$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: CaCfhtXOq4yPevbQAtYLmhamNw36Awk/RxiKkwzVg8E= Subject key identifier: 39:FA:89:22:A7:1D:77:01:25:43:A8:4E:DD:DF:1A:7D:CF:28:08:DD Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 01A0CB22F0525AD2957F58E0F2A85A31C38E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 1A71 Signing time: Tue 22 Sep 2026 22:00:59 +0000 Manifest this update: Tue 22 Sep 2026 22:00:59 +0000 Manifest next update: Wed 23 Sep 2026 22:00:59 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: xjxTeMCfbzxOoN6xuzrJ41V2aBeE1u9m9Gps4Q6An+0=) 2: 2pZ-2FjfKp_AUPJehyyyCmO33Hc.roa (hash: KSo6Uo4KGXQ+gy+hLjBUZoC/tbnGR8dO325Q6LPyilM=) 3: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (hash: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM=) 4: CvuWIkRHjp5wftfGLU8vOGYCRbc.roa (hash: gj4Tk/zdN+anVbu8mIUIWBYC8RgYdvQOlOOsAUK8Sdk=) 5: IRAfjWAlERnsxDrkVza8YXCUxl4.roa (hash: Ubtt3PSH8NxJ1HHW0Bmr9YJAFmecuPEr+JdwoJmMyLs=) 6: JJfaJkgSEBalqFcc3d6GPKEq5c0.roa (hash: FuHxoLmlLp5uuetTQ7lUzLqCBx0iP3lbv/wcUM9OYTE=) 7: Q_rrlmseqjc9c8mfs_9rzyd3284.roa (hash: GSzKRbWz/hHkNfc9qit79if8AoJkjbgwLaFILxum/nA=) 8: lfsA-CiV23r-qpL7I-OyuqCLA7E.roa (hash: IDCu8RiLCmmGO2wQI4VtUyw3k0YFKxR4jBPe/VBgfYc=) 9: nkzcn1sgGDpbfyqNM00anSE1XXM.roa (hash: /+3MitTOfIJS1gt2shgI9n07vci+NIdPgsMA89TtpO0=) 10: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (hash: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720=) 11: qu1WOvTSGJhb9qCrwaoo2MELsDg.roa (hash: sMcBLOOPq2yXaLqHdTpicJZ4I/4D7ujzTrP/m9dXVgg=) 12: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (hash: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo=) 13: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (hash: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g=) 14: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (hash: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA=) 15: yB3ntVub05F4F9i1cWLaKANNBso.roa (hash: zdKl/J+2C305Q7rX/8wtABN6OkAsZKkNZDLRLh5HUdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cb:22:f0:52:5a:d2:95:7f:58:e0:f2:a8:5a:31:c3:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Sep 22 22:00:59 2026 GMT Not After : Sep 23 22:00:59 2026 GMT Subject: CN=39fa8922a71d77012543a84edddf1a7dcf2808dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f9:71:3b:75:47:3c:0f:2e:49:62:ca:df:f2: 51:95:b6:03:f7:21:9a:28:e6:55:a8:69:99:11:26: 17:82:ba:28:4c:33:b2:04:37:a5:68:66:d4:c5:ef: 9c:ea:e0:e9:f7:4b:64:42:37:34:29:5c:f0:7b:9e: aa:13:19:6e:8c:91:72:85:d5:12:b6:fd:85:39:3c: f4:fb:42:36:0a:6a:da:15:02:a2:c2:6d:2a:e1:fb: d2:fc:12:27:b8:d1:76:81:a2:de:bc:d4:d0:2f:65: c2:28:60:f9:bb:13:39:08:22:ee:35:2c:c9:f0:0b: 87:3c:95:d7:0e:68:4c:1f:5e:9f:e6:b7:7e:15:39: ad:7b:ac:16:dd:57:11:ea:30:6d:ae:2a:7f:8a:0c: 64:4b:85:ba:a0:5e:82:95:9f:17:22:21:4a:c2:c0: 5b:b8:92:3b:aa:f0:74:6e:cf:93:c9:e3:f5:75:97: 49:42:37:9f:94:c0:9c:93:8d:76:e6:aa:8b:f1:52: c3:79:21:33:2e:04:60:68:08:50:10:b0:40:b4:88: 73:f4:76:7d:38:54:49:3a:eb:d1:11:af:d6:6d:f5: 24:40:83:dd:e6:77:eb:7c:7e:53:1c:7d:86:a8:90: ec:a3:cf:f8:6d:04:f9:09:9d:c1:59:77:50:e6:d1: 69:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FA:89:22:A7:1D:77:01:25:43:A8:4E:DD:DF:1A:7D:CF:28:08:DD X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:0e:94:a5:40:64:0d:d9:b4:52:f0:c0:0f:d3:b5:d2:95:7a: 4c:d3:13:63:32:4e:f5:73:39:ae:f2:17:c0:83:11:c9:e8:da: 4b:fa:ca:5c:71:09:cb:e3:8d:56:f3:e7:eb:a4:99:93:b0:bf: b8:dc:1f:00:62:d4:ae:db:9d:3c:cf:67:e5:c3:20:ad:76:2b: f8:43:b4:0c:16:ec:38:0a:48:5b:26:af:3a:07:40:cc:cd:4e: 29:1f:5d:8f:93:78:3f:06:ca:11:08:9e:89:d1:49:c3:f5:69: fe:ff:6e:0e:39:f7:14:1c:64:20:58:a7:4d:61:6d:af:4e:a9: 52:fe:1e:09:c2:b6:0b:e6:a8:fa:95:aa:58:a8:50:f9:e0:06: f0:7f:20:ae:a3:96:31:38:7f:1d:b7:34:91:bf:81:1f:17:6a: 25:91:07:af:e5:fc:db:3e:87:0d:48:d7:f4:0c:4f:58:f5:62: 95:75:63:31:9c:26:a7:91:5b:94:39:0b:d1:9c:17:33:de:bc: de:e9:14:83:e1:eb:0a:86:3b:56:b3:dd:1f:7d:fb:57:ea:4f: 7e:31:c9:b0:b8:af:6f:09:b4:34:d5:07:68:8b:d0:da:66:62: 3b:9d:3d:b6:c1:2d:86:c4:13:35:a2:db:9b:1a:21:76:86:b9: 80:52:b4:11 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAaDLIvBSWtKVf1jg8qhaMcOOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYwOTIyMjIwMDU5WhcNMjYwOTIzMjIwMDU5WjAzMTEwLwYDVQQD EygzOWZhODkyMmE3MWQ3NzAxMjU0M2E4NGVkZGRmMWE3ZGNmMjgwOGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivlxO3VHPA8uSWLK3/JRlbYD9yGa KOZVqGmZESYXgrooTDOyBDelaGbUxe+c6uDp90tkQjc0KVzwe56qExlujJFyhdUS tv2FOTz0+0I2CmraFQKiwm0q4fvS/BInuNF2gaLevNTQL2XCKGD5uxM5CCLuNSzJ 8AuHPJXXDmhMH16f5rd+FTmte6wW3VcR6jBtrip/igxkS4W6oF6ClZ8XIiFKwsBb uJI7qvB0bs+TyeP1dZdJQjeflMCck4125qqL8VLDeSEzLgRgaAhQELBAtIhz9HZ9 OFRJOuvREa/WbfUkQIPd5nfrfH5THH2GqJDso8/4bQT5CZ3BWXdQ5tFpZwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDn6iSKnHXcBJUOoTt3fGn3PKAjdMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMg6U pUBkDdm0UvDAD9O10pV6TNMTYzJO9XM5rvIXwIMRyejaS/rKXHEJy+ONVvPn66SZ k7C/uNwfAGLUrtudPM9n5cMgrXYr+EO0DBbsOApIWyavOgdAzM1OKR9dj5N4PwbK EQieidFJw/Vp/v9uDjn3FBxkIFinTWFtr06pUv4eCcK2C+ao+pWqWKhQ+eAG8H8g rqOWMTh/Hbc0kb+BHxdqJZEHr+X82z6HDUjX9AxPWPVilXVjMZwmp5FblDkL0ZwX M9683ukUg+HrCoY7VrPdH337V+pPfjHJsLivbwm0NNUHaIvQ2mZiO509tsEthsQT NaLbmxohdoa5gFK0EQ== -----END CERTIFICATE-----Generated at Wed Sep 23 02:47:47 2026 by rpki-client