$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json) Hash identifier: s3NKlKhhKLJZD+K8LqPAybeY7M8GVhqcEwT+SbeptQQ= Subject key identifier: 68:AA:26:26:54:3E:FF:77:5C:FC:CF:1D:AB:78:3B:D5:C6:EF:CB:38 Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 01A08AC368586F8DAB75189B8FED6BBC7848 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft Manifest number: 1A53 Signing time: Thu 10 Sep 2026 10:00:57 +0000 Manifest this update: Thu 10 Sep 2026 10:00:57 +0000 Manifest next update: Fri 11 Sep 2026 10:00:57 +0000 Files and hashes: 1: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: KsdIPdPwFc2I21zdWYzpn868o0Sf/5dGGPAL4sPWoYg=) 2: K2pv1joH33JGXTFgdf1GvHFNyOI.roa (hash: ZEpuJAN3j9YTqui19t7uNFdffmnYfLWbwWbEMfD7KU0=) 3: Qa4j2vggkqNGhqUJxufFEhTXf1Q.roa (hash: /qjjWw69vtyAWOv6PADeDd1WN8SkDOm5Fp4obHAorbY=) 4: R7B3oum7BpCTPNvgBRsQX2z2FVg.roa (hash: 1yQXxJ0NPuLrgm3ZJmbrNpelz2efuDlLTtJpmLa5Lyk=) 5: frdjE4Wx38p5EUYNv0lgccc2f1Q.roa (hash: JurRqiiO3KqAIZd8NOglvrx6zYK4Dcv5SLr7KkdNG1w=) 6: h1UT6NFg3ZpYeiiCgHRBp-1U-NA.roa (hash: Xy3UzarjqLczIZsj3TWwqdDs3SH1huHxF+E73HFRf1M=) 7: o8eX56TS1SQhGzwJAmHIqx0vW0U.roa (hash: DbuFGcW2GBDvibRV74wfir2bnFicP07zDNDVvnpsCHw=) 8: smEJ6hLs20YbGMTT0hsZU0Olco8.roa (hash: 64a/5YDgJXJtCa0mUs/71cssAkwI0Nj2x00SBWT2qXI=) 9: w0B2Gqbwfzp_NJu2rxJWtvJ41DE.roa (hash: AOaMAW39Y9aDj5YPj7EZWpYQeaBZN2RRoty+ksqKsB0=) 10: z-UevhOt9DbJ3mo4g9NjEb9nzTg.roa (hash: IuS71qLi3haAYiRwxpMdF13P+Vv7zxjdP29UxCKm7CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:c3:68:58:6f:8d:ab:75:18:9b:8f:ed:6b:bc:78:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Sep 10 10:00:57 2026 GMT Not After : Sep 11 10:00:57 2026 GMT Subject: CN=68aa2626543eff775cfccf1dab783bd5c6efcb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:e1:de:f1:b0:b5:db:5e:f8:26:46:22:0a: 22:35:ac:93:30:58:71:49:6c:01:19:c6:28:d2:07: 59:8e:8d:60:32:35:e7:8f:c0:e5:ee:6a:b3:b0:4f: a4:29:0d:f4:26:31:e5:c7:41:71:68:89:e5:da:fe: 3b:c8:b5:08:8c:b7:99:c7:ae:62:8c:f0:fd:4b:3d: 65:b1:46:76:a8:35:c0:08:e5:d0:38:89:12:be:75: 14:2c:fb:3b:8a:6a:4c:f5:34:5e:eb:ba:2e:e6:91: 41:65:91:17:1a:24:ae:33:85:1e:0e:45:3f:db:c9: 5a:5f:83:c7:0c:ca:ff:eb:c5:f7:ea:40:c0:23:01: d9:fe:b9:3e:05:a9:4f:f7:60:ef:6b:91:d5:1d:02: 6e:fa:3d:02:7c:d4:c5:9f:77:2a:a2:7e:e9:2c:85: 69:9f:ea:26:91:f3:3c:c8:43:1b:6e:e0:17:ac:42: 79:4f:5c:47:82:c0:dd:24:85:ba:03:0f:cb:d4:e0: 65:ca:97:e0:82:54:86:8f:aa:d1:c9:27:63:1c:ef: b1:d4:29:05:87:2a:b1:36:f4:cc:b9:71:dc:4f:4b: e0:de:a5:bb:e7:2e:fa:86:67:54:05:f7:88:78:5b: f7:21:27:c9:d2:c4:a6:d9:a2:b8:ca:29:ce:f9:d0: a4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AA:26:26:54:3E:FF:77:5C:FC:CF:1D:AB:78:3B:D5:C6:EF:CB:38 X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:77:31:c0:52:aa:e4:68:96:16:60:be:73:41:7d:82:4c:cd: 82:cb:5c:70:07:44:56:e0:d1:2b:fd:59:b7:51:0a:c9:c2:68: ea:64:34:f3:59:3c:c1:27:0b:d0:ef:61:ab:4d:36:21:43:ae: 3b:85:a2:07:49:2a:40:1e:1d:26:88:16:90:5d:03:05:a2:b2: 46:59:3c:b8:a0:f8:0e:e0:ba:ab:76:f5:ca:6e:d1:9d:f9:2a: 8e:af:85:8e:e2:b3:93:4c:39:85:51:37:fe:ae:92:87:31:fa: 35:a6:e1:4b:c4:7c:b9:4a:d3:cb:12:ee:ba:61:1d:12:b8:d9: dc:d4:58:4d:da:54:c7:bf:2e:bb:3f:ae:40:60:ef:ac:f4:f3: 8c:fe:9a:e2:8a:f4:66:46:d0:17:70:2d:31:49:22:26:9d:58: b0:2d:a0:8a:6d:1f:95:c4:58:45:84:80:0e:61:d9:a7:b8:86: 68:32:1f:41:f0:7c:25:c7:a7:7a:28:08:c6:b9:a1:13:02:32: 6f:af:56:a8:90:4e:70:b0:d2:0a:5c:35:ca:ce:69:a4:e3:a9: 59:fa:99:eb:a4:b4:05:d2:5c:7d:06:bb:9e:72:68:89:b3:f6: b2:0b:d8:57:ca:82:5b:1b:fd:f0:58:9c:db:40:f0:15:b2:b3: 5f:d9:75:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKw2hYb42rdRibj+1rvHhIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjYwOTEwMTAwMDU3WhcNMjYwOTExMTAwMDU3WjAzMTEwLwYDVQQD Eyg2OGFhMjYyNjU0M2VmZjc3NWNmY2NmMWRhYjc4M2JkNWM2ZWZjYjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVLh3vGwtdte+CZGIgoiNayTMFhx SWwBGcYo0gdZjo1gMjXnj8Dl7mqzsE+kKQ30JjHlx0FxaInl2v47yLUIjLeZx65i jPD9Sz1lsUZ2qDXACOXQOIkSvnUULPs7impM9TRe67ou5pFBZZEXGiSuM4UeDkU/ 28laX4PHDMr/68X36kDAIwHZ/rk+BalP92Dva5HVHQJu+j0CfNTFn3cqon7pLIVp n+omkfM8yEMbbuAXrEJ5T1xHgsDdJIW6Aw/L1OBlypfgglSGj6rRySdjHO+x1CkF hyqxNvTMuXHcT0vg3qW75y76hmdUBfeIeFv3ISfJ0sSm2aK4yinO+dCkmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiqJiZUPv93XPzPHat4O9XG78s4MB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3cxwFKq 5GiWFmC+c0F9gkzNgstccAdEVuDRK/1Zt1EKycJo6mQ081k8wScL0O9hq002IUOu O4WiB0kqQB4dJogWkF0DBaKyRlk8uKD4DuC6q3b1ym7Rnfkqjq+FjuKzk0w5hVE3 /q6ShzH6NabhS8R8uUrTyxLuumEdErjZ3NRYTdpUx78uuz+uQGDvrPTzjP6a4or0 ZkbQF3AtMUkiJp1YsC2gim0flcRYRYSADmHZp7iGaDIfQfB8JceneigIxrmhEwIy b69WqJBOcLDSClw1ys5ppOOpWfqZ66S0BdJcfQa7nnJoibP2sgvYV8qCWxv98Fic 20DwFbKzX9l1Xw== -----END CERTIFICATE-----Generated at Thu Sep 10 17:08:34 2026 by rpki-client