$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json) Hash identifier: DiI3kUHLlHqTYI1OuySfxKVD838dtOLvZ1chJxghSFg= Subject key identifier: 75:D5:68:F8:09:7F:9B:39:E8:58:66:BA:CC:D6:B5:28:28:2D:20:63 Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e Certificate serial: 01A08BD5ED4BEE9E3A688EE7CE5EFDD040C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft Manifest number: 1AA2 Signing time: Thu 10 Sep 2026 15:00:47 +0000 Manifest this update: Thu 10 Sep 2026 15:00:47 +0000 Manifest next update: Fri 11 Sep 2026 15:00:47 +0000 Files and hashes: 1: 3as_F9HBnOQ2zN1jHN4DCrnBZzM.roa (hash: ar+5lRYfHjC+pCcYPp0WrmzVTLKDTp6UmrWY3Nr+lvI=) 2: 9KBqGjnL-5oJ5B6DzcxjqiI7EQM.roa (hash: LIvm7nAVKXaLM9rEsrAxwOlhblCh+te14HXeeWgrThQ=) 3: LmM48ME-vV9knrJxSTQaxjQp3co.asa (hash: EudqvBBerqU77vXqzfKyktKs74IC9c1mzsls/2yJHmE=) 4: TuuV3R_pLiwXMlOjTuF_uOOQUKQ.roa (hash: x74/PQH6T0L5thYcJT0BIF/7nXPoUee65OsSO1RpsSI=) 5: UR40d6Nv7wtY6847-nmAoOG-Ggc.asa (hash: 15joOaBQ5tuqyW+sD1j3/l5gQvX/528w2uliH7SqR1M=) 6: X-7HQZC9zy7GCLS-G_9TImPP2kU.roa (hash: 36cYqJN6wlU8jY5y3DdoT/lXOgeKUsdpLhbqi18oJfA=) 7: XWNNEFomn9bKgvzZUcc40UaOsbg.roa (hash: /H5U7m5xCacMvYYK2MppLjlzRXDKTMF2JjarWQi18pE=) 8: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: JqAKvmUmBWo+8lKRwIjGhiDFyofFneRPz6+EtVRL6mw=) 9: chkkpC1wf4PBAO07r8AaazA2rnI.asa (hash: VlBFOTypBDda09dJ/OfOd69SgWHtcRGMPQP/H7cWGAw=) 10: jEg7Vp9RVQZpmfWx6YfvLrfG_Qk.roa (hash: iyqR4koXAfQGUALCUeFV9Ns7mWrPcy5zMGeMYkS05Gw=) 11: p5I2rBokj4nhJ_YUk_dcJCNwjNY.asa (hash: JePaqX8dDtt3ljOEbNRemCQgG9iiJBvpk8UC44tWVtA=) 12: wMThe2cBB531pXzWqFpjonQuHQ8.roa (hash: Y8v6UOfwMmgJZQNzDFQ/23Nn2NW5kKuc76L2jWsCysM=) 13: y-MtqUQxYN7HeVnOQGAy52MjLe8.roa (hash: /bCO17JMK+2NzpP4wufXIXJcR0ZbA6NT7EQZcGDDLZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 14:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8b:d5:ed:4b:ee:9e:3a:68:8e:e7:ce:5e:fd:d0:40:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e Validity Not Before: Sep 10 15:00:47 2026 GMT Not After : Sep 11 15:00:47 2026 GMT Subject: CN=75d568f8097f9b39e85866baccd6b528282d2063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:03:54:23:2f:87:0b:4f:7d:5a:c6:07:84: 97:b2:85:0b:55:89:08:85:f6:28:7d:2a:0f:c3:b8: f5:b8:e9:af:f1:c2:c0:81:82:7b:89:7f:5b:d5:be: 1c:60:99:b9:6b:b7:c9:13:69:af:5b:ef:b9:bb:7f: ed:cf:36:55:a5:ce:fd:69:99:07:ca:a1:7a:9b:dc: f4:0c:28:a8:93:7c:f2:a2:bf:cd:71:7d:89:7f:ac: 59:5e:12:d1:9a:ad:0f:ed:f4:78:e0:10:cb:6a:2f: 0a:44:4b:9e:e1:fe:1a:e6:ed:11:5e:6d:7c:e0:38: 11:45:6a:e8:3b:75:46:22:0e:67:46:0a:1f:a6:ea: 01:54:95:9c:f0:a4:9c:79:2a:31:7d:02:46:ca:81: f7:b0:25:fc:2b:5b:8d:45:31:8f:5a:bb:71:30:15: 5d:d7:61:50:72:8d:93:a9:bf:4b:27:89:2f:d4:7c: eb:8c:84:bb:c7:0e:04:a9:e3:5c:3e:30:cc:66:10: 76:d7:41:3d:25:45:1f:66:f8:f6:19:42:85:19:c9: 4e:09:29:bd:1c:a1:57:c9:6d:e6:82:67:1f:a6:29: 18:1c:15:d3:a9:1d:e8:2e:2f:a6:63:59:5b:17:7c: 7f:cc:ab:39:21:0a:67:92:e6:c9:49:df:76:39:90: a7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D5:68:F8:09:7F:9B:39:E8:58:66:BA:CC:D6:B5:28:28:2D:20:63 X509v3 Authority Key Identifier: keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1c:46:43:d3:ae:9e:e5:61:4c:d1:39:f5:3e:de:84:bf:43: 10:7d:17:fe:5a:91:27:31:6c:7e:71:0e:b1:71:fa:fe:ec:c6: a2:56:45:c5:0d:ee:30:c1:8a:c0:1f:d3:08:06:3c:66:ae:80: 6d:be:c9:1e:bf:b3:92:9f:01:54:f0:33:c3:31:e5:fa:11:7d: 7f:05:6e:ba:5b:a7:bb:c9:13:05:12:60:9f:75:a1:31:33:dd: b6:ee:76:ef:c9:1e:73:30:68:17:4c:a9:19:da:3c:5d:77:ff: db:cf:ea:2e:eb:0b:06:2b:6b:0d:53:7c:5d:5d:d2:2f:d1:4a: 55:66:3c:79:74:34:58:e5:5e:44:42:04:67:82:b4:16:52:33: 78:b6:0d:30:48:cb:be:a2:7e:e4:36:11:34:30:e1:01:29:29: c6:ff:af:26:b3:7b:2b:d7:67:a0:62:28:64:07:4b:7b:1f:4c: cc:8b:4b:d0:81:32:a1:22:4a:fe:06:14:75:ec:ce:a7:42:d0: 30:dc:5e:6d:ee:23:04:be:26:bf:53:ce:90:6c:81:6f:95:ea: d0:ea:bd:4a:e7:a1:45:8f:ff:17:7c:1a:31:cb:31:9b:1b:69: c3:35:9f:74:74:94:34:f4:f4:1d:32:c6:cc:b8:71:95:94:35: fe:21:d9:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCL1e1L7p46aI7nzl790EDFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1 ZDAwN2UwHhcNMjYwOTEwMTUwMDQ3WhcNMjYwOTExMTUwMDQ3WjAzMTEwLwYDVQQD Eyg3NWQ1NjhmODA5N2Y5YjM5ZTg1ODY2YmFjY2Q2YjUyODI4MmQyMDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIcDVCMvhwtPfVrGB4SXsoULVYkI hfYofSoPw7j1uOmv8cLAgYJ7iX9b1b4cYJm5a7fJE2mvW++5u3/tzzZVpc79aZkH yqF6m9z0DCiok3zyor/NcX2Jf6xZXhLRmq0P7fR44BDLai8KREue4f4a5u0RXm18 4DgRRWroO3VGIg5nRgofpuoBVJWc8KSceSoxfQJGyoH3sCX8K1uNRTGPWrtxMBVd 12FQco2Tqb9LJ4kv1HzrjIS7xw4EqeNcPjDMZhB210E9JUUfZvj2GUKFGclOCSm9 HKFXyW3mgmcfpikYHBXTqR3oLi+mY1lbF3x/zKs5IQpnkubJSd92OZCnOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXVaPgJf5s56FhmuszWtSgoLSBjMB8GA1UdIwQY MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt MWZiYzY0MWI1MGIxLzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxxGQ9Ou nuVhTNE59T7ehL9DEH0X/lqRJzFsfnEOsXH6/uzGolZFxQ3uMMGKwB/TCAY8Zq6A bb7JHr+zkp8BVPAzwzHl+hF9fwVuulunu8kTBRJgn3WhMTPdtu5278keczBoF0yp Gdo8XXf/28/qLusLBitrDVN8XV3SL9FKVWY8eXQ0WOVeREIEZ4K0FlIzeLYNMEjL vqJ+5DYRNDDhASkpxv+vJrN7K9dnoGIoZAdLex9MzItL0IEyoSJK/gYUdezOp0LQ MNxebe4jBL4mv1POkGyBb5Xq0Oq9SuehRY//F3waMcsxmxtpwzWfdHSUNPT0HTLG zLhxlZQ1/iHZRw== -----END CERTIFICATE-----Generated at Thu Sep 10 20:40:35 2026 by rpki-client