$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: BqytCu3KChgI7M/WdSQdOObAk51f0x5n3XK56mYFZbE= Subject key identifier: 26:5C:2C:E4:32:C9:2F:1A:3D:2E:1F:43:6A:46:A5:E0:FF:12:78:7D Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 01A0CDA218128A9D600BACACACC71184EFD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 1A86 Signing time: Wed 23 Sep 2026 09:39:07 +0000 Manifest this update: Wed 23 Sep 2026 09:39:07 +0000 Manifest next update: Thu 24 Sep 2026 09:39:07 +0000 Files and hashes: 1: 0VZp4QWne5bvAgKwv7SjoOEfGHs.roa (hash: jYh91mIzIriMnUPh9dL8jbBMf/TyJtraSuS+inHNoWM=) 2: 0pS0ka-H_pjf8zmsDhi1S6g_SD0.roa (hash: 3pwjPiGqhzZ7Y/680vy9pG+yzhMOL9IwvcISv966MT0=) 3: 8HZ9HwPcvCjV2P3D1Xns45l-b7g.roa (hash: DvNeLlKBHFprmUWgVpmbGaSEgyoFZqbsKOxc6r1Ij8M=) 4: 8f4-tHMe1_zfMdQiJbY1PQ5lT3c.roa (hash: 1EfLr/LiMTpt9+tNTY1NQrpFVMSuEtCowZrWCkArzsw=) 5: 8lHTKcd0GYAhajj68n6yCoBLBmg.roa (hash: /WULm6fdsfbYX9Ht5hhngSNry2Eyx0hFZ+HW4F+/kU4=) 6: CDW15xkeS6OmbwLRBoPS6jU75vY.roa (hash: QwvuuD4S5RPYpfv78JeIw3OyNPC4HswRW0j2aSR0Qnw=) 7: J3Nb9V1J66BnIsJ0KbxFX94VKXY.roa (hash: wcLCauUWs3bEGu09x4ivSvD/ChTk37avzRoy7sqTCsg=) 8: KhYPsUJXszCogziXLkfXgCSAFcc.roa (hash: +BqJ9SLh8ZxjscLvwLNKcYWD6QmDYK/8PfNPVI/SYPQ=) 9: OZz5Z73RCocTg0hscsirqJpi9Vg.roa (hash: vWpk+fzrrJttr02xG3C/WBrhT9TCYx+ekEsOWrAU8P4=) 10: pAF8GSze9ehTbgJAIF3FBa54cNk.roa (hash: PvFwSg+H0WDB7gVfETtfHniBE9Eh+MMRXqrqan++8pg=) 11: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: zRwqhgnUQbXYQqHEZxYkhdDRzZeh4+xvtJ/G5xoi3KQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 09:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:a2:18:12:8a:9d:60:0b:ac:ac:ac:c7:11:84:ef:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Sep 23 09:39:07 2026 GMT Not After : Sep 24 09:39:07 2026 GMT Subject: CN=265c2ce432c92f1a3d2e1f436a46a5e0ff12787d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:95:28:9c:2f:1d:54:74:27:44:49:9e:0c:98: 78:5f:de:7c:a5:3d:d4:1c:06:47:a8:3a:ec:df:df: 86:ba:de:f5:2f:7b:c8:e7:14:8b:b1:5c:52:fe:4a: 1d:f2:42:6e:af:e2:8e:0e:b1:f9:fc:1b:e6:cc:be: 59:d2:34:7f:ff:9f:0e:49:4b:6f:b4:52:2b:7a:f2: 13:27:5b:c1:21:4d:a4:9b:f6:a1:77:f3:38:b5:a4: c1:0e:df:f2:84:8a:fe:89:c4:66:bd:79:c5:1b:90: 62:4e:60:cb:cc:76:fc:e6:07:9c:a5:eb:fd:25:24: c1:99:76:fd:f3:b9:a8:f0:70:11:56:31:6d:46:e5: d5:e0:ea:83:9f:cb:7b:79:b3:22:03:80:95:9f:f4: 37:a5:6a:d5:4e:c9:a8:c9:0d:1d:31:4f:59:d9:2b: 84:2d:a2:61:5e:eb:72:c2:b4:37:2a:1f:8f:23:31: d5:7d:a9:00:40:a1:37:0b:97:58:ea:20:ff:88:47: 9f:a1:e4:40:f1:4f:68:a3:58:e0:2f:c9:98:0b:69: 9a:e9:7b:f7:34:26:08:91:42:14:b9:62:cd:d1:d5: d2:9a:db:0c:a9:e6:2a:0f:fb:3f:17:24:8e:3e:7e: 47:a1:17:92:0e:bf:88:50:21:fc:5c:bc:ba:cc:23: d1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5C:2C:E4:32:C9:2F:1A:3D:2E:1F:43:6A:46:A5:E0:FF:12:78:7D X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:77:6b:b4:ea:f4:b2:8c:94:02:44:03:86:77:19:a6:16:5e: e3:c8:8a:d7:3d:52:81:3b:8e:15:84:cd:31:48:ca:c3:7e:48: aa:34:fa:df:25:79:eb:c1:09:15:8a:b8:99:8c:c2:78:81:59: 3f:b8:8f:f3:fd:52:3a:e7:19:f1:31:f6:59:4a:eb:21:62:b4: 87:91:42:82:82:cc:a0:fe:ae:7f:72:df:a8:85:44:b5:aa:0c: 8a:f3:07:b2:51:9d:5e:95:e3:1e:ba:39:a2:36:90:2f:59:99: 59:3e:0d:29:c3:9d:77:cd:51:4b:07:44:7a:c7:8a:b4:ab:34: de:d5:31:8a:f9:6a:fe:5d:6a:70:ca:c1:00:53:11:7e:25:f1: 8a:8b:bd:2c:0f:8a:61:05:23:99:eb:9c:9b:86:3d:d9:8a:78: 60:e3:b6:b9:cf:d6:63:f9:d6:68:65:f5:c5:37:b2:b4:74:ae: 2b:25:85:40:92:f6:05:21:07:e2:43:a9:10:e2:2d:64:17:af: a2:10:e8:ad:29:c3:6d:84:62:ae:50:33:87:4b:fd:ef:ed:3e: 37:21:55:b3:32:35:44:cd:4b:55:9c:3d:34:25:8c:b8:de:74: 73:f2:1f:bf:ac:4a:d5:47:59:be:d0:12:47:46:e6:77:12:d0: 89:f4:27:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNohgSip1gC6ysrMcRhO/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjYwOTIzMDkzOTA3WhcNMjYwOTI0MDkzOTA3WjAzMTEwLwYDVQQD EygyNjVjMmNlNDMyYzkyZjFhM2QyZTFmNDM2YTQ2YTVlMGZmMTI3ODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5UonC8dVHQnREmeDJh4X958pT3U HAZHqDrs39+Gut71L3vI5xSLsVxS/kod8kJur+KODrH5/BvmzL5Z0jR//58OSUtv tFIrevITJ1vBIU2km/ahd/M4taTBDt/yhIr+icRmvXnFG5BiTmDLzHb85gecpev9 JSTBmXb987mo8HARVjFtRuXV4OqDn8t7ebMiA4CVn/Q3pWrVTsmoyQ0dMU9Z2SuE LaJhXutywrQ3Kh+PIzHVfakAQKE3C5dY6iD/iEefoeRA8U9oo1jgL8mYC2ma6Xv3 NCYIkUIUuWLN0dXSmtsMqeYqD/s/FySOPn5HoReSDr+IUCH8XLy6zCPRhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZcLOQyyS8aPS4fQ2pGpeD/Enh9MB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHdrtOr0 soyUAkQDhncZphZe48iK1z1SgTuOFYTNMUjKw35IqjT63yV568EJFYq4mYzCeIFZ P7iP8/1SOucZ8TH2WUrrIWK0h5FCgoLMoP6uf3LfqIVEtaoMivMHslGdXpXjHro5 ojaQL1mZWT4NKcOdd81RSwdEeseKtKs03tUxivlq/l1qcMrBAFMRfiXxiou9LA+K YQUjmeucm4Y92Yp4YOO2uc/WY/nWaGX1xTeytHSuKyWFQJL2BSEH4kOpEOItZBev ohDorSnDbYRirlAzh0v97+0+NyFVszI1RM1LVZw9NCWMuN50c/Ifv6xK1UdZvtAS R0bmdxLQifQnPw== -----END CERTIFICATE-----Generated at Wed Sep 23 16:03:24 2026 by rpki-client