$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft File: pnhXc98xO5FxG_a8WxSezCRrnok.mft (raw, json) Hash identifier: DJtuT2h0MdE2F5WFveEN1XHRVFxVadnoeX5fbdnVdZI= Subject key identifier: 48:9F:1B:EC:9E:53:3E:E9:00:56:94:8E:F9:5F:08:A8:8C:93:E4:71 Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 01A0905776222E74D6C29EBDDB2D421097CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft Manifest number: 1816 Signing time: Fri 11 Sep 2026 12:00:45 +0000 Manifest this update: Fri 11 Sep 2026 12:00:45 +0000 Manifest next update: Sat 12 Sep 2026 12:00:45 +0000 Files and hashes: 1: C8g7Pi5B0RKpnrlAYnkGNfdVaNI.roa (hash: wxMFCVvSA3tdy7i3OaSOQ9SIAg2wmBIcYz9jkUGPtlk=) 2: Ine_1lLdl47bEMn6aiw9Axcdsgo.roa (hash: S/r8lpXeW/d857boj4AgP81lqUx6Xba1Zs9uDln2Uuk=) 3: L9nqjZgCKM_h4eShTqHdEr9Np6c.roa (hash: m3EOAebEcr3Ec2NVZh7NKfNA+27GisIbFErRrtFBX6k=) 4: NanNAKKpriw1xLHpXZYYWO89_ic.roa (hash: vJoNpzNu5goOWjEeID9l0AJGNtpWeDH6gI91uoAnwIk=) 5: O6JDbaslrGOSZKrdtuCBt6ssF94.roa (hash: 8ty72z4beTGAGlxyLGLA0AACx0Qa5f/MkundTg5sepM=) 6: Wvbb_a2COrZy8u2YHT4IAcPCo7A.roa (hash: JCvZpNcLMyYDQVI9nqJFb7h8bZSYYqo2EDX3T4my9ww=) 7: ZQQkerLBkFsKEtd48dsMSA_rmYI.roa (hash: 6NjK7e1f3uOhtOOeU7twP9rf1tXwX1yAjDALcNdcBDM=) 8: _dst1Xn6SlUI8nUoQkjpnLlhahc.roa (hash: BiPvKLoz5HOyAuWJJP0IXnbLHFFchqo6uteOhXIPeKs=) 9: dDB5YY9PZuYzIK0czNYk6awWuOU.roa (hash: B1+NRVwOUhTIMmxV8tnE89O/MNjbHirt4Fghn1v7gaE=) 10: eFI0tBDLnesndLqlj1NoxqsPUjg.roa (hash: hjKjXxMem27vbAFHspC4BJNh7EJxRAQg9zId7c2baKg=) 11: pnhXc98xO5FxG_a8WxSezCRrnok.crl (hash: 5A6S+eQ7pEBA8+JqgaSX5d6FN5pSQt4dNkTpIWgA/os=) 12: vc_G7KIML4Y1r-1xS8CYjvgQZqM.roa (hash: tS0p7+VSda9ujT1sG9qz+xFqrdY93YlWHLxpRI2nhkg=) 13: vz8HwWs32wz7LdSPq6eo_tOp0to.roa (hash: 6psAckPnQ9/EqCFp17rxTfMjqVmehqU3pMQvhEu8MeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 12 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:90:57:76:22:2e:74:d6:c2:9e:bd:db:2d:42:10:97:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Sep 11 12:00:45 2026 GMT Not After : Sep 12 12:00:45 2026 GMT Subject: CN=489f1bec9e533ee90056948ef95f08a88c93e471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:03:dd:01:a8:7b:1d:be:29:af:d4:21:a1:b2: 2f:23:ab:65:74:1b:e7:93:8d:ac:17:73:2f:36:bd: 1b:ea:a4:28:65:37:62:21:91:0f:b6:20:a3:53:51: ac:52:78:f1:4d:b6:16:d1:70:92:74:00:0a:02:a4: 27:4d:0f:50:53:c0:8d:1f:aa:64:d4:29:bd:e3:c4: 69:33:f5:62:5f:98:69:a0:a4:6c:7a:0b:c8:75:b5: 65:33:df:85:d0:84:e2:ea:16:33:52:bb:f9:60:7d: 75:a2:21:3c:f9:38:94:28:25:05:ac:4a:9d:f9:31: 19:92:4d:65:c0:54:80:36:91:89:18:55:49:73:2b: 1c:a3:5c:48:38:dc:bf:74:f8:16:0e:61:96:8a:8a: c2:30:b1:21:a6:63:4a:17:eb:f7:75:03:77:00:ca: 15:15:98:ee:07:a9:e8:3b:7a:39:14:4b:47:43:f7: 57:b0:2a:05:09:fb:68:f6:39:0a:43:24:09:a8:91: 22:a2:78:55:e6:2e:32:34:42:e1:6e:49:9c:84:25: 86:b0:60:c5:4f:35:62:73:ed:49:34:96:75:c7:3c: e6:35:63:00:83:2f:4d:cf:b2:6e:b5:a7:cc:78:0c: 95:1d:91:a6:a7:a1:cc:65:a7:34:88:2a:88:0c:a4: 03:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9F:1B:EC:9E:53:3E:E9:00:56:94:8E:F9:5F:08:A8:8C:93:E4:71 X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:94:02:9f:f8:fc:1e:87:79:47:2b:f9:75:0a:00:ca:d9:3e: b0:ee:d7:4b:ec:51:b3:15:69:1a:00:c8:05:7f:39:32:2c:1f: 9f:52:30:e4:12:8f:95:bd:46:4c:f2:1f:76:b4:19:b1:8b:ef: b9:aa:dd:96:77:52:6f:aa:1f:65:68:44:db:b3:7e:7c:ad:79: 1b:b8:03:51:03:54:24:d0:46:4e:d6:01:ce:4f:9a:54:a9:7c: 0f:c1:cf:41:15:df:14:f0:12:bf:50:67:b2:e3:5f:1a:4e:be: 42:10:38:ed:6d:4f:64:48:03:c4:14:40:59:17:10:5d:ed:90: 71:e9:da:d7:74:17:39:39:43:c4:9c:10:12:5c:f9:fd:d8:22: ce:c8:fe:be:e1:35:fa:5c:46:9f:22:c5:d6:4e:2b:e2:23:36: 1b:6d:30:96:95:81:4a:5a:5a:45:df:02:5f:08:40:de:8e:d3: 2e:11:eb:4b:7e:a2:af:16:40:7c:c3:87:84:42:12:e0:f2:dd: c6:3c:39:75:e7:ff:ce:4a:bb:86:8f:60:4d:ea:65:b4:e9:1e: 7a:81:31:70:9f:c9:3d:37:b4:a4:05:39:2b:cd:a0:17:03:70: c7:f8:8f:31:3c:73:ec:2a:90:38:18:66:2e:6c:ff:71:16:4d: fc:3e:39:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCQV3YiLnTWwp692y1CEJfKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjYwOTExMTIwMDQ1WhcNMjYwOTEyMTIwMDQ1WjAzMTEwLwYDVQQD Eyg0ODlmMWJlYzllNTMzZWU5MDA1Njk0OGVmOTVmMDhhODhjOTNlNDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgPdAah7Hb4pr9QhobIvI6tldBvn k42sF3MvNr0b6qQoZTdiIZEPtiCjU1GsUnjxTbYW0XCSdAAKAqQnTQ9QU8CNH6pk 1Cm948RpM/ViX5hpoKRsegvIdbVlM9+F0ITi6hYzUrv5YH11oiE8+TiUKCUFrEqd +TEZkk1lwFSANpGJGFVJcysco1xIONy/dPgWDmGWiorCMLEhpmNKF+v3dQN3AMoV FZjuB6noO3o5FEtHQ/dXsCoFCfto9jkKQyQJqJEionhV5i4yNELhbkmchCWGsGDF TzVic+1JNJZ1xzzmNWMAgy9Nz7JutafMeAyVHZGmp6HMZac0iCqIDKQDxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEifG+yeUz7pAFaUjvlfCKiMk+RxMB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5QCn/j8 Hod5Ryv5dQoAytk+sO7XS+xRsxVpGgDIBX85Miwfn1Iw5BKPlb1GTPIfdrQZsYvv uardlndSb6ofZWhE27N+fK15G7gDUQNUJNBGTtYBzk+aVKl8D8HPQRXfFPASv1Bn suNfGk6+QhA47W1PZEgDxBRAWRcQXe2Qcena13QXOTlDxJwQElz5/dgizsj+vuE1 +lxGnyLF1k4r4iM2G20wlpWBSlpaRd8CXwhA3o7TLhHrS36irxZAfMOHhEIS4PLd xjw5def/zkq7ho9gTepltOkeeoExcJ/JPTe0pAU5K82gFwNwx/iPMTxz7CqQOBhm Lmz/cRZN/D457A== -----END CERTIFICATE-----Generated at Fri Sep 11 16:27:02 2026 by rpki-client