$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: 4IctKRXFrttM1OvpXPf0Zp+9E6a+Ab38bAsqz3h/wsk= Subject key identifier: 74:B0:25:9D:B3:85:A8:CE:0A:11:73:7F:75:AF:35:14:99:34:BD:8B Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 01A0D4CAD2975BCF7D2DDB8382CE5EBBB9B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 0DD8 Signing time: Thu 24 Sep 2026 19:00:57 +0000 Manifest this update: Thu 24 Sep 2026 19:00:57 +0000 Manifest next update: Fri 25 Sep 2026 19:00:57 +0000 Files and hashes: 1: 0jPQz2jIHrU0FvHsrF-XRZUhtzs.roa (hash: W/W8DjgReH/V+5pe/5+3BKwvc8dz5PRxxtmAIvZ373s=) 2: 3h4R6YLSiEPNhWmPNTd7KLX1X3U.roa (hash: LjFP5plUCIY5Si52J4E1UiGHvt4F3YfbtrTK+AdpPww=) 3: 5-J1fvpVb5dSg5m7dEENTI_oJOo.roa (hash: Bf76p0mhCDufIxhGH9tYyhZ/kCkHidGNBcKyGnHkKdg=) 4: AD3DllK0spDacTrZOzUoNjsaEXY.roa (hash: E0XWVs3lhPoRvEa16ZsuDhIGmQin6DlhoQyYSbyhShU=) 5: GjPVQb4kXTSvkfi7RIf8VINvr0I.roa (hash: IEYuHwwge+E1Azg2p77WeZYvh7BllQ5PwJDFCZ3eVLU=) 6: HVCa9r5thWjsE4kAoaBRSlvTvK4.roa (hash: QayBo0rlXlFxr86ACWyOG/yDe9UFq1WxBL/y2YeNVL4=) 7: RHDQQEmbcOrqTmjc99mQ-Eu0900.roa (hash: x+3xhE8Ho8gzcy+Ei5kfiLpvFaz62BymEv0joq6kEPs=) 8: SUXWC1-mJgzNHKufisllq7xTG84.roa (hash: ldGYAfxW+U7Nx0a/VnBHDnXxlaedoq5faATK1ilEgPY=) 9: ScPX6tqlw5o1ZcCYpkNMnCrj72U.roa (hash: OWPE9KkCxV1y82ynMwT7Wfz+7H4kVGPyxV8fArKWLm0=) 10: WdQ6he_P5F-cOEeRR1TiPU-zU-s.roa (hash: vQjmo6B5bhn28fdIrHICw7DprEul1mU/rEs6H7jrIrc=) 11: n6eR2WfCXImcpQbWii3OXMfT1io.roa (hash: 9i7i+fHrN+OULt3g7OjkSiNbFJDZzaQ5rh/6y0F1XFE=) 12: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: ivFYMnI7qx7zwl4j3sahfDdDxIcBVJHAtHRH+mRvce4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:ca:d2:97:5b:cf:7d:2d:db:83:82:ce:5e:bb:b9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Sep 24 19:00:57 2026 GMT Not After : Sep 25 19:00:57 2026 GMT Subject: CN=74b0259db385a8ce0a11737f75af35149934bd8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e6:94:76:86:7a:aa:77:8e:f4:af:3f:bd:c3: c4:19:5d:bc:88:e7:b2:ce:bb:e4:6d:a0:c2:cb:dd: 56:06:93:65:f0:12:33:77:27:8a:40:53:71:4c:35: a9:a9:fa:ef:fd:32:04:04:59:f0:56:07:84:9f:da: 92:08:f5:ab:5f:ec:05:5e:77:54:f9:c6:a1:3f:7f: 57:9c:05:7e:44:ce:69:19:cb:86:e4:72:dd:96:23: 1c:4b:e0:bd:2b:8b:a6:22:de:22:bf:34:7a:da:84: e7:35:14:fd:cc:88:30:2f:e2:e5:6a:d6:db:5b:e2: 2d:ca:93:37:26:34:0c:62:a4:ae:c3:c6:b6:f3:42: 54:dc:da:cb:32:28:b2:17:6e:e3:81:1a:6e:25:3a: 98:4c:6d:98:4d:35:20:4a:fa:06:5b:e8:7a:53:4d: 0e:24:82:40:86:66:46:10:97:20:19:9b:4b:80:fc: 7a:a6:9a:b8:a8:af:38:e4:02:f7:76:98:e1:02:fd: a2:f6:a9:5e:8d:1d:3c:bf:a4:58:2d:82:89:4b:91: 9c:0a:6f:0c:f8:13:ed:d5:10:54:5e:96:ed:3d:54: 49:00:d2:2d:22:7d:41:0d:81:78:e1:02:0f:24:4d: 41:65:2c:ba:36:43:1c:f5:fb:88:06:11:35:ff:04: 89:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B0:25:9D:B3:85:A8:CE:0A:11:73:7F:75:AF:35:14:99:34:BD:8B X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:22:0e:cc:b8:6e:5f:99:32:36:7b:54:b1:b9:60:cd:26:6e: c3:ef:5c:b9:61:d4:41:32:f6:82:7e:3b:94:f1:43:61:6c:bd: e4:07:b5:c6:42:39:40:13:fd:74:27:38:29:ff:eb:86:c5:8c: 42:94:43:28:fa:ac:3c:18:e1:69:6a:f8:6a:43:5b:65:f5:ad: 5b:24:3e:dd:15:1c:55:ce:59:40:2c:e2:e4:a6:06:32:d9:19: fd:09:df:a2:aa:ea:2d:0b:f8:77:15:56:68:9f:15:a3:96:4a: d2:73:2e:56:75:b7:64:61:2d:5b:83:79:dd:5e:f8:5d:59:50: 42:9e:6f:a3:15:28:92:ce:6a:93:29:87:62:6f:14:24:79:be: 94:e1:97:f6:a1:ea:2d:6a:92:c6:cc:4b:29:47:a1:a6:94:5a: 99:5f:6a:18:50:4a:06:71:c1:2e:eb:98:75:91:d8:db:f1:1c: d4:19:cf:78:08:7b:19:52:e7:52:d5:d0:1a:e4:dc:55:6e:d0: de:9f:96:1b:db:b7:82:08:14:9d:40:8b:7d:b8:8d:51:61:17: 39:7d:16:31:45:0d:f2:d2:b7:30:11:3f:ed:8d:db:ec:e7:df: 72:80:57:48:f4:e0:fe:70:98:ac:98:46:6e:f4:bd:4f:a5:53: 42:71:2f:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUytKXW899LduDgs5eu7myMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwOTI0MTkwMDU3WhcNMjYwOTI1MTkwMDU3WjAzMTEwLwYDVQQD Eyg3NGIwMjU5ZGIzODVhOGNlMGExMTczN2Y3NWFmMzUxNDk5MzRiZDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOaUdoZ6qneO9K8/vcPEGV28iOey zrvkbaDCy91WBpNl8BIzdyeKQFNxTDWpqfrv/TIEBFnwVgeEn9qSCPWrX+wFXndU +cahP39XnAV+RM5pGcuG5HLdliMcS+C9K4umIt4ivzR62oTnNRT9zIgwL+Llatbb W+ItypM3JjQMYqSuw8a280JU3NrLMiiyF27jgRpuJTqYTG2YTTUgSvoGW+h6U00O JIJAhmZGEJcgGZtLgPx6ppq4qK845AL3dpjhAv2i9qlejR08v6RYLYKJS5GcCm8M +BPt1RBUXpbtPVRJANItIn1BDYF44QIPJE1BZSy6NkMc9fuIBhE1/wSJgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSwJZ2zhajOChFzf3WvNRSZNL2LMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyIOzLhu X5kyNntUsblgzSZuw+9cuWHUQTL2gn47lPFDYWy95Ae1xkI5QBP9dCc4Kf/rhsWM QpRDKPqsPBjhaWr4akNbZfWtWyQ+3RUcVc5ZQCzi5KYGMtkZ/QnfoqrqLQv4dxVW aJ8Vo5ZK0nMuVnW3ZGEtW4N53V74XVlQQp5voxUoks5qkymHYm8UJHm+lOGX9qHq LWqSxsxLKUehppRamV9qGFBKBnHBLuuYdZHY2/Ec1BnPeAh7GVLnUtXQGuTcVW7Q 3p+WG9u3gggUnUCLfbiNUWEXOX0WMUUN8tK3MBE/7Y3b7OffcoBXSPTg/nCYrJhG bvS9T6VTQnEv4A== -----END CERTIFICATE-----Generated at Fri Sep 25 02:35:53 2026 by rpki-client