$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft File: CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json) Hash identifier: BFlX1gU6Ltzw48HJUpZJULCIeeQuZazytaSf4eH05mQ= Subject key identifier: 57:97:7F:4F:4D:3C:46:CF:B2:08:57:82:C2:85:FE:85:98:77:D0:52 Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 01A0CBC7DF036F1B9042E5DA07076EBCE722 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft Manifest number: 1A79 Signing time: Wed 23 Sep 2026 01:01:08 +0000 Manifest this update: Wed 23 Sep 2026 01:01:08 +0000 Manifest next update: Thu 24 Sep 2026 01:01:08 +0000 Files and hashes: 1: 1-bX4q69pD6P9iDL_MBjXApDUUoA.roa (hash: Kde578ne8/gKQezBhfcD4rTCARaf5d1vuhecNygX/Nk=) 2: 7rv6k5uVuhGjktrsjUOGcYvC-9k.roa (hash: s1LhNqbDkaJJk+ypgLty0IbjHOS1lXZfumV3rSK/rSs=) 3: 8k0J8ZawZ0QaVbmwbqXyjkHdbp0.roa (hash: qjo2XQhlUpcTFQYk1pT4XcjJ3LBYMkU4WLGqBPqO4mU=) 4: A1Mk8aLvUIYkXCPbeSuDU3Hli4Y.roa (hash: 6HTRUzOZM9L9Wg/uHA0I0KF3U5ylm2c/kJX/463Szd4=) 5: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: 93wd43yhHik6O/uxxjRnuPqBm9Pm8E+WLK6PIa9KaUY=) 6: HgbYfqgWEgBTtHpfnCWuHLmWfdc.roa (hash: HMoC4HbqEHwkb4dO3/C2FUOmIHSy3Jpy2ww8Kfj1GLQ=) 7: JTLXgLzRLUbBBSRVTWms-KrY030.roa (hash: Zz6+CVIeJzHTwZbXpV9f3Jk2ToknnGjWiBUQP/bGQYw=) 8: MPfZa80zx8JD19B0YvKo1B-KyMs.roa (hash: hWxzkpQob8nqa1qn5tGNwr5NCD7Lovv8X8P0foxw+GY=) 9: aB0CFj7HhZYpp4ebpVhWCAyE-Zo.roa (hash: FE2nN2ZVDrPMPN1fblBP/Z17brnB7Kwxa7lfUoyA7Ak=) 10: lHfae3UMrtkbZl9pwmHCG7QPKCs.roa (hash: uTooVNNQdT2Xp41rPldHjXa4GM+toHNemDQJjp4UhfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cb:c7:df:03:6f:1b:90:42:e5:da:07:07:6e:bc:e7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Sep 23 01:01:08 2026 GMT Not After : Sep 24 01:01:08 2026 GMT Subject: CN=57977f4f4d3c46cfb2085782c285fe859877d052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:9a:59:a2:a3:cd:45:3b:c9:46:45:6c:a9:1d: d5:5d:79:b6:e8:9b:2e:7f:33:cc:b1:0e:1b:8d:fb: 2a:c5:42:cb:8c:8d:76:ce:61:f8:d0:10:a1:fe:5b: 39:93:f2:ae:5f:ea:90:40:03:ce:7a:3e:ea:b5:c2: d2:a0:4f:7e:d2:6a:7e:1b:42:68:13:4e:7c:bb:e5: 0a:d4:98:43:05:0f:d1:f6:b0:dd:36:a0:7e:4c:34: 12:e7:58:ef:ea:42:f2:c4:87:85:46:c3:49:9a:8a: 16:80:26:29:12:22:31:df:06:af:8c:15:cf:6d:37: 6b:dd:6d:ab:d4:24:2f:a9:49:a8:ed:12:07:ab:28: 46:fa:61:2a:59:42:12:83:ef:9b:6b:52:28:69:0e: 3a:27:11:33:7c:33:59:07:62:e5:11:87:6e:99:19: 2d:fd:b7:4f:79:8a:7f:d0:27:65:20:0e:d2:8d:93: 2e:fc:f5:fd:c5:22:94:3a:fd:76:4b:c5:a9:dc:19: ad:a7:e9:c1:a6:d6:fe:71:fd:36:f8:b5:12:2b:8d: 5f:69:a9:c3:ab:d1:7e:0f:86:fc:55:91:54:9a:df: 0b:36:4d:c1:08:93:fb:15:8b:98:00:5c:3d:2b:f5: 41:45:58:bd:da:9a:0b:45:39:7f:67:8e:fb:bc:da: ec:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:97:7F:4F:4D:3C:46:CF:B2:08:57:82:C2:85:FE:85:98:77:D0:52 X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a1:26:fe:eb:db:65:5b:3a:0d:29:95:16:44:f7:1f:5d:13: ac:93:c9:b7:ca:08:a8:e9:0a:06:b1:dc:34:73:33:80:90:72: d6:f0:e4:27:59:41:14:6c:4d:98:2a:ae:75:4e:1b:1b:f9:fb: cc:71:4c:d6:9f:f8:02:7d:2a:b3:a6:25:35:72:62:e2:84:74: 94:73:78:bc:d5:43:94:1d:29:7c:c7:7b:2b:40:eb:40:4c:3f: 87:13:d1:39:dd:0a:c7:49:3c:87:cb:20:3a:7b:a6:a0:31:d1: 68:2d:64:21:d0:e1:c4:49:cb:21:a0:3c:54:40:1f:ea:d9:8a: 4c:d0:c3:92:85:38:53:7c:43:58:9c:fa:99:b7:49:1f:12:53: e4:0d:bd:ac:d8:3c:1f:25:2a:b6:01:9c:d7:03:d6:4a:75:08: 02:6d:47:3a:3c:b3:20:83:ad:80:a6:fe:b5:e2:d8:97:ca:03: 6c:6f:ea:0c:24:71:61:c1:98:f5:d5:b0:5d:b5:96:2d:f3:3c: e1:f8:f8:fc:6f:ca:0c:c1:ad:e1:67:f5:06:76:8c:66:1a:91: d1:e8:cc:5f:a0:a0:5b:a5:31:fd:bb:85:4c:a3:93:49:66:8c: ff:23:dd:16:66:09:15:b7:2f:9e:4b:06:0e:87:26:3d:bb:b7: 12:bd:41:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDLx98DbxuQQuXaBwduvOciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjYwOTIzMDEwMTA4WhcNMjYwOTI0MDEwMTA4WjAzMTEwLwYDVQQD Eyg1Nzk3N2Y0ZjRkM2M0NmNmYjIwODU3ODJjMjg1ZmU4NTk4NzdkMDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZpZoqPNRTvJRkVsqR3VXXm26Jsu fzPMsQ4bjfsqxULLjI12zmH40BCh/ls5k/KuX+qQQAPOej7qtcLSoE9+0mp+G0Jo E058u+UK1JhDBQ/R9rDdNqB+TDQS51jv6kLyxIeFRsNJmooWgCYpEiIx3wavjBXP bTdr3W2r1CQvqUmo7RIHqyhG+mEqWUISg++ba1IoaQ46JxEzfDNZB2LlEYdumRkt /bdPeYp/0CdlIA7SjZMu/PX9xSKUOv12S8Wp3Bmtp+nBptb+cf02+LUSK41faanD q9F+D4b8VZFUmt8LNk3BCJP7FYuYAFw9K/VBRVi92poLRTl/Z477vNrs9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeXf09NPEbPsghXgsKF/oWYd9BSMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqEm/uvb ZVs6DSmVFkT3H10TrJPJt8oIqOkKBrHcNHMzgJBy1vDkJ1lBFGxNmCqudU4bG/n7 zHFM1p/4An0qs6YlNXJi4oR0lHN4vNVDlB0pfMd7K0DrQEw/hxPROd0Kx0k8h8sg OnumoDHRaC1kIdDhxEnLIaA8VEAf6tmKTNDDkoU4U3xDWJz6mbdJHxJT5A29rNg8 HyUqtgGc1wPWSnUIAm1HOjyzIIOtgKb+teLYl8oDbG/qDCRxYcGY9dWwXbWWLfM8 4fj4/G/KDMGt4Wf1BnaMZhqR0ejMX6CgW6Ux/buFTKOTSWaM/yPdFmYJFbcvnksG DocmPbu3Er1BzQ== -----END CERTIFICATE-----Generated at Wed Sep 23 12:34:54 2026 by rpki-client