$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: BkZZUgTZreC4Ry6WAAxwh3ltHG++KPoHmASC6FsiNKU= Subject key identifier: 8D:96:62:23:42:1D:D3:BD:79:A2:7D:F2:47:2C:E2:8B:2C:18:5D:C5 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 01A0D2DEF963343FFF29075E1C232480A59D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 10B2 Signing time: Thu 24 Sep 2026 10:03:43 +0000 Manifest this update: Thu 24 Sep 2026 10:03:43 +0000 Manifest next update: Fri 25 Sep 2026 10:03:43 +0000 Files and hashes: 1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=) 2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=) 3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=) 4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=) 5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=) 6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=) 7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: nPkmSxJCPeoBdd8uC/88Diyf+Y6UQOk8ILGzjyKTNKw=) 8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=) 9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=) 10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=) 11: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=) 12: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=) 13: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 08:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:de:f9:63:34:3f:ff:29:07:5e:1c:23:24:80:a5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Sep 24 10:03:43 2026 GMT Not After : Sep 25 10:03:43 2026 GMT Subject: CN=8d966223421dd3bd79a27df2472ce28b2c185dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:64:aa:a4:42:c3:0a:0e:81:ea:8f:92:ca:af: 2a:6d:0b:97:f0:55:08:dd:e9:d3:a4:25:c2:ed:48: 06:ec:66:59:9c:1d:5f:9b:05:25:a8:e3:6e:f7:eb: 3a:db:1a:c8:5d:ea:00:83:d0:17:27:91:ba:b2:c0: 0e:99:3f:ac:5e:4a:8d:a6:41:7f:0c:bc:55:29:ff: 3a:95:c4:18:28:0e:bb:8d:a8:6e:2a:6e:61:52:32: 82:c7:44:d9:35:d6:86:81:7f:80:18:51:21:3d:3f: 60:0d:14:4e:6a:91:af:79:b3:0a:c8:e3:d7:b0:0b: 60:8b:a5:3d:63:9f:e3:4c:56:33:c9:6b:6e:f3:1a: d7:2e:35:b0:78:5c:f4:fe:8f:be:64:bf:c4:3c:84: 00:8a:09:30:03:0c:21:df:e9:1b:e6:56:2c:26:92: a3:c5:fa:da:fa:94:45:d9:60:d3:4f:42:a1:5b:eb: 5e:d6:32:74:58:f6:5b:4d:cc:37:3d:34:c7:f6:77: 9b:9f:b7:fc:ce:9e:7c:65:48:c8:c5:eb:c2:fd:58: 47:86:5a:b5:43:80:52:7a:0e:c3:e2:c0:f1:d7:e4: 16:4c:a6:fb:d8:23:e7:c0:05:b7:98:d3:76:98:cf: 31:16:60:a2:21:f2:bf:e9:5c:30:f9:ea:bc:ca:80: b9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:96:62:23:42:1D:D3:BD:79:A2:7D:F2:47:2C:E2:8B:2C:18:5D:C5 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:08:af:71:42:d7:5d:71:47:ce:90:9b:1b:11:65:1d:2c:e7: 82:14:a0:38:3e:b8:9c:fd:78:b0:7c:85:99:ee:89:50:15:be: 5b:cc:4f:f0:5f:af:31:82:ae:2e:4f:c7:85:16:3f:04:a7:d0: 69:5e:5a:c6:ce:ca:b5:70:4c:65:33:bf:e3:f5:4e:c5:08:29: af:54:a6:ed:6e:32:61:f7:43:dd:0f:99:ae:8b:85:02:98:a5: 92:cd:d6:7d:09:64:a5:d2:e6:3a:3a:4f:50:a7:69:9a:04:32: 41:8b:1f:df:a9:a2:51:79:4f:e2:2e:4f:29:70:97:6d:e8:bd: 33:4e:0d:37:5a:ff:97:4b:6a:f6:60:4a:8b:65:02:8c:15:c4: 08:b8:03:57:22:c6:c3:b7:ea:43:65:a6:c6:41:79:55:61:d2: b4:a4:a6:f9:d5:3b:97:d9:b1:9e:92:63:ef:94:1c:c7:6f:1f: 75:85:6a:64:de:7a:48:9b:54:97:52:a8:01:b8:18:e9:c4:b9: 38:61:17:d7:46:b6:3a:be:02:85:23:d0:f9:a9:ee:47:f2:5c: 45:8d:2a:32:4e:1b:b3:05:2d:8b:48:3b:18:51:6e:af:5b:7f: e5:5b:80:29:8d:b5:69:93:f2:0c:f5:37:fc:ee:ee:d3:e1:e9: ac:7c:7e:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDS3vljND//KQdeHCMkgKWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwOTI0MTAwMzQzWhcNMjYwOTI1MTAwMzQzWjAzMTEwLwYDVQQD Eyg4ZDk2NjIyMzQyMWRkM2JkNzlhMjdkZjI0NzJjZTI4YjJjMTg1ZGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GSqpELDCg6B6o+Syq8qbQuX8FUI 3enTpCXC7UgG7GZZnB1fmwUlqONu9+s62xrIXeoAg9AXJ5G6ssAOmT+sXkqNpkF/ DLxVKf86lcQYKA67jahuKm5hUjKCx0TZNdaGgX+AGFEhPT9gDRROapGvebMKyOPX sAtgi6U9Y5/jTFYzyWtu8xrXLjWweFz0/o++ZL/EPIQAigkwAwwh3+kb5lYsJpKj xfra+pRF2WDTT0KhW+te1jJ0WPZbTcw3PTTH9nebn7f8zp58ZUjIxevC/VhHhlq1 Q4BSeg7D4sDx1+QWTKb72CPnwAW3mNN2mM8xFmCiIfK/6Vww+eq8yoC5GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2WYiNCHdO9eaJ98kcs4ossGF3FMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgivcULX XXFHzpCbGxFlHSznghSgOD64nP14sHyFme6JUBW+W8xP8F+vMYKuLk/HhRY/BKfQ aV5axs7KtXBMZTO/4/VOxQgpr1Sm7W4yYfdD3Q+ZrouFApilks3WfQlkpdLmOjpP UKdpmgQyQYsf36miUXlP4i5PKXCXbei9M04NN1r/l0tq9mBKi2UCjBXECLgDVyLG w7fqQ2WmxkF5VWHStKSm+dU7l9mxnpJj75Qcx28fdYVqZN56SJtUl1KoAbgY6cS5 OGEX10a2Or4ChSPQ+anuR/JcRY0qMk4bswUti0g7GFFur1t/5VuAKY21aZPyDPU3 /O7u0+HprHx+ug== -----END CERTIFICATE-----Generated at Thu Sep 24 14:32:40 2026 by rpki-client