$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json) Hash identifier: 21FLxQdM7B05aucjmb3KjuMlaeyWmJiVKI/yurGki0A= Subject key identifier: 6C:64:C6:4F:61:A8:05:3C:58:54:B2:1D:3E:E4:E8:2E:D6:7D:87:74 Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311 Certificate serial: 01A0D8DF0D6AD767DB041977A5E754B311B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft Manifest number: 0AAD Signing time: Fri 25 Sep 2026 14:01:31 +0000 Manifest this update: Fri 25 Sep 2026 14:01:31 +0000 Manifest next update: Sat 26 Sep 2026 14:01:31 +0000 Files and hashes: 1: 0j8mKPNVQTMhrPMoTB8vqumItaY.roa (hash: RfwfX7kQEbOpbeZ05eE31bx2DYFysCnm/nQLdjd7Xnk=) 2: 1-5SN3I-IsoUjfo8g5-hBdsRRZ9o.roa (hash: s09l3XLrS1nG2HYt50hW4zF2T2VLAEk4Mtf1043eyYs=) 3: 1-kTvZ0CIAu8uTw7fU1T6vT9hc9c.roa (hash: me+ftvQPzHdAUrIuYjuuG8bbQjdCu8RbriElDkqOOBo=) 4: 5obQTKQQdziyHt3lp7e0Ce026vk.roa (hash: Le5yUrWQi3zm2wIsTvW5Oct4jk04f+5rZXXqRfdqn8k=) 5: 8dffgbceyZZN2GD0DQntG3Z8fxU.roa (hash: 7MA6pNhMj3p3AaurB3f6qiL2uGgtlKFoFp4bhK94tNs=) 6: DgRXfU03npME4V1AwAX0ThBtZQ0.roa (hash: 28zui3LwnRaze+dAHIDUkVVoknpCffM0WP9r0d8Uduw=) 7: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: ynD3MzfqpdBJ16XacP29It8TOjf2F3VhuF9UkhMBJys=) 8: MW-Of09W86VTd-ehIdYpnjmPXXs.roa (hash: LD0GodrBLFRUB6lFsPKkTSv+4sIk7vBheqeA3m5nPOo=) 9: RTZmGDdPCU2SBV4lhMEH2Sp_2-o.roa (hash: vYRw7atU1j7YPp403PSxl0yUcReYPk7klM3aD3yLz8o=) 10: XfaQx2F1DQ7dZJr9-a__hDM5coI.roa (hash: Uj4xi+1RpyiVvP8zoS4JaQonnJeBy+gzjAcazMu9DFA=) 11: ZIEMV2zIloE52-qgOXdFi1j85Tk.roa (hash: NwScYVj2gBSbhZaCbwwZMrlWYVdDowjEWEzxULRwSVQ=) 12: bq7p2c5vJ2AuacchZjMY0iRJ4d8.roa (hash: 18rUuCK206j5Kf25J505Px18ULYGnExtH3WZ9ccpOUo=) 13: ihH2jmcAzRuRb0DXObKEK01lyBE.roa (hash: 8lNi9w5SpA0dQSPNcnFbf41In6HTCs+i7pcqGwmC+bY=) 14: zSQtHn132zkYiODR-nP8aHtUQYA.roa (hash: 0IThsqQjeAvQaaBM3736hRL6ffPhT8HNYOS2v2AnKs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d8:df:0d:6a:d7:67:db:04:19:77:a5:e7:54:b3:11:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311 Validity Not Before: Sep 25 14:01:31 2026 GMT Not After : Sep 26 14:01:31 2026 GMT Subject: CN=6c64c64f61a8053c5854b21d3ee4e82ed67d8774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:c1:49:ce:24:ef:30:dd:60:3e:3e:47:e8: 7c:d9:45:3a:dd:67:ea:31:49:96:25:be:2f:7c:fd: 93:07:81:4a:32:21:84:9c:e9:df:88:bc:90:9f:e5: ca:1d:35:63:17:4f:0e:0d:bf:8d:eb:e0:6f:c4:2f: a3:82:4c:48:f1:7f:ff:ec:4c:31:49:23:99:58:81: b7:5c:cb:3a:44:76:2a:ed:44:8c:7e:df:31:05:5e: 0e:44:b2:d7:f5:b1:70:82:ae:a9:88:08:a4:ed:9d: ce:03:e5:41:b9:c0:6f:47:54:21:39:be:79:f2:30: b6:4f:e1:ac:98:a5:82:63:03:1a:f8:0e:be:86:b6: 7c:76:b0:ab:f6:2e:bf:65:04:94:f4:0d:5b:eb:d9: cc:b3:d7:f2:8f:dd:69:db:19:56:6e:5e:3d:48:4e: dc:e4:2c:6c:79:62:32:3d:27:34:01:bc:40:04:96: 4e:6a:b3:0c:3a:e1:4b:66:e5:78:d9:bc:7a:37:79: f8:e7:2c:87:30:78:d4:ef:71:4e:82:46:1b:18:fb: b7:ec:b9:c9:5f:7d:0c:14:09:af:15:74:04:37:af: ee:6f:62:07:6a:62:78:10:18:e0:58:0c:d7:75:a9: 8b:c5:3d:fe:9f:b3:7a:99:96:c5:ad:53:7c:f8:57: 3a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:64:C6:4F:61:A8:05:3C:58:54:B2:1D:3E:E4:E8:2E:D6:7D:87:74 X509v3 Authority Key Identifier: keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:41:43:88:1c:82:5d:25:33:45:5f:72:1d:66:44:0f:10:ac: ea:34:18:ca:d2:cf:93:a8:df:7b:4e:a2:3b:65:09:c9:12:8d: 10:7f:af:96:0b:aa:8f:d9:e1:5b:fd:5c:e7:31:51:82:44:50: 8d:d5:3d:9a:a3:31:8c:4d:5d:ae:9e:92:72:96:89:82:0e:49: de:29:fa:55:f0:2d:c4:81:3d:8d:58:1a:6d:9c:67:be:ff:b0: d3:e1:06:af:72:05:09:42:70:eb:5b:c1:66:09:9e:2d:d0:93: b2:df:26:eb:fa:02:36:46:b4:03:e8:91:3d:89:45:14:72:82: 12:e6:90:c3:8b:d1:f9:fa:49:02:55:c3:45:fa:2c:ee:8e:e8: 75:fb:1f:04:4f:ea:bd:50:52:fe:90:71:cc:c8:e4:33:a1:0b: b7:4e:68:b8:19:99:30:a4:91:35:12:5d:77:75:b8:6e:c3:85: 87:d5:ed:d7:84:c6:11:3c:f7:9b:7b:84:6e:20:20:34:ef:fc: e0:c5:a5:57:a1:d2:8c:e3:e9:00:2e:9b:31:94:e0:d2:f9:ae: ee:03:45:c1:91:da:96:6b:b3:32:53:0d:e1:26:48:6d:d0:6e: cf:60:6c:a7:b7:ad:28:35:31:d7:fe:8c:b2:b8:e5:51:6e:bd: 98:02:17:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDY3w1q12fbBBl3pedUsxG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNjRmODFiOWUzNmI4NDk5MTc3ODc2NzhkMDE0ZGI0YmZj ZWYzMTEwHhcNMjYwOTI1MTQwMTMxWhcNMjYwOTI2MTQwMTMxWjAzMTEwLwYDVQQD Eyg2YzY0YzY0ZjYxYTgwNTNjNTg1NGIyMWQzZWU0ZTgyZWQ2N2Q4Nzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+zBSc4k7zDdYD4+R+h82UU63Wfq MUmWJb4vfP2TB4FKMiGEnOnfiLyQn+XKHTVjF08ODb+N6+BvxC+jgkxI8X//7Ewx SSOZWIG3XMs6RHYq7USMft8xBV4ORLLX9bFwgq6piAik7Z3OA+VBucBvR1QhOb55 8jC2T+GsmKWCYwMa+A6+hrZ8drCr9i6/ZQSU9A1b69nMs9fyj91p2xlWbl49SE7c 5CxseWIyPSc0AbxABJZOarMMOuFLZuV42bx6N3n45yyHMHjU73FOgkYbGPu37LnJ X30MFAmvFXQEN6/ub2IHamJ4EBjgWAzXdamLxT3+n7N6mZbFrVN8+Fc6wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxkxk9hqAU8WFSyHT7k6C7WfYd0MB8GA1UdIwQY MBaAFA5k+BueNrhJkXeHZ40BTbS/zvMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTct YzhmMTgyZTk1ZWE1LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTctYzhmMTgyZTk1ZWE1 LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEFDiByC XSUzRV9yHWZEDxCs6jQYytLPk6jfe06iO2UJyRKNEH+vlguqj9nhW/1c5zFRgkRQ jdU9mqMxjE1drp6ScpaJgg5J3in6VfAtxIE9jVgabZxnvv+w0+EGr3IFCUJw61vB ZgmeLdCTst8m6/oCNka0A+iRPYlFFHKCEuaQw4vR+fpJAlXDRfos7o7odfsfBE/q vVBS/pBxzMjkM6ELt05ouBmZMKSRNRJdd3W4bsOFh9Xt14TGETz3m3uEbiAgNO/8 4MWlV6HSjOPpAC6bMZTg0vmu7gNFwZHalmuzMlMN4SZIbdBuz2Bsp7etKDUx1/6M srjlUW69mAIX8w== -----END CERTIFICATE-----Generated at Fri Sep 25 18:31:54 2026 by rpki-client