$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: 35qh1SdwrVXd/aaZ5YcPAVyoaY134u/8bQCcco5ExTk= Subject key identifier: 17:56:4D:6C:24:CB:E7:A0:74:D7:34:C5:DC:CB:88:06:43:2B:D8:B5 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 01A0EBC08C267CED2941C11114A4258602EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 1A8D Signing time: Tue 29 Sep 2026 06:00:59 +0000 Manifest this update: Tue 29 Sep 2026 06:00:59 +0000 Manifest next update: Wed 30 Sep 2026 06:00:59 +0000 Files and hashes: 1: 1GSwP0TJJ65wZd3Pvgc8v_kBblo.roa (hash: a1H7+zWC5aLIH4mpt/TNCBcUHA1NWPW383gUe+s7/0o=) 2: AWyqQuO48E7EaLT6RH2W8bAgQ3s.asa (hash: y1Ag5qpmzSxVFKEJWy+4MLdDTnH6Pp80lG+LaPL+S8M=) 3: Gpn9n84tYhkYaDMGGKjziY1wajo.asa (hash: +9BgoCUtarT6JeveJ/0Adks2MenEvBj4hlB1aELk8Yw=) 4: SZuulJfBXrOx7TVvq98RfpuWX20.roa (hash: JF3u4qfuygewpcEyq0MIU/fiok0/dp1CnGO7/QRkKCw=) 5: dHHbPSJCfsQDNB_7r8SiDBIMBFc.roa (hash: 4Z63pDrERLa8AbCyht1J3U8XYsimBFftB4yxdfy6SeU=) 6: duJlSdUfuEBVAcmWXk5MpTvh7ig.roa (hash: GXDP1gVMBP52IUaX8G6mObb5IGesyXrYT/V3KEUXfjY=) 7: ea4uOAYmH3F8T77vuYMudZrhuRA.roa (hash: EEiZnb2JPsq/yqrG0Q7hp0FOlD5s4bXDR5+0nIVOWD4=) 8: ffyLyRVME5oJGVerDANtY5IMHo8.roa (hash: KCiQSpQfQbYAD6/iMj3Iuvok4R8kKREKJx6rRxehp2s=) 9: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: XhSMCvTUq0LecKt3oIM6+fXQhEKT3AuI8ls8O4MAngs=) 10: idgi1k7anhDqQRqHUOPCKe0uEMY.roa (hash: 2Wv9basY5e601X5c9PrC/HchRjopIiI93QMlP9PCKcM=) 11: nNl6NGyF3T8vJ8AAtIkn4-0X5T8.roa (hash: dpRxbGigIJULOJ37FZ/ZTlPFJRhup86+sQ8jgaZzcbo=) 12: tgKyxQJIrIZGZt0JdqobdwHEFBU.roa (hash: R6TZ097sd703JL66PHi/DAt6butDAQ5ZZOyHFsfEnNE=) 13: yq7Etfb4dWzBvbcN-Rlb9C-Z6wA.roa (hash: OWlK989Wx/WGtxwLKowAN45MRmglMXaVRn+t0dtJ9Uc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:eb:c0:8c:26:7c:ed:29:41:c1:11:14:a4:25:86:02:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Sep 29 06:00:59 2026 GMT Not After : Sep 30 06:00:59 2026 GMT Subject: CN=17564d6c24cbe7a074d734c5dccb8806432bd8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:db:e1:dc:72:d0:ad:25:f3:89:95:1d:b2:7a: 1b:a2:db:09:b6:6d:bb:d3:74:4a:0f:49:6c:db:1e: 49:4f:ce:a3:1c:57:71:b5:bd:9e:1c:c3:2c:d4:e4: c1:34:87:4e:9a:13:93:23:f5:e4:a0:28:1b:a3:9b: 57:32:86:ca:97:26:2e:01:4b:24:4b:3b:ee:78:cf: 11:39:58:0a:02:cd:76:0f:cc:a1:ea:18:25:5a:b9: fa:e9:d4:0a:b8:fd:fe:7d:ac:6e:61:e0:3f:c7:c7: 5f:31:99:3c:54:8c:94:97:2f:94:1d:bd:22:5f:0d: a1:db:d9:ca:4f:2c:31:bb:a3:b9:ed:43:23:95:fe: 9f:08:b9:a5:9f:1f:14:73:78:d9:97:87:9d:ab:c6: 5f:6e:9f:73:6d:32:aa:ee:f6:76:77:85:47:84:c9: 58:9e:d9:90:bb:22:0d:1a:fb:a1:2b:0e:2c:b0:dd: 1f:06:4d:05:8d:e4:55:b8:20:87:c2:3a:9e:a7:20: de:fe:e8:c9:6e:ba:e5:cd:16:ef:93:60:94:b9:95: c5:ad:54:0c:46:2f:ed:5f:f9:8d:83:3c:22:a1:99: 7a:c7:da:11:33:55:83:73:b2:c5:e1:27:97:48:66: bf:1d:8b:47:b4:19:5b:63:ba:8e:97:f4:52:a3:6e: fd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:56:4D:6C:24:CB:E7:A0:74:D7:34:C5:DC:CB:88:06:43:2B:D8:B5 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b8:04:a2:ce:ca:29:60:30:db:aa:c1:b0:01:1b:97:57:59: b6:bd:77:3a:c2:ba:7a:ee:21:e7:30:5f:bc:32:1a:4b:21:89: f5:fe:b0:66:30:c3:5a:55:b6:37:45:54:57:c1:b7:33:69:62: 18:70:9a:6d:8d:0b:8c:ea:e7:b6:ec:98:68:9c:9c:f8:09:96: 11:1f:29:18:71:f2:88:96:bf:ba:e0:ae:7a:e6:32:d7:f7:e6: 3d:cd:99:62:a6:6c:22:14:6d:02:13:21:a8:ce:90:46:2e:4f: 5f:57:1c:93:03:91:67:95:51:3d:ed:ec:84:2f:a0:0e:23:72: 83:b5:6c:2a:ea:fd:98:e9:2f:11:02:04:79:8b:c0:5e:81:40: 14:6f:12:a5:d5:97:e0:f0:16:b0:48:f0:65:04:78:ae:72:da: a7:0e:47:70:09:97:a8:4c:f7:47:18:eb:8e:34:dc:32:80:84: 30:bd:ea:f0:85:6a:38:34:00:e5:b1:eb:86:cf:bb:d4:bb:a1: 5c:60:cc:41:45:f1:8d:52:ef:69:d0:16:e2:8f:29:50:58:9d: 25:bd:46:b5:93:11:9d:cc:38:82:83:ec:a6:c1:7f:7c:31:97: 0b:26:be:c1:ca:a7:4b:d7:03:3c:a7:34:33:59:09:fa:e6:15: d6:88:4f:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDrwIwmfO0pQcERFKQlhgLqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwOTI5MDYwMDU5WhcNMjYwOTMwMDYwMDU5WjAzMTEwLwYDVQQD EygxNzU2NGQ2YzI0Y2JlN2EwNzRkNzM0YzVkY2NiODgwNjQzMmJkOGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNvh3HLQrSXziZUdsnobotsJtm27 03RKD0ls2x5JT86jHFdxtb2eHMMs1OTBNIdOmhOTI/XkoCgbo5tXMobKlyYuAUsk SzvueM8ROVgKAs12D8yh6hglWrn66dQKuP3+faxuYeA/x8dfMZk8VIyUly+UHb0i Xw2h29nKTywxu6O57UMjlf6fCLmlnx8Uc3jZl4edq8Zfbp9zbTKq7vZ2d4VHhMlY ntmQuyINGvuhKw4ssN0fBk0FjeRVuCCHwjqepyDe/ujJbrrlzRbvk2CUuZXFrVQM Ri/tX/mNgzwioZl6x9oRM1WDc7LF4SeXSGa/HYtHtBlbY7qOl/RSo2796QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdWTWwky+egdNc0xdzLiAZDK9i1MB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbgEos7K KWAw26rBsAEbl1dZtr13OsK6eu4h5zBfvDIaSyGJ9f6wZjDDWlW2N0VUV8G3M2li GHCabY0LjOrntuyYaJyc+AmWER8pGHHyiJa/uuCueuYy1/fmPc2ZYqZsIhRtAhMh qM6QRi5PX1cckwORZ5VRPe3shC+gDiNyg7VsKur9mOkvEQIEeYvAXoFAFG8SpdWX 4PAWsEjwZQR4rnLapw5HcAmXqEz3RxjrjjTcMoCEML3q8IVqODQA5bHrhs+71Luh XGDMQUXxjVLvadAW4o8pUFidJb1GtZMRncw4goPspsF/fDGXCya+wcqnS9cDPKc0 M1kJ+uYV1ohPMg== -----END CERTIFICATE-----Generated at Tue Sep 29 12:46:16 2026 by rpki-client