$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft File: DimJADVf30JUwggx8tfuO-xCm9s.mft (raw, json) Hash identifier: sWgxK+nVtYLNe1vA29actQaNGL8wFDURfVqXG3UKwCw= Subject key identifier: 44:60:C9:4B:B1:A7:8D:AB:28:12:AC:EC:46:E0:4F:1E:B6:B3:96:52 Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 01A0D49400F917977BFF63F9B920075E0C2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft Manifest number: 02DC Signing time: Thu 24 Sep 2026 18:01:04 +0000 Manifest this update: Thu 24 Sep 2026 18:01:04 +0000 Manifest next update: Fri 25 Sep 2026 18:01:04 +0000 Files and hashes: 1: 5H5HvQv575nFSmKSZOWkpoNmJa4.roa (hash: C7AqddrBTGFSdtwcxzGRSd2Sbb+zBQZFF1QXO0RlcUs=) 2: 5mS0a5DKsKUWo9swyJpnqpHouXc.roa (hash: Ex+vAEyQsrUoaiDO20Pjp4tHdlovsh4eps8dvFj9mfk=) 3: 7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (hash: J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=) 4: AcToql_UqNBfG1rjDk5FIUcSzS4.roa (hash: S2Tpi4kDrEf93PoUW4sACQhMZl5q7cDANwyMjE4r/9E=) 5: DimJADVf30JUwggx8tfuO-xCm9s.crl (hash: TVX4J7jG4IgrDcpUv+3NISMLQbGiGs4UyqcvKCjXHyM=) 6: I0FnsRSHuCIlE5UfwEVWK3D0hR8.roa (hash: dR+nGhBOUGjcCFb5F8ZxMzX7iIcWLc6xb1ZqHmYGR/c=) 7: IkrFRF3Ttgw4FIDBgBDVg0dJ4b4.roa (hash: WGPpKc4dj5grwNnhEEktJ194QdHxK76K6rqlpp7lrFs=) 8: JsPIoXS0PpUsyOfC959Y4j3xCwM.roa (hash: BX1vpydloz/So1cOf6efq9hS22PCaYbgOF7mgCl+KYc=) 9: LWCb_rn7dtaoroBNMd5nV8LGQ1I.roa (hash: saQHmdyeeE4qKDwnXpH56fkp0rFvJK6q7KF3ePpi/JU=) 10: OCvApHO5mjUuV4yskONg4kSU_tU.roa (hash: SD3pfUSDH8g2hAqab8oUoG9VqzVkLCW7ntgh81aWSJo=) 11: Yte9L4xekX_uW58axTYZcgt8FmY.roa (hash: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4=) 12: ZbbPFYZ5et4E0DLQLx7QgD_-n_4.roa (hash: kpo5V1Kis4etv3McfweDJYMJDNmzmYsbcpdv1gAavks=) 13: oPUMDVZdNJJ0wbtNiKpT4bB3cJM.roa (hash: 2sttQ/LaGMOGWj3sxLpiozuHzg1tWCewZ5VkHDFqrH4=) 14: wfJt5mTsUXow9fCWX31R-Dkmuu0.roa (hash: Ogc3m/G0BZohp0lL37SmmZBmPpDZV56wfDB8yNtIYXE=) 15: wxAG3X_yNVOiL2lU8MWKtnA7yu8.roa (hash: 1/q+7+8/xJC9sx0Oq0j0TwpS9hM9lMperyMfuXBmbDg=) 16: x2XYLxaNKJRFn9DehiizW9aYMTk.roa (hash: Osl107YeRkqGDPiFlpVzUDvS4jF+uDx9WoyD7Axzjng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 18:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:94:00:f9:17:97:7b:ff:63:f9:b9:20:07:5e:0c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Sep 24 18:01:04 2026 GMT Not After : Sep 25 18:01:04 2026 GMT Subject: CN=4460c94bb1a78dab2812acec46e04f1eb6b39652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:3a:90:9a:06:7e:d5:c6:54:2e:9f:bd:04: 25:fb:39:d2:fa:18:5d:99:bf:ab:7d:72:6b:22:60: 56:a5:69:1f:2b:44:56:ce:f2:0f:38:dd:6c:ee:1f: 62:5d:1a:7d:2f:de:b8:35:e2:5e:85:0e:a9:de:1e: 32:b4:7d:e4:49:9f:0b:07:e3:f7:2f:27:d0:ac:58: ae:ed:b4:61:59:49:b8:e8:b7:50:c4:c2:ab:e9:43: 3d:04:7e:3f:0d:6f:22:82:90:50:8d:48:22:83:03: 2f:e9:ad:80:d9:58:1e:ad:0c:13:74:ed:db:69:35: 3d:a8:e2:50:3f:3d:ef:0a:f3:95:dc:10:76:b2:67: d9:c5:97:e7:ea:51:13:93:1d:4e:e9:51:11:6e:45: fe:22:bb:9a:19:66:1d:33:c2:f8:4f:56:7d:92:d2: c4:0f:8f:b4:b2:91:23:ae:1c:7b:af:ee:e9:b0:97: 91:09:cc:10:ea:55:ed:30:d4:4a:3c:44:1b:e2:1e: 14:7c:8a:5f:b6:9c:c2:bf:30:68:52:1d:6e:8c:ce: 72:bb:ea:19:3b:65:68:e7:c0:0b:c5:12:da:8e:06: fe:3b:57:b9:5f:94:4b:e8:5c:4c:8c:22:6f:1b:b2: e9:ea:d4:31:f4:76:c5:53:16:93:ba:3e:74:26:33: d4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:60:C9:4B:B1:A7:8D:AB:28:12:AC:EC:46:E0:4F:1E:B6:B3:96:52 X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:de:71:c7:c3:bc:66:1b:ae:54:90:91:12:b6:34:de:b1:84: 4c:0d:b0:eb:ad:4f:ce:ee:57:67:03:c9:21:6c:77:40:b5:a6: 93:f2:a2:bf:61:5d:68:10:6c:4a:a8:62:93:d5:46:1d:8d:fc: 2b:b2:e4:01:3e:1a:9b:18:45:c5:ef:8e:68:ff:f6:47:13:eb: 5a:a4:5b:8a:29:22:ea:e0:f7:87:6e:b4:cd:d3:eb:75:4b:4e: 99:26:6b:3a:0e:62:27:fd:96:65:ec:c4:87:57:e9:24:bd:68: 7f:39:cc:3a:fc:07:b8:1b:8e:47:0d:af:f7:49:31:0a:b3:20: a0:19:a7:10:be:01:29:5f:e2:84:37:7d:96:d4:e3:ff:a2:ac: 48:fa:9e:c7:9b:4d:f6:59:3b:2d:71:36:18:ca:53:a2:f0:22: 2d:ca:48:b1:a0:af:df:51:1f:88:78:52:b1:a3:21:6a:48:a4: b0:7a:0c:5d:d0:4c:38:d8:24:ab:64:5b:43:42:06:f7:0e:a7: d8:71:60:d2:ce:85:b5:e8:ef:d1:1e:12:0b:97:f6:9c:0d:2e: e6:26:c2:2c:35:98:e1:e5:d1:dd:fb:42:56:f1:51:35:4c:76: a7:4c:66:64:d1:32:c4:67:65:27:e4:73:00:57:25:0f:40:a7: e3:29:80:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUlAD5F5d7/2P5uSAHXgwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjYwOTI0MTgwMTA0WhcNMjYwOTI1MTgwMTA0WjAzMTEwLwYDVQQD Eyg0NDYwYzk0YmIxYTc4ZGFiMjgxMmFjZWM0NmUwNGYxZWI2YjM5NjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDc6kJoGftXGVC6fvQQl+znS+hhd mb+rfXJrImBWpWkfK0RWzvIPON1s7h9iXRp9L964NeJehQ6p3h4ytH3kSZ8LB+P3 LyfQrFiu7bRhWUm46LdQxMKr6UM9BH4/DW8igpBQjUgigwMv6a2A2VgerQwTdO3b aTU9qOJQPz3vCvOV3BB2smfZxZfn6lETkx1O6VERbkX+IruaGWYdM8L4T1Z9ktLE D4+0spEjrhx7r+7psJeRCcwQ6lXtMNRKPEQb4h4UfIpftpzCvzBoUh1ujM5yu+oZ O2Vo58ALxRLajgb+O1e5X5RL6FxMjCJvG7Lp6tQx9HbFUxaTuj50JjPUTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERgyUuxp42rKBKs7EbgTx62s5ZSMB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmt5xx8O8 ZhuuVJCRErY03rGETA2w661Pzu5XZwPJIWx3QLWmk/Kiv2FdaBBsSqhik9VGHY38 K7LkAT4amxhFxe+OaP/2RxPrWqRbiiki6uD3h260zdPrdUtOmSZrOg5iJ/2WZezE h1fpJL1ofznMOvwHuBuORw2v90kxCrMgoBmnEL4BKV/ihDd9ltTj/6KsSPqex5tN 9lk7LXE2GMpTovAiLcpIsaCv31EfiHhSsaMhakiksHoMXdBMONgkq2RbQ0IG9w6n 2HFg0s6Ftejv0R4SC5f2nA0u5ibCLDWY4eXR3ftCVvFRNUx2p0xmZNEyxGdlJ+Rz AFclD0Cn4ymA2w== -----END CERTIFICATE-----Generated at Fri Sep 25 03:57:41 2026 by rpki-client