$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft File: T9ZCEC691_ImjBTCfj678mtMr-s.mft (raw, json) Hash identifier: n080+BrZDoDJq31lhVGl3FH0nANwZrYFGJlNjGPLG6w= Subject key identifier: E9:B5:7F:7E:FC:06:EC:EE:07:31:DE:18:49:F9:A1:77:7B:A0:C7:FA Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb Certificate serial: 01A01F4294F1301A3CD066446E2CD6A39DEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft Manifest number: 0239 Signing time: Thu 20 Aug 2026 13:00:52 +0000 Manifest this update: Thu 20 Aug 2026 13:00:52 +0000 Manifest next update: Fri 21 Aug 2026 13:00:52 +0000 Files and hashes: 1: BOT5KFIXJpkIbzlxtuVva-pqcW8.roa (hash: V0+HzlrzgNuQq4OTP8iqfYcbyGXd1T0uSkmpDamsFm0=) 2: FXU6diYKcbRIsw4MmevlGTpvGb0.roa (hash: aFnvjS1XXi7qixi4xTsDLaU24Ku8jOZbxW9SYMuhSJc=) 3: IXv7GLa92HnV3l1DApAceTiWeyw.roa (hash: wbQSrQRDyv+cAs4TzHktwX1YmUunTHit+MVHYBjMrCw=) 4: JIP6keB7F7Gm2ZlkQopa4DPs_us.roa (hash: jFlq3BusUmP4qYxCaXEGJylNWdexiUDC80OW6u36VHU=) 5: T9ZCEC691_ImjBTCfj678mtMr-s.crl (hash: uhXJlG4K/EJawliFNW9WvW/1FvBgaz3yDQGsiTiph88=) 6: TbZ4UxM472uZwvxUqFwV48R32GU.roa (hash: +tVWlpFmpYRQxsehBjuSGd5DAH2rij5I3LuhqNxfiC0=) 7: VNfg-QglXGIujd90KUvMXS6gBSY.roa (hash: i1z1xtfhhF9sKthwdcoGahPZ+gLqvmKabhZTgAjg+1Q=) 8: WbQaQMsHrswUqvIAVClqp7Bpi6o.roa (hash: mYP9CD1N9SNvJquihm80EZqHZqV1ycchhQflD6elG8I=) 9: YuXGy4DeeKK817s02xmtLVstl_M.roa (hash: 3pU1tPDQwQuNiKFX6sho9jHiT+VzWttOjYDmMxptk5w=) 10: _TQA3DaHi33-kcVw47n7VlGKNYM.roa (hash: 55WFfRlQOcBvN56rtMErkYgOyBcWRjE4WY7WLvG7TY4=) 11: gh269-L8TbTY3-TVP_7aO8lyx58.roa (hash: VbOH7TTnQt8mmF2t2Xgvv1Gs0QXIq8ndLB+CWsdxeFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Aug 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:1f:42:94:f1:30:1a:3c:d0:66:44:6e:2c:d6:a3:9d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb Validity Not Before: Aug 20 13:00:52 2026 GMT Not After : Aug 21 13:00:52 2026 GMT Subject: CN=e9b57f7efc06ecee0731de1849f9a1777ba0c7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f1:b1:71:01:5a:80:15:b3:cd:40:b0:13:f1: 6b:e0:b3:b8:ae:b2:86:4c:5a:c0:97:3f:22:26:7a: d4:ad:9d:7a:38:4f:15:a4:ac:c3:45:4e:45:02:be: 99:83:5e:7b:5c:a5:d0:c4:d6:c4:bd:94:97:ad:bc: e5:65:cf:17:6f:f3:bf:c8:83:af:fe:bf:86:88:36: 0e:7a:fc:d6:d4:ca:7d:92:f3:ac:48:19:87:d1:9a: 75:20:e8:6f:3c:ef:3e:b0:eb:30:37:dc:13:f3:db: 8b:1d:25:fc:19:ba:73:3b:bc:95:85:33:e5:52:7d: c5:5c:6a:35:b2:4f:05:91:22:b3:b4:43:8d:21:08: c2:6e:3d:ec:d8:3a:d7:6b:9f:a3:ff:70:90:7a:4d: 04:2c:f4:70:65:60:5e:31:9e:d3:6e:35:25:ec:2e: da:d2:93:ba:00:44:43:8d:d2:a8:6b:f1:71:c9:16: 44:b2:52:ac:ad:e4:71:e9:e0:b9:6b:4f:f3:6d:ad: 40:2c:15:d1:d9:a4:e8:68:9d:c3:af:ff:e1:5f:75: fd:56:71:ab:74:2e:d0:1a:a6:1d:3a:87:ce:ed:8e: d4:84:1a:b9:15:b5:36:ef:4c:a3:d5:32:28:b7:45: d5:af:c9:bc:c1:3c:73:bc:a7:97:23:c1:d5:cf:9c: e1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B5:7F:7E:FC:06:EC:EE:07:31:DE:18:49:F9:A1:77:7B:A0:C7:FA X509v3 Authority Key Identifier: keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:64:0b:e1:90:7b:03:90:31:65:b7:3b:62:81:7f:c9:19:fe: 16:b5:fd:02:93:eb:da:db:6e:7d:d7:4a:d7:e8:2a:b5:eb:6e: b0:2c:35:6e:a5:8a:56:cb:68:b8:cb:2e:ae:7d:c5:fa:15:c6: 72:e0:10:45:24:90:18:b4:ee:24:9b:86:b4:b0:a5:79:0d:67: 07:9c:ec:0b:38:f3:7c:bd:12:55:df:97:42:01:eb:d4:e3:e3: 1f:c6:50:c6:36:e6:dd:75:0e:26:f7:bb:e8:1a:ce:82:f0:a7: 33:b6:69:fd:40:e4:00:43:e6:71:90:c3:7b:c6:1c:ce:d3:43: b2:f4:3f:89:38:17:44:1d:1a:71:ed:34:93:ab:c7:65:1f:5a: dd:2e:b4:c5:93:b6:22:49:9c:3f:d8:0f:b3:5f:bf:72:7b:d6: a9:71:d0:c7:ae:2b:c9:73:c8:9e:98:99:5b:af:67:2d:25:59: 4f:30:1a:4c:11:5a:c5:d6:ce:2f:14:af:18:3f:ff:9a:97:ef: 54:f1:10:76:fb:9d:91:e3:d7:5b:9b:ad:87:02:8f:64:f8:74: cf:39:77:b8:ba:ac:09:2a:55:8c:6e:36:93:a9:40:c8:c7:74: e8:af:98:6f:b5:25:99:b7:3e:c4:4e:07:4b:ce:5c:8e:ee:5f: ad:88:e6:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAfQpTxMBo80GZEbizWo53sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZDY0MjEwMmViZGQ3ZjIyNjhjMTRjMjdlM2ViYmYyNmI0 Y2FmZWIwHhcNMjYwODIwMTMwMDUyWhcNMjYwODIxMTMwMDUyWjAzMTEwLwYDVQQD EyhlOWI1N2Y3ZWZjMDZlY2VlMDczMWRlMTg0OWY5YTE3NzdiYTBjN2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vGxcQFagBWzzUCwE/Fr4LO4rrKG TFrAlz8iJnrUrZ16OE8VpKzDRU5FAr6Zg157XKXQxNbEvZSXrbzlZc8Xb/O/yIOv /r+GiDYOevzW1Mp9kvOsSBmH0Zp1IOhvPO8+sOswN9wT89uLHSX8GbpzO7yVhTPl Un3FXGo1sk8FkSKztEONIQjCbj3s2DrXa5+j/3CQek0ELPRwZWBeMZ7TbjUl7C7a 0pO6AERDjdKoa/FxyRZEslKsreRx6eC5a0/zba1ALBXR2aToaJ3Dr//hX3X9VnGr dC7QGqYdOofO7Y7UhBq5FbU270yj1TIot0XVr8m8wTxzvKeXI8HVz5zhYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOm1f378BuzuBzHeGEn5oXd7oMf6MB8GA1UdIwQY MBaAFE/WQhAuvdfyJowUwn4+u/JrTK/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQt Zjk0MWNjMzlhNzFlLzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQtZjk0MWNjMzlhNzFl LzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmQL4ZB7 A5AxZbc7YoF/yRn+FrX9ApPr2ttufddK1+gqtetusCw1bqWKVstouMsurn3F+hXG cuAQRSSQGLTuJJuGtLCleQ1nB5zsCzjzfL0SVd+XQgHr1OPjH8ZQxjbm3XUOJve7 6BrOgvCnM7Zp/UDkAEPmcZDDe8YcztNDsvQ/iTgXRB0ace00k6vHZR9a3S60xZO2 IkmcP9gPs1+/cnvWqXHQx64ryXPInpiZW69nLSVZTzAaTBFaxdbOLxSvGD//mpfv VPEQdvudkePXW5uthwKPZPh0zzl3uLqsCSpVjG42k6lAyMd06K+Yb7Ulmbc+xE4H S85cju5frYjmtg== -----END CERTIFICATE-----Generated at Thu Aug 20 22:55:51 2026 by rpki-client