$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: HULoRusJW/wdE3xZcCOl4mYDjhP3QDHe4suEkpTxVMs= Subject key identifier: 9D:66:51:0E:BE:09:3F:AC:51:39:62:1C:D3:EB:E9:37:B4:53:DB:13 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 01A0E1AB4903AAB9EE0ADB627D67FA2A364A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 12CB Signing time: Sun 27 Sep 2026 07:01:33 +0000 Manifest this update: Sun 27 Sep 2026 07:01:33 +0000 Manifest next update: Mon 28 Sep 2026 07:01:33 +0000 Files and hashes: 1: 0V-6Ocf6ckJP0OmiGxbtIBGBZmU.roa (hash: BeQPwwhAk0wYxfBBr2kzYrvOfYh+U9/Tjif4YIzJ0F8=) 2: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 3: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 4: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 5: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 6: B0aX47W6kux6EP5PxGcHbpo8GWc.roa (hash: zBSMeOkMWOykqlpzJJhOtskJsuEZJB5nwz0BJ2knqw0=) 7: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 8: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: q1QsCHMpRrc14AqoqPb+oZXVFUVB13oTK8SPqEFZpfU=) 9: ISsGxHIyrOPNYfVnvYomPgXoioM.roa (hash: Rohi1FBRyCEDtd+NeWD1TRuQbRscn3zM0CYpnIqNU38=) 10: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 11: g-_CUB36AWobIcG-jmmWcyiDx-E.roa (hash: WlfHF8ayshGFfQ441VT2aPbuyQS92Aj33Z++6XcJ8YE=) 12: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 13: ltlQZdBprIAZtA0AlHcwNThjuJ8.roa (hash: w4tQk9JwHDO4yRlDh9QyPlHelxD0WmS14timwLhZHpI=) 14: uMOXrFLqc5T0Yg1zrL_Jmk4aCZ8.roa (hash: jeR1y8042HqLS1mMvheBMUQZBnBjFCW3QvpduHp+6M0=) 15: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 07:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e1:ab:49:03:aa:b9:ee:0a:db:62:7d:67:fa:2a:36:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Sep 27 07:01:33 2026 GMT Not After : Sep 28 07:01:33 2026 GMT Subject: CN=9d66510ebe093fac5139621cd3ebe937b453db13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:36:e7:21:0e:33:2a:0f:2b:13:f8:47:3b:2d: 5b:bd:49:0e:86:6a:ce:3e:1b:17:d5:ed:5c:f7:3e: 1c:39:d0:51:ab:7b:a9:d1:fa:18:88:79:20:cb:70: d2:78:cd:08:3d:56:d8:3b:85:53:e5:9d:7f:c4:2b: 64:a4:aa:ef:b2:b3:bc:b8:73:8b:5f:19:4f:b5:1b: bc:77:74:5e:08:a7:fd:0a:fb:8d:82:6e:63:24:e8: 31:ee:9d:a0:35:7a:64:50:52:df:d1:46:ef:80:df: 99:16:46:81:83:d1:2e:c5:8f:88:6c:c0:18:54:ce: 62:32:c9:b6:df:5b:37:4d:d2:47:8c:5e:51:e0:a8: 50:31:04:01:02:f3:c7:37:22:67:49:33:97:8d:19: dd:74:ab:c6:43:88:a2:87:9a:e9:45:3a:5f:c3:3e: bf:8e:44:91:e2:ee:58:f2:e6:13:77:eb:36:69:1a: d0:a9:7f:06:c5:56:4e:4f:88:26:0a:ef:52:68:cb: f1:e2:22:3f:8d:53:b4:ed:03:5a:6d:89:40:2b:61: 76:c5:17:60:77:1a:b7:b2:33:a7:ce:2e:02:24:84: 55:8a:97:6e:e3:d3:87:d2:f6:ce:00:65:28:77:5f: c0:e7:9a:75:7b:5a:7c:a6:8a:04:ba:9e:1a:74:b3: 1a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:66:51:0E:BE:09:3F:AC:51:39:62:1C:D3:EB:E9:37:B4:53:DB:13 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:26:dd:1e:0b:6c:9d:73:ed:0d:3e:6f:84:73:de:50:34:45: 38:dc:a1:5f:f8:34:aa:c6:70:15:0b:ba:59:f0:5b:7f:3e:45: 74:5c:49:a9:78:1c:29:ce:c0:59:13:42:61:a6:20:08:15:7d: 76:b1:6a:d7:5c:d0:e8:ff:47:b3:59:dc:ea:5b:8d:1e:b4:b0: f6:c9:c7:57:a5:26:70:d8:4c:18:9a:60:80:39:fd:47:86:82: 93:2d:98:0b:18:55:db:db:c5:49:52:cc:a9:9c:df:df:52:1d: 09:73:36:b6:c9:27:ba:bb:48:1b:92:ab:09:c7:a0:17:5b:10: ac:40:56:58:ab:d3:2c:0b:a4:cf:55:5b:a4:37:ee:85:74:2b: 65:8a:c4:12:e6:e4:33:04:85:05:39:c9:45:a7:fb:84:e7:2d: 29:44:e1:1e:6e:14:84:01:ea:7d:c1:93:01:c3:d6:3d:a8:0e: 8f:f5:d9:7c:04:12:e4:7f:44:a3:e3:e7:0a:fc:22:01:c4:44: 9a:02:25:35:2d:e0:4e:ca:72:a8:58:d7:97:24:d2:cf:bd:f7: 60:ce:68:82:87:4e:6e:de:19:84:ac:4d:ba:82:2f:9a:df:d5: cd:49:11:1d:3a:38:87:90:1f:06:f3:0e:97:5b:d3:76:c1:ab: 4e:d0:42:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDhq0kDqrnuCttifWf6KjZKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwOTI3MDcwMTMzWhcNMjYwOTI4MDcwMTMzWjAzMTEwLwYDVQQD Eyg5ZDY2NTEwZWJlMDkzZmFjNTEzOTYyMWNkM2ViZTkzN2I0NTNkYjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjbnIQ4zKg8rE/hHOy1bvUkOhmrO PhsX1e1c9z4cOdBRq3up0foYiHkgy3DSeM0IPVbYO4VT5Z1/xCtkpKrvsrO8uHOL XxlPtRu8d3ReCKf9CvuNgm5jJOgx7p2gNXpkUFLf0UbvgN+ZFkaBg9EuxY+IbMAY VM5iMsm231s3TdJHjF5R4KhQMQQBAvPHNyJnSTOXjRnddKvGQ4iih5rpRTpfwz6/ jkSR4u5Y8uYTd+s2aRrQqX8GxVZOT4gmCu9SaMvx4iI/jVO07QNabYlAK2F2xRdg dxq3sjOnzi4CJIRVipdu49OH0vbOAGUod1/A55p1e1p8pooEup4adLMatwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1mUQ6+CT+sUTliHNPr6Te0U9sTMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSbdHgts nXPtDT5vhHPeUDRFONyhX/g0qsZwFQu6WfBbfz5FdFxJqXgcKc7AWRNCYaYgCBV9 drFq11zQ6P9Hs1nc6luNHrSw9snHV6UmcNhMGJpggDn9R4aCky2YCxhV29vFSVLM qZzf31IdCXM2tsknurtIG5KrCcegF1sQrEBWWKvTLAukz1VbpDfuhXQrZYrEEubk MwSFBTnJRaf7hOctKUThHm4UhAHqfcGTAcPWPagOj/XZfAQS5H9Eo+PnCvwiAcRE mgIlNS3gTspyqFjXlyTSz733YM5ogodObt4ZhKxNuoIvmt/VzUkRHTo4h5AfBvMO l1vTdsGrTtBCxw== -----END CERTIFICATE-----Generated at Sun Sep 27 18:48:27 2026 by rpki-client