$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft File: 1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json) Hash identifier: mBSA2NSsGxkpw7oUH5egvxYrEDBFFlvOPb4OenZMG9U= Subject key identifier: 1A:59:1F:D7:43:63:F8:BA:71:0D:AC:F5:8B:22:EE:F1:3A:2E:16:4D Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 01A086425D4D08D556F8BF4044FC77EDE3FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft Manifest number: 1746 Signing time: Wed 09 Sep 2026 13:01:30 +0000 Manifest this update: Wed 09 Sep 2026 13:01:30 +0000 Manifest next update: Thu 10 Sep 2026 13:01:30 +0000 Files and hashes: 1: 1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa (hash: VN5SDY0+gW7ILuHoqlm/fJEeG3YnPoZJ808VzHVdxfM=) 2: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: cHGYs38K5fCbzfyQN0GHd5iT41y2SQeuEjiuoumtbWA=) 3: 9l-1vV0lLMPdjVLZ8U4gIW0OkT8.roa (hash: kHoKR3oAF432BBb7GV322ecIos7vaNdfIEmHn7z4jA0=) 4: CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa (hash: ld+tNyBKiP3cgMuyEV6zi3LHUSVViRV1Xe7EeZEcgOs=) 5: DgnHYMNEO3cW02ohlMn2axnldPY.roa (hash: vaq0LBl35c7hmyKRAqN3BqKt0SzicUAX8/qk3xf0Rag=) 6: EOKiA2av8D9tfqyUWidlxDIVF7I.roa (hash: a+NxQmmW/zjcx38he+RtlHbBR768yZhQrdN+Qy40tRQ=) 7: Ipx7ZW4ku9jbIsLnJ7YdfGPhKwo.roa (hash: L5paJbyh0KobKYZie3ywNQHCitW9V1gxFkZu+lLubKY=) 8: KBFhtKcJq5uA7ADerkedr7ALsUc.roa (hash: zdLI7qiXR8cpmXvF/k9fx3+iYtigbpqLuzWcJYNq8OU=) 9: LYO4EVL97axXFG4_1JIRGo_Gcr0.roa (hash: M8NjdLPy4NRB155rg30Ob5fe1Garsp+Fkc/ASUzAL08=) 10: NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa (hash: zE5S0+ZJF7WaGLugEvIAwCS9/+Sc61x6ImWftYSyXwA=) 11: OmMFI95X2qnhZDKjI6slDjGRNqk.roa (hash: Pn7MijhIBVlC/zjDS4+PEDcrihjLjcsRGTtxI7Cgocg=) 12: SKrkFUElNTW-RJXzA9GZbuLjByQ.roa (hash: o0t432S7k6ID0P9LUaLorXFdDHZox3y0pV4ne0vCm/w=) 13: bHsFJaLyCQLt5X5fjeTKRh55ODY.roa (hash: DVWoYx/VlrYQI2tOsueyBqYwG1Fx4jRd1Wy2fvfG26I=) 14: dhB_IkqPVgi3yJTzlaxBzpa9CMs.roa (hash: /dJFhGziZtLlMMTjECful8AqChnK1t2jnoBopwI8PGs=) 15: e4WdAxYOOZhI1HUnTBJUvTzFLcc.roa (hash: BxWMVdjBecDx+1X50nR2tWLJ9Ko6bUO8kFQ40XFyRn4=) 16: xQ0hxU5h6aCqKoBozq3lc-OZvS0.roa (hash: dqVw1zy09p9At+bsRY80wcRAlgN5UMI3c+HTy+z8Ljo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:86:42:5d:4d:08:d5:56:f8:bf:40:44:fc:77:ed:e3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Sep 9 13:01:30 2026 GMT Not After : Sep 10 13:01:30 2026 GMT Subject: CN=1a591fd74363f8ba710dacf58b22eef13a2e164d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fe:54:a5:01:cf:b3:ed:61:d4:8f:a0:35:eb: 0a:46:42:20:d9:6d:aa:5d:a6:a6:2d:c4:e4:f1:88: f6:76:aa:1b:b4:04:01:3d:a2:28:0f:84:81:5b:e1: 5f:2c:4d:28:b9:40:93:10:ae:0b:16:03:35:b1:5a: d6:52:af:94:e6:2f:c5:46:3b:91:be:00:af:e1:3d: b8:61:c1:4e:5e:84:cd:00:e9:16:49:b7:7e:42:cb: f8:31:00:67:e0:2a:7a:86:be:a4:18:88:42:6d:c7: d6:ae:38:99:16:74:4f:e0:82:6e:9a:42:ba:54:a6: ac:87:ec:fb:46:90:81:20:6c:f0:da:2e:3e:a0:ad: 1d:58:ee:e6:2c:8c:97:f2:49:ce:32:7b:b9:f2:e7: b7:5e:9e:a2:15:11:48:d5:63:ea:fa:2f:29:3f:2c: 18:f8:00:82:ae:fd:fa:d1:a7:4d:40:34:92:a7:2b: 29:97:4a:59:c8:96:3b:d6:7b:fd:0d:16:7a:96:90: 6a:77:ba:97:c6:b8:8d:08:ab:a8:e4:b6:08:55:c9: 08:82:f0:48:c7:a9:ca:40:34:d2:40:6a:30:ec:02: 4d:f9:c2:e2:8e:71:d5:9c:70:ee:43:77:8e:f2:a1: f3:09:12:af:49:a0:e5:44:cf:07:c3:6f:7a:0e:98: 6a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:59:1F:D7:43:63:F8:BA:71:0D:AC:F5:8B:22:EE:F1:3A:2E:16:4D X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:4d:b6:df:6c:21:ff:bd:72:60:75:2c:82:e8:9a:41:50:7e: 91:1c:7b:08:bd:e2:39:64:2c:96:45:43:a0:ce:24:28:2c:3f: 64:cd:a7:69:79:b4:44:04:07:30:96:ab:89:5a:b9:6c:6b:3e: d2:f6:66:db:37:51:65:af:8b:09:26:ee:ee:da:5e:fc:93:00: fc:4e:e3:00:5d:fa:35:e3:91:e1:6c:2e:8a:3f:80:d6:f1:86: a0:c3:bf:f1:22:58:c1:b0:2f:81:b7:a8:60:b2:e0:d8:30:71: 8a:cb:58:73:ed:12:f5:41:eb:7f:95:20:cb:42:00:9c:7b:24: 9d:1d:76:42:4f:c5:2e:9d:bf:89:66:6c:65:28:01:ac:17:8b: a4:0a:38:79:f7:20:1b:69:8c:49:e3:c5:95:11:36:63:1e:4a: aa:b1:39:36:f7:11:76:68:f6:86:40:61:ba:29:64:79:7e:4d: 2a:92:ca:cd:fd:7b:48:4b:44:fc:78:a8:4e:4b:ee:bc:5d:e3: 0c:7a:36:e2:1c:ce:87:44:67:5d:49:6e:3a:0f:42:a5:7e:61: 6f:e9:06:8f:00:bd:9f:d4:64:45:e8:b7:0b:f6:2f:fc:35:5c: 9e:8f:a3:d3:38:0a:cb:d4:58:72:cf:76:31:af:83:ea:f2:fb: b7:f8:81:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCGQl1NCNVW+L9ARPx37eP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwOTA5MTMwMTMwWhcNMjYwOTEwMTMwMTMwWjAzMTEwLwYDVQQD EygxYTU5MWZkNzQzNjNmOGJhNzEwZGFjZjU4YjIyZWVmMTNhMmUxNjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP5UpQHPs+1h1I+gNesKRkIg2W2q XaamLcTk8Yj2dqobtAQBPaIoD4SBW+FfLE0ouUCTEK4LFgM1sVrWUq+U5i/FRjuR vgCv4T24YcFOXoTNAOkWSbd+Qsv4MQBn4Cp6hr6kGIhCbcfWrjiZFnRP4IJumkK6 VKash+z7RpCBIGzw2i4+oK0dWO7mLIyX8knOMnu58ue3Xp6iFRFI1WPq+i8pPywY +ACCrv360adNQDSSpyspl0pZyJY71nv9DRZ6lpBqd7qXxriNCKuo5LYIVckIgvBI x6nKQDTSQGow7AJN+cLijnHVnHDuQ3eO8qHzCRKvSaDlRM8Hw296DphqQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpZH9dDY/i6cQ2s9Ysi7vE6LhZNMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABE2232wh /71yYHUsguiaQVB+kRx7CL3iOWQslkVDoM4kKCw/ZM2naXm0RAQHMJariVq5bGs+ 0vZm2zdRZa+LCSbu7tpe/JMA/E7jAF36NeOR4Wwuij+A1vGGoMO/8SJYwbAvgbeo YLLg2DBxistYc+0S9UHrf5Ugy0IAnHsknR12Qk/FLp2/iWZsZSgBrBeLpAo4efcg G2mMSePFlRE2Yx5KqrE5NvcRdmj2hkBhuilkeX5NKpLKzf17SEtE/HioTkvuvF3j DHo24hzOh0RnXUluOg9CpX5hb+kGjwC9n9RkRei3C/Yv/DVcno+j0zgKy9RYcs92 Ma+D6vL7t/iB8g== -----END CERTIFICATE-----Generated at Wed Sep 9 17:17:27 2026 by rpki-client