$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft File: Ka7sqK_wmbK64FeB3KjdkCfw2is.mft (raw, json) Hash identifier: gj5irKawyWGyPDsAKeChuvT8a7N5i7Rlk2sAmWfqask= Subject key identifier: 59:23:74:87:AC:46:C4:3E:D4:4A:AC:33:58:9C:24:4D:43:BE:9A:3D Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b Certificate serial: 01A0890C5AC20BDBD5146106575E1AD55182 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft Manifest number: C1 Signing time: Thu 10 Sep 2026 02:01:23 +0000 Manifest this update: Thu 10 Sep 2026 02:01:23 +0000 Manifest next update: Fri 11 Sep 2026 02:01:23 +0000 Files and hashes: 1: 1q_wYD9UWOnoJzVrOoUZdi0ptKs.roa (hash: VrKJCQshMNsRpRS3xMtIqZM3UIX0Rv/9TMlKh43+0eE=) 2: 41i4ev5edbKVJwvdRc7UmMCrvCg.roa (hash: m9BCRj3y94R37HOuPnWLtwP7M0mYu2TFW0DGKzHM/Z8=) 3: 50FgNVwdKIXZBSoi9_tx_m369VY.roa (hash: ECrdWmJHCoSD4ehG05AezfCmwTDPcEay5D7cVyccxQw=) 4: 7yrgfzbw8vVRPOjj7HWXtxyf49Q.roa (hash: md2tHitigyecVuWcaFRQgwV0T+xTsDPtPKLbeAD5RVI=) 5: BdOjrY77wFG1RfqnZLrdZFMXaRg.roa (hash: bODeK0rFTfjBKeuHpe99mPxykv44Z0oBibXlE79cC5U=) 6: FLDisamNsDJXm_1lT92yfeRj3fw.roa (hash: WM25J4c59hU5SI4kz6OM2HoWYEmKXTDdKjYCSlG2JzI=) 7: GS38DtcRNFiCDgomRRGuYwhjhtk.roa (hash: vhy5Ct6d/4AD2NqH7XvOO/NEboMBe6M9200o1l76a98=) 8: IDFQmB2_BNbe8TZvBZB6pYkqhGU.roa (hash: dE0Z7qv5NDY7r0/9XxQ9jfsrqbdxqd+FO+WrhOi5Glg=) 9: Jj70oOtEM3MPYlWgVX1aJYN3MXw.roa (hash: xzFEEvPbBuccgBOT1CsatLmHtV69WRilCT0khWKpwtQ=) 10: Jk_N7QSRVi_cTxcu3qy15ogPA68.roa (hash: Rmy9FhhubCl3WFg5IP5VOAwqyczxSE6B2MhGe3ccsM0=) 11: Ka7sqK_wmbK64FeB3KjdkCfw2is.crl (hash: WG6S3inD6VkEy5q44CYCSNtPOJAQwUBnDyfUfKkKYlw=) 12: NklB14-VXLI3MM6lJe389quYPZU.roa (hash: D2ILNVHNm82CCp8tZk+B53IKie8TqikfqpmmGRxzs5M=) 13: URT0EEJBnslT-0WyvEI0zhxE7ao.roa (hash: l8gQYKhmIYyk/qnAnSCwTsLP9MGIBmIKOkyQVshPQkY=) 14: VOA0hCAmccn3JFjBj1YG73p2_z4.roa (hash: fdiyK2e1RDodBjjbIJyeBT4dY1npNcatRvvQ4NjK3Go=) 15: WFW6qhbNTOwNvMn1wBdtZc0maBc.roa (hash: 4FeYT4PmqlfqsjKx24dhNEkHWmZbQRRBE78LWYeUekw=) 16: ZOUpcJbmawhfKT6X9vbpqXgFbzE.roa (hash: t1IEQIm5R7nnAL2Bg46AN21+xubthTU7oKqD6v54mRI=) 17: _WY29sxvL7eTgbKFEoCzs5DGbWk.roa (hash: 0n3QlO/r3sjWRk/sTTbpZIaERpyILu3lDPLbKxDkXXE=) 18: h-EWcWkmbvgj39jkxm-JcD4jNys.roa (hash: 5gX5iFM/ehmHTHBUKpjDT1zVGwl4cU31igc51yeX2UU=) 19: j4Fd2DjxWr_xPGcMiuUhdZLMc30.roa (hash: KhwmTUHddEmqeMPHDyYX5yKpCm2bT7FKBk70Iu6qVsU=) 20: kA7PdZv1BHY99jFpYu5rnXF5Gpw.roa (hash: cX0Aca9kGYKiN/9m9sBSvjG37vCXXVdWtb4rGx97cf8=) 21: lUlD9gbYsyOLr3r0s3Uaa4KVupU.roa (hash: Bx05tts8mxf//4522K5SFSuxKCitbQyyOHV0CHxYOm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:89:0c:5a:c2:0b:db:d5:14:61:06:57:5e:1a:d5:51:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b Validity Not Before: Sep 10 02:01:23 2026 GMT Not After : Sep 11 02:01:23 2026 GMT Subject: CN=59237487ac46c43ed44aac33589c244d43be9a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:86:d9:d5:b4:13:fc:31:7e:41:96:5c:55: 72:3e:a3:df:09:9c:18:41:67:ab:e0:45:c9:4b:91: 5b:e4:ce:ec:a9:af:0f:97:96:4a:db:44:25:86:64: 7f:f9:81:9e:5f:e5:9e:c2:df:4c:3d:82:eb:7d:af: 5f:cf:20:13:78:99:2f:0e:43:78:ca:62:9f:75:4d: 80:9c:33:6c:e0:d0:e7:95:ed:5a:4f:f3:ad:c1:c8: 67:bf:4a:4b:f9:07:26:17:a1:19:61:e1:e6:d4:f6: df:2e:6d:05:67:49:55:19:68:d2:49:60:8b:af:c7: d3:c2:28:f7:c9:50:26:91:75:c8:a3:a7:c5:18:2d: 6c:f3:91:2b:19:34:7b:4e:dc:79:80:b6:e2:a0:69: 57:f7:99:72:2c:51:6e:b2:95:21:4c:ff:24:7d:71: 7e:f2:ef:25:a3:66:c4:6b:69:9d:4e:36:eb:e6:4f: 7a:fe:ea:09:14:f4:f4:d0:ba:39:44:8f:cc:20:71: 48:5d:a9:e2:95:58:3e:d9:3f:36:cd:47:ef:6a:5c: 53:74:73:65:cb:39:10:6d:b7:27:f3:b7:f2:b4:3f: 94:fe:c3:d6:b0:79:6e:ac:b9:dc:b1:6e:6e:3b:1a: 86:57:83:ca:7b:bc:db:67:71:32:4a:63:07:d5:b6: 05:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:23:74:87:AC:46:C4:3E:D4:4A:AC:33:58:9C:24:4D:43:BE:9A:3D X509v3 Authority Key Identifier: keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e6:e2:de:6b:71:52:c7:d1:9f:31:c9:b9:81:db:17:83:fb: 7f:1f:a5:93:44:be:f1:df:66:6c:f6:12:4b:d6:fb:f4:62:42: 6e:a6:db:72:b9:55:97:05:0f:d3:1c:cb:bd:46:dc:41:e6:e7: e5:68:ed:15:47:ae:b0:47:f6:a6:40:b6:03:05:64:fb:11:1e: 9b:1b:f7:84:92:c7:9a:6f:50:2d:ff:f5:72:84:cd:a6:4a:e8: f3:83:14:9e:32:71:42:a7:7f:24:5a:bb:e9:92:28:d5:5a:04: c0:53:62:b3:c4:2a:07:ed:6e:16:0e:ca:8c:fb:ff:c9:b3:87: c8:9c:d0:03:70:01:2a:2d:76:56:91:44:2e:ed:fb:5f:9b:c2: a0:6c:2a:ce:e5:cd:d4:0c:3d:0f:ac:8a:ae:f7:ec:fa:3a:b7: ed:33:6b:d2:5c:a3:82:ef:d3:07:78:ab:0d:7a:e2:c0:29:0e: 8c:06:85:32:35:07:ed:8a:a0:67:60:e7:d5:ce:ea:74:9b:a6: b5:d8:3d:93:54:4a:11:fe:60:03:ec:2e:17:98:33:af:62:a2: 1a:be:75:0a:f4:68:55:4f:01:d2:dc:8e:e6:e6:f7:2c:76:5f: 52:b7:c5:2c:2f:13:30:78:38:92:fe:10:94:55:b3:30:d7:46: 2c:5c:39:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCJDFrCC9vVFGEGV14a1VGCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YWVlY2E4YWZmMDk5YjJiYWUwNTc4MWRjYThkZDkwMjdm MGRhMmIwHhcNMjYwOTEwMDIwMTIzWhcNMjYwOTExMDIwMTIzWjAzMTEwLwYDVQQD Eyg1OTIzNzQ4N2FjNDZjNDNlZDQ0YWFjMzM1ODljMjQ0ZDQzYmU5YTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaqG2dW0E/wxfkGWXFVyPqPfCZwY QWer4EXJS5Fb5M7sqa8Pl5ZK20QlhmR/+YGeX+Wewt9MPYLrfa9fzyATeJkvDkN4 ymKfdU2AnDNs4NDnle1aT/Otwchnv0pL+QcmF6EZYeHm1PbfLm0FZ0lVGWjSSWCL r8fTwij3yVAmkXXIo6fFGC1s85ErGTR7Ttx5gLbioGlX95lyLFFuspUhTP8kfXF+ 8u8lo2bEa2mdTjbr5k96/uoJFPT00Lo5RI/MIHFIXanilVg+2T82zUfvalxTdHNl yzkQbbcn87fytD+U/sPWsHlurLncsW5uOxqGV4PKe7zbZ3EySmMH1bYFMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkjdIesRsQ+1EqsM1icJE1Dvpo9MB8GA1UdIwQY MBaAFCmu7Kiv8JmyuuBXgdyo3ZAn8NorMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALObi3mtx UsfRnzHJuYHbF4P7fx+lk0S+8d9mbPYSS9b79GJCbqbbcrlVlwUP0xzLvUbcQebn 5WjtFUeusEf2pkC2AwVk+xEemxv3hJLHmm9QLf/1coTNpkro84MUnjJxQqd/JFq7 6ZIo1VoEwFNis8QqB+1uFg7KjPv/ybOHyJzQA3ABKi12VpFELu37X5vCoGwqzuXN 1Aw9D6yKrvfs+jq37TNr0lyjgu/TB3irDXriwCkOjAaFMjUH7YqgZ2Dn1c7qdJum tdg9k1RKEf5gA+wuF5gzr2KiGr51CvRoVU8B0tyO5ub3LHZfUrfFLC8TMHg4kv4Q lFWzMNdGLFw5ZQ== -----END CERTIFICATE-----Generated at Thu Sep 10 07:33:00 2026 by rpki-client