$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft File: FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json) Hash identifier: 9P6traYP7TLzsMuJZmM5+JKpRcDoWKLBtvin+fQpw3o= Subject key identifier: 64:5B:9C:A2:76:6F:02:97:8E:E7:91:A0:DD:D2:60:80:19:FE:B9:C6 Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Certificate serial: 019FFE6DE703E6B670E8414C5EE9213B86F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft Manifest number: 1A35 Signing time: Fri 14 Aug 2026 04:00:43 +0000 Manifest this update: Fri 14 Aug 2026 04:00:43 +0000 Manifest next update: Sat 15 Aug 2026 04:00:43 +0000 Files and hashes: 1: 43xKNj8d1J5ZbdUCB9huFf51dlY.roa (hash: 0C77rsfbABsBAgXhMhHrXliF4EtBR+zdrxbfWGDutkA=) 2: B8WZmrTIa2ia6GnyZAc3UYzn6nU.roa (hash: aDzq92qdJqLonxrkAlG+0ptE83HlOqTUO72kLOAz1Z0=) 3: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: 0m9DLeJIwneGV6PPRb5pOVbyRqfOOQoN+pl8I5dj02A=) 4: IgfAmjFLqVW-uCkvUtRuUz3fQFI.asa (hash: 1m1DNwPZO7HOKfXGKGJtUoAVRSnQcqTWcdbAqBMwcJk=) 5: Mqx-zb562ywYV8pX6wNPPIxwnPA.roa (hash: OtbembzOi1Q67rhuvfY9lENyB3xApH7b2U9zu5YCpzg=) 6: NAB7jeRg8xs-PO6aq-mV0JJ8Kt8.roa (hash: BsmxkgNXTeP+5y0lVg3F5Vd5iIuPFhBIw5y8AiZA+lg=) 7: OFmVOiCQetrNkOtmu3zCnKSHdbQ.asa (hash: Hjgzl6kCFsNx4hG5pItQKTRXXfWNO1jZJVBkNf2hlCc=) 8: VsDKu8p7jOW_6XSjzPi6HRYFCeE.roa (hash: meHtFxM6jSoAy9Y7SaMHGYbPp+WrlG0Kpg1DeuyayZE=) 9: X01sfTguEZRlbViMsVbdLRhWtwM.asa (hash: ITEiwLtEtyei9oziGBBYKolA2UiS65//73HaFywy0cU=) 10: ZYc4R1ZUoLFLDb0ExiBMqNZo4PI.asa (hash: hLDXFm9fYXyP3hsrCVS9C7xEpV87H1Pnzgc7QhcK0xY=) 11: bFkaQMapJshDo2hgXls_q4kXpds.asa (hash: Sdg8D0zVBbo49fzIHdCt36EnpRZv3zi4DnsZ64hwpRw=) 12: dAyDeUp51SPbYS8fxmJNG0482Ng.asa (hash: 6/i5RS8ShUMSXbYzZlVqHGyL8kobjym9yxw0gdprH7E=) 13: oxOGLICEA4GzU1uD1B6su4tziyQ.roa (hash: TvZctkDtv5gSKLWgki0lkEZNOjTs1UPnuilELJQxzxc=) 14: plAxktASIb4YACIP-hXXxq1vBPQ.asa (hash: YS1t0iZi+tG5TRUgxqQhrFYuMkSCCdM92QwP+HVjJ7w=) 15: xTbA2Nqn_OGftZ3ziVysvYIrYsc.roa (hash: AKh2Xxbl7XMpoBpUm83TcjMuEMCZWE9rKYeV/5q4Gew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 00:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:fe:6d:e7:03:e6:b6:70:e8:41:4c:5e:e9:21:3b:86:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Validity Not Before: Aug 14 04:00:43 2026 GMT Not After : Aug 15 04:00:43 2026 GMT Subject: CN=645b9ca2766f02978ee791a0ddd2608019feb9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b2:de:b6:87:03:61:e3:65:7f:35:a7:14:e9: 4e:17:dc:f9:c9:d3:4c:90:48:4a:89:bc:a0:ee:b8: 01:d6:12:18:0c:32:a0:41:1a:7e:81:13:35:2c:a6: 7c:51:41:c8:76:20:88:31:40:5f:31:5a:c6:53:98: c3:d1:42:ec:0a:97:9a:61:36:28:40:34:1e:fb:31: d8:60:47:13:54:4c:97:8f:eb:aa:a0:5c:6b:ba:9a: 83:bc:c4:c5:cf:24:08:e9:b6:90:73:96:c5:a9:98: db:d2:41:62:40:0c:1f:e0:e8:95:70:eb:1f:0c:ec: 6d:14:9e:bf:91:3d:76:0a:f8:da:a1:6d:88:5b:bd: c4:12:2c:f5:f2:43:c0:f7:2b:a3:54:ba:6b:41:b4: ae:ff:a9:7b:24:25:3e:94:8f:b1:2a:c0:f8:47:d6: 84:0c:02:58:54:90:3c:4d:fa:62:a5:70:c8:dd:e5: c3:eb:5e:3f:ab:43:61:c3:11:3b:68:76:51:bf:7a: 2f:96:7c:c2:60:5a:71:01:2d:31:08:de:13:a6:77: 52:d3:40:b6:1e:dc:88:86:0a:34:c1:64:fd:b4:9d: 67:c1:ad:d6:e7:28:35:7c:15:87:11:7f:f5:f8:11: 27:93:ff:b9:bd:92:4b:2d:c3:80:ed:aa:48:b5:93: ad:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5B:9C:A2:76:6F:02:97:8E:E7:91:A0:DD:D2:60:80:19:FE:B9:C6 X509v3 Authority Key Identifier: keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:fa:0f:87:2b:6b:ee:67:f9:e8:7a:e6:5d:5a:fb:62:1a:88: 13:dd:fe:15:db:7a:ba:ea:2d:88:49:b8:fe:fc:3e:62:76:29: 8f:92:8c:ef:6c:d6:f9:11:ae:fe:3e:86:31:cb:05:c8:fe:e3: ce:f0:2b:39:41:e5:03:a8:49:e0:d6:07:b5:30:3e:83:e0:a9: ae:ed:cd:c3:80:98:d4:89:48:a1:b9:e2:09:e1:e0:0a:22:28: b4:9b:40:1a:89:7c:0e:bd:21:9a:8d:60:dd:c4:31:32:50:21: d1:0b:17:8d:ed:9c:03:db:00:e8:df:54:a2:fb:17:b8:a7:74: ef:9f:0c:20:0c:0f:78:36:58:e4:d9:dd:43:42:ba:44:4b:42: a2:81:4e:db:26:f8:e7:09:12:74:67:35:7b:5e:e8:54:09:bc: b6:2d:6a:fb:3a:9d:5b:5e:cd:17:3d:87:c3:c9:7d:96:c6:25: fb:28:b6:c3:fb:fe:48:68:30:e1:c3:68:e3:44:8c:10:ae:9e: 46:14:a4:33:78:10:88:41:7e:a6:d9:b2:d6:85:6c:b5:6a:8d: 98:4e:26:75:e6:95:74:00:05:40:83:c7:58:a7:0c:b1:2d:91: 3e:1d:a6:b3:56:a5:cd:81:09:bc:8f:f3:d4:ca:5f:9e:d6:21: 77:ba:53:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/+becD5rZw6EFMXukhO4b5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx MzY5Y2EwHhcNMjYwODE0MDQwMDQzWhcNMjYwODE1MDQwMDQzWjAzMTEwLwYDVQQD Eyg2NDViOWNhMjc2NmYwMjk3OGVlNzkxYTBkZGQyNjA4MDE5ZmViOWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrLetocDYeNlfzWnFOlOF9z5ydNM kEhKibyg7rgB1hIYDDKgQRp+gRM1LKZ8UUHIdiCIMUBfMVrGU5jD0ULsCpeaYTYo QDQe+zHYYEcTVEyXj+uqoFxrupqDvMTFzyQI6baQc5bFqZjb0kFiQAwf4OiVcOsf DOxtFJ6/kT12CvjaoW2IW73EEiz18kPA9yujVLprQbSu/6l7JCU+lI+xKsD4R9aE DAJYVJA8TfpipXDI3eXD614/q0NhwxE7aHZRv3ovlnzCYFpxAS0xCN4TpndS00C2 HtyIhgo0wWT9tJ1nwa3W5yg1fBWHEX/1+BEnk/+5vZJLLcOA7apItZOt6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRbnKJ2bwKXjueRoN3SYIAZ/rnGMB8GA1UdIwQY MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt NGNmZTQwZjA3YTZiLzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1voPhytr 7mf56HrmXVr7YhqIE93+Fdt6uuotiEm4/vw+YnYpj5KM72zW+RGu/j6GMcsFyP7j zvArOUHlA6hJ4NYHtTA+g+Cpru3Nw4CY1IlIobniCeHgCiIotJtAGol8Dr0hmo1g 3cQxMlAh0QsXje2cA9sA6N9UovsXuKd0758MIAwPeDZY5NndQ0K6REtCooFO2yb4 5wkSdGc1e17oVAm8ti1q+zqdW17NFz2Hw8l9lsYl+yi2w/v+SGgw4cNo40SMEK6e RhSkM3gQiEF+ptmy1oVstWqNmE4mdeaVdAAFQIPHWKcMsS2RPh2ms1alzYEJvI/z 1MpfntYhd7pT5g== -----END CERTIFICATE-----Generated at Fri Aug 14 06:10:27 2026 by rpki-client