$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json) Hash identifier: AJyZXrhHD1v2RZ0N3kJaTPgFc6MENLCRQ976uYynkm0= Subject key identifier: 90:04:94:2B:88:AF:D3:86:C8:6B:81:96:EE:43:98:7E:39:8B:49:ED Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Certificate serial: 01A16E36FF1EEB436CF1ADA551048C91B504 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft Manifest number: 1AE7 Signing time: Sat 24 Oct 2026 14:01:00 +0000 Manifest this update: Sat 24 Oct 2026 14:01:00 +0000 Manifest next update: Sun 25 Oct 2026 14:01:00 +0000 Files and hashes: 1: L-JyaLSktZhU500CZ2Jm-DzL3yI.roa (hash: oJkt8aUX20M7CKsCfdRcWZpuHilWXCMczf1t5NXS0eI=) 2: LSbbMYdiIbKuzkhAXFAGLH6GBd0.roa (hash: GVdnAx+VDnNLGbmaTGIwya+qx7bw2STQGx8OmUTU30Q=) 3: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: SQVajtWiLY7L/MKbva4b4wfXA4OOeVS2DXHedTx75E4=) 4: UDY2HDyFl77CPOX4Htn0Pi3kyOA.roa (hash: bc7atEIrT/sE9wxUJS6KJvtPGbS/vBzLhwKBt1msWHM=) 5: WR-L1F3QM0wsQgyDImuXxlRoCDo.roa (hash: IHbgb1ma7MkT5FXl6QhQC1/9vSdkNkwBhS8js+Uq138=) 6: caXkdOh26Ng2luhqokI4XXlYMpU.roa (hash: K5rOjRfhlR9NLMm+bd9NoV6sfAdU4dteUmtcqkGa+PE=) 7: gaATxSq9HGX7yQm--_dWZbOgZT0.roa (hash: Qix9w4DVsLBDeru6CjO9qF+q42J9rHLmd1kVGLn1F3E=) 8: jvNpPdYrQ3MflssnyijS0GZ1M3s.roa (hash: deTd1PHJQcy87xcvtVedQ3VEDL3wpdVtSrEJZUUIk/A=) 9: kWTQcrgSZmOTsMHh7K_EG0H2IuE.roa (hash: Hf4S7R+wJUfntE+MhCot7Q15rmGM0xxlIUdL/asz+MU=) 10: mr4GPzNHl1BXdqqKxPgtpJ_bvG4.roa (hash: uZhqzJ/VBEcqt1cjJm9DgjFyfds9tNiF+cC3M9YmS6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:6e:36:ff:1e:eb:43:6c:f1:ad:a5:51:04:8c:91:b5:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Validity Not Before: Oct 24 14:01:00 2026 GMT Not After : Oct 25 14:01:00 2026 GMT Subject: CN=9004942b88afd386c86b8196ee43987e398b49ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3a:10:6c:e7:ba:64:57:12:ff:cd:2e:a6:b7: 4e:7c:3e:9a:b1:dd:d0:95:46:71:6f:25:4d:a5:0e: 3f:dc:c0:80:c5:42:7f:e9:f0:cd:8c:29:c2:21:75: 7e:1b:5f:82:ee:e2:d7:bc:0e:a9:0c:9f:61:b6:0b: 8c:e2:6e:92:17:e2:9e:b9:7e:46:88:c8:aa:73:b3: 39:54:15:16:8a:93:87:e9:0f:8d:da:d5:6a:29:67: 50:94:97:f6:67:51:29:c8:e7:5c:10:43:43:1d:33: 94:51:4b:65:d1:26:75:9f:d0:74:89:ab:15:4a:1a: af:2c:b3:e2:a5:c3:a9:ba:07:7a:c1:60:ea:24:b3: 6f:37:f6:7e:fb:7d:6e:e3:8d:78:ca:0c:8f:4d:16: 8c:ae:b5:3b:61:eb:8d:d7:5b:d1:41:92:1e:51:19: 05:92:ef:f0:3b:53:8b:f2:68:39:f9:16:c1:47:2e: 1b:a5:91:4f:ff:28:fb:0c:9a:39:f2:93:f9:96:05: 18:13:7f:a1:8b:cc:57:de:21:ee:90:ce:73:7a:25: 33:34:5f:56:8c:0e:67:20:80:83:8a:9e:ab:cd:04: dc:66:91:f7:6d:e5:db:32:93:09:a6:fd:ad:ff:58: db:2e:9a:3d:75:e1:e8:39:e8:06:7e:e8:a6:66:0e: 1c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:04:94:2B:88:AF:D3:86:C8:6B:81:96:EE:43:98:7E:39:8B:49:ED X509v3 Authority Key Identifier: keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:f1:3a:13:97:5d:08:01:fa:07:52:41:a8:c4:d1:0b:c9:50: f5:de:b8:f2:cd:93:3b:bc:f5:73:b0:c0:1b:d5:a4:19:0f:c9: 13:d7:5f:e1:62:c4:0c:1d:0c:7c:0b:35:97:29:a1:a7:a9:77: 6d:56:12:2f:49:76:a5:0a:15:b1:23:89:8a:fe:4c:d9:25:af: c4:7a:9c:b2:87:28:2c:ca:88:6e:c1:af:bf:18:4c:5f:d3:21: 87:e0:f0:7d:61:4c:79:12:67:06:a6:e6:de:91:dd:32:9d:83: 6d:19:a2:d5:b3:67:bf:11:21:dd:96:70:0f:5a:89:60:bc:ec: 93:4b:50:1b:9f:37:63:8d:e4:87:97:1a:86:cd:e6:5f:ff:1a: ec:e1:2b:d1:87:98:33:d8:04:d2:80:63:04:97:0e:ef:56:30: 4f:1d:76:0f:e1:f3:09:50:b7:d1:99:5b:d3:39:f7:f5:3d:b1: f0:79:a8:25:8a:a2:c2:47:13:34:0f:ac:05:6e:e6:bd:86:42: c5:a0:81:c6:a2:0d:de:a3:08:ee:d3:7f:9c:51:a3:46:cf:9e: 90:86:c6:74:70:08:35:96:21:01:82:2d:1f:06:f0:ba:b9:79: 23:d1:99:df:aa:45:4b:40:70:5c:41:60:ec:2e:32:6d:58:f0: 79:dd:9e:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFuNv8e60Ns8a2lUQSMkbUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2 NzdiY2QwHhcNMjYxMDI0MTQwMTAwWhcNMjYxMDI1MTQwMTAwWjAzMTEwLwYDVQQD Eyg5MDA0OTQyYjg4YWZkMzg2Yzg2YjgxOTZlZTQzOTg3ZTM5OGI0OWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjoQbOe6ZFcS/80uprdOfD6asd3Q lUZxbyVNpQ4/3MCAxUJ/6fDNjCnCIXV+G1+C7uLXvA6pDJ9htguM4m6SF+KeuX5G iMiqc7M5VBUWipOH6Q+N2tVqKWdQlJf2Z1EpyOdcEENDHTOUUUtl0SZ1n9B0iasV ShqvLLPipcOpugd6wWDqJLNvN/Z++31u4414ygyPTRaMrrU7YeuN11vRQZIeURkF ku/wO1OL8mg5+RbBRy4bpZFP/yj7DJo58pP5lgUYE3+hi8xX3iHukM5zeiUzNF9W jA5nIICDip6rzQTcZpH3beXbMpMJpv2t/1jbLpo9deHoOegGfuimZg4cMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAElCuIr9OGyGuBlu5DmH45i0ntMB8GA1UdIwQY MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt NTU1OGE4YjUzZTNkLzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqPE6E5dd CAH6B1JBqMTRC8lQ9d648s2TO7z1c7DAG9WkGQ/JE9df4WLEDB0MfAs1lymhp6l3 bVYSL0l2pQoVsSOJiv5M2SWvxHqcsocoLMqIbsGvvxhMX9Mhh+DwfWFMeRJnBqbm 3pHdMp2DbRmi1bNnvxEh3ZZwD1qJYLzsk0tQG583Y43kh5cahs3mX/8a7OEr0YeY M9gE0oBjBJcO71YwTx12D+HzCVC30Zlb0zn39T2x8HmoJYqiwkcTNA+sBW7mvYZC xaCBxqIN3qMI7tN/nFGjRs+ekIbGdHAINZYhAYItHwbwurl5I9GZ36pFS0BwXEFg 7C4ybVjwed2e+w== -----END CERTIFICATE-----Generated at Sat Oct 24 20:47:08 2026 by rpki-client