$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: SnjrXtdiH8jl6/LorFCRpfSSowjgvQqCxhRjyuTRNjU= Subject key identifier: E5:9E:40:C7:2F:DB:A0:33:44:D6:05:35:51:C8:E3:D3:21:8B:63:80 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 01A0E399BB0A385F3CC556925BFCCE31D241 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 167A Signing time: Sun 27 Sep 2026 16:01:37 +0000 Manifest this update: Sun 27 Sep 2026 16:01:37 +0000 Manifest next update: Mon 28 Sep 2026 16:01:37 +0000 Files and hashes: 1: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 2: G_q5f4vw9sXuTqx5koUR1CtdghA.roa (hash: /DXlK/XppxG3EnWKLZh5jMXkLtlLrmR+JVAULY2Fmuw=) 3: Kh4_VoB6YEgaSwRCsMKIhi6qzp4.roa (hash: e0GnvRoQCozfmziXi7HSJRfK79f9SZF+NnjU+2fBto0=) 4: VbMi_wHP2Osb2Lj2_Em7nJaGNqg.roa (hash: DXcUvI/zDgzBNbnxDQ9BXaRP7H2Z8Bv9bfXDaGGxiyQ=) 5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 8: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 9: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 10: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 11: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 12: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 13: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: /vdGF87VSC+hPAUZq6y+PuMA2iMm9Xa6/JInJy/jk7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e3:99:bb:0a:38:5f:3c:c5:56:92:5b:fc:ce:31:d2:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Sep 27 16:01:37 2026 GMT Not After : Sep 28 16:01:37 2026 GMT Subject: CN=e59e40c72fdba03344d6053551c8e3d3218b6380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0f:93:f2:f2:00:a6:52:22:43:59:46:90:35: 4a:b7:cc:97:9d:dc:cc:7a:3b:d9:72:d4:c9:9b:16: 04:dc:83:b1:49:41:42:e4:18:cd:e6:b0:0f:60:cd: 94:62:81:7b:61:ec:6d:80:57:c3:34:73:02:67:83: 2e:15:86:df:f3:2f:9f:4d:86:58:75:dd:bd:61:77: f1:1a:8c:46:80:ed:d3:64:2d:be:0f:a5:2b:37:9a: 34:44:d6:f7:2f:86:be:80:d4:d7:6a:98:32:a2:6f: 75:90:98:80:c5:54:64:8c:85:7d:ee:82:56:68:ef: 02:ed:b1:2d:0b:67:bc:c7:6d:2b:57:ad:51:62:32: ba:6d:94:0b:66:c3:5c:f8:88:2b:00:fc:a9:f0:a8: e5:fe:89:12:33:52:08:51:82:c7:a9:3b:77:29:eb: d6:83:e8:e9:d7:b9:ae:16:a5:27:fb:30:e5:9c:57: 16:23:a5:3c:ad:e6:94:9b:92:5c:26:40:12:48:61: cc:a6:73:d1:a6:8f:21:43:b6:65:9e:f0:bf:e8:23: be:1d:e0:40:75:b2:c0:42:25:70:aa:c1:b1:de:c2: 7a:b9:ee:e9:3a:c9:5e:40:62:4c:00:80:5e:43:c9: cb:3b:d3:bb:62:05:86:8d:c1:2e:16:c6:cd:9f:60: be:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9E:40:C7:2F:DB:A0:33:44:D6:05:35:51:C8:E3:D3:21:8B:63:80 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:69:32:c6:a6:40:34:c8:9f:15:f7:63:bc:23:cf:d6:25:04: 80:90:18:f6:92:54:5c:b7:ad:7a:56:1d:bb:31:90:d3:06:49: b0:9e:2e:ba:bb:1c:d2:d5:db:2a:41:c5:18:78:66:de:eb:8d: 9c:19:8d:7f:18:05:cb:72:75:82:b5:26:fb:bd:80:51:6e:22: 24:d5:eb:e4:64:ff:26:a3:0f:56:66:29:40:d7:82:d4:d6:aa: 96:00:82:df:34:2d:ce:73:82:e6:cc:fb:b8:d8:5a:81:60:e1: df:43:e3:ec:88:f9:76:88:90:50:2f:de:09:23:09:98:0a:27: c1:e0:c6:73:cd:e6:5b:b9:73:bc:b8:12:f5:46:3a:ac:ed:02: 43:66:3a:c1:7c:a8:79:83:2d:12:26:22:5d:be:24:6d:75:43: 96:c0:69:10:55:d0:31:5b:59:ef:d4:5d:0c:05:40:74:5b:41: 78:f4:88:a1:5d:d4:5f:de:02:38:12:50:51:ec:41:a1:d5:ff: 2f:bf:77:62:54:9a:b5:c6:2d:35:fd:00:00:90:7f:3c:0c:e6: 3d:0a:0a:26:ce:f5:e9:78:7a:66:2e:38:34:8f:ae:3a:46:ff: 62:61:e1:6d:06:58:30:36:92:81:a3:f4:5c:29:c0:34:89:3e: f0:d0:29:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDjmbsKOF88xVaSW/zOMdJBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwOTI3MTYwMTM3WhcNMjYwOTI4MTYwMTM3WjAzMTEwLwYDVQQD EyhlNTllNDBjNzJmZGJhMDMzNDRkNjA1MzU1MWM4ZTNkMzIxOGI2MzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw+T8vIAplIiQ1lGkDVKt8yXndzM ejvZctTJmxYE3IOxSUFC5BjN5rAPYM2UYoF7YextgFfDNHMCZ4MuFYbf8y+fTYZY dd29YXfxGoxGgO3TZC2+D6UrN5o0RNb3L4a+gNTXapgyom91kJiAxVRkjIV97oJW aO8C7bEtC2e8x20rV61RYjK6bZQLZsNc+IgrAPyp8Kjl/okSM1IIUYLHqTt3KevW g+jp17muFqUn+zDlnFcWI6U8reaUm5JcJkASSGHMpnPRpo8hQ7ZlnvC/6CO+HeBA dbLAQiVwqsGx3sJ6ue7pOsleQGJMAIBeQ8nLO9O7YgWGjcEuFsbNn2C+BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWeQMcv26AzRNYFNVHI49Mhi2OAMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmkyxqZA NMifFfdjvCPP1iUEgJAY9pJUXLetelYduzGQ0wZJsJ4uursc0tXbKkHFGHhm3uuN nBmNfxgFy3J1grUm+72AUW4iJNXr5GT/JqMPVmYpQNeC1NaqlgCC3zQtznOC5sz7 uNhagWDh30Pj7Ij5doiQUC/eCSMJmAonweDGc83mW7lzvLgS9UY6rO0CQ2Y6wXyo eYMtEiYiXb4kbXVDlsBpEFXQMVtZ79RdDAVAdFtBePSIoV3UX94COBJQUexBodX/ L793YlSatcYtNf0AAJB/PAzmPQoKJs716Xh6Zi44NI+uOkb/YmHhbQZYMDaSgaP0 XCnANIk+8NAp3A== -----END CERTIFICATE-----Generated at Sun Sep 27 23:15:34 2026 by rpki-client