$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft File: Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json) Hash identifier: 6r0a9rvU3do7oX/RI4U9cXvHPp8j5opazbtBQRdmCYU= Subject key identifier: 8B:0F:C4:21:4C:5B:5E:6B:D8:85:2F:2B:DA:65:6F:22:9F:29:4C:0D Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Certificate serial: 01A002B9529BB950D42A3A02019E183A17CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft Manifest number: 1A14 Signing time: Sat 15 Aug 2026 00:01:34 +0000 Manifest this update: Sat 15 Aug 2026 00:01:34 +0000 Manifest next update: Sun 16 Aug 2026 00:01:34 +0000 Files and hashes: 1: 8f6ryTvzxsgcz7a1VrDaHfr6K-s.roa (hash: RW6Oi5z/RcWRGaIQCUZbkdEin/DlQFbS+I/SqrTulAA=) 2: D9XgvWWebov0kTHT7gIL8Ih7bHs.roa (hash: aj3nCPdPkIlGQaAtMeiOa/fgxKRQ1tyiiopMxi8yVr4=) 3: QYAHCBRM8EgpLd4QrnaJwLlcTLc.roa (hash: xqjfeJepdMLIOn6HjKXxzAl/Wm+IlrawB25mUwSfoiA=) 4: RcHUb_7vBCGqZc4v6_mqpbqVtgg.roa (hash: 3AVyDWtRAwLaTj0fPOPIeQe2qLZtznTvofJILaYyw80=) 5: RjTlguRgcAqb5mkC5whD5YBTtos.roa (hash: rBmFvqm9la/6Kn095Es+kobXfpMnMG+qYPPeDl24mPQ=) 6: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: TWlDLzqqakqraXZNTcJT41GSgE7e4nSuqNp78I8MuuI=) 7: Vaa0ZoiDGKk6g5S1K8exhvOjuso.roa (hash: 0JlsZcX72VxzLBMarlq5cR72GCSjJdlrkx349OBiKdo=) 8: eyN-QI1JnaBw_GdK4aR4DdrNlvo.roa (hash: FEmPy+g6KDj1MyKjGKfSJKzYk99+EtTwkcX8ACmfm44=) 9: hbzNsJKUFj9YPemgxueORzyaAR4.roa (hash: sHENi6SxTMQzE9Umyq+oAU2zV4mQDeA2gga98LgBks4=) 10: xdcZpWEbrxMAWI2r6x9fHtNAeos.roa (hash: pQvg5+txs+5H+YwG4r27g6XNgPtuojFD8BoBa08f/h8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 16 Aug 2026 00:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:02:b9:52:9b:b9:50:d4:2a:3a:02:01:9e:18:3a:17:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Validity Not Before: Aug 15 00:01:34 2026 GMT Not After : Aug 16 00:01:34 2026 GMT Subject: CN=8b0fc4214c5b5e6bd8852f2bda656f229f294c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:ab:29:64:88:ea:f0:97:61:5f:b9:14:94: f9:c6:4d:fe:03:05:66:e1:19:59:66:6d:a7:2c:f3: bf:b8:60:ba:ef:42:ab:f2:a2:d8:c6:a4:fd:df:a9: ac:6f:cd:46:1a:3a:3e:31:29:48:47:30:7a:f5:52: ea:aa:6d:b1:38:ef:42:43:84:7e:2b:3b:89:68:6f: 8b:9b:78:a5:ac:3e:68:b5:41:21:f9:8a:79:fc:eb: dd:2c:4b:2d:45:84:a0:fa:e3:9a:be:89:c3:2d:8c: c6:1d:41:33:67:a8:57:21:58:96:15:05:9a:d9:01: e6:cc:fc:ea:d4:60:97:62:6d:66:c6:c7:fa:bd:c5: c8:ff:80:2b:7d:e3:26:ca:02:70:e7:a8:ac:b5:84: ce:ac:f3:20:aa:5d:20:95:82:66:e3:d4:fc:39:bb: 8f:1d:22:0e:6c:a7:91:20:ba:80:b1:ff:d5:32:54: c8:e7:a3:01:16:cd:0b:56:ba:57:13:ba:46:cc:cf: be:83:9f:9f:8a:35:82:2c:15:d4:32:aa:9b:30:e8: f5:65:b1:1b:89:2f:59:cf:a1:22:05:e8:9b:f8:2d: 3c:5e:a7:fb:06:32:16:0f:62:26:a8:e7:9c:b4:4c: 2a:58:e9:4d:bd:ec:e6:61:7c:95:c9:8d:e6:a5:4f: 15:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0F:C4:21:4C:5B:5E:6B:D8:85:2F:2B:DA:65:6F:22:9F:29:4C:0D X509v3 Authority Key Identifier: keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ff:ce:e8:24:26:13:2f:9a:db:61:da:81:80:13:6c:36:4f: 31:c3:92:2e:bd:fe:58:d5:94:4d:02:7a:79:94:29:90:a8:36: df:b3:03:28:62:6f:46:fe:4d:20:40:af:7b:ac:28:c2:a2:da: 4f:77:52:24:4f:7d:f5:fb:1b:1e:32:90:84:8e:f4:df:f6:32: 71:11:13:b7:b5:e9:2e:78:8f:9b:66:8e:7c:99:80:4d:74:79: 32:7f:11:ee:19:04:ff:d5:9f:b6:d6:f5:35:a0:91:2f:c9:a8: bc:1c:9e:72:f3:96:f8:11:11:75:2e:e9:56:3f:b5:fa:85:89: cd:9e:af:d5:df:47:49:af:7d:95:9a:0b:de:43:e0:f1:3e:b0: a2:0b:31:73:86:b6:3b:7b:70:9f:36:fd:96:f7:16:7a:c3:2e: 9f:e8:fb:39:ba:26:32:1c:20:f8:a0:6d:68:73:a9:4e:56:9b: fb:54:08:2e:0f:af:cf:c9:65:dc:cd:49:63:68:a6:b6:66:fb: 32:66:8d:72:07:b0:bf:74:a7:a9:7f:7f:80:a7:8b:3f:e0:87: 06:9e:65:85:93:62:d0:3c:1e:f3:6d:5c:e6:dc:a2:ea:b8:ce: d8:00:ab:17:b9:d3:c6:d8:14:4c:c6:fd:df:f8:a6:45:17:a9: 4c:c2:8e:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaACuVKbuVDUKjoCAZ4YOhfLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2 ZmI1OTMwHhcNMjYwODE1MDAwMTM0WhcNMjYwODE2MDAwMTM0WjAzMTEwLwYDVQQD Eyg4YjBmYzQyMTRjNWI1ZTZiZDg4NTJmMmJkYTY1NmYyMjlmMjk0YzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4yrKWSI6vCXYV+5FJT5xk3+AwVm 4RlZZm2nLPO/uGC670Kr8qLYxqT936msb81GGjo+MSlIRzB69VLqqm2xOO9CQ4R+ KzuJaG+Lm3ilrD5otUEh+Yp5/OvdLEstRYSg+uOavonDLYzGHUEzZ6hXIViWFQWa 2QHmzPzq1GCXYm1mxsf6vcXI/4ArfeMmygJw56istYTOrPMgql0glYJm49T8ObuP HSIObKeRILqAsf/VMlTI56MBFs0LVrpXE7pGzM++g5+fijWCLBXUMqqbMOj1ZbEb iS9Zz6EiBeib+C08Xqf7BjIWD2ImqOectEwqWOlNvezmYXyVyY3mpU8VLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsPxCFMW15r2IUvK9plbyKfKUwNMB8GA1UdIwQY MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt MjE3MGM1YzFkM2VkLzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmf/O6CQm Ey+a22HagYATbDZPMcOSLr3+WNWUTQJ6eZQpkKg237MDKGJvRv5NIECve6wowqLa T3dSJE999fsbHjKQhI703/YycRETt7XpLniPm2aOfJmATXR5Mn8R7hkE/9Wfttb1 NaCRL8movByecvOW+BERdS7pVj+1+oWJzZ6v1d9HSa99lZoL3kPg8T6wogsxc4a2 O3twnzb9lvcWesMun+j7ObomMhwg+KBtaHOpTlab+1QILg+vz8ll3M1JY2imtmb7 MmaNcgewv3SnqX9/gKeLP+CHBp5lhZNi0Dwe821c5tyi6rjO2ACrF7nTxtgUTMb9 3/imRRepTMKO7g== -----END CERTIFICATE-----Generated at Sat Aug 15 05:34:43 2026 by rpki-client