$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: u+dvf5dv5bmSXDD46tsYL4FAK2YIscUiq4M9ab6G6Zg= Subject key identifier: C0:F5:D5:D3:D3:1D:6F:1E:9A:E2:96:36:FE:74:B0:4D:72:8A:AD:4A Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 01A09358C5B16983EED6D7357F1C71B74A1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 0544 Signing time: Sat 12 Sep 2026 02:01:03 +0000 Manifest this update: Sat 12 Sep 2026 02:01:03 +0000 Manifest next update: Sun 13 Sep 2026 02:01:03 +0000 Files and hashes: 1: 0hivjmx3zESdF4O-A2SSYqLGRzk.roa (hash: shH0/H2kUggaPw7GkO5zNoGa7K6ORDulOONVmqwNyzg=) 2: 34ts3PIYYIFWGi911YLJC_MNTy0.roa (hash: 4pjAppUY+fw8yDaAV/Qux+rVoBRiKl+Kw/H8kkGtDI4=) 3: 3iXoIa0Tnc6nSmaQlZwJpvHoBP4.roa (hash: 92O5pIZ5W4yGOk4rHe6wXslYmPaUdiXeWtRLQm4goss=) 4: 4BsASipyNhMfne7kcDB1nUMHv4U.roa (hash: gNxM9v4Ci9bVQzz6zMSsl4HxARtJa2mrpaEAF1ssvBc=) 5: 51oAIofJkFXpGxq0u0pMpGIor0Y.roa (hash: luFon6hTssLT0GVFCEnyosU6nzOcK0/WHgWU8mcIjfk=) 6: 6v6eeI5cY68j_2oFbpbr5jPTgdU.roa (hash: zqirwLCXgdjJFeXHZFQIYNjwkSF+pg6w51CqhX494MQ=) 7: HHVyXzUcc_YIy8baKZaV2Y45k38.roa (hash: ndUe7viQWWyFXFChfyWy877/Y7Q3qjUplP6K/mFzfDE=) 8: SodBob46gHvkE9f0X3aM1jnjv_0.roa (hash: USjt5jELYEu1iaW09TQw060b9YelZ/w0+6LrYh++vTo=) 9: bCcuJlZ7M57UlbvTbB3xJ5-RVYo.roa (hash: JYxMnFiCRaisfCjM99QzlqqTlxpJrwkoJa68usH9YxI=) 10: cHAy_4A-CMasQbGFupRjCXJRveA.roa (hash: Z5sX4UD5pwFqxzXI/4DJgcahhJVYCnCAo+Vk4S1WDik=) 11: fwIX4p6uDI8a1ig_uNG57F-CyyQ.roa (hash: sPu4yXxTGRc2nkq1SBHu8c/xRYRB8YjHSE2w/qhSkXw=) 12: kEgukI4x5ATV385AVFHglji0HH0.roa (hash: 7W67j4OKnAJPYfKA7VB2yMPYazX4qvOU73e4/HvQ//o=) 13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: VODjMS4VFw7Kniy+/fN+B4JxFXDSSv8T7Xj/YeywBzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 12 Sep 2026 21:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:93:58:c5:b1:69:83:ee:d6:d7:35:7f:1c:71:b7:4a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Sep 12 02:01:03 2026 GMT Not After : Sep 13 02:01:03 2026 GMT Subject: CN=c0f5d5d3d31d6f1e9ae29636fe74b04d728aad4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:11:b9:ae:eb:81:c9:f8:04:af:c2:46:36: 5d:33:04:9b:91:64:de:8d:0e:bf:f8:06:26:b4:be: bb:88:63:8b:8a:c1:e7:f8:a3:20:0c:fa:b1:0b:13: 0d:ca:0b:bd:14:82:9a:01:b0:8e:d8:ce:81:35:73: e5:32:b7:9f:b5:52:f6:1a:68:c4:23:29:90:7a:9e: e7:ad:eb:9c:85:a2:54:05:80:2a:a3:ba:dc:54:10: 73:28:c3:96:89:39:b6:60:c3:cd:99:88:40:62:df: b7:29:cf:59:f1:80:51:87:d2:09:72:22:17:72:59: 81:bc:fe:b0:c7:0a:60:5c:2e:9b:cf:aa:a8:bf:60: 97:54:38:53:73:fc:2f:82:6b:57:e5:52:fe:14:28: ed:cb:54:bb:21:af:c2:4a:c1:1d:e5:d4:8e:e6:84: f8:9b:85:28:dd:66:36:e4:81:26:e7:b6:4b:25:a9: 49:e3:97:8e:0f:ae:f2:e7:33:44:f2:6a:a1:76:a7: 88:b0:2d:60:65:6b:48:05:e4:6b:95:f5:47:e8:d2: b1:57:a3:cf:dc:3a:05:2f:86:07:d6:21:67:22:6c: 9e:38:fa:c8:73:c4:1e:ea:e3:84:c1:49:c6:de:31: 62:ee:db:5a:b6:fb:55:be:b5:9b:93:31:83:de:ba: 75:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F5:D5:D3:D3:1D:6F:1E:9A:E2:96:36:FE:74:B0:4D:72:8A:AD:4A X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:21:15:26:ab:4b:22:19:d8:e3:aa:39:76:22:cf:b5:f0:33: c6:47:b2:7d:5e:f7:21:54:a5:5c:0b:d3:90:c7:48:6c:5f:96: f9:d2:92:9b:54:98:f3:01:3b:f5:74:2e:c6:10:70:fa:34:8e: 15:b1:4a:98:4d:f7:07:17:5d:66:07:f7:72:16:72:3f:23:46: 63:ea:3b:23:e5:ea:92:d3:9a:73:b9:10:b1:f2:bd:bf:30:7a: 8d:bb:d1:bf:a2:39:90:9a:c7:d9:a4:3f:87:5e:10:cf:3c:e4: b2:bf:c4:12:7a:67:10:be:37:a1:9e:b8:2c:8c:92:4e:e5:6b: 59:35:f9:63:cb:20:29:03:82:67:5f:54:dc:39:8d:8c:b1:bf: ad:4a:2a:2d:67:41:56:76:37:32:0f:a1:ec:85:2c:f3:68:f1: 92:09:94:a5:a0:e1:df:cb:23:45:d5:ab:f8:bd:3a:41:e0:e6: 7a:3a:46:d1:0f:33:00:75:f3:88:11:69:6a:40:8f:d8:b5:1c: fc:98:02:27:76:a6:a1:da:58:11:2a:18:75:76:f9:49:4e:b7: d4:55:02:c5:48:c9:36:c3:ea:7f:cd:27:72:39:60:79:2c:6a: 53:10:e9:9f:1d:2c:4d:bd:53:4a:0d:a2:24:59:26:98:26:c4: cb:93:92:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCTWMWxaYPu1tc1fxxxt0ofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjYwOTEyMDIwMTAzWhcNMjYwOTEzMDIwMTAzWjAzMTEwLwYDVQQD EyhjMGY1ZDVkM2QzMWQ2ZjFlOWFlMjk2MzZmZTc0YjA0ZDcyOGFhZDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIcRua7rgcn4BK/CRjZdMwSbkWTe jQ6/+AYmtL67iGOLisHn+KMgDPqxCxMNygu9FIKaAbCO2M6BNXPlMreftVL2GmjE IymQep7nreuchaJUBYAqo7rcVBBzKMOWiTm2YMPNmYhAYt+3Kc9Z8YBRh9IJciIX clmBvP6wxwpgXC6bz6qov2CXVDhTc/wvgmtX5VL+FCjty1S7Ia/CSsEd5dSO5oT4 m4Uo3WY25IEm57ZLJalJ45eOD67y5zNE8mqhdqeIsC1gZWtIBeRrlfVH6NKxV6PP 3DoFL4YH1iFnImyeOPrIc8Qe6uOEwUnG3jFi7ttatvtVvrWbkzGD3rp1BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMD11dPTHW8emuKWNv50sE1yiq1KMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSEVJqtL IhnY46o5diLPtfAzxkeyfV73IVSlXAvTkMdIbF+W+dKSm1SY8wE79XQuxhBw+jSO FbFKmE33BxddZgf3chZyPyNGY+o7I+XqktOac7kQsfK9vzB6jbvRv6I5kJrH2aQ/ h14Qzzzksr/EEnpnEL43oZ64LIySTuVrWTX5Y8sgKQOCZ19U3DmNjLG/rUoqLWdB VnY3Mg+h7IUs82jxkgmUpaDh38sjRdWr+L06QeDmejpG0Q8zAHXziBFpakCP2LUc /JgCJ3amodpYESoYdXb5SU631FUCxUjJNsPqf80ncjlgeSxqUxDpnx0sTb1TSg2i JFkmmCbEy5OS3w== -----END CERTIFICATE-----Generated at Sat Sep 12 06:02:27 2026 by rpki-client