$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: vRTpdAxRjhyfnDHCmZG/PKaIC5mBay7S0jDii5TBXKk= Subject key identifier: 07:6C:EE:6E:90:D4:31:0E:8E:BB:AE:40:A2:C5:48:DB:47:32:4E:48 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 01A0CF6CEB36F55F0F2EA22379079304E7E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 1791 Signing time: Wed 23 Sep 2026 18:00:16 +0000 Manifest this update: Wed 23 Sep 2026 18:00:16 +0000 Manifest next update: Thu 24 Sep 2026 18:00:16 +0000 Files and hashes: 1: 1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa (hash: j6oOw0mW9VGeX6HTh7Pt8Y8xHM75I2sfi2YWe7POauE=) 2: 3GqxL9BgsfVA5m2ZDkR-ZLLIX9A.roa (hash: Pri0BDp61F1x6W2ZNNi8m6bCY1kGNmKIt3J8iAi4+nI=) 3: 65FnmspDUVJ9_6QxvLd4l0NA4FE.roa (hash: lgYYkTyMefTXhDS2aNN91oiVE93MHjvbMsoRpFVLAkk=) 4: 6USIsr77ojsfaUkK7p_9yPX50RE.roa (hash: bxePdusDHlOz01oH/vysD1HExvewxm7Ub84+S8jsj6E=) 5: Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa (hash: HBYP5wsCK4dtPnx1EHAW2IQhQMnr5dUB/nJJqTK+1C4=) 6: EnU8KLDk0MRS40FVtDjms_Soitw.roa (hash: rcy33n4rwkCj0xCW3i6XJv7RosymyzbT1+UqsgkLw0Q=) 7: Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa (hash: 3NI8C19YgNRWzyzmt0xuFsZNQ7eEnAdbBiag8O0XRuA=) 8: LcVUnzg476sY0cRj19anqQVr9co.roa (hash: CgyZ8RxzuluDb45z3tYn/fize5wHrZwU9v+utbAlRwk=) 9: QtjndSCGblrfab-ioVOroaNfPN4.roa (hash: 4OpyhaYwVmjq3TRkCJRrHAwNHbosmRoeTn4+UUJfDU8=) 10: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: VUOJhvQw0eoa/9EL8MBgpZulT79mA/Yc59LXzoE23xs=) 11: kFKOxKY8VUTuxTf-yKfjHz8Wd2Y.roa (hash: riEmPQV4v2zfq30QZ7AZjXHbnN49xJeD9nNq0fiSPhg=) 12: lC8mVQtZgzYCvFwXFlGkBqCpw84.roa (hash: SarrKRsARvJpAVux4A8mAEIosBVax08KS/WsVU5r/mE=) 13: ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa (hash: xJD4AS2qcydvJ4nIFIToFd7KJeX/bcKOS0Cq1Ky05fE=) 14: sOU9sf_TLtLowD_NZ2t2Nk3oMWk.roa (hash: A6LA4etDI922EmA77PSJlPQnzxugY9xfCjTlpLtEMx0=) 15: usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa (hash: MwwYW4a1c7XEGwwS8SXJYUUEBBLKVu6KJRZWVoJlLQo=) 16: v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa (hash: IlvU1dySJCzAWqUq3ax3NvMIRPVQQDJqs9utM98mnVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:6c:eb:36:f5:5f:0f:2e:a2:23:79:07:93:04:e7:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Sep 23 18:00:16 2026 GMT Not After : Sep 24 18:00:16 2026 GMT Subject: CN=076cee6e90d4310e8ebbae40a2c548db47324e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:d9:9c:74:5d:54:15:58:15:67:27:a2:bc: 3f:07:e0:9c:a1:0b:fd:cb:12:d3:9b:6a:03:ba:cf: d0:e1:53:95:c4:62:37:2e:fe:ce:4b:29:99:b9:34: 1e:15:45:77:dd:4f:36:6e:d5:4e:3e:6b:be:89:87: fb:52:7d:49:8c:68:ce:cc:75:54:29:fb:92:33:af: c6:29:58:df:85:e7:c4:8d:c9:c5:67:67:78:34:b4: 48:9e:92:e9:38:05:a9:1a:ac:e6:11:47:3f:9f:f6: a4:3a:04:8d:4d:0e:10:fc:e1:ce:a8:0c:c2:d8:06: 59:3d:3b:49:3d:4a:bc:00:04:88:c1:3b:cc:78:f3: c6:df:63:75:2f:4a:d9:d4:79:d1:81:ad:50:c4:c2: 97:b8:eb:c3:19:5d:b4:8f:f4:0a:a0:1f:68:3a:19: 9a:0a:d4:0a:b8:f2:a1:5f:93:29:45:df:1a:21:a7: 9d:d8:50:95:44:9b:d7:0a:f6:ba:d0:a5:03:4f:a3: 85:7e:ee:87:97:ac:e1:8f:af:c6:93:e8:53:3b:a1: 44:62:42:e4:2f:4d:15:d6:f2:a5:60:5a:e4:01:4d: 89:73:21:4e:ec:2f:ef:fe:03:f6:48:7d:eb:2a:52: dc:29:e0:b2:a2:d8:2a:60:4b:a8:68:1b:48:7b:a7: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6C:EE:6E:90:D4:31:0E:8E:BB:AE:40:A2:C5:48:DB:47:32:4E:48 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:52:04:5f:d9:bf:ac:89:30:41:04:94:18:cd:95:da:65:d3: 29:e2:91:c2:c9:f5:8e:17:54:aa:7a:ed:af:4a:b5:46:77:32: 7a:65:a2:97:42:ac:a8:ac:5d:87:a2:50:1b:79:ca:dc:8b:b4: 64:8d:16:8e:c4:3d:3d:ad:d7:92:38:e4:20:b7:4a:45:73:7c: bd:e6:45:45:47:07:d9:1e:20:5d:59:ba:d9:f8:b3:fc:f5:3a: b4:47:4b:5c:50:20:85:ee:00:25:cd:45:97:2d:d6:19:16:52: 56:dd:64:d5:b1:df:ee:2d:0c:59:d5:c0:73:af:7a:11:6a:b1: bf:fa:28:af:8c:b9:3d:0c:f1:15:4e:7b:f5:a2:aa:0b:89:0f: ed:7c:10:77:39:d2:4c:6f:8b:2f:9d:c0:f9:8e:08:09:13:bd: e3:aa:b0:8a:45:32:7b:fc:78:c2:12:79:15:0f:45:25:b7:c4: 03:5a:fc:9d:46:ea:fd:e1:a3:a3:d5:1f:4b:fc:c1:b1:4f:3b: a8:ba:48:ba:69:1e:41:37:b7:a3:82:e6:4e:8f:c9:5e:ce:a0: 63:bf:3f:3f:c7:ea:ce:7e:05:c3:b8:0c:a2:4c:69:bb:3c:d6: e7:64:7a:a1:0c:6e:c8:c1:c0:ee:5f:c4:0f:a8:7b:ce:ab:6b: 98:93:9e:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDPbOs29V8PLqIjeQeTBOfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjYwOTIzMTgwMDE2WhcNMjYwOTI0MTgwMDE2WjAzMTEwLwYDVQQD EygwNzZjZWU2ZTkwZDQzMTBlOGViYmFlNDBhMmM1NDhkYjQ3MzI0ZTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso3ZnHRdVBVYFWcnorw/B+CcoQv9 yxLTm2oDus/Q4VOVxGI3Lv7OSymZuTQeFUV33U82btVOPmu+iYf7Un1JjGjOzHVU KfuSM6/GKVjfhefEjcnFZ2d4NLRInpLpOAWpGqzmEUc/n/akOgSNTQ4Q/OHOqAzC 2AZZPTtJPUq8AASIwTvMePPG32N1L0rZ1HnRga1QxMKXuOvDGV20j/QKoB9oOhma CtQKuPKhX5MpRd8aIaed2FCVRJvXCva60KUDT6OFfu6Hl6zhj6/Gk+hTO6FEYkLk L00V1vKlYFrkAU2JcyFO7C/v/gP2SH3rKlLcKeCyotgqYEuoaBtIe6dzlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAds7m6Q1DEOjruuQKLFSNtHMk5IMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVIEX9m/ rIkwQQSUGM2V2mXTKeKRwsn1jhdUqnrtr0q1RncyemWil0KsqKxdh6JQG3nK3Iu0 ZI0WjsQ9Pa3XkjjkILdKRXN8veZFRUcH2R4gXVm62fiz/PU6tEdLXFAghe4AJc1F ly3WGRZSVt1k1bHf7i0MWdXAc696EWqxv/oor4y5PQzxFU579aKqC4kP7XwQdznS TG+LL53A+Y4ICRO946qwikUye/x4whJ5FQ9FJbfEA1r8nUbq/eGjo9UfS/zBsU87 qLpIumkeQTe3o4LmTo/JXs6gY78/P8fqzn4Fw7gMokxpuzzW52R6oQxuyMHA7l/E D6h7zqtrmJOeXQ== -----END CERTIFICATE-----Generated at Thu Sep 24 01:39:57 2026 by rpki-client