$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: kTNStWnUKRbCostKdXMtvLG73Bx5njdwGpjnxQUCMCE= Subject key identifier: 8A:E4:50:CB:EE:AA:6C:FF:82:F7:9A:AC:D1:FC:AA:B3:49:79:89:87 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 01A0CF2ACB832E95387D1CDB376541BE00BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 19B6 Signing time: Wed 23 Sep 2026 16:48:03 +0000 Manifest this update: Wed 23 Sep 2026 16:48:03 +0000 Manifest next update: Thu 24 Sep 2026 16:48:03 +0000 Files and hashes: 1: 47sWOPTHnZb9BF-ya3p9tYZmQl0.roa (hash: RBzAZuMSt44/uQERR1k3fKGneZwh+1kpWY7wx6/NCk0=) 2: DUa5gfrd1mbJghmCA9wsPUgatiA.roa (hash: vgkaB+FL8lKIjouXupzJZRb3iZtU+i3kKGIirTBXniA=) 3: IoSQ968prEWE2iPAfiHq62Q9HRQ.roa (hash: sMFfoE8ew6Os6X7T5w3iP4CHenQCaCmWxqa3HE4kDyg=) 4: Jz8RZAWrUimyuGnjG5ub7oNokXU.roa (hash: IeObP/asysAN8PfUm4Hn659vFyCN9hWBT1PSEjvx9O8=) 5: Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa (hash: NqeN3nGFqChISvovOPomv7J85KVugMZmXFAJ2wHhcOc=) 6: R2uv8D1AC8qkVVlzoluUFlx0Uzc.roa (hash: Px0hZ7oJHqm6VJaRC8v/ew/nIaAHwORSGtXPvMgDntg=) 7: SHESg-pXJr_Het0W-3cbbUvLLUk.roa (hash: eBtq6k5xafILrBSAzCCl8DxL+vNsikVlShGU83ALNOQ=) 8: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: +grcFC1sZMvjMwco7JnbwgG0Hu5QwhekKceXSVX17Z0=) 9: Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa (hash: YYmhifcK+2gNYjzHbIMtaIo+1gijW4PRQWGsmCHjKJg=) 10: aUcHGsfbW0LISPIyDevqEjn1Mp8.roa (hash: fbCvEiA8MdH3odLJSEwrCK+swIxRtwa+tYa7l/mkrVw=) 11: biH_EEWeOJOtLOQq6iGC0yelYn0.roa (hash: P54s2GoQrkvwJ9KXymJfJ8rzco9Uv1wsEklV2MlObyE=) 12: gAbatwVqafpDL9WTtIX0TlfDD98.roa (hash: JDzbm14+9mpQN3vnbFMcnevA6T8g7/UNXI8LqyzblhQ=) 13: psnLTq9oj0zoEtX755KpVPy0ws8.roa (hash: 8tn9lCYFdmG1BOJcqSY0wLhBU8frfgy5f/M7MDD6IgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:2a:cb:83:2e:95:38:7d:1c:db:37:65:41:be:00:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Sep 23 16:48:03 2026 GMT Not After : Sep 24 16:48:03 2026 GMT Subject: CN=8ae450cbeeaa6cff82f79aacd1fcaab349798987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:bb:19:d2:76:2f:ac:79:0a:39:ac:6e:8c: 86:9a:28:8f:f2:da:f2:7c:0e:4f:af:1c:0e:ca:90: b3:b6:11:4b:a8:a4:88:c3:f0:61:88:c5:74:dc:48: a9:0a:87:db:20:f6:59:f5:d1:d8:ab:a5:37:e2:95: 84:1c:92:12:a6:4b:20:cf:fe:79:c2:38:33:b9:cd: d1:2b:ae:fe:ba:ac:21:90:c1:69:ef:c1:1c:18:2d: dc:9f:33:22:77:da:b0:2f:e2:19:5c:f7:39:83:80: 0c:dc:40:71:ec:0c:62:40:c4:ab:4a:43:2a:55:d8: 65:c9:d0:d4:06:59:95:c9:6e:f8:c0:6a:de:0e:3a: f6:6a:6e:cb:e2:e0:1c:4a:ef:a7:42:ac:d7:49:ab: f1:6a:23:c1:5b:3d:14:a8:1f:d8:f5:ca:8f:6c:f4: c6:23:4f:59:61:80:6e:e7:e0:b4:b8:9e:2c:13:d7: 12:dc:05:f3:71:38:a2:0f:bb:3c:62:4d:d0:9e:4c: 70:c2:99:40:3f:99:53:70:3e:b1:30:07:78:93:d9: 23:48:61:c2:03:ae:4a:30:92:a8:bc:45:e6:ab:59: c4:b5:7a:5f:6f:d8:c3:d6:b2:79:23:47:2a:2e:6b: c9:8c:7e:c3:fd:2d:83:5e:31:9e:b3:9e:21:4b:e0: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E4:50:CB:EE:AA:6C:FF:82:F7:9A:AC:D1:FC:AA:B3:49:79:89:87 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:14:57:e4:96:4a:93:75:86:12:1c:a3:64:72:b1:5d:54:13: 94:9c:4a:e4:e5:c7:23:09:09:f1:b6:89:88:2e:b7:e9:55:0c: 34:c2:d7:1c:5d:93:d8:6b:63:5a:7f:59:ed:4d:51:f1:ec:32: cf:bc:7e:3f:07:66:dc:55:76:d0:e6:03:10:5e:a1:2a:d1:3b: 62:49:4d:26:23:c8:2c:f0:ba:1c:69:e8:73:2a:14:f1:9a:5c: cc:61:34:82:7c:7c:53:de:59:21:bd:ef:5f:cf:aa:fa:22:11: 57:f9:59:69:9c:9e:44:ed:17:1e:ca:19:c5:7d:15:42:89:45: ea:13:54:f0:9d:81:d9:41:07:d7:45:b2:84:5c:09:c6:f6:e6: 3a:25:29:bc:98:eb:90:fc:31:67:69:2d:3e:01:d5:51:fc:82: e0:eb:5f:6e:77:21:a6:94:05:4a:67:8c:82:02:ec:9e:a3:44: 9d:e0:aa:86:bc:2e:c6:53:5a:a9:b4:1d:78:84:ca:89:75:48: 98:a8:ac:04:c5:68:28:85:ef:de:81:68:eb:74:05:10:f8:c9: d7:4a:89:ea:51:2e:5c:52:0f:14:f6:ef:d1:78:60:3c:1c:76: f4:c2:24:72:bc:0a:84:a3:40:0d:89:36:23:27:09:c7:e6:a3: d5:40:2d:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDPKsuDLpU4fRzbN2VBvgC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwOTIzMTY0ODAzWhcNMjYwOTI0MTY0ODAzWjAzMTEwLwYDVQQD Eyg4YWU0NTBjYmVlYWE2Y2ZmODJmNzlhYWNkMWZjYWFiMzQ5Nzk4OTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt127GdJ2L6x5CjmsboyGmiiP8try fA5PrxwOypCzthFLqKSIw/BhiMV03EipCofbIPZZ9dHYq6U34pWEHJISpksgz/55 wjgzuc3RK67+uqwhkMFp78EcGC3cnzMid9qwL+IZXPc5g4AM3EBx7AxiQMSrSkMq VdhlydDUBlmVyW74wGreDjr2am7L4uAcSu+nQqzXSavxaiPBWz0UqB/Y9cqPbPTG I09ZYYBu5+C0uJ4sE9cS3AXzcTiiD7s8Yk3QnkxwwplAP5lTcD6xMAd4k9kjSGHC A65KMJKovEXmq1nEtXpfb9jD1rJ5I0cqLmvJjH7D/S2DXjGes54hS+BTuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrkUMvuqmz/gvearNH8qrNJeYmHMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRRX5JZK k3WGEhyjZHKxXVQTlJxK5OXHIwkJ8baJiC636VUMNMLXHF2T2GtjWn9Z7U1R8ewy z7x+Pwdm3FV20OYDEF6hKtE7YklNJiPILPC6HGnocyoU8ZpczGE0gnx8U95ZIb3v X8+q+iIRV/lZaZyeRO0XHsoZxX0VQolF6hNU8J2B2UEH10WyhFwJxvbmOiUpvJjr kPwxZ2ktPgHVUfyC4OtfbnchppQFSmeMggLsnqNEneCqhrwuxlNaqbQdeITKiXVI mKisBMVoKIXv3oFo63QFEPjJ10qJ6lEuXFIPFPbv0XhgPBx29MIkcrwKhKNADYk2 IycJx+aj1UAtcQ== -----END CERTIFICATE-----Generated at Wed Sep 23 19:50:52 2026 by rpki-client