$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json) Hash identifier: O5wlIxOjaP+Gz9dN0NbhAlcsAa5tuFroe2Nh5Q4lCuQ= Subject key identifier: BE:28:58:B4:9C:47:2E:42:C6:20:E2:2D:FE:73:B2:B7:D6:33:D6:E0 Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Certificate serial: 01A0D011CB936C8B351771A2C440A402A5C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft Manifest number: 1A95 Signing time: Wed 23 Sep 2026 21:00:22 +0000 Manifest this update: Wed 23 Sep 2026 21:00:22 +0000 Manifest next update: Thu 24 Sep 2026 21:00:22 +0000 Files and hashes: 1: LSbbMYdiIbKuzkhAXFAGLH6GBd0.roa (hash: GVdnAx+VDnNLGbmaTGIwya+qx7bw2STQGx8OmUTU30Q=) 2: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: 3wgB0bnfFi0ZFM5/wTF+56d0zr+yojLm9cNyU84RosM=) 3: UDY2HDyFl77CPOX4Htn0Pi3kyOA.roa (hash: bc7atEIrT/sE9wxUJS6KJvtPGbS/vBzLhwKBt1msWHM=) 4: WR-L1F3QM0wsQgyDImuXxlRoCDo.roa (hash: IHbgb1ma7MkT5FXl6QhQC1/9vSdkNkwBhS8js+Uq138=) 5: caXkdOh26Ng2luhqokI4XXlYMpU.roa (hash: K5rOjRfhlR9NLMm+bd9NoV6sfAdU4dteUmtcqkGa+PE=) 6: gaATxSq9HGX7yQm--_dWZbOgZT0.roa (hash: Qix9w4DVsLBDeru6CjO9qF+q42J9rHLmd1kVGLn1F3E=) 7: jvNpPdYrQ3MflssnyijS0GZ1M3s.roa (hash: deTd1PHJQcy87xcvtVedQ3VEDL3wpdVtSrEJZUUIk/A=) 8: kWTQcrgSZmOTsMHh7K_EG0H2IuE.roa (hash: Hf4S7R+wJUfntE+MhCot7Q15rmGM0xxlIUdL/asz+MU=) 9: mr4GPzNHl1BXdqqKxPgtpJ_bvG4.roa (hash: uZhqzJ/VBEcqt1cjJm9DgjFyfds9tNiF+cC3M9YmS6Y=) 10: yqfpXi6KuJJULjeYNBeixgPcoIA.roa (hash: G3dtJcu0gboRWqaS4RnCOjlxmq8E5TnalJLurWhHAbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:11:cb:93:6c:8b:35:17:71:a2:c4:40:a4:02:a5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Validity Not Before: Sep 23 21:00:22 2026 GMT Not After : Sep 24 21:00:22 2026 GMT Subject: CN=be2858b49c472e42c620e22dfe73b2b7d633d6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:19:db:8a:53:65:c9:83:9b:fe:a3:4b:d4:bb: 9e:1d:e7:ff:c8:f3:fa:ff:82:e5:3d:d0:d4:da:6d: ca:1d:79:c3:41:ae:df:2b:ea:5a:b1:47:35:32:cd: fc:d7:37:6a:89:b2:67:54:16:15:b6:19:4a:e4:ea: cb:cf:c6:7a:71:56:6b:ce:c7:5a:37:f7:71:f4:0b: 93:82:f6:d4:85:c5:0a:c2:a8:66:58:c3:b1:58:0a: cb:97:df:12:a4:41:31:e8:1e:2e:40:d3:ba:c9:33: 27:ea:86:fc:a7:68:d4:e2:db:54:e3:e9:c5:a7:d6: 4d:68:34:0a:d8:52:ba:6b:12:6a:9c:0f:8b:22:4a: 06:e4:bc:66:89:3c:55:ae:2b:f8:a0:38:b9:e0:83: f3:46:54:74:6f:de:64:c7:21:0d:62:07:30:ce:e0: b6:45:87:3c:0b:29:02:49:9f:62:21:de:cb:02:0c: eb:b9:ed:29:f9:98:d8:c7:38:b2:87:0a:c6:39:e7: 66:0c:8b:b7:fe:11:da:a7:98:9c:fc:01:ef:f4:40: 0e:a7:fd:b9:08:d3:28:1f:3c:c3:96:71:f2:ee:15: 0c:b1:55:3d:83:35:50:06:ca:d2:32:32:3e:8b:50: 37:8c:25:2f:27:1c:0f:b1:0b:b7:c1:d8:47:a2:ad: 4f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:28:58:B4:9C:47:2E:42:C6:20:E2:2D:FE:73:B2:B7:D6:33:D6:E0 X509v3 Authority Key Identifier: keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:83:50:9e:7f:0f:be:e5:70:69:4e:71:c5:04:52:9b:aa:bd: f0:cb:e3:47:57:ab:4b:46:48:6b:cd:42:01:2b:8e:2e:36:83: 7e:0f:e7:3a:3b:ac:f6:7c:60:1f:eb:11:2e:ae:e8:87:48:0b: e8:4f:71:3c:6c:ca:d5:81:eb:a1:9f:c2:c9:2c:51:d9:01:2c: ba:cc:36:4b:76:d5:8f:ab:7a:fd:00:5f:47:56:d6:90:1c:32: 05:c8:18:3b:50:e7:45:6b:fb:6b:b5:d0:41:3f:55:44:78:6b: 44:34:b5:41:9c:70:58:56:18:92:e8:3a:4e:00:e8:41:50:9b: 55:a1:5f:78:5f:86:4f:e6:02:30:f0:8c:2a:f7:55:86:07:b2: c6:9e:26:ec:93:e4:23:55:a8:3b:94:20:df:bd:e0:3c:99:55: e1:34:48:8f:ae:db:df:6e:62:db:5f:88:49:dc:3b:e7:d3:44: 73:76:c5:d0:2e:99:f9:2a:56:58:9a:db:24:d3:f9:bf:6c:67: b6:cc:ab:89:8f:38:6d:3b:c1:28:04:0a:3d:ce:78:9a:8e:44: 49:e4:f4:65:bf:f7:d7:ce:e6:26:d0:4a:2f:56:7b:b0:e0:24: e6:0c:9b:73:7b:39:40:ad:66:5e:44:12:31:3e:62:d6:05:ab: ef:c5:21:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQEcuTbIs1F3GixECkAqXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2 NzdiY2QwHhcNMjYwOTIzMjEwMDIyWhcNMjYwOTI0MjEwMDIyWjAzMTEwLwYDVQQD EyhiZTI4NThiNDljNDcyZTQyYzYyMGUyMmRmZTczYjJiN2Q2MzNkNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxnbilNlyYOb/qNL1LueHef/yPP6 /4LlPdDU2m3KHXnDQa7fK+pasUc1Ms381zdqibJnVBYVthlK5OrLz8Z6cVZrzsda N/dx9AuTgvbUhcUKwqhmWMOxWArLl98SpEEx6B4uQNO6yTMn6ob8p2jU4ttU4+nF p9ZNaDQK2FK6axJqnA+LIkoG5LxmiTxVriv4oDi54IPzRlR0b95kxyENYgcwzuC2 RYc8CykCSZ9iId7LAgzrue0p+ZjYxziyhwrGOedmDIu3/hHap5ic/AHv9EAOp/25 CNMoHzzDlnHy7hUMsVU9gzVQBsrSMjI+i1A3jCUvJxwPsQu3wdhHoq1P1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4oWLScRy5CxiDiLf5zsrfWM9bgMB8GA1UdIwQY MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt NTU1OGE4YjUzZTNkLzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEINQnn8P vuVwaU5xxQRSm6q98MvjR1erS0ZIa81CASuOLjaDfg/nOjus9nxgH+sRLq7oh0gL 6E9xPGzK1YHroZ/CySxR2QEsusw2S3bVj6t6/QBfR1bWkBwyBcgYO1DnRWv7a7XQ QT9VRHhrRDS1QZxwWFYYkug6TgDoQVCbVaFfeF+GT+YCMPCMKvdVhgeyxp4m7JPk I1WoO5Qg373gPJlV4TRIj67b325i21+ISdw759NEc3bF0C6Z+SpWWJrbJNP5v2xn tsyriY84bTvBKAQKPc54mo5ESeT0Zb/3187mJtBKL1Z7sOAk5gybc3s5QK1mXkQS MT5i1gWr78Uhxw== -----END CERTIFICATE-----Generated at Thu Sep 24 03:52:27 2026 by rpki-client