$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json) Hash identifier: HwAyBReJBEvxTO+Kex0Zts4sp+rmNFwx//t9OaeHYQU= Subject key identifier: 79:A7:87:C6:C2:D3:32:A4:07:7A:AE:F3:2F:AC:CE:3B:45:95:E6:F0 Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 01A0D5DDF353A0318862A26A8E0D0DA32F6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft Manifest number: 1127 Signing time: Fri 25 Sep 2026 00:01:27 +0000 Manifest this update: Fri 25 Sep 2026 00:01:27 +0000 Manifest next update: Sat 26 Sep 2026 00:01:27 +0000 Files and hashes: 1: 8nl0gvlvhLDwWgZwpZKGJtxc53o.roa (hash: bE4muHTPZggIWIYsSa057x00nvD31ff/lldCGfrmJUk=) 2: GPrNUgOp-yFfntRAITK46bjxYx8.roa (hash: tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=) 3: HaplqV3Ef0zu4d-NWCn0tW5HA_Q.roa (hash: cFw5LhsnrPo1FGiVCTLSLDceq01WGhZkM5Ig5NBXjTY=) 4: Ik8yGeBNmvkm77Oo7VOn8boC4U4.roa (hash: cLm3e28GZktVy8Z4+oH4LT/NSGscOWAbP/gVnhYJ0do=) 5: JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (hash: olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=) 6: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (hash: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw=) 7: dVmg3H_69aE6cwaIlYTR97afdPo.roa (hash: v2VeuqkOmpBJccmre5Q6qbQ+dA2g4wiozwXSU3h9sz8=) 8: dyRkPw_Wgnkcsg-KlHLl58bkM3I.roa (hash: P1/S907NZKJYyVb3ZIocqBJrz96aUfXN02sqKPQRYNA=) 9: n4oTLcY3Eost-Qe_enzL-hN3M14.roa (hash: yYjQpvvj0XOqhxeCs5tu9OzNnpM3sE241OTnw9VzGk0=) 10: nSUmZB0jg43RpHkYWlfRXaPrn8c.roa (hash: RpAQ+Ocw+6QgtTuEKxPfy46Zgay038fVhuADeM4LOzQ=) 11: nujuYw_3IDNNnf568BByX_04-sU.roa (hash: 60QrFQNmOREasWgP2EhaDowHIVvxXUEGB1moqh/EpGc=) 12: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: /kjn66ARDou8SbZvLZvX+KMpe0uhaJ3dkNOXkw9kqNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 21:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d5:dd:f3:53:a0:31:88:62:a2:6a:8e:0d:0d:a3:2f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Sep 25 00:01:27 2026 GMT Not After : Sep 26 00:01:27 2026 GMT Subject: CN=79a787c6c2d332a4077aaef32facce3b4595e6f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2c:dd:6a:73:ae:32:7c:9c:47:cf:5b:90:09: e1:90:a2:0f:18:07:a6:46:09:b6:2b:70:26:ad:f8: fe:75:95:c9:99:d9:9d:24:16:44:3f:13:69:80:ba: 69:6d:3b:f7:70:d7:f5:bd:9f:19:13:9c:0e:4f:45: 88:e2:f2:7e:fc:ff:96:d7:9a:6b:c8:f4:41:32:2b: 09:52:28:a6:9c:3d:c3:a1:12:e8:dd:89:17:e1:ba: 0f:1a:0f:52:6c:b6:e7:20:35:f7:5c:02:e7:a6:2f: 0d:0e:23:3b:1a:f5:c0:5b:4c:50:52:9b:ec:f8:e4: ce:f7:4e:44:f7:73:ad:9a:c8:44:1c:b3:1c:f1:cf: a7:8b:52:7f:bf:4a:99:e2:2c:c3:70:81:8f:70:81: c2:b3:dd:47:04:0f:67:7b:62:7d:1e:10:05:2c:70: 53:e1:05:c5:1f:a5:f9:81:5b:66:20:82:c2:29:7c: 0d:af:18:a9:1c:96:b1:ff:e8:7b:2b:db:df:91:6f: 34:56:4b:2b:1c:93:f5:25:38:7e:bf:47:49:9e:82: 4c:13:41:6f:9c:4a:ba:d2:ab:07:a7:e9:7a:1b:13: 06:36:71:2f:70:1a:57:d8:9e:5a:71:f0:90:f6:6c: 78:97:8f:87:dc:98:9b:38:b8:64:9e:07:d1:96:d0: 9a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A7:87:C6:C2:D3:32:A4:07:7A:AE:F3:2F:AC:CE:3B:45:95:E6:F0 X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:50:7a:92:01:4f:d7:c4:af:b1:f8:3f:68:96:a3:c0:62:fd: 5e:a1:96:ae:11:bb:fb:b5:4f:15:2e:96:51:aa:14:62:79:c3: 5a:e3:88:69:97:a9:63:6a:6c:7c:7a:3d:53:df:98:39:8e:4d: d4:b6:fa:f1:50:6f:55:90:99:b7:0c:fe:82:c1:40:49:99:c8: 64:25:3a:cd:06:b0:86:f0:73:07:ab:3a:f5:62:7c:4f:80:8b: 09:fb:85:db:2c:f8:bf:1e:cd:d7:9a:1d:cf:e1:6f:f6:b7:fb: e1:71:8d:73:df:0a:f2:6b:f5:c5:01:05:1f:60:b4:38:12:da: ef:fd:b7:9e:54:1a:9e:43:0b:8d:4e:66:40:3e:d3:34:d4:e2: 8e:13:49:dd:79:5e:ab:23:82:b7:d3:c3:eb:b8:b7:5d:e4:47: cc:b9:a1:49:53:66:dc:6a:e6:13:b2:b5:06:12:70:bf:c3:68: ed:d8:a6:1c:f9:3c:7e:87:68:ff:fe:f9:29:53:23:10:89:3b: 11:c6:5d:c5:ee:0c:b5:56:f7:d9:98:94:33:03:59:83:d3:a5: 04:90:58:a1:a8:2a:58:ff:7d:9c:ee:32:b8:cf:8f:0a:63:06: c6:e2:94:89:e6:c6:67:87:4c:8c:d7:eb:7c:81:f1:e5:5c:2d: ca:7d:78:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDV3fNToDGIYqJqjg0Noy9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjYwOTI1MDAwMTI3WhcNMjYwOTI2MDAwMTI3WjAzMTEwLwYDVQQD Eyg3OWE3ODdjNmMyZDMzMmE0MDc3YWFlZjMyZmFjY2UzYjQ1OTVlNmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSzdanOuMnycR89bkAnhkKIPGAem Rgm2K3Amrfj+dZXJmdmdJBZEPxNpgLppbTv3cNf1vZ8ZE5wOT0WI4vJ+/P+W15pr yPRBMisJUiimnD3DoRLo3YkX4boPGg9SbLbnIDX3XALnpi8NDiM7GvXAW0xQUpvs +OTO905E93OtmshEHLMc8c+ni1J/v0qZ4izDcIGPcIHCs91HBA9ne2J9HhAFLHBT 4QXFH6X5gVtmIILCKXwNrxipHJax/+h7K9vfkW80VksrHJP1JTh+v0dJnoJME0Fv nEq60qsHp+l6GxMGNnEvcBpX2J5acfCQ9mx4l4+H3JibOLhkngfRltCa+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmnh8bC0zKkB3qu8y+szjtFlebwMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFB6kgFP 18Svsfg/aJajwGL9XqGWrhG7+7VPFS6WUaoUYnnDWuOIaZepY2psfHo9U9+YOY5N 1Lb68VBvVZCZtwz+gsFASZnIZCU6zQawhvBzB6s69WJ8T4CLCfuF2yz4vx7N15od z+Fv9rf74XGNc98K8mv1xQEFH2C0OBLa7/23nlQankMLjU5mQD7TNNTijhNJ3Xle qyOCt9PD67i3XeRHzLmhSVNm3GrmE7K1BhJwv8No7dimHPk8fodo//75KVMjEIk7 EcZdxe4MtVb32ZiUMwNZg9OlBJBYoagqWP99nO4yuM+PCmMGxuKUiebGZ4dMjNfr fIHx5Vwtyn14Nw== -----END CERTIFICATE-----Generated at Fri Sep 25 03:13:44 2026 by rpki-client