$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: NJGgtU4X4NPM9zsRi4CSs066NOlYrmb/pM5G8yYZG08= Subject key identifier: 4E:DB:23:44:BF:8F:54:2F:C8:86:86:99:B7:F6:63:1C:89:61:92:57 Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 01A0DD296FD86C49AA9C7AA33B569F6CF59A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 089D Signing time: Sat 26 Sep 2026 10:01:15 +0000 Manifest this update: Sat 26 Sep 2026 10:01:15 +0000 Manifest next update: Sun 27 Sep 2026 10:01:15 +0000 Files and hashes: 1: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: wI3uFGhxJTfqjPJ8jtYo6HBsMaVfqyoYHhk7noGRFmI=) 2: 3MMGuyxk5BA1h4yKFwGuekYBWpE.roa (hash: qDDPw4rjqe8Of6FqTmZ8vNfrRu70pioyOFhkznkxbn0=) 3: 7PMwWghG1f2GH2kcgJJT1T19mKA.roa (hash: iSWM8zD4dnBfc8rm3hdCfD29wpDU7MXGImntX+CzTys=) 4: CUZDkD-NcFvyMKKqxpqKTImWldI.roa (hash: BjgaQINh/o8BqluKWpCRQpHRBGijPayFIzTWLEZZ+ZQ=) 5: Dhrq3603FXAC1wqjo20wzUmr4F8.roa (hash: 93F+LmWkBd0KITwFzxwwnm7wh1Nm582E0rUj/2gWiKA=) 6: DlLXddAis5e2NiYpDlPFgCC2fqQ.roa (hash: wChHj1a1SOAqKO2XbDKNiJzmDLWZ4VK+PUQtszQXCaA=) 7: aoX3qgSrCGpVmGI2-sNdQlbBEmo.roa (hash: fUASGNwLnomXxmckWPpEyeY/fBQ9vTiFVyQieAo28z4=) 8: cojKfvUL96n8v0NW6xv7i34QuKg.roa (hash: lYPKoP4F96eul1kxPLkPqkS5F4CgrEIREjfk+V+jg3o=) 9: f-9ciEqv18Kub9fxi8gMgTEDiN8.roa (hash: ys7Se75WP1iZvGd8oeyIka2FlXVNvmTKA8g4Bz+pUFE=) 10: pPL6_ILH_OSb0uend9BsYY1M5zM.roa (hash: uPRcSj9Qet/R5RDAAlJ1xCgadEw0HnsrDGUuZztgzUc=) 11: qse_CjeAhZ5mrJaaeqQbXdzwq6c.roa (hash: DcaCDcXxQuFqUhYc0T6gyos8/cyyoYS+q0uMnwfEmhU=) 12: qvL5cNpCo_XaFCNykh7Gx2HPj7A.roa (hash: Je87v5hgNV1x62aPiR7j/Cjy7ey6GNmVdBbyWoayWLE=) 13: rtaxspuDF4uli6my-kG3x-CfzyM.roa (hash: Mbr6HPYPHlUpdc2sSsGgV2VBSnLTCf311AToZ6BeZWw=) 14: sRTNLbJ3g2jrnoN7xO2uBbfWguU.roa (hash: 97xAwvGhhXW1GC5fGvIVMkcoGK7MfJbMcwrs0H6Prc8=) 15: sSEuPuJKSwvGPl8OYtUAbNgjLFs.roa (hash: t6MnFRdD+DMOOopxl5hauoDky6UirAHK0zqLM5bjQWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 09:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:dd:29:6f:d8:6c:49:aa:9c:7a:a3:3b:56:9f:6c:f5:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Sep 26 10:01:15 2026 GMT Not After : Sep 27 10:01:15 2026 GMT Subject: CN=4edb2344bf8f542fc8868699b7f6631c89619257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cd:b5:77:26:d1:bc:fe:d7:31:a1:54:1d:88: 68:df:ce:e4:cd:04:8c:6d:be:a3:e7:1e:98:63:dd: e2:12:9f:1c:4c:f3:6e:18:fe:af:92:c1:2f:cc:de: 4e:e5:a2:8e:d9:87:2d:14:54:71:7c:98:85:a2:87: 18:32:c3:e5:4f:82:27:e8:eb:78:24:f4:eb:24:ee: 7e:5c:36:06:51:52:ad:1e:dc:64:7e:ce:ca:45:1e: 73:82:50:48:a6:65:fb:7b:bf:eb:e7:21:6b:81:07: 5a:ef:b8:69:54:77:b3:0d:57:d6:e1:85:c4:e4:3c: e6:0c:eb:6b:28:68:b3:b5:18:5f:c9:06:f0:3b:2a: 96:77:30:78:a0:78:b1:16:b1:cf:2d:1c:ad:df:3a: 2f:6c:30:6d:86:30:df:4e:0e:5b:e3:eb:f1:73:29: 5a:a1:7a:b3:c9:f9:87:2c:cc:82:8d:c9:3b:f5:5e: 33:bb:49:19:68:a7:a9:55:06:1d:0e:fb:b5:be:e8: e8:51:3b:03:ec:f9:39:c2:18:70:50:0c:8e:4e:5f: 88:50:ac:27:ed:7b:8c:8b:6d:77:fd:93:b2:9d:3d: 29:47:a3:af:c6:08:95:59:61:a8:41:71:b7:e3:a4: a1:39:92:36:49:10:b3:1d:d1:a3:c0:56:5c:65:a8: c9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DB:23:44:BF:8F:54:2F:C8:86:86:99:B7:F6:63:1C:89:61:92:57 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ba:3c:91:50:3d:89:ab:d5:77:1b:03:a1:12:f8:b5:3a:ad: 16:41:76:05:35:2d:69:3e:18:b8:61:fa:c2:58:8a:a1:16:de: d7:66:ef:56:58:3b:cb:fc:21:e6:f9:5c:15:0e:02:2e:11:d3: d4:67:81:df:d6:c3:c5:a4:09:ae:e7:45:74:55:d0:5b:01:ca: 4e:db:fa:fa:41:bd:f0:c9:80:10:fb:43:35:1f:06:58:40:41: b3:f1:9f:b7:73:01:30:06:9d:d9:7f:ce:1d:18:b8:12:46:9c: 73:4d:9a:71:16:d1:01:73:35:cd:ad:27:11:14:0d:f8:c9:f6: 7c:39:fb:0f:9e:53:bc:4a:41:46:84:38:62:bd:c1:ac:d3:aa: 15:ea:58:f8:12:2b:aa:54:03:eb:5e:12:6a:a8:64:b2:74:5d: 0e:b7:c3:69:84:f0:69:19:0e:dc:cc:6d:ba:e3:f9:55:60:b8: 90:3c:56:d6:4d:b6:bc:72:9d:c4:63:96:84:96:e1:1b:dd:17: 25:64:b3:0d:cb:a2:bb:3d:0d:2b:d1:f2:37:32:d5:2c:b1:fc: ed:0e:df:e3:75:aa:5d:db:16:81:7f:2a:d5:f1:5c:1c:da:6c: 9d:0e:4e:5f:3d:e5:a8:66:63:f3:7d:4b:fa:4f:3b:8a:40:fb: f5:8d:5d:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDdKW/YbEmqnHqjO1afbPWaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjYwOTI2MTAwMTE1WhcNMjYwOTI3MTAwMTE1WjAzMTEwLwYDVQQD Eyg0ZWRiMjM0NGJmOGY1NDJmYzg4Njg2OTliN2Y2NjMxYzg5NjE5MjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s21dybRvP7XMaFUHYho387kzQSM bb6j5x6YY93iEp8cTPNuGP6vksEvzN5O5aKO2YctFFRxfJiFoocYMsPlT4In6Ot4 JPTrJO5+XDYGUVKtHtxkfs7KRR5zglBIpmX7e7/r5yFrgQda77hpVHezDVfW4YXE 5DzmDOtrKGiztRhfyQbwOyqWdzB4oHixFrHPLRyt3zovbDBthjDfTg5b4+vxcyla oXqzyfmHLMyCjck79V4zu0kZaKepVQYdDvu1vujoUTsD7Pk5whhwUAyOTl+IUKwn 7XuMi213/ZOynT0pR6OvxgiVWWGoQXG346ShOZI2SRCzHdGjwFZcZajJ8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7bI0S/j1QvyIaGmbf2YxyJYZJXMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbo8kVA9 iavVdxsDoRL4tTqtFkF2BTUtaT4YuGH6wliKoRbe12bvVlg7y/wh5vlcFQ4CLhHT 1GeB39bDxaQJrudFdFXQWwHKTtv6+kG98MmAEPtDNR8GWEBBs/Gft3MBMAad2X/O HRi4Ekacc02acRbRAXM1za0nERQN+Mn2fDn7D55TvEpBRoQ4Yr3BrNOqFepY+BIr qlQD614SaqhksnRdDrfDaYTwaRkO3MxtuuP5VWC4kDxW1k22vHKdxGOWhJbhG90X JWSzDcuiuz0NK9HyNzLVLLH87Q7f43WqXdsWgX8q1fFcHNpsnQ5OXz3lqGZj831L +k87ikD79Y1doQ== -----END CERTIFICATE-----Generated at Sat Sep 26 14:37:44 2026 by rpki-client