$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft File: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json) Hash identifier: hYF+zAgv7g1hsRo34iU472GJvrsUo4ryo9o4KUevcdg= Subject key identifier: DA:7B:52:12:8D:EC:2E:76:0F:08:27:53:23:45:D6:61:E5:32:98:5C Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 01A058FB01A3E0829DC5ACFD008B3E57225F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft Manifest number: 02DC Signing time: Mon 31 Aug 2026 18:00:40 +0000 Manifest this update: Mon 31 Aug 2026 18:00:40 +0000 Manifest next update: Tue 01 Sep 2026 18:00:40 +0000 Files and hashes: 1: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: ++StIFql87qmbv+IhJKq32kC/fhOUjYnDhFNezbY/jI=) 2: HKTlRw8pt_iSm4V-aB_WcaJhAik.roa (hash: izWUq7YDBbXVXG63e6scfhb3dS4aYrShuifxGXTpeTs=) 3: LzrcKdtCnOcxwIXVys_RJ_TInLA.roa (hash: JYdZ7o0wOdwaNmYpHnApBEmPtzpUEbCrs8EkVkMmwb4=) 4: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (hash: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk=) 5: P3DASKxbE4fNritsmNWOMr9fVp0.roa (hash: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ=) 6: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (hash: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4=) 7: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (hash: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48=) 8: V6lGWiZ2jVo3s83BAWD9qzymG-M.roa (hash: TLHE6l2I0+s4AtxUSASTme+TbF4LWy7iWY+zHitON20=) 9: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (hash: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM=) 10: bxNBlAIvzk_SF6ousanXCbANVpw.roa (hash: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to=) 11: koHuyp402Ngn3ka12oQGaA_PmT0.roa (hash: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54=) 12: qA8oj24sqlvfoBGXYgSYwF71zcU.roa (hash: Cr/DGA/L+hU9/pYkGvYfxYiY4E9TnxP9a4+NT8ycZtA=) 13: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (hash: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Sep 2026 18:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:58:fb:01:a3:e0:82:9d:c5:ac:fd:00:8b:3e:57:22:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Aug 31 18:00:40 2026 GMT Not After : Sep 1 18:00:40 2026 GMT Subject: CN=da7b52128dec2e760f0827532345d661e532985c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:29:4b:ff:7e:b3:42:e8:31:56:2b:d5:dd:98: 6e:64:fe:31:a0:7d:d7:9b:2e:c4:5d:65:5b:34:17: 20:1c:7f:b9:c5:e2:b9:4d:ad:22:aa:f9:cb:53:28: 7c:a1:04:46:7d:61:40:fc:33:fd:f9:ef:9f:90:60: 5d:34:9c:b6:0f:f3:40:6d:b0:d2:fb:8a:79:0e:cd: 98:1b:77:16:9f:23:79:46:f6:13:17:98:a6:18:d2: b9:b6:d1:a9:67:a9:1d:5d:24:62:cd:c7:e9:82:ce: 54:a7:ad:5d:52:09:18:43:43:89:c1:d2:71:03:5b: 6c:50:79:10:48:a0:a5:60:73:6e:f5:8d:7c:25:bc: 80:95:ec:a3:f3:35:fa:43:3f:47:b4:1f:35:5e:06: 05:53:5c:18:81:99:ef:d8:9d:3b:a6:db:8f:e1:2f: 5c:60:7b:8f:19:22:33:3b:bd:b8:0e:49:49:44:9c: c2:47:16:8e:2e:5d:6a:cc:a2:31:98:2f:35:5d:fb: 4b:8a:c7:e2:ae:89:bc:c4:4e:c4:9d:cf:69:ee:09: c0:22:9c:56:d7:90:a5:24:8d:51:75:84:b9:13:5d: b1:f2:df:6e:c2:d9:a4:f6:2b:39:1e:81:ea:f5:fb: fa:f5:bf:ea:37:c5:52:ca:df:08:e8:8b:58:89:ae: 7b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7B:52:12:8D:EC:2E:76:0F:08:27:53:23:45:D6:61:E5:32:98:5C X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:64:c4:ba:f0:72:69:6b:4e:f2:21:eb:6e:1c:7f:15:66:21: b3:5d:93:6c:a5:dc:8c:6c:51:f5:98:80:ca:96:69:30:44:16: eb:28:2a:17:b3:a3:fc:6e:e1:e1:0c:49:cf:0a:c0:b4:88:36: 4e:41:3d:4b:43:8c:2c:5b:6e:95:3c:6b:19:e4:08:31:d1:0e: f0:e7:66:51:75:d0:c4:5d:25:3e:04:be:eb:07:ff:90:ba:3e: 2b:40:ec:9c:61:17:7e:92:4f:d0:cc:51:35:fa:55:15:1d:8a: 49:89:9e:48:62:4c:12:ee:6e:2a:b0:dc:94:82:40:39:a0:25: 6c:27:b0:ac:6d:6e:c9:b4:06:74:71:41:9c:3a:ba:2c:ce:41: 1a:22:6e:88:5a:ba:5b:6f:e2:17:07:03:14:79:e7:7a:50:36: 0a:42:41:9c:b5:05:dc:ce:a3:af:43:d3:db:14:01:fd:ee:ae: 4e:b4:67:aa:43:5a:31:dd:90:3b:f6:9a:86:91:7d:50:6c:b8: 5e:d2:00:a1:18:be:21:8b:1a:1c:2f:79:bd:3d:28:6c:79:c6: c1:8d:7d:18:74:68:7d:86:1d:e6:47:39:9d:54:08:d9:5b:0f: d0:ce:16:f1:8a:d3:93:a2:73:37:42:b6:70:d7:e8:fd:c6:38: d4:c6:83:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBY+wGj4IKdxaz9AIs+VyJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwODMxMTgwMDQwWhcNMjYwOTAxMTgwMDQwWjAzMTEwLwYDVQQD EyhkYTdiNTIxMjhkZWMyZTc2MGYwODI3NTMyMzQ1ZDY2MWU1MzI5ODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnylL/36zQugxVivV3ZhuZP4xoH3X my7EXWVbNBcgHH+5xeK5Ta0iqvnLUyh8oQRGfWFA/DP9+e+fkGBdNJy2D/NAbbDS +4p5Ds2YG3cWnyN5RvYTF5imGNK5ttGpZ6kdXSRizcfpgs5Up61dUgkYQ0OJwdJx A1tsUHkQSKClYHNu9Y18JbyAleyj8zX6Qz9HtB81XgYFU1wYgZnv2J07ptuP4S9c YHuPGSIzO724DklJRJzCRxaOLl1qzKIxmC81XftLisfirom8xE7Enc9p7gnAIpxW 15ClJI1RdYS5E12x8t9uwtmk9is5HoHq9fv69b/qN8VSyt8I6ItYia57HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNp7UhKN7C52DwgnUyNF1mHlMphcMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWTEuvBy aWtO8iHrbhx/FWYhs12TbKXcjGxR9ZiAypZpMEQW6ygqF7Oj/G7h4QxJzwrAtIg2 TkE9S0OMLFtulTxrGeQIMdEO8OdmUXXQxF0lPgS+6wf/kLo+K0DsnGEXfpJP0MxR NfpVFR2KSYmeSGJMEu5uKrDclIJAOaAlbCewrG1uybQGdHFBnDq6LM5BGiJuiFq6 W2/iFwcDFHnnelA2CkJBnLUF3M6jr0PT2xQB/e6uTrRnqkNaMd2QO/aahpF9UGy4 XtIAoRi+IYsaHC95vT0obHnGwY19GHRofYYd5kc5nVQI2VsP0M4W8YrTk6JzN0K2 cNfo/cY41MaDIg== -----END CERTIFICATE-----Generated at Tue Sep 1 03:20:43 2026 by rpki-client