$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: NAFh+atmP2mBUYA+YRlwhknstc4TFRiFqmbh2PrHNL8= Subject key identifier: C6:2C:D1:14:6C:78:B0:0A:8A:A2:6D:74:B3:F4:75:2E:F2:4E:4D:01 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 01A0E43F3339F3E286B68042F56C133CD414 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 10BB Signing time: Sun 27 Sep 2026 19:02:22 +0000 Manifest this update: Sun 27 Sep 2026 19:02:22 +0000 Manifest next update: Mon 28 Sep 2026 19:02:22 +0000 Files and hashes: 1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=) 2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=) 3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=) 4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=) 5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=) 6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=) 7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: +ZpxhX8hBmKBBoSFq/7EOPH+hJLWqw+y8yH+Ul3tfXQ=) 8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=) 9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=) 10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=) 11: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=) 12: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=) 13: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e4:3f:33:39:f3:e2:86:b6:80:42:f5:6c:13:3c:d4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Sep 27 19:02:22 2026 GMT Not After : Sep 28 19:02:22 2026 GMT Subject: CN=c62cd1146c78b00a8aa26d74b3f4752ef24e4d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4d:1f:77:c1:82:ba:1f:28:67:77:13:db:48: 7d:ff:65:a8:84:db:85:60:39:45:3a:58:c8:c2:a8: e4:07:f4:cf:81:68:96:39:99:ee:69:84:9b:9a:96: ee:ce:c6:50:b0:b6:f3:bf:a2:51:ac:b6:f6:a6:28: c8:74:a7:ed:43:32:86:39:0a:5a:c9:d2:5c:71:eb: 0b:47:0d:e9:a4:a4:02:35:94:b5:52:07:4e:10:df: 0b:6a:69:dd:ad:8f:65:27:e5:5e:c8:89:2d:02:31: e0:fb:b6:93:f1:1f:8d:5b:8b:84:88:6e:59:5f:53: 0c:49:82:1c:b4:23:b7:4f:8f:d5:90:d3:2a:18:dd: 58:16:40:42:24:b3:56:14:9f:6b:21:85:ab:af:00: 0b:7f:3f:d9:e7:42:d3:17:70:44:5f:c8:25:3d:bc: 97:f7:3b:f9:a1:02:82:ed:b6:59:da:7b:8d:e7:32: 87:70:dd:2c:d8:92:68:ee:ba:87:c7:ba:29:f3:52: 6d:cf:c6:c2:cd:3f:fa:40:90:33:87:77:c7:80:43: f5:2c:3e:4b:65:4a:9a:5c:0e:d9:ef:0b:9f:db:e6: ce:ec:ed:e0:63:07:11:10:6e:31:07:5f:96:4a:53: 7b:81:69:a3:f8:a0:70:06:7d:7a:57:b2:f3:a1:2c: 35:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2C:D1:14:6C:78:B0:0A:8A:A2:6D:74:B3:F4:75:2E:F2:4E:4D:01 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:af:4f:4e:ec:22:dd:40:c4:f5:03:45:99:ad:a9:ec:6e:fe: 1f:c0:f7:63:02:18:db:fa:aa:3f:ba:2e:8c:fa:fc:f4:02:96: c7:ef:b5:16:40:8e:25:53:d9:40:67:e8:4a:74:23:94:ce:ef: bc:ba:b5:89:44:e4:5e:9c:e2:e5:15:62:04:25:b8:91:7c:e2: e1:dd:63:8a:c8:68:e8:36:9f:20:15:fb:2a:91:9e:a1:85:64: 5c:2a:f3:21:bc:7b:7a:9f:b2:88:61:52:b4:c7:af:d3:69:7c: 67:ff:78:0d:a9:1d:d2:d0:d9:e6:43:21:26:9d:86:e1:db:69: 4d:58:42:53:97:df:65:00:c7:a3:df:65:dd:95:1d:99:3f:28: 0e:72:80:02:d7:83:e4:4f:44:25:9b:68:6e:92:c1:b4:a8:78: 87:8f:2c:da:e3:6d:b3:e1:be:94:39:9a:8c:4a:76:b7:cd:b1: 0e:5c:67:c6:66:15:f5:82:0b:43:56:01:96:be:93:27:4d:27: 71:37:91:0f:56:af:7a:1f:b1:fc:67:2e:9f:eb:b9:b6:e1:cd: ab:22:f8:2e:51:f8:24:8a:06:9e:4c:49:e9:71:d4:03:23:03: aa:04:55:2b:5a:f1:e4:84:b3:ba:3b:ef:d3:19:b9:95:a3:dd: 03:c0:38:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDkPzM58+KGtoBC9WwTPNQUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwOTI3MTkwMjIyWhcNMjYwOTI4MTkwMjIyWjAzMTEwLwYDVQQD EyhjNjJjZDExNDZjNzhiMDBhOGFhMjZkNzRiM2Y0NzUyZWYyNGU0ZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k0fd8GCuh8oZ3cT20h9/2WohNuF YDlFOljIwqjkB/TPgWiWOZnuaYSbmpbuzsZQsLbzv6JRrLb2pijIdKftQzKGOQpa ydJccesLRw3ppKQCNZS1UgdOEN8LamndrY9lJ+VeyIktAjHg+7aT8R+NW4uEiG5Z X1MMSYIctCO3T4/VkNMqGN1YFkBCJLNWFJ9rIYWrrwALfz/Z50LTF3BEX8glPbyX 9zv5oQKC7bZZ2nuN5zKHcN0s2JJo7rqHx7op81Jtz8bCzT/6QJAzh3fHgEP1LD5L ZUqaXA7Z7wuf2+bO7O3gYwcREG4xB1+WSlN7gWmj+KBwBn16V7LzoSw13wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYs0RRseLAKiqJtdLP0dS7yTk0BMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH69PTuwi 3UDE9QNFma2p7G7+H8D3YwIY2/qqP7oujPr89AKWx++1FkCOJVPZQGfoSnQjlM7v vLq1iUTkXpzi5RViBCW4kXzi4d1jisho6DafIBX7KpGeoYVkXCrzIbx7ep+yiGFS tMev02l8Z/94Dakd0tDZ5kMhJp2G4dtpTVhCU5ffZQDHo99l3ZUdmT8oDnKAAteD 5E9EJZtobpLBtKh4h48s2uNts+G+lDmajEp2t82xDlxnxmYV9YILQ1YBlr6TJ00n cTeRD1aveh+x/Gcun+u5tuHNqyL4LlH4JIoGnkxJ6XHUAyMDqgRVK1rx5ISzujvv 0xm5laPdA8A4Zw== -----END CERTIFICATE-----Generated at Sun Sep 27 23:31:29 2026 by rpki-client