$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft File: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft (raw, json) Hash identifier: e/AETuLEfUcurp+eqHR+51YB6NJxVPhWG5bdqcvE1Yc= Subject key identifier: E4:39:D7:2A:32:E2:E1:2B:79:A6:20:3F:B4:DC:E1:3E:C1:02:A7:E1 Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 Certificate issuer: /CN=3eb1788fe220e46434692d1cc437072d792d7888 Certificate serial: 01A0CB592BF5BB0FEA5B1C0BDB23F14199E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft Manifest number: 1A70 Signing time: Tue 22 Sep 2026 23:00:13 +0000 Manifest this update: Tue 22 Sep 2026 23:00:13 +0000 Manifest next update: Wed 23 Sep 2026 23:00:13 +0000 Files and hashes: 1: 2MINrSF-904_xnWHt9aLmREzfgM.roa (hash: 2JlxQCyPp6ZuyhE6H5mjVo5s7oH/wwZoUZTFvN2689w=) 2: 5ofwE8fWcu41y5nE1W98Xt08B9U.roa (hash: vBHKAReKnkwdzg96lnBkzkJIhU9wk+NEk4UwhyvZN8M=) 3: 6D7xnslgrR1jYkhOQFOsCCy_Ilo.roa (hash: vZ6+RacR9VxPA5+UlqTbSm8U/9rgsp0IuJGD6MdbbQo=) 4: DXimx1XY9etEzx_enIQDGBa9bm4.roa (hash: PZFvhgHYjMFhesaC5VQQRMgpbART5/jL2VnPsqgnMoo=) 5: J1cLQGWUhIVSfZKk_j_qK7xfNRk.roa (hash: txu0I6tcoeoOCvYRp5YDtz869JeJI1kFO2/j3Mpeh2A=) 6: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl (hash: vNL0iBpocHmzUhvtsPHwvUwpFIJzmYcm3UIM5PKXkAw=) 7: WzKCG2YANYwDiCPMEDnF3wWEIL4.asa (hash: j0Le2/fYLgItT8RcFxl99L6MkmGjdvtEmpaCnBgE1Nw=) 8: h7z0dcjyEiQrTlWfLJHvO8mytLk.asa (hash: wvs5YngkGWwMTiaT1xG6NC51mWPXd//9JXNAJ/RSeS4=) 9: kOMx0_xNVRgDDoEQ7tlUClFr3ws.asa (hash: 0ziRnXqAEvChx1eTjtol5U+/7UMoVmq7jdKvDvVj9NA=) 10: kjwvRpYiwOhcBYij8xZk0n0qpVs.asa (hash: eLOVHbyXbAmwSoR/i5JEDYllBqHeZO1blxzW1aKtYRM=) 11: taTHP1eAZV5DFgScGmkLmOoYJTk.roa (hash: w4zToqhdyScOj4eQSJZgMvLZqXoAq5qiIOEJ0CUK/zQ=) 12: zh7TzogLebptNJwvcCWZ7OOFbkA.asa (hash: KV2Noq8YepqhgkaIi7JvU21NOnAiECfq1AqTeUrEQYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cb:59:2b:f5:bb:0f:ea:5b:1c:0b:db:23:f1:41:99:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888 Validity Not Before: Sep 22 23:00:13 2026 GMT Not After : Sep 23 23:00:13 2026 GMT Subject: CN=e439d72a32e2e12b79a6203fb4dce13ec102a7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:76:49:95:e8:9b:ac:77:c3:a3:3f:99:b3:86: 1c:11:a0:1c:0d:1a:82:6c:82:5c:9c:79:45:10:89: ae:ad:b6:e2:7d:dc:ba:e9:7f:2d:ca:49:30:79:60: ec:47:5e:71:71:f8:37:4e:ad:82:3d:bc:57:6f:0b: 5e:a7:a0:a9:9d:97:58:cd:53:aa:00:87:98:6b:95: 57:af:55:56:e3:97:e6:7f:94:5f:11:39:cd:76:cc: 56:56:f6:83:e9:be:c4:9a:6e:5b:9a:26:0e:5b:ab: d3:97:de:55:b1:d4:74:33:f1:c3:aa:1b:c2:16:6e: 60:a2:65:8a:4d:ee:00:99:8b:cf:5e:c6:1b:ad:47: 6c:5c:93:af:e6:76:fd:91:95:0a:bb:0b:0d:6a:01: c3:80:2b:07:ac:8e:50:62:5b:16:14:a9:bb:04:66: 77:2e:91:6c:4f:15:5b:b4:87:5f:b1:31:9b:56:32: cc:3a:11:08:86:c4:f0:ab:64:9a:87:25:78:b8:51: 89:4d:b3:d8:e3:3a:f5:ec:78:1d:7a:03:16:91:fe: fb:88:43:ef:b9:d3:06:87:42:3d:38:2d:b2:89:ff: f5:02:97:ce:ae:60:cb:f2:b3:9f:66:e3:80:67:e5: b4:33:f5:22:bd:0a:74:f7:3e:d9:b4:90:ad:e1:1b: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:39:D7:2A:32:E2:E1:2B:79:A6:20:3F:B4:DC:E1:3E:C1:02:A7:E1 X509v3 Authority Key Identifier: keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:15:ef:43:37:9e:24:2d:7c:30:e9:5c:a7:3a:3f:c9:a9:f8: 0e:c1:87:98:74:b6:92:b2:34:95:38:d6:61:79:e0:17:22:6b: 92:ff:d3:52:71:f0:92:3d:12:6c:68:e5:73:4f:e1:4d:c8:72: 93:ee:19:15:cd:59:ff:36:02:23:8f:4f:dd:82:48:cd:3a:f5: 86:b7:bb:26:26:d0:aa:a1:70:39:c4:7e:3d:7f:a5:b4:91:f8: 02:65:53:98:7c:68:d7:00:7c:a6:16:e6:93:f7:43:d7:c0:78: cd:4c:b9:38:f5:b5:2f:ee:3f:c7:c6:10:f5:31:c8:16:f6:bd: 60:74:16:b7:6d:f6:72:ee:63:60:a2:6b:13:40:57:5f:74:1b: b4:e5:87:0d:19:05:d7:7c:3f:35:c7:47:14:34:bd:2c:f3:6f: d6:c2:aa:5a:04:b5:81:cb:16:b3:9c:0a:c7:77:72:54:c1:48: 62:64:00:a8:15:a7:07:8e:66:1b:53:80:92:55:b9:89:49:7e: 47:bf:ee:17:b8:24:56:81:f0:9e:11:f7:6d:16:2c:6c:a0:cb: 40:7b:aa:af:8b:37:43:e5:bd:57:29:d3:b1:96:eb:70:30:18: 83:3d:92:ad:5c:99:52:67:e3:0d:6b:ae:9b:5d:95:f4:03:1d: 5a:4b:6b:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDLWSv1uw/qWxwL2yPxQZnlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjE3ODhmZTIyMGU0NjQzNDY5MmQxY2M0MzcwNzJkNzky ZDc4ODgwHhcNMjYwOTIyMjMwMDEzWhcNMjYwOTIzMjMwMDEzWjAzMTEwLwYDVQQD EyhlNDM5ZDcyYTMyZTJlMTJiNzlhNjIwM2ZiNGRjZTEzZWMxMDJhN2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynZJleibrHfDoz+Zs4YcEaAcDRqC bIJcnHlFEImurbbifdy66X8tykkweWDsR15xcfg3Tq2CPbxXbwtep6CpnZdYzVOq AIeYa5VXr1VW45fmf5RfETnNdsxWVvaD6b7Emm5bmiYOW6vTl95VsdR0M/HDqhvC Fm5gomWKTe4AmYvPXsYbrUdsXJOv5nb9kZUKuwsNagHDgCsHrI5QYlsWFKm7BGZ3 LpFsTxVbtIdfsTGbVjLMOhEIhsTwq2SahyV4uFGJTbPY4zr17HgdegMWkf77iEPv udMGh0I9OC2yif/1ApfOrmDL8rOfZuOAZ+W0M/UivQp09z7ZtJCt4RuitQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQ51yoy4uEreaYgP7Tc4T7BAqfhMB8GA1UdIwQY MBaAFD6xeI/iIORkNGktHMQ3By15LXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAt ZDk1MDk0NzMwNzJjLzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAtZDk1MDk0NzMwNzJj LzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBXvQzee JC18MOlcpzo/yan4DsGHmHS2krI0lTjWYXngFyJrkv/TUnHwkj0SbGjlc0/hTchy k+4ZFc1Z/zYCI49P3YJIzTr1hre7JibQqqFwOcR+PX+ltJH4AmVTmHxo1wB8phbm k/dD18B4zUy5OPW1L+4/x8YQ9THIFva9YHQWt232cu5jYKJrE0BXX3QbtOWHDRkF 13w/NcdHFDS9LPNv1sKqWgS1gcsWs5wKx3dyVMFIYmQAqBWnB45mG1OAklW5iUl+ R7/uF7gkVoHwnhH3bRYsbKDLQHuqr4s3Q+W9VynTsZbrcDAYgz2SrVyZUmfjDWuu m12V9AMdWktrfg== -----END CERTIFICATE-----Generated at Wed Sep 23 10:58:14 2026 by rpki-client