$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: iiINAYCVLytirhAUrfS2SvxuxRBreBZoskqPbjRovyM= Subject key identifier: 87:BC:B8:E3:51:17:3C:D4:7F:FB:68:66:44:A3:10:5E:3F:65:76:43 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 01A0D23749A0ADA01E68F90B189310D4682F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 1818 Signing time: Thu 24 Sep 2026 07:00:33 +0000 Manifest this update: Thu 24 Sep 2026 07:00:33 +0000 Manifest next update: Fri 25 Sep 2026 07:00:33 +0000 Files and hashes: 1: 1kKPv2wUltItuWIjU1ilVcX9VLE.roa (hash: il+uT7sf8sbrAGYBj61G15BD0mwhGRvyVxYl0y6GFnU=) 2: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (hash: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE=) 3: 8eTvO2TZdJIMeT5I77o8e5hLDyI.roa (hash: RW0q4KTs9SZCv80GUyltUUK1ZfZgWc4IG8Rp/qHyA3g=) 4: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 5: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 6: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 7: JWwcCyO1rTwTxLjbz3l2SouJTAA.roa (hash: AgH3qdVNL3CHi6p+2Mst499KFQUzntafoYHZrzYZW8s=) 8: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 9: Lmglx6k3OhVfB6qXrSYWY-3n7wU.roa (hash: jOlTc86u7s0cDJRLkmCFCCAUXlp7wxNhr83b5DVvky8=) 10: WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa (hash: uW36/EhLhyw8heI0tUnFU6wiInPtS+CcO/PTS29AqYY=) 11: XjjwvZsrXx6sUtsiWwMw-1uwefI.roa (hash: RD/89w2/8ZIshxnP3ME483+xP0ONXiXxPqHiP1Ie+hY=) 12: bV3Qg5HtML1zUsJYAwV_qsAoITg.roa (hash: ZhHWbujHVFO1260mH7gJeRdvHPIcZ7THBcA3XZdsUfs=) 13: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 14: cOMhRxduLw18TIe2EJANKourNbc.roa (hash: vRamlKR5R5SmfC3d0sMnuMWhFKCo/1NfKoqnzL94OGM=) 15: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: qxbcIP527flOQoVdWL0hfLIdv923Y5hoegPWZw9Pkcs=) 16: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 17: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 18: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) 19: yhFaGf2_vHhBZgwwXE8xm1OTXQE.roa (hash: 3+krivSCZ6wgsfWjmVU3sW4pnSZcLq6UgbbbbMppVNI=) 20: zKma2lZxd28aMOIa5GKySj7K3F4.roa (hash: z2dVlW8SWBq0rqcswBgsfVdqo5mJ3Cgdk6gd4jQUscA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 07:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:37:49:a0:ad:a0:1e:68:f9:0b:18:93:10:d4:68:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Sep 24 07:00:33 2026 GMT Not After : Sep 25 07:00:33 2026 GMT Subject: CN=87bcb8e351173cd47ffb686644a3105e3f657643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e5:13:49:b7:17:93:12:09:be:c9:fc:d9:07: 95:d6:9a:fd:61:6e:87:2f:39:9c:0c:da:db:d0:17: 49:49:6b:52:46:6d:10:55:14:94:36:13:a8:35:95: 92:5f:7b:a0:48:53:e4:10:4f:63:d6:80:13:76:cd: f2:17:6f:2f:a2:ed:db:4c:ce:68:74:42:54:d7:0d: 3a:b7:10:23:14:1a:27:53:f3:e1:25:90:c3:f1:e8: 2d:a9:c9:07:03:59:81:69:2f:43:46:f4:bc:94:c1: d0:8d:e4:44:6c:1f:fc:4b:95:5d:1c:01:bc:c5:80: a6:7b:81:29:58:98:92:6c:22:9b:7f:57:0c:9c:e9: fe:95:80:1e:72:a3:f6:06:9b:6a:ae:47:a2:48:49: 13:2c:ba:23:74:79:2a:11:14:0e:22:6c:b0:9b:f6: 0e:c8:b5:be:47:cf:45:ea:77:5f:d8:28:7f:88:d5: aa:21:1f:30:af:e4:d5:85:8a:32:03:c3:f7:8c:68: 4e:67:3a:a7:25:bf:fd:5c:f1:57:7f:f4:1b:79:e5: f0:e1:a1:f1:e2:d3:46:65:44:ec:d7:db:03:f0:e1: 3c:c7:f2:6e:cb:77:64:be:b2:7a:be:80:d2:17:15: 14:84:1d:a5:14:95:11:35:05:2e:1a:5b:24:2e:99: 1b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BC:B8:E3:51:17:3C:D4:7F:FB:68:66:44:A3:10:5E:3F:65:76:43 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:36:75:d2:dc:97:33:52:5d:7d:b0:53:73:e9:6a:82:66:66: a1:de:63:25:94:82:8d:46:41:5e:c2:75:03:07:3a:68:cb:50: fb:f6:67:14:bc:00:1e:be:09:68:dc:0b:d2:1b:99:d2:93:b2: fe:30:a4:1a:d7:02:5b:49:9a:78:7d:5b:73:97:c6:5b:2e:4f: a1:dd:15:7e:31:6d:67:e1:e8:25:bd:7e:a6:35:bf:3a:3c:c4: f5:ed:97:b6:d1:30:29:99:2f:0a:a7:d4:ca:5a:90:a2:49:54: 11:ff:01:97:5c:df:d1:56:71:1c:43:d8:5e:39:fc:ed:db:5a: e4:f4:7f:f4:43:44:08:da:f7:2a:78:14:9c:ca:8e:1a:a6:fb: 71:7b:49:3b:93:fe:33:5f:42:b4:1d:94:3e:69:a0:29:b8:ea: d4:b6:e2:2a:2f:6e:9e:ab:ba:fd:27:b5:21:a3:22:90:1f:a3: d7:91:4b:4b:f7:e2:64:e7:cc:0a:b4:e9:b6:f5:4d:e6:2c:8f: bc:6e:7e:5d:14:82:de:e8:b3:a3:08:56:b4:e3:78:81:98:d6: ed:ba:8e:8b:53:96:49:e8:bd:ac:86:dc:cc:c3:09:55:5e:8a: 1b:d4:2c:f7:ed:4b:28:d3:03:a6:07:70:32:7a:93:5f:55:77: 88:3c:e8:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDSN0mgraAeaPkLGJMQ1GgvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwOTI0MDcwMDMzWhcNMjYwOTI1MDcwMDMzWjAzMTEwLwYDVQQD Eyg4N2JjYjhlMzUxMTczY2Q0N2ZmYjY4NjY0NGEzMTA1ZTNmNjU3NjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeUTSbcXkxIJvsn82QeV1pr9YW6H LzmcDNrb0BdJSWtSRm0QVRSUNhOoNZWSX3ugSFPkEE9j1oATds3yF28vou3bTM5o dEJU1w06txAjFBonU/PhJZDD8egtqckHA1mBaS9DRvS8lMHQjeREbB/8S5VdHAG8 xYCme4EpWJiSbCKbf1cMnOn+lYAecqP2BptqrkeiSEkTLLojdHkqERQOImywm/YO yLW+R89F6ndf2Ch/iNWqIR8wr+TVhYoyA8P3jGhOZzqnJb/9XPFXf/QbeeXw4aHx 4tNGZUTs19sD8OE8x/Juy3dkvrJ6voDSFxUUhB2lFJURNQUuGlskLpkbJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIe8uONRFzzUf/toZkSjEF4/ZXZDMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTZ10tyX M1JdfbBTc+lqgmZmod5jJZSCjUZBXsJ1Awc6aMtQ+/ZnFLwAHr4JaNwL0huZ0pOy /jCkGtcCW0maeH1bc5fGWy5Pod0VfjFtZ+HoJb1+pjW/OjzE9e2XttEwKZkvCqfU ylqQoklUEf8Bl1zf0VZxHEPYXjn87dta5PR/9ENECNr3KngUnMqOGqb7cXtJO5P+ M19CtB2UPmmgKbjq1LbiKi9unqu6/Se1IaMikB+j15FLS/fiZOfMCrTptvVN5iyP vG5+XRSC3uizowhWtON4gZjW7bqOi1OWSei9rIbczMMJVV6KG9Qs9+1LKNMDpgdw MnqTX1V3iDzohg== -----END CERTIFICATE-----Generated at Thu Sep 24 18:13:00 2026 by rpki-client