$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json) Hash identifier: fcFO8oS5LRUnWCLmdo74Rz28FAWkjxi71OB49LrfAjs= Subject key identifier: 8D:4F:22:96:F6:3F:12:08:96:B4:DB:F5:03:A3:8A:C8:ED:E9:A5:DD Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 01A0DFF3C501467FDE33A3EF633957A0ACA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft Manifest number: 1A90 Signing time: Sat 26 Sep 2026 23:01:29 +0000 Manifest this update: Sat 26 Sep 2026 23:01:29 +0000 Manifest next update: Sun 27 Sep 2026 23:01:29 +0000 Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=) 2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=) 3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=) 4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=) 5: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=) 6: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=) 7: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=) 8: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: Q8LzveVHGGcfxszi3Vaullv5kBMCFrtmabDjNgS9Jw8=) 9: sUbsaOI44Bi0X3YK1epsVJEDUec.roa (hash: rYaOkD3dBPrS2T2laRzCj+4LsYQ8WlURz0+sfmO0/n0=) 10: wa9zMyfDDEuwe9jHEEf5XR0rY1U.roa (hash: w6cKFExTNVukVfdOoaJCYRMUgY7AI2mb+j8X2JfaAr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 19:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:df:f3:c5:01:46:7f:de:33:a3:ef:63:39:57:a0:ac:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Sep 26 23:01:29 2026 GMT Not After : Sep 27 23:01:29 2026 GMT Subject: CN=8d4f2296f63f120896b4dbf503a38ac8ede9a5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:de:ad:45:0c:44:9d:5a:50:c4:bc:94:e9:2f: d9:64:2b:9a:19:5c:c9:55:be:66:24:70:de:cf:e8: 87:80:ec:a3:ee:bf:a1:57:dd:5d:dd:30:36:a1:a4: 4c:60:00:1e:af:ad:1f:a1:80:26:e0:3b:44:29:cc: ae:be:3e:03:23:0e:38:37:4a:dd:0c:b4:ec:fa:3e: 3b:f8:84:98:d4:9e:ff:04:4b:0d:9e:8d:c6:86:9e: a4:bf:c2:9c:2d:4c:c1:0f:62:e8:83:40:57:1e:a0: fb:29:b2:68:3c:b9:65:e9:36:3e:02:d2:fa:b4:36: 8e:ca:e7:a0:20:fc:6e:58:bf:fe:64:f9:d5:0a:22: cc:a1:d8:b4:c5:72:97:eb:a7:e5:88:15:0a:10:38: 90:e6:6f:e4:84:2c:3d:cb:ac:88:0d:1c:b4:a3:d8: 9a:71:7b:05:54:a5:7f:17:0c:66:d1:ce:fa:7b:7e: 4b:a8:48:58:b2:77:75:17:bd:e6:67:ca:fd:72:8c: ff:81:37:3a:0a:03:19:33:5e:45:e0:dd:c0:49:9a: c3:1b:7f:fc:48:f5:a4:dd:21:2f:50:b8:e9:df:8b: 9d:2f:dc:42:0f:44:e6:21:3d:51:33:e4:33:0a:e5: 01:69:60:27:f7:0a:c5:94:94:e5:92:37:3f:a2:4f: e0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4F:22:96:F6:3F:12:08:96:B4:DB:F5:03:A3:8A:C8:ED:E9:A5:DD X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:96:4c:5a:66:06:da:20:cd:08:e9:a0:5b:1e:c4:55:1c:f1: d4:8b:98:63:d5:32:a6:e2:9c:04:ef:25:e5:fc:c0:c8:44:e5: ec:4b:53:b0:06:08:a7:8c:d6:dc:45:0c:2c:29:b7:01:d9:66: 0b:2e:54:78:d6:65:2b:51:9e:ec:7c:f4:20:01:6a:91:39:95: f4:ff:d4:f7:1c:0c:26:0a:03:3e:b0:2e:d8:f5:31:80:4e:52: f8:f3:27:15:2b:98:7b:d5:1d:95:a2:01:04:85:9c:fd:fb:9e: ba:3a:51:ff:66:ff:4c:7a:17:ab:5c:86:be:1d:64:7b:b7:c4: 0f:e2:79:aa:e8:2b:04:c2:18:d1:93:cf:37:2f:cc:e6:83:7e: 9f:d9:46:d6:e2:fd:74:e8:20:59:6b:c5:bb:dd:c9:a3:8a:53: 92:66:b0:37:53:98:51:47:bc:07:49:96:51:7b:79:d5:85:1d: 89:66:be:ea:46:1a:e1:f0:e0:03:98:90:54:df:18:70:0b:78: 00:89:42:47:5c:56:fb:06:eb:3d:7b:cc:07:3e:33:3e:32:d0: 4d:61:76:e2:1d:9b:14:18:01:7b:40:70:81:34:20:db:4e:c9: d5:9c:a8:f3:3e:b4:3c:55:a2:49:8f:42:9a:b2:c8:21:d8:6b: 7c:cb:d1:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDf88UBRn/eM6PvYzlXoKyjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjYwOTI2MjMwMTI5WhcNMjYwOTI3MjMwMTI5WjAzMTEwLwYDVQQD Eyg4ZDRmMjI5NmY2M2YxMjA4OTZiNGRiZjUwM2EzOGFjOGVkZTlhNWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit6tRQxEnVpQxLyU6S/ZZCuaGVzJ Vb5mJHDez+iHgOyj7r+hV91d3TA2oaRMYAAer60foYAm4DtEKcyuvj4DIw44N0rd DLTs+j47+ISY1J7/BEsNno3Ghp6kv8KcLUzBD2Log0BXHqD7KbJoPLll6TY+AtL6 tDaOyuegIPxuWL/+ZPnVCiLModi0xXKX66fliBUKEDiQ5m/khCw9y6yIDRy0o9ia cXsFVKV/Fwxm0c76e35LqEhYsnd1F73mZ8r9coz/gTc6CgMZM15F4N3ASZrDG3/8 SPWk3SEvULjp34udL9xCD0TmIT1RM+QzCuUBaWAn9wrFlJTlkjc/ok/gGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1PIpb2PxIIlrTb9QOjisjt6aXdMB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpZMWmYG 2iDNCOmgWx7EVRzx1IuYY9UypuKcBO8l5fzAyETl7EtTsAYIp4zW3EUMLCm3Adlm Cy5UeNZlK1Ge7Hz0IAFqkTmV9P/U9xwMJgoDPrAu2PUxgE5S+PMnFSuYe9UdlaIB BIWc/fueujpR/2b/THoXq1yGvh1ke7fED+J5qugrBMIY0ZPPNy/M5oN+n9lG1uL9 dOggWWvFu93Jo4pTkmawN1OYUUe8B0mWUXt51YUdiWa+6kYa4fDgA5iQVN8YcAt4 AIlCR1xW+wbrPXvMBz4zPjLQTWF24h2bFBgBe0BwgTQg207J1Zyo8z60PFWiSY9C mrLIIdhrfMvRuQ== -----END CERTIFICATE-----Generated at Sun Sep 27 04:34:11 2026 by rpki-client