$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: 5YPwxeAcHNxfw1DngpphH0vHo66gdCnrxdP6sZrJ078= Subject key identifier: 79:9B:0D:40:E5:FB:FF:62:F3:08:CD:DC:A5:A2:68:12:FD:1F:BA:20 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 01A11CACFA5229DA7EC77B8C5CA341DC1368 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 1574 Signing time: Thu 08 Oct 2026 18:01:00 +0000 Manifest this update: Thu 08 Oct 2026 18:01:00 +0000 Manifest next update: Fri 09 Oct 2026 18:01:00 +0000 Files and hashes: 1: 5GxvHZCMMVes7bAUdIaYsXEtdX4.roa (hash: x5pIX8HDxeQPjQseodSp8HJv0Ul8z850CXMOjeGpMb0=) 2: NJ5Ft9nE4KuBN7HLQnKzgQ0mpXo.roa (hash: hBgheJjYW2NTuQX0GMNpUdScgOBs91Gnhme3LbGhhOA=) 3: RYADyjtwifA4WYffvjYPXDC0tY0.roa (hash: 1by1zzXISiOupvtCqLE8CpvK3rLnMewUmmcaVpDySL0=) 4: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: /Eue10tQ4cCsQIMRi1dZyaaR5UGylwQOOGczixRGNsQ=) 5: Wg9e837QOmrPZ6kJBIC8tEaMEc4.roa (hash: HxZPcDMVde46E0YraYcux12OmT61HV19peqYpruy8ck=) 6: Y9g5RafdGF3cNhPA6x2FBbgWPQ4.roa (hash: 8GiMf+v1riQWRCrUxNvQcQr4xkt3wgt3m4cw6E13FaY=) 7: ff1Fa-kOqddev469q_q9QwdHNOQ.roa (hash: w2PaSCsne5WpEMiMwnCdvo+2V64rmEO1ylIDUMBUfOM=) 8: kRWKSnE2BdhL2P09-15fn5hrxHI.roa (hash: 4gfL53RlpeXbUFwGxhLDWwBqrCzTTRLbTh1kbzrX4j8=) 9: kZfuHKDAiQJXBvJliXqrjaU0XIg.roa (hash: DHMZVeLexmvq1Vc8FbkkKH/pRR44r4WIYoKUwGuSUU0=) 10: lnT80rw_Ryd-z_u4DO17nxl0A5w.roa (hash: wdCITiVG5nvublaggiVZXX2U+oaT1yDZ4/O9JgAyQzQ=) 11: zt0vn-Fh3T0JcalRjhRB-Eg10pY.roa (hash: ZkfO9/jzoHTqMuf/g6245EMxohpj+UHCz0pRarj0WJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 14:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:1c:ac:fa:52:29:da:7e:c7:7b:8c:5c:a3:41:dc:13:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Oct 8 18:01:00 2026 GMT Not After : Oct 9 18:01:00 2026 GMT Subject: CN=799b0d40e5fbff62f308cddca5a26812fd1fba20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:f6:1d:86:43:03:e1:c9:b1:20:2d:43:a2: 21:13:9a:e1:8a:cf:cf:e9:b0:d9:b7:f6:f3:19:53: bf:9c:7b:dc:9a:0c:21:5e:7b:b2:f8:7a:a7:ca:88: e4:fb:95:e4:14:c7:24:83:37:11:12:fb:20:44:b9: cd:06:e2:c4:b1:b1:34:fd:e3:ab:0f:28:0e:76:f7: c7:60:a4:eb:47:c6:f1:d1:14:4a:43:a6:29:53:0f: 25:0e:84:e1:40:98:2a:85:a3:f6:06:5e:7d:39:e9: cc:84:27:54:6e:64:15:47:91:2c:d5:f6:65:db:67: 1e:b0:e7:8b:61:89:01:1f:53:2c:cb:db:a9:56:f2: d3:52:12:c3:1e:18:6b:e4:c2:ea:b9:80:57:9b:b7: 06:1b:8d:be:b7:c0:2a:d3:22:ec:6c:b3:ad:85:06: ea:74:89:13:1f:dd:55:12:6a:1f:f7:cc:1f:26:da: 2e:0a:9e:5a:32:dd:ea:7b:d4:12:cd:e0:c9:6d:5d: 7b:ba:2a:ff:2f:a2:be:aa:89:2c:85:38:5f:92:43: 55:d4:6e:cb:79:7e:73:0f:5e:af:6d:a1:22:bc:7f: 97:f3:89:47:31:09:cd:6c:e0:51:c1:2e:73:58:52: e8:28:a6:53:ac:ac:8f:fb:0b:b1:30:df:07:e7:f7: 9e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9B:0D:40:E5:FB:FF:62:F3:08:CD:DC:A5:A2:68:12:FD:1F:BA:20 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:17:1f:7d:5a:e8:f3:44:60:82:de:6d:0f:2d:d5:7e:19:cd: 17:48:76:30:d6:82:b3:f8:92:60:d0:67:bd:7d:7d:ce:dc:42: 7e:97:e8:eb:61:60:cd:ae:bb:14:53:c3:88:d7:c6:45:e4:3f: ed:35:8a:c9:0b:0a:fc:e8:9e:45:d3:48:a4:50:70:ed:64:16: 04:e3:54:9b:c5:81:b9:2d:42:79:e2:94:81:07:9a:3c:03:bc: 5c:ea:59:c6:ee:93:31:6c:62:6c:68:32:d7:e5:2c:1e:f5:9a: ef:ea:86:e8:48:33:70:1a:c5:33:aa:f1:93:47:8f:d8:79:33: 6e:be:2a:9e:b1:90:5b:5b:c9:a6:bf:66:8c:93:cd:93:97:a8: ec:24:b4:8b:75:6d:4b:70:15:8a:ca:94:3f:79:22:a4:16:9b: 60:45:31:ca:6f:41:9f:13:7a:0d:f3:58:f7:a0:05:4e:7f:6a: fb:06:0b:4f:7a:af:7d:19:e1:be:f3:80:26:6a:80:08:24:0c: 4a:e3:d2:0f:6c:d2:5d:41:dd:b8:4e:dd:00:f1:c5:4b:a8:ed: 73:d9:11:8f:49:28:a9:de:03:10:dc:ac:3a:2b:2f:27:fa:fb: ef:4b:39:4c:ce:01:c4:dc:c3:8e:00:e9:f2:fc:21:99:53:86: 41:dd:7d:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEcrPpSKdp+x3uMXKNB3BNoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjYxMDA4MTgwMTAwWhcNMjYxMDA5MTgwMTAwWjAzMTEwLwYDVQQD Eyg3OTliMGQ0MGU1ZmJmZjYyZjMwOGNkZGNhNWEyNjgxMmZkMWZiYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyv2HYZDA+HJsSAtQ6IhE5rhis/P 6bDZt/bzGVO/nHvcmgwhXnuy+Hqnyojk+5XkFMckgzcREvsgRLnNBuLEsbE0/eOr DygOdvfHYKTrR8bx0RRKQ6YpUw8lDoThQJgqhaP2Bl59OenMhCdUbmQVR5Es1fZl 22cesOeLYYkBH1Msy9upVvLTUhLDHhhr5MLquYBXm7cGG42+t8Aq0yLsbLOthQbq dIkTH91VEmof98wfJtouCp5aMt3qe9QSzeDJbV17uir/L6K+qokshThfkkNV1G7L eX5zD16vbaEivH+X84lHMQnNbOBRwS5zWFLoKKZTrKyP+wuxMN8H5/eeMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmbDUDl+/9i8wjN3KWiaBL9H7ogMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhcffVro 80Rggt5tDy3VfhnNF0h2MNaCs/iSYNBnvX19ztxCfpfo62Fgza67FFPDiNfGReQ/ 7TWKyQsK/OieRdNIpFBw7WQWBONUm8WBuS1CeeKUgQeaPAO8XOpZxu6TMWxibGgy 1+UsHvWa7+qG6EgzcBrFM6rxk0eP2Hkzbr4qnrGQW1vJpr9mjJPNk5eo7CS0i3Vt S3AVisqUP3kipBabYEUxym9BnxN6DfNY96AFTn9q+wYLT3qvfRnhvvOAJmqACCQM SuPSD2zSXUHduE7dAPHFS6jtc9kRj0koqd4DENysOisvJ/r770s5TM4BxNzDjgDp 8vwhmVOGQd190A== -----END CERTIFICATE-----Generated at Thu Oct 8 20:58:05 2026 by rpki-client