroyxFcc2H4ewE0+BGfmXVL0WxrIC9JobbZIy TrxBKi37kglFNB2Hb18NvR50xd8IfMjYoOqSLl3CI0epnscefTUDTKiuxp3ZWUHO YX720fL5c/C9pUbL1AnDRFvF1laBW4l3BqYZloHcQ1fSg96AUNdz7lyac+3AoR3v /o30JDc575oE4i4KNYFBgii8p10tWCMwYVE1ye0I65bdkp9WGfYHAjhxFBroC2Ps rOTwOWH8RmTY3BFmMosmP/vOPCkCBQy0STG6KofKZE9LFqd7uP/Yuf4lusgdC/FZ pdYNgBSi30pIcg== -----END CERTIFICATE-----Generated at Thu Sep 3 17:42:34 2026 by rpki-client