$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json) Hash identifier: 9g8e8mHwC3dT+cQEdHBYtbIykkFt1mP7S1XtPuS2kic= Subject key identifier: 52:62:AE:73:C4:1C:64:F5:53:C9:DA:B7:69:69:EF:64:8A:2D:7B:D9 Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Certificate serial: 01A0B6F69364FD4FECB5EA94B9BC37100EB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft Manifest number: 1A6C Signing time: Sat 19 Sep 2026 00:00:07 +0000 Manifest this update: Sat 19 Sep 2026 00:00:07 +0000 Manifest next update: Sun 20 Sep 2026 00:00:07 +0000 Files and hashes: 1: 044xYX9HsasQkNnZ6gNIrDun9Kk.asa (hash: QqGXRDWhRxy4fIleJhf8VPuBnT0lLwsILfpI5ZVk2bI=) 2: 21UC4Dg27lTwnVnoP-1hWx8Jrac.asa (hash: P5jYP5ImmwlHStzib0wGM6vyZuqyna1VWXgPkWJ521s=) 3: 3j6ITLuEAtzvq7lDDH-_99jLsyw.asa (hash: emyDEkQmvd9qMUG9y8IBKAbGI4wIM9zsTIQoNhtKSiU=) 4: 4blS8i-IvJFmYcw1UMVYU50adH4.roa (hash: PH25rQxOqMdKEUIOyGDzXkRgbKvHvrgDiCAwjxsY21M=) 5: Bv2hzFMshraYJZMhKiNAPQW5yzo.roa (hash: mozy1oa9z+5oxHPkAdcnEjtIYIUHTFuELC5cUHnd2ds=) 6: FXZzLUTLI2bnJX3HE0iocMnGK24.asa (hash: 0jHNXzmBRRsiRYGYoiH0GyC90Hc/n11rPyQ1ORy1E6M=) 7: GN5fvWr40gdv3JGN6vxjkZjGr-M.roa (hash: opZrG09Q9xFPvDT9n75han8TkL1qCnmykUVsSTdQ9Hw=) 8: ONEBxRFqRY2aPMMFa_3ak7_LP04.roa (hash: 6sHhfn9wB3VfYGqWY+wewX0hRZU1FUHpsvmiMpmOan0=) 9: SpVJq_aWC8IH5JWeljASL-sUdR4.roa (hash: WWb4Srs1EjuxCuzB13EtjRKgil05qhr6qF6kWwF7M7g=) 10: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: NAClN55xqLgNgQUS726xy42Miw3PSUP4DKM0Kb5IENE=) 11: l5bd30j_MQRGXqfWahBHTqJdoFc.roa (hash: t0VGEeZo8Fahoj1ko4o+rBeCd1Be3+5NalKn7WyM9tU=) 12: lwxC-jH6X2q9Mt74lepdPD3W9EM.asa (hash: 4RgSfjSU8Flpmo/qpEf1hYBnqzjBw2dPRj3BdEOkib8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Sep 2026 00:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b6:f6:93:64:fd:4f:ec:b5:ea:94:b9:bc:37:10:0e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Validity Not Before: Sep 19 00:00:07 2026 GMT Not After : Sep 20 00:00:07 2026 GMT Subject: CN=5262ae73c41c64f553c9dab76969ef648a2d7bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e1:4f:60:53:b8:17:1c:2f:b3:13:33:30:46: ba:23:df:71:0c:4a:50:40:71:f6:e0:ef:76:aa:ad: cc:28:8e:69:6a:d1:e0:e7:84:8d:60:d5:04:54:fb: 6a:b0:f3:c5:e5:c6:2b:ca:34:f9:6c:55:b0:a3:e8: 35:1f:1b:42:a9:a5:e3:e9:7a:82:de:bc:4a:e5:f8: 58:61:00:ff:4c:47:6e:19:c2:f0:dd:ad:74:27:44: 2e:cb:d5:f2:40:46:61:d6:6c:ec:22:35:ce:62:a2: 8c:fd:fc:f7:0b:1d:91:ed:55:d1:59:64:05:21:0c: 47:6b:10:56:55:5d:9c:1c:c2:d8:c2:36:f5:a9:93: e6:4a:40:e1:76:72:f3:3b:50:60:7b:a1:7b:9d:db: 20:f8:35:b7:70:00:2f:e9:cf:e7:14:3c:02:a0:36: 9b:67:45:e1:a8:72:b4:3a:83:f3:cd:f9:c9:e3:5c: 58:8c:6b:61:8d:01:1f:f5:9e:8e:ba:21:2a:29:ca: 6c:fc:b9:d6:37:ae:76:9a:e3:e5:f2:f4:46:d6:54: fc:15:17:27:de:d3:d1:34:70:23:a7:2a:6d:30:9b: b4:23:a2:d1:0c:4b:d1:25:74:3f:2b:d7:c7:28:c5: 5b:0a:2a:50:0d:dd:bc:99:b6:6e:48:9c:0d:70:01: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:62:AE:73:C4:1C:64:F5:53:C9:DA:B7:69:69:EF:64:8A:2D:7B:D9 X509v3 Authority Key Identifier: keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f5:43:0a:2d:93:65:40:2a:14:2b:93:aa:38:c5:5e:32:f3: 42:84:35:dc:c0:8c:ac:c1:ac:bc:94:d2:da:5b:89:a1:fe:91: dd:76:70:ec:e9:3a:28:ca:ba:39:d4:e4:ea:35:44:14:84:ce: 4c:e0:a1:f4:2c:cf:fc:58:67:f2:c4:48:9d:52:b3:90:47:f2: 24:42:ee:2e:2a:78:78:d6:ac:6e:1d:db:9c:c5:69:85:33:1f: 60:56:66:b4:5c:5e:b0:93:99:4e:06:50:22:41:07:88:b6:09: a3:12:2c:97:fe:6c:59:6e:24:17:9d:3b:f9:51:16:5d:4f:61: ca:19:64:23:93:ec:46:7a:8c:83:9a:bb:3f:d2:30:d9:ee:8c: ae:b5:9d:1e:3e:d8:d1:b9:f2:67:06:f2:93:dc:0f:bb:f2:15: 32:f5:97:a1:e3:f2:e8:2f:18:f9:e8:c7:97:c4:d3:90:03:fb: 25:b5:58:ed:f6:11:d5:0f:ed:d1:a5:d5:bd:02:85:d0:9a:97: 11:84:73:2f:bd:6c:21:ad:a6:39:22:a9:84:b3:c1:17:41:e8: b6:89:79:b1:55:f2:1f:24:4b:17:7a:09:f3:5a:be:f5:37:38: 7e:cd:43:9f:ce:fe:99:17:23:67:1a:d8:e6:36:50:ff:b1:fc: 4a:85:4e:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC29pNk/U/steqUubw3EA65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4 MGIxZTMwHhcNMjYwOTE5MDAwMDA3WhcNMjYwOTIwMDAwMDA3WjAzMTEwLwYDVQQD Eyg1MjYyYWU3M2M0MWM2NGY1NTNjOWRhYjc2OTY5ZWY2NDhhMmQ3YmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uFPYFO4FxwvsxMzMEa6I99xDEpQ QHH24O92qq3MKI5patHg54SNYNUEVPtqsPPF5cYryjT5bFWwo+g1HxtCqaXj6XqC 3rxK5fhYYQD/TEduGcLw3a10J0Quy9XyQEZh1mzsIjXOYqKM/fz3Cx2R7VXRWWQF IQxHaxBWVV2cHMLYwjb1qZPmSkDhdnLzO1Bge6F7ndsg+DW3cAAv6c/nFDwCoDab Z0XhqHK0OoPzzfnJ41xYjGthjQEf9Z6OuiEqKcps/LnWN652muPl8vRG1lT8FRcn 3tPRNHAjpyptMJu0I6LRDEvRJXQ/K9fHKMVbCipQDd28mbZuSJwNcAFeHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJirnPEHGT1U8nat2lp72SKLXvZMB8GA1UdIwQY MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct ZmZiNzA5Zjc2NjhjLzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfVDCi2T ZUAqFCuTqjjFXjLzQoQ13MCMrMGsvJTS2luJof6R3XZw7Ok6KMq6OdTk6jVEFITO TOCh9CzP/Fhn8sRInVKzkEfyJELuLip4eNasbh3bnMVphTMfYFZmtFxesJOZTgZQ IkEHiLYJoxIsl/5sWW4kF507+VEWXU9hyhlkI5PsRnqMg5q7P9Iw2e6MrrWdHj7Y 0bnyZwbyk9wPu/IVMvWXoePy6C8Y+ejHl8TTkAP7JbVY7fYR1Q/t0aXVvQKF0JqX EYRzL71sIa2mOSKphLPBF0Hotol5sVXyHyRLF3oJ81q+9Tc4fs1Dn87+mRcjZxrY 5jZQ/7H8SoVOKQ== -----END CERTIFICATE-----Generated at Sat Sep 19 10:04:01 2026 by rpki-client