$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json) Hash identifier: yFVi9bdQ/oPT9NTO45K0HHQ4RUc5VJpQyA0ehz94RUs= Subject key identifier: 0D:79:A0:C7:3B:F8:48:E1:A5:27:57:79:24:79:3F:B5:6A:E1:02:51 Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701 Certificate serial: 01A025447DC368D6E4FD4553863AA9F9D79C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft Manifest number: 1A31 Signing time: Fri 21 Aug 2026 17:00:40 +0000 Manifest this update: Fri 21 Aug 2026 17:00:40 +0000 Manifest next update: Sat 22 Aug 2026 17:00:40 +0000 Files and hashes: 1: 2rYrAzNGLRy2kebzewAymxyAgFI.roa (hash: 7lRGKU9DPcDtXv+u0hXbpyy4aMqg0Uw+oprnJUe2LzA=) 2: 4oMfwBT0VCqApq0Mz9B5u8oEdgY.asa (hash: B40/yiGXsK8OX28pGDLWCXmBEnfMWxpGQtWVYUoy2PU=) 3: GmKW5_EHkoH0GvuRNXDDZJBTr9w.asa (hash: WTnAG5IBd9zYOkgfV7EwghTiMnsdkoRczSviULKHvJk=) 4: O0zW5TfYvBKPM_06y39fr20GlgU.roa (hash: o9IJqdu4tvBH89+q/ixOEY64sxONXtm+OJZs9bCwOus=) 5: PY4zk8ZdTV8J6IiAD0rRER8XcM4.asa (hash: ds1r0Q17VFau1bpjzlPurN1iqObqDOJcn+qwvKgVZdM=) 6: Y19P_g-vBYYPjku8AAu-CeAzWW0.roa (hash: 0p9ZYZuTWuetqmVFdCZJU25sYbQjPpo04+Hro2GGGZA=) 7: fL71-L22cKxM7CZQLZouesgJu3U.roa (hash: sUDVv41sxROa/YEaIzj5YrqXpRn04S1uEQsUbtMaqsM=) 8: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: FbRidxGpRV9D0njhD0hzxX9qPHp4fUB9TtLCPqT4pYM=) 9: kWoDnbDfKRrdPEqboPrzUYeYutU.asa (hash: KIa+NGQ3X/m6SyP7wk2j8x0CtEKUsyJ76G3KolFP4Sw=) 10: nWTiWDUsZBq6y-Llds3TNYkdAzA.roa (hash: lu7dgyssWpWTBNpOq8brqIrMrxMRYIWthZEExVfrpEk=) 11: psPWwnT647exV4ggiJz8vloBaHU.roa (hash: P5hGKQcqsDsWZRv7ouHrUVvJ+SAHh8mal8JYlkQ7E8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Aug 2026 16:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:25:44:7d:c3:68:d6:e4:fd:45:53:86:3a:a9:f9:d7:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f25e6a6893f466d2695e90670c047443643701 Validity Not Before: Aug 21 17:00:40 2026 GMT Not After : Aug 22 17:00:40 2026 GMT Subject: CN=0d79a0c73bf848e1a527577924793fb56ae10251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9d:5c:8a:2b:89:a5:71:9d:21:87:fd:70:96: b8:f0:b5:56:9a:07:7a:cf:11:48:82:a6:0d:2b:a5: cc:9c:26:fb:92:93:96:17:55:10:de:30:39:dc:9c: 24:11:c1:4b:2c:55:96:af:d8:34:0a:e8:9e:35:1d: 16:36:cc:0b:df:28:09:ff:b7:e1:7e:03:58:2f:e7: fc:bd:fe:c9:63:e7:52:b4:81:51:65:5e:20:c9:57: 7a:8f:e7:88:ad:e2:99:39:45:38:20:6e:d5:1c:2f: 04:88:c2:e3:df:fb:b5:6e:58:08:6b:0a:b7:cc:ba: 5f:93:93:d9:b2:4b:29:3d:85:ee:d7:e8:06:c2:32: e7:b6:db:c4:a4:cd:d0:c2:9e:b9:ab:7c:2b:55:9a: 13:24:12:e1:04:93:e2:aa:ba:75:70:04:f4:e8:7e: 6d:ff:cf:bd:ca:8c:a5:6f:f6:d5:db:9e:ea:b8:a6: 92:5f:50:1e:e0:c3:4c:5c:56:c2:8c:79:06:66:c3: db:29:b6:19:33:53:46:73:60:1b:34:2e:9d:f6:11: d0:65:39:51:5f:a3:ec:cb:4e:c0:04:6e:d2:05:bb: 18:a1:45:87:64:14:73:fb:db:5a:ba:21:7b:94:12: e3:65:ed:ca:df:d1:d8:fd:51:cd:3f:8f:03:e3:6c: dd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:79:A0:C7:3B:F8:48:E1:A5:27:57:79:24:79:3F:B5:6A:E1:02:51 X509v3 Authority Key Identifier: keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:fb:40:45:b8:15:3e:04:9f:47:34:7f:84:cc:c2:05:3d:04: 3b:b4:ec:b2:0d:ae:86:a3:c5:dc:4b:da:7a:2d:ab:2c:09:f6: 72:76:b7:40:aa:1e:e9:e5:a7:b1:49:00:ca:6e:2b:a7:37:59: 79:7c:b8:58:6d:fa:dd:8f:29:35:af:47:75:b0:da:59:b2:52: 08:7b:2b:04:a0:06:02:5a:b4:67:34:d2:e9:1d:eb:8a:c7:b6: b6:d3:3c:27:a7:f9:74:c4:75:f5:9d:d4:2b:cb:99:9e:b2:4f: da:ff:cc:7a:ac:4c:fa:ff:82:14:e3:f0:c5:d1:11:5c:e8:dd: c7:db:62:4a:5c:89:3f:1e:c5:c0:1f:2a:2d:bc:8a:cf:a4:4d: db:07:61:03:ce:65:42:ff:80:a4:2a:22:de:34:18:5d:d1:99: 80:88:f9:9e:f9:53:8a:68:65:72:52:36:d2:96:04:4e:77:f7: 68:08:41:3b:44:8b:03:19:55:9e:61:08:d6:90:73:7b:a1:ff: f8:bd:ce:7b:53:ce:92:c7:08:ad:4e:52:a2:f7:8c:90:51:92: 39:54:d3:48:92:83:ef:b7:da:9d:fa:a3:a1:c0:0f:f1:72:e5: 15:84:0c:a0:11:1c:7b:76:1b:48:22:04:68:59:ab:5d:6d:19: 72:7a:6e:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAlRH3DaNbk/UVThjqp+decMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2 NDM3MDEwHhcNMjYwODIxMTcwMDQwWhcNMjYwODIyMTcwMDQwWjAzMTEwLwYDVQQD EygwZDc5YTBjNzNiZjg0OGUxYTUyNzU3NzkyNDc5M2ZiNTZhZTEwMjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp1ciiuJpXGdIYf9cJa48LVWmgd6 zxFIgqYNK6XMnCb7kpOWF1UQ3jA53JwkEcFLLFWWr9g0CuieNR0WNswL3ygJ/7fh fgNYL+f8vf7JY+dStIFRZV4gyVd6j+eIreKZOUU4IG7VHC8EiMLj3/u1blgIawq3 zLpfk5PZskspPYXu1+gGwjLnttvEpM3Qwp65q3wrVZoTJBLhBJPiqrp1cAT06H5t /8+9yoylb/bV257quKaSX1Ae4MNMXFbCjHkGZsPbKbYZM1NGc2AbNC6d9hHQZTlR X6Psy07ABG7SBbsYoUWHZBRz+9tauiF7lBLjZe3K39HY/VHNP48D42zdJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA15oMc7+EjhpSdXeSR5P7Vq4QJRMB8GA1UdIwQY MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvtARbgV PgSfRzR/hMzCBT0EO7Tssg2uhqPF3Evaei2rLAn2cna3QKoe6eWnsUkAym4rpzdZ eXy4WG363Y8pNa9HdbDaWbJSCHsrBKAGAlq0ZzTS6R3rise2ttM8J6f5dMR19Z3U K8uZnrJP2v/MeqxM+v+CFOPwxdERXOjdx9tiSlyJPx7FwB8qLbyKz6RN2wdhA85l Qv+ApCoi3jQYXdGZgIj5nvlTimhlclI20pYETnf3aAhBO0SLAxlVnmEI1pBze6H/ +L3Oe1POkscIrU5SoveMkFGSOVTTSJKD77fanfqjocAP8XLlFYQMoBEce3YbSCIE aFmrXW0ZcnpuSA== -----END CERTIFICATE-----Generated at Sat Aug 22 00:01:39 2026 by rpki-client