$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json) Hash identifier: 8bEnnsV9+6iaxvEgK3fW1GkCdvn8qdqzkN+aSz8iRrs= Subject key identifier: 43:0E:46:D2:CD:48:34:89:E0:0E:FE:3D:5F:03:24:6A:95:B8:E6:66 Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 01A06D9511D5390ED6FA3BBE474437F301CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft Manifest number: 1B4D Signing time: Fri 04 Sep 2026 18:01:20 +0000 Manifest this update: Fri 04 Sep 2026 18:01:20 +0000 Manifest next update: Sat 05 Sep 2026 18:01:20 +0000 Files and hashes: 1: 19Q2Dwhtepvh3WfcRXocelqULL8.roa (hash: 5gim+c2a2kpRDHritwN6RumGls9psmp/ew2vMiVkt54=) 2: 4SJJucH40Dscf3Ue62wtU0DfH6E.roa (hash: QGCBTFVXrzql7PtcPo7oGZ6zg9NODVzu4Qj7AspLapc=) 3: 9NFbvxj2w7VM6vxKq1Roz_jojjQ.roa (hash: kit6Kwkn9tJ2JznDgHVoh92jAz03quG3UuogXP7lLQY=) 4: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: BRbHEH7+2MaT8liB2a97Og45iKDZXdGn+BHCgvbnqbo=) 5: Fm8UQDDxRj3AapGVONseve1Vu_c.roa (hash: /MMrY/Cw2vuv3Ihg0AIYNFIDKJbp4cDD3gVv3uf72Gk=) 6: GM3ERJU6CIy7dwdH0zdNwprJcyY.roa (hash: IlzjX1IkwyvBmzjj9sSoXNpn+4Aebe2rR4YjxBC4Rpw=) 7: HOHhNiuwB0cMh5RUFF-1lXt5zw8.roa (hash: k0AGLs0YgoPPmCz6XJ6TT1Z/0Wgwq5Qa6Ym6t+Mb83g=) 8: HmuiSy6DiqyFIS3hKu7LdivnQl0.roa (hash: AUDFtOT4GZ2PlVwxPCH5qqp0l2hQvma3gFblT+w1Ox0=) 9: IKu2yGBkoazXpkiiazb1p4jf3OI.roa (hash: sGPG+CicCuj6ii9AJ1UODtX4hYRlCD8JM7C2FLI0Fac=) 10: RahpEOjDk8JGqVaMnjYNHjqMCDk.roa (hash: 3i16wtfdxMwVP4jwU43s2Etd+QzTAEC6HDDbzF8Ohw4=) 11: TC_eT-_uQmNc7oH25j9ouSW_pbQ.roa (hash: tFzELYSe05eXp55I4gzQwEHo9uvcyGGItcMS2z7uaLI=) 12: oe9__c4vQI-1sLDyADedRP1CO-k.roa (hash: oY6L5eGC8aMPjhIdr6obVmsLpQESXuitNzVikpRUca0=) 13: pXmxylidYiS8qdJ3VaZ9yLskNbE.roa (hash: TusGBQalo9CLc6zboQZGITSpw51x7npY2VYZcmB0+eY=) 14: vOegqKH11j2ljvuv3PcKJ5eKLGQ.roa (hash: Xifos647golhy2/qMNU8LvVXxPFJdsELgOMybMZy3CM=) 15: xBCJBwVBWVhFXMpZnk1hhNHEtus.roa (hash: JhFeug15ySPa9A1JPmxH1r0jpNDX2NFdPlUO6jS53AM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6d:95:11:d5:39:0e:d6:fa:3b:be:47:44:37:f3:01:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Sep 4 18:01:20 2026 GMT Not After : Sep 5 18:01:20 2026 GMT Subject: CN=430e46d2cd483489e00efe3d5f03246a95b8e666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d7:d2:26:53:ae:d0:0e:37:d4:fe:34:0d:d2: 95:02:73:7e:07:6f:20:a4:a2:24:44:70:ae:0f:24: ae:16:65:13:9a:0f:c0:88:8e:e9:a1:5c:55:66:60: b5:d5:51:24:18:dd:59:84:f1:ef:a0:43:fa:23:78: 04:2b:bb:01:7a:9a:bb:97:df:95:0a:e4:79:84:70: fd:42:bc:63:82:0e:4f:7a:d7:3b:ff:a7:80:e4:a4: 48:63:34:5c:bf:8d:7d:f8:2f:6f:a3:6e:cd:f9:61: 39:88:61:52:0d:ce:ef:34:45:2f:b0:60:85:18:6b: ba:a1:6e:c8:42:1b:2a:f0:3c:cb:c1:41:72:3a:65: d4:87:6d:a2:76:3e:47:75:c2:b5:3b:68:fd:b2:ef: e4:47:c3:26:9a:bf:94:b9:31:ef:89:7a:ea:f9:3e: 89:0a:e6:f7:63:0c:ee:25:de:74:e6:0a:6c:53:ff: d8:14:bb:ac:c7:8f:d3:1e:4b:26:9c:11:cb:e0:ce: 18:5a:f1:f7:e1:61:aa:4f:e9:3a:05:f5:bd:85:b7: 26:05:d8:29:83:0d:43:79:34:ac:ff:2c:53:75:ac: 5e:9d:9c:ae:be:b3:87:bb:c0:a0:8e:e1:77:89:8a: 7a:7a:98:00:0f:05:2f:c7:73:25:4c:e4:cb:81:89: 16:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0E:46:D2:CD:48:34:89:E0:0E:FE:3D:5F:03:24:6A:95:B8:E6:66 X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:49:14:e9:22:6b:23:87:dd:98:54:a5:32:07:cd:ff:ee:51: 97:6c:44:fc:a5:03:0f:2b:cf:4b:03:65:72:60:71:69:d7:ea: 6f:3e:ba:b7:31:53:e3:ad:fb:3e:7f:03:cb:91:b1:37:e4:77: cc:bf:0b:f5:e0:ba:16:02:9d:8d:e7:cb:94:f7:b2:fa:c2:3b: a9:97:1e:66:43:8a:fb:33:36:cd:63:8e:d1:0a:e8:b0:23:a7: 94:9d:3c:3d:13:12:51:f3:1f:81:f7:ac:be:15:14:10:71:bf: 09:79:5f:2f:6f:f9:85:fc:cd:17:de:5f:af:0f:11:3f:44:bb: 74:a8:7c:34:2d:bd:d2:6a:b7:10:74:97:66:86:fb:99:01:19: ee:a6:57:e2:de:39:32:4e:9d:f5:cd:26:e5:bf:fe:06:f9:ad: 42:bd:1f:c3:92:3a:41:c6:f8:a2:61:3e:13:da:27:5c:a7:29: e8:73:ce:4f:fc:4d:17:36:df:25:00:79:00:d8:dd:3e:36:2c: d8:3d:33:23:74:e0:cb:e5:8d:a8:6e:a2:1e:1a:a1:1c:d1:94: 5d:c5:66:7a:40:73:d1:56:84:24:c8:07:88:af:1d:fa:dc:18: e5:34:27:82:67:c9:4a:15:ad:fb:b0:d1:b7:6a:94:0c:d3:2f: 4f:bb:14:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBtlRHVOQ7W+ju+R0Q38wHOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwOTA0MTgwMTIwWhcNMjYwOTA1MTgwMTIwWjAzMTEwLwYDVQQD Eyg0MzBlNDZkMmNkNDgzNDg5ZTAwZWZlM2Q1ZjAzMjQ2YTk1YjhlNjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntfSJlOu0A431P40DdKVAnN+B28g pKIkRHCuDySuFmUTmg/AiI7poVxVZmC11VEkGN1ZhPHvoEP6I3gEK7sBepq7l9+V CuR5hHD9Qrxjgg5Petc7/6eA5KRIYzRcv419+C9vo27N+WE5iGFSDc7vNEUvsGCF GGu6oW7IQhsq8DzLwUFyOmXUh22idj5HdcK1O2j9su/kR8Mmmr+UuTHviXrq+T6J Cub3YwzuJd505gpsU//YFLusx4/THksmnBHL4M4YWvH34WGqT+k6BfW9hbcmBdgp gw1DeTSs/yxTdaxenZyuvrOHu8CgjuF3iYp6epgADwUvx3MlTOTLgYkWyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMORtLNSDSJ4A7+PV8DJGqVuOZmMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkkU6SJr I4fdmFSlMgfN/+5Rl2xE/KUDDyvPSwNlcmBxadfqbz66tzFT4637Pn8Dy5GxN+R3 zL8L9eC6FgKdjefLlPey+sI7qZceZkOK+zM2zWOO0QrosCOnlJ08PRMSUfMfgfes vhUUEHG/CXlfL2/5hfzNF95frw8RP0S7dKh8NC290mq3EHSXZob7mQEZ7qZX4t45 Mk6d9c0m5b/+BvmtQr0fw5I6Qcb4omE+E9onXKcp6HPOT/xNFzbfJQB5ANjdPjYs 2D0zI3Tgy+WNqG6iHhqhHNGUXcVmekBz0VaEJMgHiK8d+twY5TQngmfJShWt+7DR t2qUDNMvT7sUPA== -----END CERTIFICATE-----Generated at Fri Sep 4 22:12:39 2026 by rpki-client