$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft File: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json) Hash identifier: pXQ0ZEjQZOxaPx91aLo/QZvU81hMqO8xvbZje7olsH0= Subject key identifier: 9C:39:2C:A8:7B:70:59:03:94:92:D0:48:FE:29:61:57:51:8B:7C:4B Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3 Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3 Certificate serial: 01A0DF8596BAC9706BD4C36371936AAE3616 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft Manifest number: 178D Signing time: Sat 26 Sep 2026 21:01:09 +0000 Manifest this update: Sat 26 Sep 2026 21:01:09 +0000 Manifest next update: Sun 27 Sep 2026 21:01:09 +0000 Files and hashes: 1: INXHJDHDB1ukzYRaA3EidD_0aQ4.roa (hash: Z2x4wj/CdGVnD9ySadsV++WZwVQOZWizFudROy88bRQ=) 2: KJMJ77kQuoG9cpUlP7ImSAxxrC8.roa (hash: K2EGS70mhDKfj9roByjDWB46Ks+HmqgyJLsqPE6aR0s=) 3: KKPvuphxl-jCXx-t6E5TKLh7ouE.roa (hash: ghQPL+5j3H9Pp1Ju//l14r1R97GRHHIGE3fwtOKGTjA=) 4: Lyc7L5ENNnNmeFFiP13mgBm-teQ.roa (hash: gtEddttCg6evm5ZoDlDkaU8NOuk0QknemDaWTdJCohQ=) 5: PIctaaq8hYam_9VAPrVCYf9AqiI.roa (hash: M1/1hfWtMFwKSAcTSdndXFN4Ntl5XmVjhTvpw61hDG0=) 6: diWdBr8Lw6nPV-tMvOf0Cna3ipc.roa (hash: iWodsL01tWCHUx+C3pbxQzDdBQEdtQ4RhYGFNEL8TgE=) 7: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: J52V9ecA2r65wgrJdjL8NLAyY7PUx+Fc4fk06GVKt74=) 8: kDHc3reVMJPLgu58itw4ZupB-4Q.roa (hash: QwLu7BES2xuFPZdD76Beo2u1lAJTYierBEEu5vEPTTo=) 9: o-lwE03BQjuSCoHPvrungn8RW5E.roa (hash: 6jhTwsjRV3a0rHOssSDB/4JB3N1eJdRGn/9ePaST8TM=) 10: polvb4mWJFtYlmCnCQgjC3KNjFM.roa (hash: ok6ZqIcHmI5POEVYtqUr4M7uhrPkkTSbl73JjPBOL34=) 11: tnYABoJMY7Wi-wWcLi2d_oJP6jQ.roa (hash: GWuYZQOsyi/Kep+VibmM7lp5ukM+ocv9ZUuI4km8O1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 19:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:df:85:96:ba:c9:70:6b:d4:c3:63:71:93:6a:ae:36:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3 Validity Not Before: Sep 26 21:01:09 2026 GMT Not After : Sep 27 21:01:09 2026 GMT Subject: CN=9c392ca87b7059039492d048fe296157518b7c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:83:88:2b:53:1b:16:ed:8b:4c:d8:64:f0:0b: 3f:aa:4d:a9:90:1b:51:93:96:0e:5a:07:ce:43:9a: a6:9c:52:97:9f:14:1d:89:b3:32:0a:2e:7a:4f:5f: 10:cf:af:97:39:07:20:73:5f:c5:65:d6:d8:32:de: 25:50:61:b9:05:eb:d3:81:1f:2e:20:4c:61:fb:ca: ec:d2:77:97:a3:bd:36:a4:05:ed:bd:6e:54:76:5a: d1:7c:86:41:8b:bb:66:7d:a6:48:8f:c7:b8:e5:95: 67:60:ac:a2:f0:78:f8:32:7d:39:85:92:07:58:90: 61:66:2c:0c:b0:f3:79:f7:de:63:8d:bd:d2:5b:47: e8:45:61:d3:7e:cd:9d:8d:37:eb:37:4e:e5:22:9d: 8c:6f:06:3e:30:17:cf:59:26:83:28:a3:32:e0:7b: 84:20:fe:c6:e7:26:da:ee:a1:59:ba:d4:60:ab:5c: ca:8e:2a:24:96:ba:9a:0b:c0:68:46:97:40:12:91: 71:f4:8d:9a:73:61:75:72:6c:ca:8a:83:14:e4:a6: 5c:0f:6a:df:17:97:f3:d8:37:d3:5f:dc:87:16:a7: 2a:0c:e8:97:cf:dc:47:b2:fd:fd:a0:ef:b4:4d:86: 34:d7:62:3d:2a:58:99:fa:97:23:c8:df:49:cf:15: be:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:39:2C:A8:7B:70:59:03:94:92:D0:48:FE:29:61:57:51:8B:7C:4B X509v3 Authority Key Identifier: keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:bb:1c:ea:03:1b:b6:e8:ef:85:5e:ce:48:c2:35:a2:4a:40: eb:c8:30:b7:c4:8a:fa:ea:f5:ef:5a:09:f6:e7:c7:66:c8:8f: a7:5b:3d:27:6e:7a:69:f7:5e:d6:26:79:5a:4a:d8:15:72:9e: 8c:1a:84:e1:f3:74:0e:60:fb:3e:aa:12:3b:bf:cc:92:81:5e: dd:ce:12:59:a5:93:db:73:7f:86:0a:d8:cf:c6:02:de:99:7e: 0c:e7:9f:27:71:da:4b:18:76:37:98:8f:07:d2:43:8e:f5:78: 67:d7:c8:13:e8:da:96:55:b9:9b:23:b9:cf:e7:30:f4:6e:10: 03:f0:27:7c:06:88:47:07:d5:48:10:67:45:77:2e:c9:65:4d: c8:35:cd:bf:d7:7a:24:f2:82:f0:eb:5d:17:42:ac:62:75:25: f8:62:d8:61:69:59:46:68:08:9f:a4:e0:21:45:f0:90:fa:60: 0c:90:0b:c8:a8:4f:61:98:de:f2:95:77:a6:81:9c:4b:de:11: 53:3f:36:5c:74:25:5e:83:e6:7e:e8:65:7e:84:8d:16:ff:17: 71:2e:fb:7a:e3:b8:2a:bd:4f:9c:c1:f5:cb:59:d8:4f:6c:b3: 95:e7:c6:25:aa:10:8b:ca:ce:a5:9e:4f:e2:7e:85:1b:75:1a: 68:4a:02:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDfhZa6yXBr1MNjcZNqrjYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNTNhY2NiOTRlMTBjZjhjMmMyOTY3OTA2N2VlMzkwOTlm NDA0ZDMwHhcNMjYwOTI2MjEwMTA5WhcNMjYwOTI3MjEwMTA5WjAzMTEwLwYDVQQD Eyg5YzM5MmNhODdiNzA1OTAzOTQ5MmQwNDhmZTI5NjE1NzUxOGI3YzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4OIK1MbFu2LTNhk8As/qk2pkBtR k5YOWgfOQ5qmnFKXnxQdibMyCi56T18Qz6+XOQcgc1/FZdbYMt4lUGG5BevTgR8u IExh+8rs0neXo702pAXtvW5UdlrRfIZBi7tmfaZIj8e45ZVnYKyi8Hj4Mn05hZIH WJBhZiwMsPN5995jjb3SW0foRWHTfs2djTfrN07lIp2MbwY+MBfPWSaDKKMy4HuE IP7G5yba7qFZutRgq1zKjioklrqaC8BoRpdAEpFx9I2ac2F1cmzKioMU5KZcD2rf F5fz2DfTX9yHFqcqDOiXz9xHsv39oO+0TYY012I9KliZ+pcjyN9JzxW+EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJw5LKh7cFkDlJLQSP4pYVdRi3xLMB8GA1UdIwQY MBaAFINTrMuU4Qz4wsKWeQZ+45CZ9ATTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEt NmMzOTUwMTk0MzcwLzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEtNmMzOTUwMTk0Mzcw LzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLsc6gMb tujvhV7OSMI1okpA68gwt8SK+ur171oJ9ufHZsiPp1s9J256afde1iZ5WkrYFXKe jBqE4fN0DmD7PqoSO7/MkoFe3c4SWaWT23N/hgrYz8YC3pl+DOefJ3HaSxh2N5iP B9JDjvV4Z9fIE+jallW5myO5z+cw9G4QA/AnfAaIRwfVSBBnRXcuyWVNyDXNv9d6 JPKC8OtdF0KsYnUl+GLYYWlZRmgIn6TgIUXwkPpgDJALyKhPYZje8pV3poGcS94R Uz82XHQlXoPmfuhlfoSNFv8XcS77euO4Kr1PnMH1y1nYT2yzlefGJaoQi8rOpZ5P 4n6FG3UaaEoCjg== -----END CERTIFICATE-----Generated at Sun Sep 27 04:47:37 2026 by rpki-client