$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: LHq11u2K1jf/9PlHn1WPlfkS80/4xX8DHES4lAEDbyU= Subject key identifier: 89:19:03:62:3E:CF:DD:1A:8F:07:BA:16:43:90:EB:B8:FA:5E:FF:41 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 01A04F52CFCB183ED4201B6722A8F796E8A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 127C Signing time: Sat 29 Aug 2026 21:00:22 +0000 Manifest this update: Sat 29 Aug 2026 21:00:22 +0000 Manifest next update: Sun 30 Aug 2026 21:00:22 +0000 Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 5: 957KjKsgQQ-VsvqavE6ngE5UV_E.roa (hash: brbR3ebf55NlnYJGtD6lvlUEhjYCWu8BA/oxkjsOs0I=) 6: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 7: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: mHwcntlEmuFKxQQWM/gXyzTBOJuhkfoNth5S1ybWKu8=) 8: ISsGxHIyrOPNYfVnvYomPgXoioM.roa (hash: Rohi1FBRyCEDtd+NeWD1TRuQbRscn3zM0CYpnIqNU38=) 9: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 10: ebH1LH3rtcCFyoMlHWJucoddnKk.roa (hash: w5pFXYTG5xXpiPZ27k95gUc+ufkXKutPUdAJkQwEA8E=) 11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 12: m6qwRKca6itBiUVdwN1KXUT2lxA.roa (hash: /aV+oJ7nRkyO35tfs9XJfVVL79kGBuqCjU4aDL711gY=) 13: uMOXrFLqc5T0Yg1zrL_Jmk4aCZ8.roa (hash: jeR1y8042HqLS1mMvheBMUQZBnBjFCW3QvpduHp+6M0=) 14: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 30 Aug 2026 20:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:4f:52:cf:cb:18:3e:d4:20:1b:67:22:a8:f7:96:e8:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Aug 29 21:00:22 2026 GMT Not After : Aug 30 21:00:22 2026 GMT Subject: CN=891903623ecfdd1a8f07ba164390ebb8fa5eff41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:70:b8:dc:6d:95:65:dd:c6:39:c7:f7:87:1a: b8:b1:52:31:3d:58:fc:83:0b:80:0d:c5:67:be:d9: ed:39:35:a2:59:bf:aa:44:60:83:07:66:6d:a8:16: 81:76:1a:a0:90:33:ca:18:4e:9b:bd:77:a5:8f:0c: 23:cd:88:a1:59:79:8d:f9:e5:66:7b:97:01:93:4a: ed:e3:0f:70:a3:40:46:86:3f:3a:76:e3:fe:39:36: 72:71:54:8c:3d:36:9e:77:cd:a9:00:02:ee:61:0e: a0:f0:ae:2e:ec:7a:16:c6:09:fd:67:ec:5d:71:8c: 45:56:5d:18:52:c4:d6:5c:15:a6:f5:5d:2f:13:8b: d4:ab:44:60:8f:2b:99:7b:3f:eb:16:b8:c6:0e:2c: c7:bc:a7:aa:73:07:03:0d:ac:8e:81:8b:81:67:27: 1a:71:20:a6:f1:e8:29:4a:a6:29:7e:e9:2c:40:d0: 0d:65:8c:a8:1e:48:1b:93:95:16:4c:70:4a:0e:70: 33:92:5b:d5:87:15:96:94:4c:ad:10:22:dd:20:b5: 31:f6:ca:00:7c:ea:05:25:e7:81:6e:61:95:54:d0: dc:59:86:2b:35:9f:10:57:24:2a:99:72:09:06:f6: 5f:f2:8b:dd:bb:42:c9:95:4c:a9:00:a7:81:52:38: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:19:03:62:3E:CF:DD:1A:8F:07:BA:16:43:90:EB:B8:FA:5E:FF:41 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:66:02:3e:f3:c4:83:41:9a:ce:c5:93:2b:89:cd:1e:3f:18: d1:f8:91:d7:6e:63:bd:e2:d9:4c:21:92:0b:f4:3c:82:7a:f5: cd:6e:ca:a9:5c:4b:bc:9e:22:96:bf:ce:be:71:30:30:f9:ca: 23:4c:09:4a:da:75:85:32:27:bb:f5:6f:6c:a9:f1:f9:c6:8d: 5b:0d:7b:9d:4c:29:96:c5:d5:3a:29:a6:79:ee:12:ab:de:91: 45:af:5b:ac:ae:bb:9f:b5:dc:b0:29:82:3f:79:f5:b1:98:d0: 4c:b6:a0:c8:fd:22:b9:0f:65:d3:12:88:1b:0a:48:68:64:2d: 21:6b:74:b0:75:1d:dc:c7:74:4b:b4:51:70:5d:5e:01:66:fb: e6:a3:c2:07:df:e1:e6:75:a4:0b:f8:20:c1:84:10:da:db:e8: c3:8b:13:59:51:15:73:0f:b4:8c:9e:88:77:a1:82:09:eb:f2: 11:ea:08:e7:3f:09:c2:da:34:23:5b:a3:18:25:dc:11:e0:c9: 26:52:a1:a0:ed:f8:1e:84:e7:b9:f0:1f:57:64:5a:7f:11:31: 67:65:0c:bb:39:f5:3e:39:dd:24:1a:76:84:6c:8f:fc:13:20: 8f:2f:88:b4:97:b8:04:68:37:09:7f:7f:90:b1:4c:83:2d:46: a7:36:e6:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBPUs/LGD7UIBtnIqj3luikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwODI5MjEwMDIyWhcNMjYwODMwMjEwMDIyWjAzMTEwLwYDVQQD Eyg4OTE5MDM2MjNlY2ZkZDFhOGYwN2JhMTY0MzkwZWJiOGZhNWVmZjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XC43G2VZd3GOcf3hxq4sVIxPVj8 gwuADcVnvtntOTWiWb+qRGCDB2ZtqBaBdhqgkDPKGE6bvXeljwwjzYihWXmN+eVm e5cBk0rt4w9wo0BGhj86duP+OTZycVSMPTaed82pAALuYQ6g8K4u7HoWxgn9Z+xd cYxFVl0YUsTWXBWm9V0vE4vUq0RgjyuZez/rFrjGDizHvKeqcwcDDayOgYuBZyca cSCm8egpSqYpfuksQNANZYyoHkgbk5UWTHBKDnAzklvVhxWWlEytECLdILUx9soA fOoFJeeBbmGVVNDcWYYrNZ8QVyQqmXIJBvZf8ovdu0LJlUypAKeBUjiEkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkZA2I+z90ajwe6FkOQ67j6Xv9BMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmYCPvPE g0GazsWTK4nNHj8Y0fiR125jveLZTCGSC/Q8gnr1zW7KqVxLvJ4ilr/OvnEwMPnK I0wJStp1hTInu/VvbKnx+caNWw17nUwplsXVOimmee4Sq96RRa9brK67n7XcsCmC P3n1sZjQTLagyP0iuQ9l0xKIGwpIaGQtIWt0sHUd3Md0S7RRcF1eAWb75qPCB9/h 5nWkC/ggwYQQ2tvow4sTWVEVcw+0jJ6Id6GCCevyEeoI5z8Jwto0I1ujGCXcEeDJ JlKhoO34HoTnufAfV2RafxExZ2UMuzn1PjndJBp2hGyP/BMgjy+ItJe4BGg3CX9/ kLFMgy1Gpzbm/w== -----END CERTIFICATE-----Generated at Sun Aug 30 05:45:31 2026 by rpki-client