$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft File: SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json) Hash identifier: Sicx4eJGF2xcW3+mXMEDb6153mxLWwYSZ3nhlQQNXQE= Subject key identifier: 6E:B0:A0:A4:1B:7E:1B:14:F1:DB:50:FD:1A:81:33:19:C0:65:A7:2E Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 01A0889DF367D10F796639AF6FF6B5D888A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft Manifest number: 0FAC Signing time: Thu 10 Sep 2026 00:00:47 +0000 Manifest this update: Thu 10 Sep 2026 00:00:47 +0000 Manifest next update: Fri 11 Sep 2026 00:00:47 +0000 Files and hashes: 1: 8DylJ6bMwHx9Bdrvn2E9Zu5-6Yc.roa (hash: vmfPrDMZxv7M04Wo8WXPZw8AXlVkf20vtyHb5e8KwgU=) 2: 9Cp-MTJ4qLd92W1VLnGQl0LXr-c.roa (hash: 5gwGzTjze+ZsjYP/6JdA+Sy/zd3Nz2uvd4XnkQoXRfg=) 3: CiMQMlsaob6RUwchgCgnZuTjr8s.roa (hash: Ar1fgrhz+dRsI5kSs4y0oWEzM2iAvsmrTdXD/xtv77Y=) 4: E4JbKjh9d4V-tkS22c4Y2xMCkFg.roa (hash: 7djPzKioQUY77MCLFItH4oWSHNi6vM51IHyM3Wgv2dk=) 5: My1lWafqU6ikUvtq4M-ub2MxD1I.roa (hash: UvpW6m+Ws53gXcKKs+IbQFznyrhTBzwk2z9Qv12jd1c=) 6: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: 3UwsQkTChkp8prNGe/EVuednIqPrq9b+FxLu9wWHd0A=) 7: UVRNeFdK0MFmPktuaxuakdFBiyw.roa (hash: Qe3jYuCQSRz8rrbqzPjF4ta2+ILAQBCmo8wsXzpnbtM=) 8: YfIHk0vhXMsawbQpQSUx4NkqARo.roa (hash: jyjsv+8CT/zFqpfSyQvWtrC5fl6L+Qm0Q0VVf1vxxCM=) 9: _GXs5D3IvlrXACIDGV1jenI0WNE.roa (hash: YXv+qavyugnUTBH4aVvxk6AhP8epVFfWY0KRl4DJGts=) 10: f9XaNrWrnsnye9Nnn2-Ly1K5UOI.roa (hash: W/HCDixp3chA9F+ml8Y61wZheEIzzJOIG7tl8p8DNMs=) 11: iRf_gs5n9xup496QtRtuInpoD-U.roa (hash: BDQw7Ot2/EiioII6Hz7qQJc1eJwtGMRxOvQFtmCg1xA=) 12: jteFQiK73wa6i4lrpiIPNofIe0U.roa (hash: G8t6kOJLv2x/ceaMNLBszGM9PcNzECaWuzPtlc+XAqM=) 13: lHqP6_LNIJjH2DY1nkYIw_wx6vg.roa (hash: HTFvctpryJcVZOxTlZV4EEM5WCYV9Pw93rtuaN3DxLg=) 14: mjB_YwpdfbzEMOoCN657fTyMgX4.roa (hash: zKy3p/lM5a5D8i2Rw65iFKwlrzxpy3cP+UdwJk2L738=) 15: uUDKYyFFirLuGqR8U0Iysb1Nw8I.roa (hash: Y7R75luVVqvdP03OWGWhzCZwuixQZrQDRe/qiiGkEy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:88:9d:f3:67:d1:0f:79:66:39:af:6f:f6:b5:d8:88:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Sep 10 00:00:47 2026 GMT Not After : Sep 11 00:00:47 2026 GMT Subject: CN=6eb0a0a41b7e1b14f1db50fd1a813319c065a72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:11:84:9e:ad:ff:2f:8b:1a:a8:b7:96:05: d7:de:7a:fe:67:dd:3c:aa:6d:ac:7e:1d:df:d9:33: 37:bd:d8:12:b0:68:49:78:fd:1b:8a:f0:dc:12:f2: e0:8f:16:b3:54:48:09:46:a6:a0:60:86:e5:a9:5e: ab:4a:c8:c3:ec:6a:e5:dd:5f:16:7b:a9:b9:fe:fe: f1:1a:b0:d8:a5:c3:cd:3b:e0:a5:ea:ba:d4:a7:1d: 9f:30:05:1b:ed:eb:94:31:7d:b2:f8:0d:74:51:48: a3:e6:79:c6:9d:a3:e4:3b:00:09:e2:0d:6f:50:b2: 8b:65:9b:14:bc:b7:53:8e:e6:b5:88:f2:22:f2:11: 42:ba:84:19:7b:4a:c7:48:1c:29:53:0c:ca:d5:51: 2a:52:44:a1:5e:53:6e:5c:ba:58:f2:73:c3:bf:37: f0:ff:ba:07:f7:53:cd:97:47:8b:69:17:f4:73:5b: a8:73:b2:93:ca:8c:9f:fc:d3:26:f8:de:34:4a:27: 88:6f:d4:61:3f:26:1e:72:29:cd:c3:5d:df:d8:df: 96:3a:ba:19:ad:58:22:78:66:0a:4c:fd:05:86:ae: f8:ac:d3:93:f3:e0:18:1f:3f:aa:54:15:00:19:2c: 26:4c:32:7c:91:3d:2e:1a:f8:45:31:e1:dc:4f:09: 57:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B0:A0:A4:1B:7E:1B:14:F1:DB:50:FD:1A:81:33:19:C0:65:A7:2E X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ae:99:7a:3b:8b:14:e8:71:30:cf:d8:a7:40:51:86:1a:ce: a8:b9:a0:87:f0:17:41:da:75:dc:ba:af:89:46:2b:0a:83:7c: 9a:48:d7:ca:f6:88:0c:0e:97:51:1f:e2:78:af:2b:77:4d:2c: 2b:9d:8e:61:18:72:75:8b:55:42:68:7d:34:77:ef:22:d8:ee: ea:39:0b:ea:92:89:db:94:0e:91:1f:c5:eb:9d:3f:00:52:18: 34:9d:9e:42:b3:b6:d3:04:de:e6:55:51:0c:e4:f8:5a:5f:39: 63:f6:b7:f3:6d:82:8d:a2:59:d7:bd:d5:de:79:aa:cd:fa:cb: 63:0c:93:a7:f9:7a:79:22:43:c6:d3:fb:b2:22:40:f5:27:02: 2b:9e:1b:21:a9:b7:bf:3a:d5:a2:cf:a4:59:d8:b2:f7:3d:67: 6c:3f:6e:4f:6e:c2:05:3b:1c:0c:a2:f2:22:83:e0:e8:64:03: 2a:fa:81:84:54:fd:0b:ca:3c:02:27:eb:04:ba:ae:ac:6d:de: 35:5d:dc:58:23:3b:a0:7b:26:49:5c:98:af:b1:d5:36:82:9e: 6e:48:26:73:7e:8e:87:57:ec:4f:6d:9b:b4:d1:e0:e2:c8:f0: c9:dc:c3:aa:33:0e:66:57:1e:87:db:03:6c:b8:c9:f2:7e:69: 6b:00:16:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCInfNn0Q95Zjmvb/a12IipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwOTEwMDAwMDQ3WhcNMjYwOTExMDAwMDQ3WjAzMTEwLwYDVQQD Eyg2ZWIwYTBhNDFiN2UxYjE0ZjFkYjUwZmQxYTgxMzMxOWMwNjVhNzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsswRhJ6t/y+LGqi3lgXX3nr+Z908 qm2sfh3f2TM3vdgSsGhJeP0bivDcEvLgjxazVEgJRqagYIblqV6rSsjD7Grl3V8W e6m5/v7xGrDYpcPNO+Cl6rrUpx2fMAUb7euUMX2y+A10UUij5nnGnaPkOwAJ4g1v ULKLZZsUvLdTjua1iPIi8hFCuoQZe0rHSBwpUwzK1VEqUkShXlNuXLpY8nPDvzfw /7oH91PNl0eLaRf0c1uoc7KTyoyf/NMm+N40SieIb9RhPyYecinNw13f2N+WOroZ rVgieGYKTP0Fhq74rNOT8+AYHz+qVBUAGSwmTDJ8kT0uGvhFMeHcTwlXKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6woKQbfhsU8dtQ/RqBMxnAZacuMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmK6ZejuL FOhxMM/Yp0BRhhrOqLmgh/AXQdp13LqviUYrCoN8mkjXyvaIDA6XUR/ieK8rd00s K52OYRhydYtVQmh9NHfvItju6jkL6pKJ25QOkR/F650/AFIYNJ2eQrO20wTe5lVR DOT4Wl85Y/a3822CjaJZ173V3nmqzfrLYwyTp/l6eSJDxtP7siJA9ScCK54bIam3 vzrVos+kWdiy9z1nbD9uT27CBTscDKLyIoPg6GQDKvqBhFT9C8o8AifrBLqurG3e NV3cWCM7oHsmSVyYr7HVNoKebkgmc36Oh1fsT22btNHg4sjwydzDqjMOZlceh9sD bLjJ8n5pawAW0w== -----END CERTIFICATE-----Generated at Thu Sep 10 09:57:07 2026 by rpki-client