$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: oBAAHBxpvwALJQ32+pywt1m4cdHFi6PyDG4ewjiarqY= Subject key identifier: 37:D8:D8:DE:F2:8A:BD:DB:8A:C6:83:FD:47:72:D1:D4:24:2A:18:A8 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 01A0CBC74C48C26284716431645B4A75C1F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 12D7 Signing time: Wed 23 Sep 2026 01:00:31 +0000 Manifest this update: Wed 23 Sep 2026 01:00:31 +0000 Manifest next update: Thu 24 Sep 2026 01:00:31 +0000 Files and hashes: 1: 4aHbMfy3j-ECkrD4rvedcCjTB_0.roa (hash: qusttE+9ZpOBhcPrh6x5LDaTogCO5iBos5RhS/oM6AY=) 2: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (hash: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM=) 3: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: 4VnGnxbdMlUz1pk0Di29VffpgHMk4v3vn1eXduS7yOs=) 4: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (hash: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU=) 5: ERka-Os6ObqqZqi9cGtA6y93DUc.roa (hash: xLtVOqUw1SdFOzEQIDV0mLPI1VOtVrObVSKBvt+3WeA=) 6: GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (hash: 7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=) 7: Gi7sCCfKR95N2aHicd7FbOjBr8I.roa (hash: OQ/d+3fsf9yQoe//ZYqmXZhSoGbi8dYq3SEHzPc2Mfg=) 8: XhXwZGz_0ot-Yipy5gjWlGapqJg.roa (hash: osMFJv9ESYs8+a8oe5L8opFDI8cvKk+g8mqi6wPX570=) 9: c1WcScQ-iUvtqaFkrNNSIFe5J6Q.roa (hash: 9taVcBd6UWLT46HKsQQ8HZLq62dEzc2Av1/NrgPYxiw=) 10: t3UkDqm89BXYugxzek3H_T2xsnk.roa (hash: 0v05Mtv3fk+yrXhgZl5Oqsbm1YuaJuYan3rzgXnAwAA=) 11: vaGt6qiTwmKyEUcufJFu38Vn_PY.roa (hash: Pv4yo0vrEF77MupbDlB9r9HIwxhjZnbYRveAGoZFjW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cb:c7:4c:48:c2:62:84:71:64:31:64:5b:4a:75:c1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Sep 23 01:00:31 2026 GMT Not After : Sep 24 01:00:31 2026 GMT Subject: CN=37d8d8def28abddb8ac683fd4772d1d4242a18a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:15:43:25:19:b3:a9:11:6b:24:52:a3:f1:ed: 78:18:df:b8:7d:a2:f0:c1:e5:57:c7:4d:c0:46:6b: 9e:4a:04:09:b5:89:57:ca:75:d3:f4:f1:4a:6b:85: 33:73:2a:0d:0e:f3:97:32:e1:38:60:ef:57:c2:40: f5:77:cd:b2:ed:40:27:a4:21:fd:98:da:e3:ac:a9: c8:98:cc:d3:84:6a:c9:4c:32:f2:9f:41:40:94:13: 4c:5f:8f:65:95:a5:87:e5:49:45:fe:47:79:d0:e8: e0:22:01:e5:c7:1e:e0:d2:65:5d:00:9b:e1:af:29: b6:28:58:72:43:d0:8a:1b:2f:b3:b3:6d:ad:7b:99: a0:83:3c:fd:f9:94:93:f3:4b:0c:28:29:d0:9f:a8: 85:e7:81:d6:c6:df:f2:e4:ed:c8:4a:0c:33:f2:91: 28:de:7b:83:16:06:e4:d8:f1:2f:01:c1:06:92:22: 48:ae:16:0d:49:48:ad:db:e1:84:be:92:12:9c:2d: 9e:13:83:a2:d2:91:e4:5f:36:1a:d5:7b:66:76:d6: 6a:9f:a5:1b:6f:32:eb:f5:5a:60:bb:d3:55:90:08: 15:ae:6e:d3:79:b0:c5:62:0f:f9:c4:1d:b3:c8:00: e9:db:f2:51:53:7f:d7:b4:88:2a:2a:e5:50:bc:61: 4f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D8:D8:DE:F2:8A:BD:DB:8A:C6:83:FD:47:72:D1:D4:24:2A:18:A8 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ea:a1:37:55:1c:1e:1b:72:00:a8:76:c7:2b:18:76:fe:f0: 05:f2:9a:65:fe:2f:f6:a9:04:94:4c:f5:43:d8:9a:a9:fb:2b: 95:b7:72:34:9a:1a:f3:37:2f:e2:a4:d3:42:2e:5d:b8:44:bf: f8:dd:0b:64:21:cf:74:97:8d:1e:19:4f:d1:ab:3d:d1:82:13: f6:25:d8:da:8d:0f:01:34:c5:8c:b5:51:bb:89:f1:99:e6:62: 65:35:1a:a5:5a:a3:f8:94:b1:29:b0:fd:72:c0:8d:79:26:f6: 00:cd:fa:87:cb:07:c9:c7:03:6d:bf:3f:65:c2:d6:b7:22:67: 88:5b:7e:73:46:05:c8:1d:66:bc:dc:3d:14:a0:21:c4:40:ae: 4f:23:2f:ed:c8:9e:29:f1:51:e4:44:b3:69:03:72:ee:76:af: 0b:78:34:8d:a8:66:4d:7a:b7:38:79:c0:fb:fa:2b:60:2b:55: 90:0e:8b:31:8d:a4:53:e1:9f:e5:2f:1c:3a:2f:e7:03:b9:a7: 10:c4:03:9b:95:6d:39:ab:83:b2:75:67:2c:3f:64:02:7e:6c: 49:02:de:a4:70:26:83:0d:6b:e4:d9:2e:b0:1d:9b:a7:a1:8f: 70:3c:b7:ef:87:55:93:22:68:b6:a9:32:b4:03:af:0e:e5:e4: a5:3c:cf:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDLx0xIwmKEcWQxZFtKdcH4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwOTIzMDEwMDMxWhcNMjYwOTI0MDEwMDMxWjAzMTEwLwYDVQQD EygzN2Q4ZDhkZWYyOGFiZGRiOGFjNjgzZmQ0NzcyZDFkNDI0MmExOGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRVDJRmzqRFrJFKj8e14GN+4faLw weVXx03ARmueSgQJtYlXynXT9PFKa4UzcyoNDvOXMuE4YO9XwkD1d82y7UAnpCH9 mNrjrKnImMzThGrJTDLyn0FAlBNMX49llaWH5UlF/kd50OjgIgHlxx7g0mVdAJvh rym2KFhyQ9CKGy+zs22te5mggzz9+ZST80sMKCnQn6iF54HWxt/y5O3ISgwz8pEo 3nuDFgbk2PEvAcEGkiJIrhYNSUit2+GEvpISnC2eE4Oi0pHkXzYa1XtmdtZqn6Ub bzLr9Vpgu9NVkAgVrm7TebDFYg/5xB2zyADp2/JRU3/XtIgqKuVQvGFPpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfY2N7yir3bisaD/Udy0dQkKhioMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACeqhN1Uc HhtyAKh2xysYdv7wBfKaZf4v9qkElEz1Q9iaqfsrlbdyNJoa8zcv4qTTQi5duES/ +N0LZCHPdJeNHhlP0as90YIT9iXY2o0PATTFjLVRu4nxmeZiZTUapVqj+JSxKbD9 csCNeSb2AM36h8sHyccDbb8/ZcLWtyJniFt+c0YFyB1mvNw9FKAhxECuTyMv7cie KfFR5ESzaQNy7navC3g0jahmTXq3OHnA+/orYCtVkA6LMY2kU+Gf5S8cOi/nA7mn EMQDm5VtOauDsnVnLD9kAn5sSQLepHAmgw1r5NkusB2bp6GPcDy374dVkyJotqky tAOvDuXkpTzPHg== -----END CERTIFICATE-----Generated at Wed Sep 23 09:46:03 2026 by rpki-client