$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json) Hash identifier: d8iNpj7VaKSsCrmMlyqxtwh7WJerIP6UExgqsDxnzc0= Subject key identifier: 00:8B:42:25:B0:1A:76:46:3C:E3:7C:F0:05:A0:10:6F:C8:49:20:50 Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 01A0CD7ED7B223778CF4DA88513BEF9808A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft Manifest number: 1A72 Signing time: Wed 23 Sep 2026 09:00:36 +0000 Manifest this update: Wed 23 Sep 2026 09:00:36 +0000 Manifest next update: Thu 24 Sep 2026 09:00:36 +0000 Files and hashes: 1: 06KsS95-uc37njfmN_yGJWnyq6U.roa (hash: K4nK55gW5SZLVxc3BcynZpT0UUD5TASwk3Svrgii/lI=) 2: 1dppl4E5LeYed1_ddeBSXFRftKA.roa (hash: pN3g9tWO1Nl1OAJCCKTDocJwUcz7cU9lRTyplesScF8=) 3: 7hii_CBkhWFEcR7PBsbgDyXmQ9Y.roa (hash: VParP3CSdlBKMMaiiyOgc9apoYvJ3aLSGeumM5G2suQ=) 4: 9LHK8v8-9Ckf2KLnnMlZEiqUMBM.roa (hash: 0BBbEj9KrnkzQ7LI3Ja4k/fn10TEbD/JLEqh/Y7YN5Q=) 5: 9zJS2sLQdMyIEXItDHnz9vENCZc.roa (hash: smANRs03fyEMELSZXfc50FOww78+6TO01q3PcjqHhg0=) 6: HZuqAD7c7zD61eQDUNc43p13Rus.roa (hash: CLnSiDlapsSBOMDzZqR931D1WlMkd94ux2JTr6MJ7iY=) 7: MARvCBJj6pQzGNHhjfVRnTPDXRw.roa (hash: W1iO+ZpTnMCy3mYaAEE8YESIC/Lb3z77r6zn9zHVz2Q=) 8: NpN7l3_hUP3xVFpljOuMEBlStvc.roa (hash: T5g6uyNIkE7SmOO57cpKy2aBBJDWlR4fSl0bwzLwido=) 9: ZffOLXHzTQQ9w6R4Acsptb5X-ZQ.roa (hash: nT41EZi54SNK5Qom8A2J9oxN87+LC+L6D9g8JwOo3+E=) 10: b25kHpS94xs5d-Cb2gg_RWdRdqA.roa (hash: UnoS92iWWLeA3lFor4dioIwIwXhzelHfz1mr8ZCSkhY=) 11: bcSgZpZBwtbiIL48flh5F_NGfHo.roa (hash: I/NWDutoo/tdtpPAOJuOwfmfUJCK6YwHRmYnSpUxsCY=) 12: cA6GYxFNrQzJXvnUUCTkZ74uPLY.roa (hash: 9ZlPADtkA5tNsCz6vf4xeuKDXE0oMu2t/mqNk4DDlVc=) 13: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: eLBZLE3MnY0DaLNW+vza0f5VgevdobTF+bjiMqK9uFs=) 14: laLTLAZUfnJXL9IgOMNUJBbcIYM.roa (hash: qH+8NsTPRO3q9UjCnJr8tq7a5R+TvAmnEtSTXrLT0C0=) 15: oX2NoeenvY6od0noJwHOC0vVDFU.roa (hash: PaRvm0af3RdwqkLgxZ1C0CNPV7CmkxdUeLl6SbuiQd4=) 16: sPqeNjwkgKgIPC9F-wg4yZRw5vo.roa (hash: gkiNfTfDhe6OjPwvNFzi/YKFCVBUpR1D9DW8GG28M8I=) 17: ww6ypu6XKZLBnCmu95aBOLrx3W4.roa (hash: MJWr+hVoOJcU+dBCIlq6NQXj1hTEMRYcYO7YQk9u0qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:7e:d7:b2:23:77:8c:f4:da:88:51:3b:ef:98:08:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Sep 23 09:00:36 2026 GMT Not After : Sep 24 09:00:36 2026 GMT Subject: CN=008b4225b01a76463ce37cf005a0106fc8492050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:98:9c:bd:59:af:8b:71:80:e6:cb:bc:cb: 1a:2c:98:06:2d:a8:d5:d3:55:b2:48:de:34:b9:b1: ac:c9:ba:40:69:9c:af:27:d9:f7:7e:a8:d1:c4:70: eb:3b:31:7f:d0:d5:5d:a5:65:35:6c:40:b8:aa:55: 2a:b1:ef:b1:54:a5:1e:c4:7c:0d:10:7b:2f:c5:0e: ef:68:5b:c8:42:cf:94:1a:f3:2b:26:24:b0:d2:77: 2b:68:d0:98:60:69:3d:6f:ef:2e:b4:de:ee:3f:cf: e8:9b:ba:16:16:e1:94:1d:38:af:7a:6c:86:b4:86: 79:80:38:4d:59:3f:e9:12:d5:0a:5a:ea:84:e8:5e: cf:20:b7:77:e3:54:66:8b:2c:73:93:96:79:a5:48: 40:c7:7c:97:c1:df:0f:51:3b:33:4c:72:51:07:67: 71:c7:5e:0d:ee:b3:ef:12:b0:a8:df:8b:de:65:db: 70:96:79:a9:7a:67:8b:7f:60:39:71:0f:7a:17:bf: 90:b3:04:5c:43:88:d1:55:d7:2e:2b:e6:a4:d8:b0: 53:05:d1:f4:62:f4:fa:0e:98:a3:08:ad:5f:ff:89: 69:78:95:ac:30:25:4e:b0:fe:94:90:eb:3d:3c:08: b4:7f:58:e3:c9:2b:85:21:17:f1:fb:9c:14:10:02: 74:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8B:42:25:B0:1A:76:46:3C:E3:7C:F0:05:A0:10:6F:C8:49:20:50 X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:32:5a:e2:5c:84:de:87:63:db:bf:2a:ec:14:69:f4:03:b0: 73:f7:2f:ae:0e:4e:26:e2:05:d2:0a:91:39:a6:a5:1f:dd:c8: 39:ab:47:b5:38:87:60:aa:6b:8e:8a:09:d7:8c:bc:45:a7:bf: db:31:66:01:bc:0c:1d:ea:e4:ac:46:e1:12:01:39:1b:c8:cd: 32:1a:ea:43:a3:cc:83:c7:78:c7:cb:e4:28:0f:a3:f0:6f:2b: 67:49:d9:2f:00:50:a2:23:45:6d:03:11:e0:96:35:07:63:e0: bb:19:71:25:11:e0:0c:80:f2:65:dc:93:7c:fa:ac:57:28:ae: b5:48:47:8f:58:2d:52:66:46:3f:58:a2:be:5c:61:5c:60:7e: 2d:44:d8:a8:1c:75:a4:20:7e:05:e4:77:33:f8:60:0d:37:6b: 96:0e:06:0e:69:1e:aa:7b:ca:0a:46:38:b4:b3:04:c3:58:57: a8:a9:80:9c:c9:45:eb:12:a4:48:f6:61:d6:7f:1e:88:ae:10: 79:9a:52:90:d7:08:31:79:07:fd:32:b1:b4:ab:36:5d:ab:3c: ec:25:0d:e1:8c:51:cd:54:17:b6:50:62:16:7c:f5:10:a0:d4: ec:f2:09:2a:b6:b9:d0:71:3a:56:98:8f:48:3b:af:ef:04:5c: 9d:06:c9:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNfteyI3eM9NqIUTvvmAimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjYwOTIzMDkwMDM2WhcNMjYwOTI0MDkwMDM2WjAzMTEwLwYDVQQD EygwMDhiNDIyNWIwMWE3NjQ2M2NlMzdjZjAwNWEwMTA2ZmM4NDkyMDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc2YnL1Zr4txgObLvMsaLJgGLajV 01WySN40ubGsybpAaZyvJ9n3fqjRxHDrOzF/0NVdpWU1bEC4qlUqse+xVKUexHwN EHsvxQ7vaFvIQs+UGvMrJiSw0ncraNCYYGk9b+8utN7uP8/om7oWFuGUHTivemyG tIZ5gDhNWT/pEtUKWuqE6F7PILd341Rmiyxzk5Z5pUhAx3yXwd8PUTszTHJRB2dx x14N7rPvErCo34veZdtwlnmpemeLf2A5cQ96F7+QswRcQ4jRVdcuK+ak2LBTBdH0 YvT6DpijCK1f/4lpeJWsMCVOsP6UkOs9PAi0f1jjySuFIRfx+5wUEAJ0XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACLQiWwGnZGPON88AWgEG/ISSBQMB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTJa4lyE 3odj278q7BRp9AOwc/cvrg5OJuIF0gqROaalH93IOatHtTiHYKprjooJ14y8Rae/ 2zFmAbwMHerkrEbhEgE5G8jNMhrqQ6PMg8d4x8vkKA+j8G8rZ0nZLwBQoiNFbQMR 4JY1B2PguxlxJRHgDIDyZdyTfPqsVyiutUhHj1gtUmZGP1iivlxhXGB+LUTYqBx1 pCB+BeR3M/hgDTdrlg4GDmkeqnvKCkY4tLMEw1hXqKmAnMlF6xKkSPZh1n8eiK4Q eZpSkNcIMXkH/TKxtKs2Xas87CUN4YxRzVQXtlBiFnz1EKDU7PIJKra50HE6VpiP SDuv7wRcnQbJOQ== -----END CERTIFICATE-----Generated at Wed Sep 23 16:40:44 2026 by rpki-client