$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft File: dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json) Hash identifier: TsQ/pD//6sOC7e0HscgoUdbJf29YHcyjO3BLXnr6lfI= Subject key identifier: 95:09:27:A8:3E:83:27:0C:FC:9E:30:77:F6:B3:49:32:98:16:33:8E Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 01A0CEC8854AB191E33E672DD63613440FCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft Manifest number: 1AEC Signing time: Wed 23 Sep 2026 15:00:42 +0000 Manifest this update: Wed 23 Sep 2026 15:00:42 +0000 Manifest next update: Thu 24 Sep 2026 15:00:42 +0000 Files and hashes: 1: 0i_tJFCQkW4BL4d6bXm4WAypJS8.roa (hash: 61MZ18IZL5EgLoB9w4TH7mfQX+7U0VC5x9A0388yn8A=) 2: 1-JP0PPtCDIK_UNysSaQZClIqsZk.roa (hash: sfCZXINYiH/YUUcCfwXIvxbn90PofsIEnjQBdiFjFFQ=) 3: 3uJwNTCNY55i-5jM3CaDGvETngw.roa (hash: eQzu9ZxiIAP/taHhjsse4i1771g6Ywd3F2q34YSnFrQ=) 4: 42j6rh74kZK8B4TK9TrxT-yy6qs.roa (hash: TpgZQPZnpYPaVp9fqt+Gp0r1j/N3bvdYSt8BYEQV4W8=) 5: 4rdTxE4U8SWi3axBDMycJ1e2dVc.roa (hash: Xdko31FAcZqa8CKzUmvaPLbn8FzZeXlJr3Mz2L3FEGY=) 6: 59Sth-R3BuV9Hjri6g95SVuIU_8.roa (hash: rE2f8KGpsTiN9qUjtXDjk/27rrXTQHhiM7ABCMeYpTI=) 7: 9ONi4c-7XF6Vn2zgdYwKAE0upGE.roa (hash: GdwVnVj0Er6zQr8pOtzRgza7jVJzxa5V5nFDEZ8imc8=) 8: LKaOQokfTIgkWBs2UdoqCTA22vc.roa (hash: cUUhEOlVftW9+j+XpaAsAph0Rp9J2xVMMProgn5lBRE=) 9: LNX9e0qM1FUUPu7JPg66r69yK3k.roa (hash: 4hdxVQWJPFAuhVTEnkZxRAKzt32xutYmv7LRrS+WM4M=) 10: LXHUHSO9WQWL1yjZx_1oGkRxSgI.roa (hash: HOm4ChKdSMnn++SpgwP+q1pIqlQSDcmq1lnjp8gr6/k=) 11: O5gW9hOPRMxR11eVov12x6UzYHU.roa (hash: bkCHLibjEuyg8IqJTSvrDEUtIjNQgIWoyJGDY8GOdz0=) 12: P0EJh06dBX2Z_uKMMzzVb3_JpQI.roa (hash: 265lew4gp/M7KbfXgY3mqUSmqEnG/TJjkIcENzjUQ9M=) 13: P4odDKYu1lCKx-0-6xh-2d3gFVU.roa (hash: pJx8PCnMcEoTQpCvLj2jXwglNIUY3fH2OwKcEuhWXsg=) 14: QGcED9nMBFNEcLIYKfsWpbPgFeo.roa (hash: ZoZ5qhejcJ2eD+U6g8CGcswJ1q+2gIH8nSKoh9/Kbps=) 15: T0yNiTnMr7rQj6L4yFcQz5luZuc.roa (hash: qkIXR7MhpFqaBJh+vVhJ5yECXOO2wVNGqePTqIktFFM=) 16: VWM7lA-UncwK30_u4wZN9H8N1gk.roa (hash: UAC5m76d6Heuh1OxbGU6JpOHUBx0MhMtwx6y8Lbk9fg=) 17: WtbHisRdncnw4HB-C-Q2nOatpCk.roa (hash: 3wmWRlMXTcqOjL6bnR/KTtOAF4ruJh0llk95iowxjzE=) 18: Yu_uuzMGePwC0icaYNERVoH0Cfk.roa (hash: PATzSiQXd51zhFdnNpl0DeghvMrZihxoQe+PXsEdhqA=) 19: Z5QikMa7UwGfn8uO2JzMrRFXYnY.roa (hash: U7DHGYIkh2PVaJpwB3Rs6rnlNqHm+IBWFv5Y36W7frQ=) 20: _Z4F7M-QmFI0Z18UQdlG6FBfQ7o.roa (hash: qJW2rDHAQqCfDrhYBEnMSMAxF6KCHBOPVWkKVY8Nuv8=) 21: b9yPzny7g7NzZoMSg-I0-4xYJRQ.roa (hash: oex26xfzNOy0QvV3r0CTF5Po3sMUSsRDc+0RGORVsd4=) 22: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: qDrqGEqBP/efSjSb2x0LgM/9526jQSI+HGG0R5daGls=) 23: doMjCvh-T_oVkJKD3Y7qOZoudQA.roa (hash: O0rnzXZPufM0mBq+veKdhSLIRnUWNnJekiSLuJW+WPg=) 24: f8cXMfB8GmIppgsZFcI-OCvQxNk.roa (hash: C/qkMAbaZbD1CDux6NhG+NBRCWcc4xbDi8mJQpA9u78=) 25: fW59nKWFAAcX3FkGdJCNC4LY0lU.roa (hash: QrZ99mG5ipIB8lihFmB86+BQ62v5THWSecfMtXAd/Vk=) 26: hQi_2v4PVaU2DxK_ubm6-NXJZ54.roa (hash: /DoibVc0zt1dXzmqKhW2/HUrHirpTFgRWlWufv4zCoY=) 27: iTv_taBhSWWSwucljCvdm_j4RW8.roa (hash: GE2aWALIL/q/9QPvVk6yJa+XbND+dNPP+iVv+vbA798=) 28: iqkz-oFIpTUAukJ-q0KYzZGnhbY.roa (hash: 4JwiIgby6A2ltqK6a4PhfhVkPMKWfaYDYeB6aMX/De4=) 29: kepdZXENoY0lFOiOd2VYC5Jt8PU.roa (hash: bBmIVbb4z4z4JQQlPc3j4zkDZyWk/Dmtse596NYk1Vs=) 30: mz3LKflSaCjzbLbt50UYZRI14QU.roa (hash: R+3MLAMskLr07qEIftdxyai6y/lFHGIWJS1jtU8VQFw=) 31: q4er2ti9h_W7MKRTNBtj0R5wg8I.roa (hash: Y7raLSBcr0F4VthCcXXBIhwj7MwB/MaClEuc9miqnEI=) 32: rTAcqrsLjdQzWLiPeTE0J8tFjHs.roa (hash: kpmFc9kxITW5Y/O6sK7eQ8xr12ovnarFA8jerArDTmw=) 33: sa0irmG5fTuP-s-e7ehVBplCJx4.roa (hash: 7SZESPqbjMHr+1YpDP1XwHSl42AkB6k/wkqvHyEDf5U=) 34: wA9ChWaX9aTjQjNN5mYeaC542Nc.roa (hash: uwS9DbntInTGgRyBcScvO12ZNTWYbWh0ii3LNRApI90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ce:c8:85:4a:b1:91:e3:3e:67:2d:d6:36:13:44:0f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Sep 23 15:00:42 2026 GMT Not After : Sep 24 15:00:42 2026 GMT Subject: CN=950927a83e83270cfc9e3077f6b349329816338e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:4f:7f:df:57:bd:52:84:0f:e7:8c:02:eb: fc:9b:79:6e:b2:77:36:c8:6b:21:09:92:5f:55:3a: 22:18:62:e4:6a:3f:db:bd:9c:1f:fa:03:79:b3:48: 2b:a5:e8:ce:73:71:4b:86:64:bb:04:3d:48:ad:6b: c6:92:14:2e:08:3c:68:85:18:7b:85:3c:b2:91:01: 24:b1:3a:38:87:e4:b9:6e:86:95:ca:1f:03:a6:c3: c1:aa:1e:cb:b0:95:77:bf:82:ea:60:f8:a5:de:e6: 46:0e:43:94:93:e3:fb:0a:f0:33:61:a4:fd:81:75: f4:2b:31:a0:87:41:8d:fb:05:9b:01:b7:d7:c7:62: a2:97:a9:67:66:3f:06:ab:b2:48:e7:9e:21:a3:75: 49:41:1b:33:45:d6:96:6c:25:41:59:01:db:90:b6: ad:52:c2:0c:71:40:75:03:28:5f:63:67:cf:42:5f: 8a:60:8c:bc:3a:a3:a3:83:04:53:0e:3f:45:0b:54: 41:67:9e:52:4a:92:fa:55:aa:80:4e:18:06:48:3c: 57:c6:f4:b1:2e:00:fb:4e:85:4d:bd:21:76:6a:4e: da:d0:df:da:58:28:9a:51:96:fc:7e:3e:77:b4:3d: 9f:43:a7:dd:3b:f2:6c:84:51:f7:32:9d:bc:7b:f3: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:09:27:A8:3E:83:27:0C:FC:9E:30:77:F6:B3:49:32:98:16:33:8E X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:e2:49:5e:7e:f2:0f:38:18:16:86:66:43:b3:71:f8:3e:ff: 6a:0b:71:3e:20:0c:0c:51:a5:2b:8a:d2:39:4a:f0:17:06:9e: 35:f8:82:02:1b:6f:ae:33:a1:25:e8:4d:02:1d:84:ef:0e:a0: 5e:94:c9:fe:f7:e5:fe:2a:59:2f:c6:8e:94:7d:83:fd:a2:b0: 7d:aa:c0:81:33:16:0c:d3:ea:ba:2c:23:3b:8b:a7:a0:d1:12: b7:2d:53:cc:12:30:15:0e:d7:66:e4:34:8e:1e:9b:5b:cd:07: ed:6e:eb:08:cf:e7:81:3f:71:b7:13:82:62:47:9f:98:19:9f: a4:bc:2f:38:df:62:6d:25:56:86:6a:03:0d:19:aa:01:95:2d: b7:71:2c:36:f0:d5:d5:27:5d:1c:87:61:47:a1:0e:02:e5:43: 2e:ad:ef:e0:c9:53:7c:0e:76:ab:01:00:7d:9a:b8:61:a1:c5: e7:d5:34:13:f6:62:6c:8a:32:2f:07:a5:bd:69:1a:d6:38:fe: aa:2b:f2:61:c8:e3:99:d1:9e:5b:ac:a6:41:4f:96:31:43:a0: ed:72:11:1f:3c:59:ba:78:4d:9c:5e:96:69:4f:a7:6a:54:32: 44:cb:64:d6:1b:53:cb:3c:73:76:12:11:f8:1b:d4:92:5c:46: 2b:1f:22:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDOyIVKsZHjPmct1jYTRA/NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwOTIzMTUwMDQyWhcNMjYwOTI0MTUwMDQyWjAzMTEwLwYDVQQD Eyg5NTA5MjdhODNlODMyNzBjZmM5ZTMwNzdmNmIzNDkzMjk4MTYzMzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMtPf99XvVKED+eMAuv8m3lusnc2 yGshCZJfVToiGGLkaj/bvZwf+gN5s0grpejOc3FLhmS7BD1IrWvGkhQuCDxohRh7 hTyykQEksTo4h+S5boaVyh8DpsPBqh7LsJV3v4LqYPil3uZGDkOUk+P7CvAzYaT9 gXX0KzGgh0GN+wWbAbfXx2Kil6lnZj8Gq7JI554ho3VJQRszRdaWbCVBWQHbkLat UsIMcUB1AyhfY2fPQl+KYIy8OqOjgwRTDj9FC1RBZ55SSpL6VaqAThgGSDxXxvSx LgD7ToVNvSF2ak7a0N/aWCiaUZb8fj53tD2fQ6fdO/JshFH3Mp28e/MHYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUJJ6g+gycM/J4wd/azSTKYFjOOMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsOJJXn7y DzgYFoZmQ7Nx+D7/agtxPiAMDFGlK4rSOUrwFwaeNfiCAhtvrjOhJehNAh2E7w6g XpTJ/vfl/ipZL8aOlH2D/aKwfarAgTMWDNPquiwjO4unoNESty1TzBIwFQ7XZuQ0 jh6bW80H7W7rCM/ngT9xtxOCYkefmBmfpLwvON9ibSVWhmoDDRmqAZUtt3EsNvDV 1SddHIdhR6EOAuVDLq3v4MlTfA52qwEAfZq4YaHF59U0E/ZibIoyLwelvWka1jj+ qivyYcjjmdGeW6ymQU+WMUOg7XIRHzxZunhNnF6WaU+nalQyRMtk1htTyzxzdhIR +BvUklxGKx8i6Q== -----END CERTIFICATE-----Generated at Wed Sep 23 19:08:09 2026 by rpki-client