$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft File: YMb7RHrtcm0u-TGkKWRERWJip_o.mft (raw, json) Hash identifier: e0mFN+h7jrKWkashh+a9PREfplgwbfSF1Jgj7Qnr7DI= Subject key identifier: 0E:C8:14:E1:E5:A9:7D:74:7A:C8:9B:24:F1:6B:36:73:89:E0:1F:C6 Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa Certificate serial: 01A0D9BA73C8C98E359E57814F12F3C67EDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft Manifest number: EA Signing time: Fri 25 Sep 2026 18:01:10 +0000 Manifest this update: Fri 25 Sep 2026 18:01:10 +0000 Manifest next update: Sat 26 Sep 2026 18:01:10 +0000 Files and hashes: 1: 5jZisInp8TXN2yxl-UfU7WarY0M.roa (hash: 10WHkU96QF3J0hD6hFJYOgRaUbW4Qz52pcw2Yaz9eto=) 2: DgFm4HmChjoVVXbZG_s_bmWikhA.roa (hash: 4f2ipiD6Fix8CP8oeahNwfJlqbWpC48B9lElmTb3ddg=) 3: JzxFmz3Lxsv9r4_qQHlWmgWNVtI.roa (hash: dTmsUkvcV6A8e/27HSCfyw/NpZInwfDk8eJ8C0h4oX8=) 4: LNy8kG7KVF3mkmXJHoBxTCBaoz8.roa (hash: uTCQoqu4tgLl+7hkuwUJH7G5TlRzJ3VCqIlTxihN7Dg=) 5: NMD8IPNFkO_yB9Wza-dDaSkgBgU.roa (hash: x0WGnzY9box2ZKgxlElBXgAV9eE1/18hEUdzs9PwalY=) 6: YMb7RHrtcm0u-TGkKWRERWJip_o.crl (hash: qDJojoETyL9IIOVAIP3doqiU6vnnbS38UrTAtgPO9gk=) 7: cK5MLIirkupuUC--lCax3HKVTiA.roa (hash: RMFQARPnEaD9nD+3pnJxX9R8erur18BY5dnWYniqEqk=) 8: cr0yQUYRZ5XZTIn7LmU6mw3yMFo.roa (hash: W6nw3GNA3oR+cSF8a0fITc1nGlcxnI1/yWAqPf9xzks=) 9: cyswjofwxhiLYURwBc5pQOh-uII.roa (hash: ceigelWuJhlhAehkLt//nXxIwryDIZplSDT94RKb2SI=) 10: jwUITEDlQy87pZEq-SRjBl82u54.roa (hash: HqhHIiWDUiwTfQhbTW0inXFYsA2y/bXGUsSJqG90xro=) 11: knufnAOkhguuSqCyELAEY4TVYpQ.roa (hash: iydBfT3B2FD5xanrqmT5d19Wmngm0cSNjyRo7V3YULA=) 12: m-jsfAdYgsJAa3up1fmZhioWFPA.roa (hash: uM3NhIvRZarm71/Jt0wY702d6NR+jneUoXTmHQ4dPKU=) 13: mRc91Aky3UbvamSLkFdXObfQfbE.roa (hash: fgykKC9Ar9Wj0qpW1XO3tcUvZD2JrUF5e1a0yv+Dl3s=) 14: nhSqVyjNyvOMRtAwW9liT_id7vM.roa (hash: vzkOKT7JS1jke5S4AQx+MFi6AgRTbIyNGxlbHCHGXu0=) 15: oPRftB4EZtrsQBIZftaGLH2JImI.roa (hash: bS7NKvEIFKjKdH8JbKNy6+4FrYZVsFmLR+QRWSJr1d0=) 16: r6JXotIvt8BRtWBlfGRQvAlgC_8.roa (hash: +wGsrs7z85SqSNrKEaw6MjIU3cWbV5TKC4blCEdnvQ0=) 17: uPOU1KIswQbUBvI-71sNI7bH8ZM.roa (hash: 9G7wcV68qtvKtA1uCDdRHeyjoWlmWuoi4hmwzEGp6cI=) 18: ucR12nQaE6xem-rA3wM8WEC58lg.roa (hash: tlJsSb1+n3GHhim2lpZpyqmsxDkCNqWLEQRy+8oWP+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d9:ba:73:c8:c9:8e:35:9e:57:81:4f:12:f3:c6:7e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa Validity Not Before: Sep 25 18:01:10 2026 GMT Not After : Sep 26 18:01:10 2026 GMT Subject: CN=0ec814e1e5a97d747ac89b24f16b367389e01fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:92:c8:e3:d6:09:f2:87:a0:25:d9:6e:d5:9e: 4d:59:1e:fe:e9:05:3c:03:d5:e6:4c:44:bd:a1:43: 17:82:83:de:36:30:0e:3e:dd:c3:8e:e4:f8:90:db: 74:04:14:14:02:33:86:4d:78:f7:02:ae:31:3c:21: d8:f5:91:c2:b1:03:bb:d4:1a:1c:f4:fe:64:11:d2: e1:63:58:5b:41:88:62:ac:df:6d:05:79:e5:ca:43: 3d:19:10:6e:44:88:b7:02:87:c1:06:e5:37:04:f8: 55:58:cc:67:23:21:ad:09:20:a0:a6:ce:67:86:f8: 6a:90:8d:3d:3a:71:a2:5a:96:97:01:4a:33:3e:c8: c8:1c:22:03:ef:d6:63:f3:0c:e0:12:8e:10:a0:a1: 3d:da:a7:cc:01:32:94:b3:6d:6d:b9:9c:fb:fc:da: b5:e9:5e:a7:7c:61:a5:45:2a:82:f6:36:a5:91:1b: 95:12:6d:a6:ba:c8:dd:57:52:46:1d:73:f3:3c:49: a9:e5:00:a8:79:1b:59:49:3c:2b:17:cb:fe:15:12: 58:30:8c:37:ea:13:e3:49:cf:39:ba:23:9c:0d:43: 34:35:02:2d:23:7d:d5:f5:68:a3:0b:af:07:4b:7f: 7d:1f:2b:9e:6b:cd:34:c9:0c:05:db:c8:ec:6e:f0: 2a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C8:14:E1:E5:A9:7D:74:7A:C8:9B:24:F1:6B:36:73:89:E0:1F:C6 X509v3 Authority Key Identifier: keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d8:4a:06:45:e1:62:eb:94:4d:60:bd:7f:75:74:92:a9:60: de:17:67:8e:58:00:b0:b0:f1:97:f9:c7:81:a8:4b:c4:35:7c: ea:c2:b0:ff:d9:11:a6:d0:a7:62:1b:4c:31:b2:79:42:85:b5: e6:28:8d:2e:fb:78:84:aa:e1:17:58:53:01:94:38:26:31:ac: de:38:9c:65:4b:c6:95:2d:29:16:89:7d:39:03:5e:46:c4:07: cc:36:7a:ab:e3:93:5c:6d:7c:05:cb:c6:42:23:9b:41:9c:b6: b9:ce:7e:e5:0e:3b:65:a1:da:f4:6a:d6:6d:b6:0c:c9:13:d8: 60:a7:5b:15:93:b5:96:ae:1e:ab:3d:78:69:90:d8:b8:dc:d8: e6:77:0a:be:c6:b5:5a:bc:8e:28:c4:48:04:f7:3d:99:ec:99: f2:10:2a:ae:90:52:82:ce:c7:85:a3:09:45:c5:72:e9:45:14: 42:50:66:80:98:e0:33:57:4f:fb:83:c4:c9:9d:f7:cf:21:c6: e8:03:71:fe:03:f9:82:be:db:81:16:c6:52:7f:aa:52:ac:de: 29:a5:64:04:08:b3:1f:99:71:42:14:55:ae:c7:aa:19:9a:e4: 00:13:0c:ed:83:5c:e6:5b:4d:90:29:50:59:86:fe:1f:e0:7f: dd:ca:e8:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDZunPIyY41nleBTxLzxn7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzZmYjQ0N2FlZDcyNmQyZWY5MzFhNDI5NjQ0NDQ1NjI2 MmE3ZmEwHhcNMjYwOTI1MTgwMTEwWhcNMjYwOTI2MTgwMTEwWjAzMTEwLwYDVQQD EygwZWM4MTRlMWU1YTk3ZDc0N2FjODliMjRmMTZiMzY3Mzg5ZTAxZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJLI49YJ8oegJdlu1Z5NWR7+6QU8 A9XmTES9oUMXgoPeNjAOPt3DjuT4kNt0BBQUAjOGTXj3Aq4xPCHY9ZHCsQO71Boc 9P5kEdLhY1hbQYhirN9tBXnlykM9GRBuRIi3AofBBuU3BPhVWMxnIyGtCSCgps5n hvhqkI09OnGiWpaXAUozPsjIHCID79Zj8wzgEo4QoKE92qfMATKUs21tuZz7/Nq1 6V6nfGGlRSqC9jalkRuVEm2musjdV1JGHXPzPEmp5QCoeRtZSTwrF8v+FRJYMIw3 6hPjSc85uiOcDUM0NQItI33V9WijC68HS399Hyuea800yQwF28jsbvAq2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7IFOHlqX10esibJPFrNnOJ4B/GMB8GA1UdIwQY MBaAFGDG+0R67XJtLvkxpClkREViYqf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9hKBkXh YuuUTWC9f3V0kqlg3hdnjlgAsLDxl/nHgahLxDV86sKw/9kRptCnYhtMMbJ5QoW1 5iiNLvt4hKrhF1hTAZQ4JjGs3jicZUvGlS0pFol9OQNeRsQHzDZ6q+OTXG18BcvG QiObQZy2uc5+5Q47ZaHa9GrWbbYMyRPYYKdbFZO1lq4eqz14aZDYuNzY5ncKvsa1 WryOKMRIBPc9meyZ8hAqrpBSgs7HhaMJRcVy6UUUQlBmgJjgM1dP+4PEyZ33zyHG 6ANx/gP5gr7bgRbGUn+qUqzeKaVkBAizH5lxQhRVrseqGZrkABMM7YNc5ltNkClQ WYb+H+B/3cro1Q== -----END CERTIFICATE-----Generated at Sat Sep 26 04:12:40 2026 by rpki-client