$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft File: N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json) Hash identifier: t/JwzNIGyvJgKxRO5+3nBY2XX4RKawSn17c9BbTQQXs= Subject key identifier: 70:EB:02:4B:55:CA:E2:37:2E:37:3A:6B:F1:FD:08:A0:FB:22:44:DA Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 01A0DBA996B2E4675E0F2DBAE108EF7F5276 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft Manifest number: 12F6 Signing time: Sat 26 Sep 2026 03:01:59 +0000 Manifest this update: Sat 26 Sep 2026 03:01:59 +0000 Manifest next update: Sun 27 Sep 2026 03:01:59 +0000 Files and hashes: 1: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (hash: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=) 2: GNlA9Djc01_DIxMgMXZBVVZA1yU.roa (hash: 7/jOmr8/wXHfFoWsgICU+xbOKLK7NXJAz5aYH9GIqUg=) 3: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: NVM2Yc2fPcsFstzKA/qTiJi7YONW9nygPgJFxR2geCE=) 4: T6tjope32KekAaANH2cDVM3Bd9k.roa (hash: 9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=) 5: TdqSn5WT6bBIWHwKcBQStfLEQ8c.roa (hash: TGw0y4tzt3XMgXJsUXMt46Gd2692xH2itYwdSwfZDS4=) 6: UikTrUC-2DsDHw5Izq7A013vsK4.roa (hash: WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=) 7: bxYbt9Cn4R10yajjbMPCKKg_YHc.roa (hash: 8byOzQfwF/KOVbj8pNAWquwbx3xGB2NYpi6Uf3icLsA=) 8: hZiFcW7h5F5XfcXkHDMH450e4sg.roa (hash: D2HtChe92Pq7COg3X4YoKzG61XVo1IcROxs8V7eIHbE=) 9: k-eSrqeXL71w-nhYF8XhonC5sgE.roa (hash: pMZO0gbnwiTypIUzIs1wrF7zpRP+hjOJxinJEWPhOb8=) 10: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (hash: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=) 11: rnlQK5dhYROPwVOz0gIHy2hThyA.roa (hash: ePpSMaFTViP+SRbpfZ7RDlUyIWzyjKKxE4TEHxPptd8=) 12: s0LJxcrA6NEOVotU612Fnf2S5ek.roa (hash: I+fPBNeq55OXeCUKgKO9o96f3LbnL4TA94Ayj0fCu0c=) 13: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (hash: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk=) 14: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (hash: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs=) 15: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (hash: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI=) 16: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (hash: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:db:a9:96:b2:e4:67:5e:0f:2d:ba:e1:08:ef:7f:52:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Sep 26 03:01:59 2026 GMT Not After : Sep 27 03:01:59 2026 GMT Subject: CN=70eb024b55cae2372e373a6bf1fd08a0fb2244da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:3a:70:c0:8f:38:a8:12:6a:d7:67:af:11: ec:ac:ff:bd:fd:c0:8d:60:1c:02:24:4c:58:6a:fa: 49:2a:1d:bc:25:da:83:5f:d5:69:bd:d6:54:7b:bf: 23:3a:56:cf:6a:01:84:50:ab:74:87:94:66:71:fe: cb:55:d1:8f:dd:02:d3:af:6a:0b:c0:e1:8e:cf:41: 95:22:2d:55:51:ff:3f:f0:f5:c6:63:69:b2:b4:65: 74:2e:75:f5:74:da:79:10:4e:6a:ca:81:49:83:2d: b0:f4:52:d6:81:09:94:25:ee:85:f1:c1:98:22:20: 89:ff:e6:82:4c:3c:d9:13:0e:bf:ba:27:f0:9c:a5: fa:1d:14:de:1c:09:6f:8f:0a:31:c2:6b:a9:40:70: 0d:96:21:43:04:03:c4:3d:a8:88:2a:ea:35:80:0c: 93:af:85:d3:6f:b6:4a:69:34:30:58:79:82:6b:a7: a4:bd:02:00:32:64:f0:32:7b:75:95:4f:55:86:9e: 25:34:5c:b1:30:71:7a:6c:c3:9d:af:04:e6:de:fd: 95:c9:ac:4c:70:56:57:8b:66:3d:4d:1b:a2:43:f0: 49:78:fb:f0:8a:68:5f:38:75:f4:6f:d2:1d:4f:4d: fb:ad:e5:3c:be:3e:a1:44:87:40:00:e6:26:e9:8a: ef:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EB:02:4B:55:CA:E2:37:2E:37:3A:6B:F1:FD:08:A0:FB:22:44:DA X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:38:22:ea:7b:93:fa:ea:0b:7b:96:25:6f:c3:0c:83:da:a6: 34:d0:f3:ab:f0:ee:99:6b:45:d4:9f:30:a9:45:e7:ab:45:21: 6a:42:dd:8d:1a:ac:df:e5:41:63:2f:8c:fe:36:86:3f:b5:ee: 1b:d3:df:e3:48:5e:df:6b:d6:58:88:a6:5c:26:79:db:33:e4: 7a:c9:93:9d:7e:8b:d1:87:6e:23:e2:1e:95:2d:7e:14:98:38: 5b:b6:b0:71:80:f3:2d:55:4c:0b:47:b8:3c:44:49:73:20:f1: 1c:e4:c9:b0:80:73:95:d9:3b:56:e8:cc:88:a6:1a:c8:fd:3f: b0:23:07:dc:9b:a8:f5:61:31:c0:9e:2c:5d:6d:b2:31:95:22: 27:7f:2f:bc:f4:1d:fb:7f:cc:7e:42:95:80:3c:3b:2f:29:f4: d7:10:b7:bc:34:17:03:63:7c:b6:1a:a7:ec:f4:c8:5b:6d:8f: 4b:f1:b5:6e:ee:24:86:85:40:9b:ad:5a:07:2c:f1:69:8e:aa: 0d:93:89:98:dc:54:49:55:cf:d7:b2:2c:30:ce:f4:01:b8:b0: f5:7a:6b:f2:79:3f:f4:6e:2e:8a:ee:79:23:33:07:10:b7:b9: b3:64:e5:79:8a:d4:e6:53:9b:0b:a4:fe:1e:7d:5a:7f:d9:fa: 45:8a:5c:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDbqZay5GdeDy264Qjvf1J2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwOTI2MDMwMTU5WhcNMjYwOTI3MDMwMTU5WjAzMTEwLwYDVQQD Eyg3MGViMDI0YjU1Y2FlMjM3MmUzNzNhNmJmMWZkMDhhMGZiMjI0NGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslQ6cMCPOKgSatdnrxHsrP+9/cCN YBwCJExYavpJKh28JdqDX9VpvdZUe78jOlbPagGEUKt0h5Rmcf7LVdGP3QLTr2oL wOGOz0GVIi1VUf8/8PXGY2mytGV0LnX1dNp5EE5qyoFJgy2w9FLWgQmUJe6F8cGY IiCJ/+aCTDzZEw6/uifwnKX6HRTeHAlvjwoxwmupQHANliFDBAPEPaiIKuo1gAyT r4XTb7ZKaTQwWHmCa6ekvQIAMmTwMnt1lU9Vhp4lNFyxMHF6bMOdrwTm3v2VyaxM cFZXi2Y9TRuiQ/BJePvwimhfOHX0b9IdT037reU8vj6hRIdAAOYm6YrvDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDrAktVyuI3Ljc6a/H9CKD7IkTaMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuzgi6nuT +uoLe5Ylb8MMg9qmNNDzq/DumWtF1J8wqUXnq0UhakLdjRqs3+VBYy+M/jaGP7Xu G9Pf40he32vWWIimXCZ52zPkesmTnX6L0YduI+IelS1+FJg4W7awcYDzLVVMC0e4 PERJcyDxHOTJsIBzldk7VujMiKYayP0/sCMH3Juo9WExwJ4sXW2yMZUiJ38vvPQd +3/MfkKVgDw7Lyn01xC3vDQXA2N8thqn7PTIW22PS/G1bu4khoVAm61aByzxaY6q DZOJmNxUSVXP17IsMM70Abiw9Xpr8nk/9G4uiu55IzMHELe5s2TleYrU5lObC6T+ Hn1af9n6RYpcLA== -----END CERTIFICATE-----Generated at Sat Sep 26 07:28:59 2026 by rpki-client