$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: 3LubffDTci0zHaD+CDXJmgdUwcDJrj+3rCUKqX6UmnY= Subject key identifier: 99:A9:27:3D:37:7B:26:2E:EC:DB:BC:F2:0E:57:52:3D:C9:9D:7F:8C Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 01A08B6896605B92DC68ACC9FD8C657AD014 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 1A8B Signing time: Thu 10 Sep 2026 13:01:22 +0000 Manifest this update: Thu 10 Sep 2026 13:01:22 +0000 Manifest next update: Fri 11 Sep 2026 13:01:22 +0000 Files and hashes: 1: 1nFCKi1R1uWAqKJnbMUD9y_3pno.roa (hash: 5C4IbhqcH3E0EkSlqxD//f0/kRfbI7bdALbkI7++DS0=) 2: 45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa (hash: T4PlRQPL8k2IXPh/6bf0yHYACLBVnc7hXe7KA88boSU=) 3: 54lQx9jq3eHeFIcJKMTm3kHCZTA.roa (hash: 27oRvIuzZnhWTtAi86vMeQgbiUWJ+XcD4ONYqT3e54I=) 4: BtE_Prg_QTilEMkESiUbs4oIDmA.roa (hash: SFNeqY+UDzZLqbIx3LsR2g+sDJ1BvW0wdb9XdlLKZ0k=) 5: C-Qps28bGJ9viEITk81kKk0b0dA.roa (hash: YvQZ6I3rsCF/RjF8TlblPG71ruEskxswS8/cnuK9jtA=) 6: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: iDrC1fF64kprfuZRCpQjA3EusrJopr1EcQqjcEA+ucI=) 7: GpPbNoyLVyrmQ4b8e1AhKTzfuOg.roa (hash: ghZh7XoU09TtPH2tIcN1D5InXaZeImBLFNLb0RMUPhs=) 8: McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa (hash: Axa3TJcrAyunbvQsH7ha/cb/OA+FPV5fxnNPJ+XHc9Y=) 9: SH8o9XaYeY75kSYDFek1xvvvpes.roa (hash: snF/ko8o9cC13jo1dYD32crG+aO3GlqBSVVV17i0l7Q=) 10: c-QDkOwRsaqWaCLR67UW_lU7-L0.roa (hash: AE6Uaz5NJLGOrk5M1q3pxLLZKI8/2jUOSqya5+asWc0=) 11: fNaq8m6O9BbhsyXfpIVgO1FBWfQ.roa (hash: YWEpMcVfS6S4vwVF7Bdrpn4pCsO6G0a695Az/e9ZD/E=) 12: ke2TciPSbDOn6zXxGdQLJTfLAsw.roa (hash: 9ny0lYpK79F/d0zmuY5DS1VwZbJpVvPVS9XC0rY+Evc=) 13: sgSvFZT7cMQ6O7meaSYCsiAvpIQ.roa (hash: b1OuAlU0+cSQfcjeLb3gpe1ABMzAcbi57g2ciFKHZfA=) 14: sl7rtV7gRWnH0rzgCWs0BxwC9uA.roa (hash: 13ubUUikB/ayAhjAv3tgoeX0xlseT2rnUuFrpyiC5X0=) 15: wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa (hash: +1+KMrFBvRETqP/PeuYGipr75ZikVYJF14sV08bslAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8b:68:96:60:5b:92:dc:68:ac:c9:fd:8c:65:7a:d0:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Sep 10 13:01:22 2026 GMT Not After : Sep 11 13:01:22 2026 GMT Subject: CN=99a9273d377b262eecdbbcf20e57523dc99d7f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a3:03:f3:f2:f4:78:7c:f6:25:87:4d:2f:33: d6:62:4b:94:3b:50:ab:1d:c1:91:68:cb:cd:00:01: 5d:dd:c9:65:23:55:ae:50:6a:8f:10:a3:a2:27:0c: 7c:c4:1f:56:04:0f:ea:63:62:87:15:8b:fe:1a:b8: bf:cb:e3:98:36:1c:f1:8e:ca:d3:e3:1a:40:a6:f0: 33:44:2a:18:80:ac:d0:8a:18:b4:c8:2b:10:42:1a: 6d:9d:1c:4f:f0:24:88:7c:28:bd:8f:6d:18:db:03: f3:ab:ec:54:21:09:25:98:09:c2:59:19:e9:67:1b: b6:73:bf:6c:23:ae:63:d6:51:91:73:89:a1:9e:92: 33:9e:9c:74:9c:90:88:81:78:1c:58:69:bd:af:80: bf:99:bb:23:28:7d:f8:5e:21:81:5e:77:fc:5c:bb: e6:b1:ab:b9:1a:69:54:ba:95:f2:c7:28:dd:3e:ce: 5c:c5:d5:c8:91:0e:54:9d:86:83:57:57:a2:97:37: 17:76:d2:21:b1:c5:67:60:5f:7b:35:c0:23:7a:68: 46:d9:a7:31:c3:b3:02:3c:c0:28:36:27:84:3b:99: ca:1f:44:26:70:da:56:39:a3:32:5e:c1:45:7f:5c: f2:e5:5a:b7:33:36:6c:17:f0:a1:c3:47:8e:92:a9: 78:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A9:27:3D:37:7B:26:2E:EC:DB:BC:F2:0E:57:52:3D:C9:9D:7F:8C X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0c:12:bf:9b:c5:7f:64:70:26:85:70:98:9d:33:12:dd:f8: dc:08:f6:22:52:04:a5:5b:d3:73:95:36:ad:32:97:88:f3:2d: 13:71:12:33:b0:89:4a:ac:7b:61:8b:7a:2b:b2:4c:d8:0f:4a: 91:39:e3:a4:7a:c5:57:cc:1c:2d:cc:36:4d:e4:e6:29:54:cd: 82:2f:af:4e:95:3e:47:1f:3f:7e:9c:d0:e3:0d:4d:b5:9b:4b: 10:8e:53:a3:a1:bb:55:21:5a:7a:ee:7f:13:f5:a1:f4:df:76: 1e:e1:77:d6:4e:f2:27:85:26:5f:a1:49:fb:cd:a5:21:4c:61: 14:53:2f:5b:e5:6e:0e:a7:a4:a3:e8:32:8e:fd:c4:f3:1d:99: 61:8b:66:2f:34:d5:7c:a8:f5:af:80:c2:7d:de:17:ec:43:e2: d7:5a:ec:0d:73:9c:f3:8c:07:02:ba:01:dd:d6:a2:4b:4b:66: b0:c5:27:19:08:93:a3:71:f4:bc:e7:96:8f:a6:73:f3:2a:b8: 4d:a0:2e:0b:48:05:4c:19:c8:e1:6b:06:6a:2a:d3:f7:3f:8a: 7f:7b:c3:eb:0e:e8:0e:4d:23:c5:cd:01:68:2e:7b:ef:b5:03: 4d:20:66:51:07:5a:eb:87:47:37:0f:13:57:11:64:fc:77:af: 87:31:4e:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCLaJZgW5LcaKzJ/YxletAUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYwOTEwMTMwMTIyWhcNMjYwOTExMTMwMTIyWjAzMTEwLwYDVQQD Eyg5OWE5MjczZDM3N2IyNjJlZWNkYmJjZjIwZTU3NTIzZGM5OWQ3ZjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqMD8/L0eHz2JYdNLzPWYkuUO1Cr HcGRaMvNAAFd3cllI1WuUGqPEKOiJwx8xB9WBA/qY2KHFYv+Gri/y+OYNhzxjsrT 4xpApvAzRCoYgKzQihi0yCsQQhptnRxP8CSIfCi9j20Y2wPzq+xUIQklmAnCWRnp Zxu2c79sI65j1lGRc4mhnpIznpx0nJCIgXgcWGm9r4C/mbsjKH34XiGBXnf8XLvm sau5GmlUupXyxyjdPs5cxdXIkQ5UnYaDV1eilzcXdtIhscVnYF97NcAjemhG2acx w7MCPMAoNieEO5nKH0QmcNpWOaMyXsFFf1zy5Vq3MzZsF/Chw0eOkql4cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmpJz03eyYu7Nu88g5XUj3JnX+MMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAwSv5vF f2RwJoVwmJ0zEt343Aj2IlIEpVvTc5U2rTKXiPMtE3ESM7CJSqx7YYt6K7JM2A9K kTnjpHrFV8wcLcw2TeTmKVTNgi+vTpU+Rx8/fpzQ4w1NtZtLEI5To6G7VSFaeu5/ E/Wh9N92HuF31k7yJ4UmX6FJ+82lIUxhFFMvW+VuDqeko+gyjv3E8x2ZYYtmLzTV fKj1r4DCfd4X7EPi11rsDXOc84wHAroB3daiS0tmsMUnGQiTo3H0vOeWj6Zz8yq4 TaAuC0gFTBnI4WsGairT9z+Kf3vD6w7oDk0jxc0BaC5777UDTSBmUQda64dHNw8T VxFk/HevhzFOzQ== -----END CERTIFICATE-----Generated at Thu Sep 10 18:01:35 2026 by rpki-client