$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: KwyGbn3YcWY4D3sM1kGJcQ6AVHmTiQfeSXMN0aNcz+A= Subject key identifier: 12:3F:C8:2B:40:24:C0:A1:25:7E:1D:1B:5E:95:2E:B5:0E:4C:5E:4B Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 01A0897A24B433212B796CBBC61B1D673A78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 141E Signing time: Thu 10 Sep 2026 04:01:18 +0000 Manifest this update: Thu 10 Sep 2026 04:01:18 +0000 Manifest next update: Fri 11 Sep 2026 04:01:18 +0000 Files and hashes: 1: 2JOxayZ4kxrtihpkJSNfTVv34wU.roa (hash: zOn78CRIowaCVixyqjErS7L368UV3aEuLomuXw4ifTk=) 2: 8JmGNshMSYZovGEGptxvSVmLazw.roa (hash: cBtmgXslMy9oeFHfquJAM4IBewoqUtnRBO1wAOTF0Qk=) 3: 9VFCcM5TkSFj-DtH7qLQwgSN5IM.roa (hash: wrh+UMairP6Hp+q2S/1S737Q0ISs8AkPKt06IH0nojo=) 4: EaUMOU4n5eMN9_93bWF9KbfM0Js.roa (hash: Qat9O3DT5PJNAgSB1rpNeEeKlT31JeYDByOxfigK1Mc=) 5: Qds8QcMRNkZLZIxEq4DIiHLqmf8.roa (hash: 8W6wOK2I4qsuYzKI/ho+wcaX0Cqt4fg6SETKF3W+ImI=) 6: TjDmMYZX4kBSUtV2aoQj0qKysRg.roa (hash: l2/gMvnSsklv14g/tuA37El8fuSOsjkNRMRQv6RZ2fY=) 7: X1LVS0a4yLVV-n31U0OmgdyXH_Q.roa (hash: HB5LPZBvI9YtdaaDN25t7bfdVncLanwsoppFOKXdT7I=) 8: arDSEArnZyqLs7jmsgT1tnPs8rc.roa (hash: /Km/RAgR6E8ZdX77lmgH7Nk0dxMhyfy0FGDCtSzOc/w=) 9: bwOIwRe-t7R54b9v9np6_kJQ_dE.roa (hash: Q1d3WN659RXAKPuHuKTKUTC5odQwSZ9Vh4CW0Um2Opc=) 10: d0K0IoBy5xJlcUIFuELdP0a1cwQ.roa (hash: 4io78nOLezFoyBWo3ZpnK3RNwopEXZfQZmn24eH/WJQ=) 11: dxZrm_kRJNnz8YeorAaaxgmTmrU.roa (hash: Le5MlQmjVvWn8m1gclKNCqW1PZyJn3stX+9I88dbC/c=) 12: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: 2TBg6VxxzsgWgY8Px94NA0YzqGldXNJNjTs3Aks7S/0=) 13: gVoDkYx52kg2ObqLQQiu3dVABJ4.roa (hash: Q8A5Ai5FoLvBhe3BwpyHiBUhPSy+KXj0LhOWSA21Wgw=) 14: mfX6n982kHfEGonK72FOllXPKLM.roa (hash: mQgbn3Sty6H0kID4K5HG3Lec+s4hrDOIUIKg6j/AGRo=) 15: oSJ76RTJAM4Rkm0VytsagsICSMI.roa (hash: 5KF6cvuY3cWzSG6wpKOaFIJmUmHSua9Uf0BUoXvpF6w=) 16: w56M8w2Q_qfZu41_qHQO5zW4jwk.roa (hash: RAJ8brQ6bDHIdv8dDAPBh54oGKG2dIlrIsob6HcQ27I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:89:7a:24:b4:33:21:2b:79:6c:bb:c6:1b:1d:67:3a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Sep 10 04:01:18 2026 GMT Not After : Sep 11 04:01:18 2026 GMT Subject: CN=123fc82b4024c0a1257e1d1b5e952eb50e4c5e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:66:9f:94:95:14:22:4b:ca:91:ad:5f:1f:c7: 31:69:69:e6:71:d4:fe:33:33:c9:cd:7f:c8:33:1c: 8c:93:24:3f:66:2e:7e:31:2f:4f:37:6c:44:e4:c7: 5f:0f:01:1b:6a:93:30:e1:47:3e:2e:56:3c:d3:2c: 54:69:47:17:5e:61:d3:99:70:47:a9:f9:2f:98:3c: e5:5c:11:14:19:d3:b1:26:f8:5c:72:42:00:8e:a7: 84:a7:ad:46:03:13:bc:2e:c1:21:88:03:11:c6:08: bb:41:63:80:79:42:ea:be:2c:5f:da:9e:b2:cf:4a: 36:33:d1:08:42:96:95:5a:72:d9:92:a1:d9:39:95: 71:e3:25:71:89:d0:b0:4d:eb:c5:4a:bd:ca:ac:80: f6:c2:87:fc:c0:43:90:b1:d0:fa:a2:3b:5b:f1:87: ae:2a:df:4c:d4:fd:64:61:c4:00:7d:6e:8e:49:9c: bc:ec:04:b9:cf:ff:c0:f1:4c:af:dd:0f:92:bf:2c: 0f:d9:63:63:a5:54:60:74:6b:c2:06:df:9a:3b:e5: 76:16:26:4d:e6:b2:41:22:d3:01:58:20:75:b0:96: b8:02:40:7b:83:d9:30:4b:82:b5:15:4e:f4:ee:81: 3a:6c:55:e0:d1:47:3b:66:6d:56:82:ce:68:ce:9e: aa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3F:C8:2B:40:24:C0:A1:25:7E:1D:1B:5E:95:2E:B5:0E:4C:5E:4B X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:e8:5c:dd:40:6d:fc:93:81:ee:dc:43:b1:8f:2d:8d:63:d3: 90:b7:3a:b6:79:13:de:9a:e0:bf:e4:25:43:92:f1:3e:f2:4d: ea:2c:89:ba:10:99:a2:60:4c:75:25:48:bc:07:0e:02:47:f0: ff:f4:91:38:a4:ec:b0:b3:a9:0c:66:ab:95:0b:2f:7c:10:4c: fc:40:a2:3b:77:6b:57:6d:50:95:60:aa:ff:2c:94:33:58:c2: e9:ef:14:57:31:c3:cd:1b:e5:35:5b:f4:d0:4f:dd:00:8b:30: 41:90:32:0e:7f:79:ab:e0:5b:18:b4:82:2b:84:4b:f8:6c:f1: e4:f7:99:52:36:2b:d1:af:2e:f8:58:cd:09:a1:f4:88:46:e7: 7a:19:f6:36:07:48:63:81:bd:11:ee:ff:a7:93:45:e6:af:9e: c7:24:0a:b4:e4:6f:03:29:bf:d4:1f:03:2b:3b:77:39:b6:f0: 77:d9:0c:1a:b6:db:52:45:b9:0f:36:b9:59:22:8e:88:82:f0: 9c:0e:ec:d5:81:67:d4:25:c0:30:3b:22:c1:3b:3f:54:b5:f8: 8f:3d:33:20:63:d5:1e:ad:a9:d1:31:5a:3a:b3:fe:32:08:21: a8:83:f3:bd:a3:4c:67:42:51:5c:d3:0b:73:f9:cb:7a:f7:cb: 66:9d:ba:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCJeiS0MyEreWy7xhsdZzp4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwOTEwMDQwMTE4WhcNMjYwOTExMDQwMTE4WjAzMTEwLwYDVQQD EygxMjNmYzgyYjQwMjRjMGExMjU3ZTFkMWI1ZTk1MmViNTBlNGM1ZTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmaflJUUIkvKka1fH8cxaWnmcdT+ MzPJzX/IMxyMkyQ/Zi5+MS9PN2xE5MdfDwEbapMw4Uc+LlY80yxUaUcXXmHTmXBH qfkvmDzlXBEUGdOxJvhcckIAjqeEp61GAxO8LsEhiAMRxgi7QWOAeULqvixf2p6y z0o2M9EIQpaVWnLZkqHZOZVx4yVxidCwTevFSr3KrID2wof8wEOQsdD6ojtb8Yeu Kt9M1P1kYcQAfW6OSZy87AS5z//A8Uyv3Q+SvywP2WNjpVRgdGvCBt+aO+V2FiZN 5rJBItMBWCB1sJa4AkB7g9kwS4K1FU707oE6bFXg0Uc7Zm1Wgs5ozp6qQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBI/yCtAJMChJX4dG16VLrUOTF5LMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFehc3UBt /JOB7txDsY8tjWPTkLc6tnkT3prgv+QlQ5LxPvJN6iyJuhCZomBMdSVIvAcOAkfw //SROKTssLOpDGarlQsvfBBM/ECiO3drV21QlWCq/yyUM1jC6e8UVzHDzRvlNVv0 0E/dAIswQZAyDn95q+BbGLSCK4RL+Gzx5PeZUjYr0a8u+FjNCaH0iEbnehn2NgdI Y4G9Ee7/p5NF5q+exyQKtORvAym/1B8DKzt3Obbwd9kMGrbbUkW5Dza5WSKOiILw nA7s1YFn1CXAMDsiwTs/VLX4jz0zIGPVHq2p0TFaOrP+MgghqIPzvaNMZ0JRXNML c/nLevfLZp26uA== -----END CERTIFICATE-----Generated at Thu Sep 10 12:28:30 2026 by rpki-client