$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: vOO7RYiXSmQuE9BGG+pqfBMi03K/3Za71daArdPxKvo= Subject key identifier: CC:7E:97:80:4E:49:76:BF:F3:A4:F0:E1:16:27:DF:A1:C2:1A:59:03 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 01A0CB2238AAB502639267753A97FFD5B417 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 1A7C Signing time: Tue 22 Sep 2026 22:00:12 +0000 Manifest this update: Tue 22 Sep 2026 22:00:12 +0000 Manifest next update: Wed 23 Sep 2026 22:00:12 +0000 Files and hashes: 1: 1GSwP0TJJ65wZd3Pvgc8v_kBblo.roa (hash: a1H7+zWC5aLIH4mpt/TNCBcUHA1NWPW383gUe+s7/0o=) 2: 7-5FXkLEwhC1Xxo7xjKu4F60EXI.roa (hash: ucTykSSMA4mgLZSWsX8h0H8ANki2lK6au/mQg7PDaVg=) 3: AWyqQuO48E7EaLT6RH2W8bAgQ3s.asa (hash: y1Ag5qpmzSxVFKEJWy+4MLdDTnH6Pp80lG+LaPL+S8M=) 4: Gpn9n84tYhkYaDMGGKjziY1wajo.asa (hash: +9BgoCUtarT6JeveJ/0Adks2MenEvBj4hlB1aELk8Yw=) 5: SZuulJfBXrOx7TVvq98RfpuWX20.roa (hash: JF3u4qfuygewpcEyq0MIU/fiok0/dp1CnGO7/QRkKCw=) 6: dHHbPSJCfsQDNB_7r8SiDBIMBFc.roa (hash: 4Z63pDrERLa8AbCyht1J3U8XYsimBFftB4yxdfy6SeU=) 7: duJlSdUfuEBVAcmWXk5MpTvh7ig.roa (hash: GXDP1gVMBP52IUaX8G6mObb5IGesyXrYT/V3KEUXfjY=) 8: ea4uOAYmH3F8T77vuYMudZrhuRA.roa (hash: EEiZnb2JPsq/yqrG0Q7hp0FOlD5s4bXDR5+0nIVOWD4=) 9: ffyLyRVME5oJGVerDANtY5IMHo8.roa (hash: KCiQSpQfQbYAD6/iMj3Iuvok4R8kKREKJx6rRxehp2s=) 10: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: kIXAJ5qyB2XNVq5yH9U3HvefBshqVrHm7rz6Q/oJB+Q=) 11: nNl6NGyF3T8vJ8AAtIkn4-0X5T8.roa (hash: dpRxbGigIJULOJ37FZ/ZTlPFJRhup86+sQ8jgaZzcbo=) 12: tgKyxQJIrIZGZt0JdqobdwHEFBU.roa (hash: R6TZ097sd703JL66PHi/DAt6butDAQ5ZZOyHFsfEnNE=) 13: v48B8D2cx6Vfn0QWuxNAWmV0PcY.roa (hash: nZy5DmP+kA6doyrWI6VdmNLG6LOJw4xuX2hBgEO7v+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cb:22:38:aa:b5:02:63:92:67:75:3a:97:ff:d5:b4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Sep 22 22:00:12 2026 GMT Not After : Sep 23 22:00:12 2026 GMT Subject: CN=cc7e97804e4976bff3a4f0e11627dfa1c21a5903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:60:b3:57:30:27:2d:f8:d1:d9:78:f0:d3: 3d:89:fc:c7:89:6e:3c:ab:7c:8c:22:20:df:7d:89: 68:84:aa:4f:e0:85:fe:4b:64:fe:41:f6:27:88:0a: c0:5b:ed:97:20:d7:a2:35:a1:f8:c9:de:ab:3b:01: ee:04:01:ef:b0:44:b9:94:b6:b8:5a:fc:4c:38:56: be:f5:f9:4f:37:6f:b3:d6:01:df:b9:31:eb:4f:75: 34:c0:9f:1d:9c:19:64:bb:eb:3a:c9:b9:e4:37:4e: a2:b2:6d:13:ba:da:e0:06:88:fb:be:e0:9e:d7:ef: c8:a0:0f:c2:21:41:6f:51:16:3f:04:33:2c:43:c4: 6b:34:3e:8c:db:e4:c8:e3:db:a3:c7:eb:98:f4:7c: 45:e5:98:57:26:67:14:3a:e4:09:5b:40:9d:15:48: 8a:94:88:52:4d:09:83:70:e4:33:ca:9f:b5:26:f1: a7:8f:97:64:db:ed:ed:cf:88:8e:50:f1:0c:96:0c: 3c:01:83:87:7e:e6:9c:2b:e9:ba:db:3d:92:d3:a9: 8f:49:1b:37:d6:e0:00:51:4e:89:68:88:ef:ef:6a: e3:a2:e1:b5:63:eb:7f:cb:90:2f:69:40:ee:09:fd: 02:eb:20:69:2d:af:58:3d:23:d0:ac:f4:58:3f:4e: fe:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7E:97:80:4E:49:76:BF:F3:A4:F0:E1:16:27:DF:A1:C2:1A:59:03 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:02:26:d7:4f:f9:06:b4:6d:d0:18:e7:03:5b:39:1c:d4:7f: 37:47:77:b4:2f:0f:6f:12:03:49:2d:17:13:2c:7a:58:fb:10: 3a:e3:e3:27:2e:ba:04:7a:e5:22:93:83:59:9e:e0:8c:f1:3e: a7:f0:09:50:00:81:14:1d:59:9d:04:41:5a:cb:fe:fe:5e:f0: 54:26:c8:cc:0a:aa:8c:7b:b1:88:32:6c:14:92:26:9c:69:34: 28:00:67:a6:eb:f7:ea:04:f5:d6:56:fc:7c:78:0a:01:37:00: d9:ad:11:b1:5d:f0:95:82:ec:d0:5b:f0:a4:27:30:a9:50:d9: 29:f3:46:24:85:5e:6c:0d:da:41:de:b3:62:a2:82:da:4c:d9: e7:84:d3:9d:22:c9:02:6b:0c:73:c7:49:b1:0f:2b:ca:77:4f: 36:e6:6a:ab:2e:ee:38:61:5b:3b:77:da:6d:90:de:c1:93:e3: 55:50:a9:84:6b:83:1c:6a:2e:8c:df:35:64:50:3d:04:88:41: 5b:95:44:b3:ed:0c:d3:37:1e:ec:98:b3:d2:5e:2d:7c:a1:8e: b0:c5:0d:1f:77:7b:a3:85:09:6b:d5:7b:22:f1:a4:e4:8c:27: 32:30:42:e8:48:02:86:6c:cd:69:fe:5e:fd:b1:12:64:d4:63: 5d:1d:1f:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDLIjiqtQJjkmd1Opf/1bQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwOTIyMjIwMDEyWhcNMjYwOTIzMjIwMDEyWjAzMTEwLwYDVQQD EyhjYzdlOTc4MDRlNDk3NmJmZjNhNGYwZTExNjI3ZGZhMWMyMWE1OTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDtgs1cwJy340dl48NM9ifzHiW48 q3yMIiDffYlohKpP4IX+S2T+QfYniArAW+2XINeiNaH4yd6rOwHuBAHvsES5lLa4 WvxMOFa+9flPN2+z1gHfuTHrT3U0wJ8dnBlku+s6ybnkN06ism0TutrgBoj7vuCe 1+/IoA/CIUFvURY/BDMsQ8RrND6M2+TI49ujx+uY9HxF5ZhXJmcUOuQJW0CdFUiK lIhSTQmDcOQzyp+1JvGnj5dk2+3tz4iOUPEMlgw8AYOHfuacK+m62z2S06mPSRs3 1uAAUU6JaIjv72rjouG1Y+t/y5AvaUDuCf0C6yBpLa9YPSPQrPRYP07+gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMx+l4BOSXa/86Tw4RYn36HCGlkDMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAIm10/5 BrRt0BjnA1s5HNR/N0d3tC8PbxIDSS0XEyx6WPsQOuPjJy66BHrlIpODWZ7gjPE+ p/AJUACBFB1ZnQRBWsv+/l7wVCbIzAqqjHuxiDJsFJImnGk0KABnpuv36gT11lb8 fHgKATcA2a0RsV3wlYLs0FvwpCcwqVDZKfNGJIVebA3aQd6zYqKC2kzZ54TTnSLJ AmsMc8dJsQ8ryndPNuZqqy7uOGFbO3fabZDewZPjVVCphGuDHGoujN81ZFA9BIhB W5VEs+0M0zce7Jiz0l4tfKGOsMUNH3d7o4UJa9V7IvGk5IwnMjBC6EgChmzNaf5e /bESZNRjXR0f1A== -----END CERTIFICATE-----Generated at Wed Sep 23 07:23:03 2026 by rpki-client