$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft File: TYjrcwqxpQHqNuo0gtdkVE4UERE.mft (raw, json) Hash identifier: K7tLkl4jTecQQvImIvl+hdw2BEEZeXcWVtkEIdNqcSA= Subject key identifier: 9F:A3:DD:67:E7:E8:CC:A1:AF:FA:E5:56:27:8D:4A:D6:79:DD:71:01 Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111 Certificate serial: 01A08B3156674FD32D5052D8DA3A52BC11DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft Manifest number: 1A53 Signing time: Thu 10 Sep 2026 12:01:01 +0000 Manifest this update: Thu 10 Sep 2026 12:01:01 +0000 Manifest next update: Fri 11 Sep 2026 12:01:01 +0000 Files and hashes: 1: DgOoOQQXCFOOiAboGyt3uJYGrX8.roa (hash: ttv6R+EWnpLDn0WbmgVmCLHJJB9im8Fg+Aestwf1Mxs=) 2: GlJSwTi2Fb0SaJjKLlqTY5SYTLI.roa (hash: Vhct9Hz5giaL8GbiD0lTZ+WsxND/eXGjAzq9jIuUyys=) 3: K_QMKdjdYGYO_K6jBRKDt9oPc-4.roa (hash: P33wrBWs2yJaqJ2LTURN/ha1UtuTGC+nJ+QNsu/z4d0=) 4: MPWMs16X005RVT9AI90Avga642Q.roa (hash: 2eWuFyAXp4gRIWiCS/+RGWaGItW02AaBBH51MmBYwwo=) 5: T89jwcM0aDv58J1uGaX_TI1vK9A.roa (hash: sG3D4TH7MLn7FU34onFGq465WOEDiHFkUuDacxXJOgg=) 6: TYjrcwqxpQHqNuo0gtdkVE4UERE.crl (hash: rXq24fhjHN8V4WLo8G3UG0inhqjXiLOFsRM6vsWGH5M=) 7: X72Ta738C-LIMFvd1WFhI8hgB0M.roa (hash: v6AOZV930gaDano00ylIK8U0A/h3KnVoUcoteShVPsI=) 8: XtIJQiHXMFZdv3to7hzaFPe58CM.roa (hash: 0ywEoOgBomhFv9aUHIMG9mVJhsMccKkONYTnJ5FZ8MI=) 9: axYuvA_IMKhkXuc6tRXhlKz3RRY.roa (hash: AwD9qt83+cS+6XicWrhYgc1AHug+bQVZTsrb4VEe+DQ=) 10: uPeS0JTvQdvC1wREAs91Vli5Rnw.roa (hash: cPJXBJyczJ2xoLaeFVUtLWLl9YC0lFU4+Af1eOE64/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8b:31:56:67:4f:d3:2d:50:52:d8:da:3a:52:bc:11:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111 Validity Not Before: Sep 10 12:01:01 2026 GMT Not After : Sep 11 12:01:01 2026 GMT Subject: CN=9fa3dd67e7e8cca1affae556278d4ad679dd7101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d5:71:7d:af:e9:89:26:0c:35:b6:03:04:68: 6e:76:4e:16:05:be:e5:e0:21:ee:a6:1c:35:81:5b: 6c:a7:c6:9e:fa:e9:14:67:19:4e:f9:60:28:87:03: ad:0b:80:01:15:7e:7c:1d:6f:ea:3c:97:ba:92:8a: c7:d0:fd:a8:ee:ea:e1:84:32:c4:61:70:6b:3c:04: 2a:d0:4a:6d:cf:23:9f:3d:d9:b5:ad:a3:40:e0:e1: 96:2f:e0:8c:3b:09:32:1d:7e:06:ab:75:e2:a8:83: df:e9:65:63:ce:66:7b:3f:a5:92:f2:bf:bb:a2:b9: 4b:dd:e6:11:34:a2:9b:66:90:7e:c5:ac:7a:44:2c: 4b:26:c4:f8:42:bd:9e:72:7c:40:a8:78:22:d1:66: dc:69:96:0b:85:41:ec:c3:f8:dd:ac:51:21:c8:33: be:aa:2f:eb:a3:fc:50:b5:95:e1:0c:a5:e7:72:7d: 00:52:f5:6a:a5:cb:f8:b6:ea:f8:93:a2:38:c8:52: 80:09:e9:09:ca:c0:94:31:72:bf:dd:44:30:71:a4: d5:f0:d1:2c:75:96:37:39:9f:b0:4b:d2:49:48:87: 8c:bf:de:76:5c:dd:bb:47:0f:cf:90:fb:77:3e:8b: e5:05:d2:a6:81:c5:3e:db:31:1e:a7:a5:e3:7e:e4: ff:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A3:DD:67:E7:E8:CC:A1:AF:FA:E5:56:27:8D:4A:D6:79:DD:71:01 X509v3 Authority Key Identifier: keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:7f:fc:e6:ea:71:53:9b:54:74:c5:7a:4a:cb:0d:9c:67:4f: 0b:bc:c0:6d:e5:b9:2b:e4:bd:80:47:df:fc:bf:1d:98:3f:c0: 58:d6:93:45:f3:55:78:8d:24:8f:8a:55:6c:e6:92:e0:1d:6a: 22:c0:d2:9c:5a:9b:ce:b3:58:1f:be:d0:3a:88:e4:a6:d1:ad: fe:cc:37:ec:a9:a5:03:dd:d0:7e:03:a4:b4:ba:eb:14:67:e2: 7d:13:af:e6:9c:ce:7f:b7:c4:a1:f5:d4:05:8d:45:05:46:5f: c6:8d:0f:90:b0:b4:61:26:b5:bd:aa:58:4d:90:7e:d9:2f:91: 6b:ac:d0:38:f3:e4:11:13:91:6e:c2:88:dd:bf:17:cf:46:26: 65:9d:e8:df:98:25:82:4a:72:99:12:b5:53:4a:d4:aa:da:02: 63:28:ba:17:63:12:65:65:6f:10:67:68:60:42:a3:12:57:de: 68:cd:94:83:8c:7f:dd:5d:9e:2e:ac:99:26:dc:74:91:7e:1a: f7:cb:d8:f1:8f:bc:81:59:ff:c2:40:df:bb:02:b0:1d:64:a7: d6:00:86:1a:ab:f9:a9:57:0a:bc:d3:cc:f0:93:78:fe:20:b3: 8c:6e:0b:a0:1c:46:2e:5d:6c:12:5d:1a:b6:55:1d:86:88:e4: 70:85:19:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCLMVZnT9MtUFLY2jpSvBHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkODhlYjczMGFiMWE1MDFlYTM2ZWEzNDgyZDc2NDU0NGUx NDExMTEwHhcNMjYwOTEwMTIwMTAxWhcNMjYwOTExMTIwMTAxWjAzMTEwLwYDVQQD Eyg5ZmEzZGQ2N2U3ZThjY2ExYWZmYWU1NTYyNzhkNGFkNjc5ZGQ3MTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNVxfa/piSYMNbYDBGhudk4WBb7l 4CHuphw1gVtsp8ae+ukUZxlO+WAohwOtC4ABFX58HW/qPJe6korH0P2o7urhhDLE YXBrPAQq0EptzyOfPdm1raNA4OGWL+CMOwkyHX4Gq3XiqIPf6WVjzmZ7P6WS8r+7 orlL3eYRNKKbZpB+xax6RCxLJsT4Qr2ecnxAqHgi0WbcaZYLhUHsw/jdrFEhyDO+ qi/ro/xQtZXhDKXncn0AUvVqpcv4tur4k6I4yFKACekJysCUMXK/3UQwcaTV8NEs dZY3OZ+wS9JJSIeMv952XN27Rw/PkPt3PovlBdKmgcU+2zEep6XjfuT/fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+j3Wfn6Myhr/rlVieNStZ53XEBMB8GA1UdIwQY MBaAFE2I63MKsaUB6jbqNILXZFROFBERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQt NzI2ZjgzZDIzODkyLzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQtNzI2ZjgzZDIzODky LzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACX/85upx U5tUdMV6SssNnGdPC7zAbeW5K+S9gEff/L8dmD/AWNaTRfNVeI0kj4pVbOaS4B1q IsDSnFqbzrNYH77QOojkptGt/sw37KmlA93QfgOktLrrFGfifROv5pzOf7fEofXU BY1FBUZfxo0PkLC0YSa1vapYTZB+2S+Ra6zQOPPkERORbsKI3b8Xz0YmZZ3o35gl gkpymRK1U0rUqtoCYyi6F2MSZWVvEGdoYEKjElfeaM2Ug4x/3V2eLqyZJtx0kX4a 98vY8Y+8gVn/wkDfuwKwHWSn1gCGGqv5qVcKvNPM8JN4/iCzjG4LoBxGLl1sEl0a tlUdhojkcIUZ4A== -----END CERTIFICATE-----Generated at Thu Sep 10 15:34:13 2026 by rpki-client