$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: LJV79x5ZYJd7Z0gqWdAZ8WA/lBAO4digCjVLaWQbPcI= Subject key identifier: 31:3C:06:55:F1:FF:C4:C1:55:0C:60:0C:B1:97:74:37:41:33:26:35 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 01A0D804896CFF214481E97A3BC40DA7F306 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 1A87 Signing time: Fri 25 Sep 2026 10:02:50 +0000 Manifest this update: Fri 25 Sep 2026 10:02:50 +0000 Manifest next update: Sat 26 Sep 2026 10:02:50 +0000 Files and hashes: 1: 3_hTG1VNNECdXWtHf_y7Mh1I0-I.roa (hash: WyvWKO62KaRIQphftD3eJM5VgxI16MZECLiFVVDTedM=) 2: 69GOpdzwlIydOctwPF6_V449w8Q.roa (hash: oepL/u5Uo8sKbDIefmYypO+csLtLFrgJjxhbnTvWVCs=) 3: AuHoEVrnl-1LwAXvi9txhNUCs-o.roa (hash: LebcNjlhptCuSycNyI8Gq5rf+emsaNgyhh5yVvxRTjk=) 4: FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa (hash: EK6RNwivTo0ew9QPDVu62GQI3mFybABhS1y9MjMOYEw=) 5: Haj6URZpFS-mdAGIc4wmMOS4lM0.roa (hash: EtXPHXKoqXDb9Vz60AGE1NwlxpAVrwFBgi6KRxclp1c=) 6: Pot9sGjQ09uE0QJkmshSlnxcDEs.roa (hash: fPrzEPKp0VS5KGwAOadvcVPYu9gvZcvC3Al0vJwF1C8=) 7: R1ACp4N7msvtcVocj7URglX5xNE.roa (hash: s7Zox0ImjXt1GDu6UZLCgSH6/GocPu93iShhVHA6YQw=) 8: bniESOAwEJ3WL8_KzHYZ3-fFUKE.roa (hash: t+surPIg+2rXPUx8NHZjclxfI1SSYNmZtqZYBFqewLY=) 9: n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa (hash: qKmltpUjZcaLW2FolvCbNT5Sz4SxQTiZwUNd7tmk66A=) 10: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: blBdZG4vHsl57DmTRl5VvnWLyMgiTd+x7MduNeN8tnk=) 11: tzVYq6Bsso_YdRE_X-B1xHv2bJc.roa (hash: LMTBBvAqP/wFQU0BQSC3lLd1n7Ijck49vWZwgtvAiGs=) 12: yg9CvK7YsVgoTv4cPVX2srKo0uU.roa (hash: k87y5f3qtoVggaVvKGB+/23YD6IKa8AY5DqudY2fvWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 10:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d8:04:89:6c:ff:21:44:81:e9:7a:3b:c4:0d:a7:f3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Sep 25 10:02:50 2026 GMT Not After : Sep 26 10:02:50 2026 GMT Subject: CN=313c0655f1ffc4c1550c600cb197743741332635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1c:33:2e:c2:67:98:f8:a8:e0:c6:f3:d1:c6: e9:28:0f:ee:0b:a3:e8:36:a7:0b:c3:d3:9f:c1:7b: 23:55:5b:bf:5d:d9:af:53:04:06:8e:0b:55:06:36: 35:e5:7c:03:19:d6:75:56:a0:20:a4:fd:47:38:e5: 3f:a7:42:06:e0:0d:27:f9:d4:af:69:25:a4:2e:44: a1:c8:56:88:96:88:14:a7:c7:d0:66:b3:85:1f:50: 6c:f3:51:9f:ab:4c:89:19:bd:3c:3a:d1:1a:eb:3c: d4:23:14:26:94:07:9d:ea:71:41:27:8d:e7:22:c1: e7:a5:c8:18:64:6b:c4:d1:4f:72:c8:60:bf:52:0b: 33:7e:9b:69:34:39:e2:12:66:1f:e4:dd:86:48:da: d4:8d:bd:28:56:66:8c:72:5b:42:75:b9:6b:c1:3e: af:39:4f:18:b7:81:0d:c3:82:ac:56:47:58:00:c9: 1d:db:dc:71:3c:b4:5c:32:c5:b3:38:b2:50:99:b0: 5d:d4:db:8d:af:96:c2:5e:e8:00:c0:c9:a7:88:ea: d5:fe:8d:78:ee:87:3e:01:bd:f0:c4:6f:3b:ef:04: a0:60:96:d9:b7:66:d2:5e:0b:98:f4:25:e0:6c:bd: ff:73:0c:cd:d9:4b:ee:55:e4:07:a2:37:44:4c:44: b4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3C:06:55:F1:FF:C4:C1:55:0C:60:0C:B1:97:74:37:41:33:26:35 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:59:1b:d7:f7:d9:d1:8c:87:c8:21:0d:92:35:90:27:45:88: a1:60:51:37:94:ad:c8:e8:83:20:83:34:81:80:54:43:07:39: a3:ab:dd:b9:aa:c6:ff:c0:ce:62:60:75:ae:e0:d5:fe:8e:d2: a2:83:39:8f:65:1e:ce:32:95:9e:6a:04:b9:8a:19:26:eb:3d: bc:9f:ad:27:5c:af:b8:0e:d1:be:c7:28:9d:04:65:49:f2:83: d3:bc:e7:9e:d4:24:65:31:a6:41:85:5a:34:68:60:06:79:24: ed:5c:66:ba:7c:23:98:07:72:1f:59:e1:81:e7:95:42:eb:3e: ca:4a:40:8b:42:a6:fb:55:77:7a:08:ca:8a:e1:f3:46:34:22: 34:07:72:46:05:b6:2e:2b:37:41:fa:73:c4:e9:cd:f3:ee:94: 09:32:56:72:6d:dc:45:db:bd:60:f3:cd:dc:e9:e4:e5:1c:2c: 72:f3:b4:16:80:30:0d:36:ab:70:66:6b:1a:d8:62:f5:bd:5d: 38:b4:a1:0b:c3:44:06:63:0d:3d:6a:73:0e:56:4a:2d:44:74: 8e:98:6c:eb:c2:f0:00:f3:d9:bd:15:dd:92:cc:99:df:37:4e: 69:b2:cb:fa:fa:9b:54:fd:7f:4f:f7:72:3f:be:fa:76:09:9d: 32:d7:85:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDYBIls/yFEgel6O8QNp/MGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwOTI1MTAwMjUwWhcNMjYwOTI2MTAwMjUwWjAzMTEwLwYDVQQD EygzMTNjMDY1NWYxZmZjNGMxNTUwYzYwMGNiMTk3NzQzNzQxMzMyNjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xwzLsJnmPio4Mbz0cbpKA/uC6Po NqcLw9OfwXsjVVu/XdmvUwQGjgtVBjY15XwDGdZ1VqAgpP1HOOU/p0IG4A0n+dSv aSWkLkShyFaIlogUp8fQZrOFH1Bs81Gfq0yJGb08OtEa6zzUIxQmlAed6nFBJ43n IsHnpcgYZGvE0U9yyGC/UgszfptpNDniEmYf5N2GSNrUjb0oVmaMcltCdblrwT6v OU8Yt4ENw4KsVkdYAMkd29xxPLRcMsWzOLJQmbBd1NuNr5bCXugAwMmniOrV/o14 7oc+Ab3wxG877wSgYJbZt2bSXguY9CXgbL3/cwzN2UvuVeQHojdETES0yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDE8BlXx/8TBVQxgDLGXdDdBMyY1MB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVkb1/fZ 0YyHyCENkjWQJ0WIoWBRN5StyOiDIIM0gYBUQwc5o6vduarG/8DOYmB1ruDV/o7S ooM5j2UezjKVnmoEuYoZJus9vJ+tJ1yvuA7RvsconQRlSfKD07znntQkZTGmQYVa NGhgBnkk7VxmunwjmAdyH1nhgeeVQus+ykpAi0Km+1V3egjKiuHzRjQiNAdyRgW2 Lis3QfpzxOnN8+6UCTJWcm3cRdu9YPPN3Onk5RwscvO0FoAwDTarcGZrGthi9b1d OLShC8NEBmMNPWpzDlZKLUR0jphs68LwAPPZvRXdksyZ3zdOabLL+vqbVP1/T/dy P776dgmdMteFcQ== -----END CERTIFICATE-----Generated at Fri Sep 25 21:47:43 2026 by rpki-client