$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft File: mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json) Hash identifier: rRXOvZkpjNcPzvPSB+eNt73Tx8ucHHbtH+/JqohLfB8= Subject key identifier: 4F:F8:BE:2C:81:9F:AD:F8:EE:F2:8C:0E:1C:0B:E6:36:BD:29:52:B4 Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Certificate serial: 01A0D614B6196634C77BC5EE86146DC94FBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft Manifest number: 1B02 Signing time: Fri 25 Sep 2026 01:01:16 +0000 Manifest this update: Fri 25 Sep 2026 01:01:16 +0000 Manifest next update: Sat 26 Sep 2026 01:01:16 +0000 Files and hashes: 1: 1EoM1UO0JsRER_6OIEo8eh1Sx-4.roa (hash: V7Dtw6vdqsk3cN/h42qguGZXjyed4erKeqilX1KdNkE=) 2: 5OGPGzofiEFa09GnFOAn5hhvk48.roa (hash: h2LTT9rBOO/bxXO9EO5NFwg/fB9HG26CM4uymezMPKI=) 3: IPMiCKDGg-4bycZ4wSrvvc3HolI.roa (hash: Up0dPWNya84ceqWIOnzBSjlOj2l1pRl6VXrPutXxbZ4=) 4: OyXa5XHUgsJSBsdbc3Qrhq4QU1Y.roa (hash: Gyfd0tsIEQsaZgvjHA4zwq5b2ZqvTwYd6Np55tiRmHQ=) 5: P_IQf465IziNUba5nDDuA9mYb2E.roa (hash: NtF/MIHSktYf3HQG++BY9SW33um7HsSxglhUDmVhaCg=) 6: THhHEbJLNflyjg0CGgDKLOWHmNw.roa (hash: hE5im+TYFFs2d+KHjtsfg9PpKV6WFy0Jtd49aeuY6Po=) 7: e7Lvz7EuGDsmNFIhRbwvynj9xTY.asa (hash: ns2I70ZkX4z8+mK5f+FUnkH52JTj0mfI9C5qd0rPQ1g=) 8: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: 5QaZEL4ZptPMQPx6sZu+WGItcyuz3rLHJN0oQe/Zgog=) 9: vREpqPygKpqEUBRK1WP9YRnHT1U.roa (hash: aIOz9LGkgfShAFeGoLvJK3zSpzEcpe5gJpmAOuZIS1I=) 10: z0oaUfPMt3Z_xl8gY8NTLVtXaGM.roa (hash: q9SpH5VN4ogoXvDgwfQyWPD2v94u40id/9IL4OGY508=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 21:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:14:b6:19:66:34:c7:7b:c5:ee:86:14:6d:c9:4f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Validity Not Before: Sep 25 01:01:16 2026 GMT Not After : Sep 26 01:01:16 2026 GMT Subject: CN=4ff8be2c819fadf8eef28c0e1c0be636bd2952b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:4d:05:83:a2:e4:07:bb:01:35:36:57:3e: 4e:eb:a8:18:4f:e1:2f:7e:5f:f7:1f:9e:7d:c0:34: 83:fb:78:5a:67:e4:99:7d:68:29:53:6b:96:e4:8d: c5:2b:35:3e:f9:9c:54:63:4d:f3:2e:40:24:db:6a: 2c:2d:2c:2b:98:67:9f:7c:4b:79:ac:24:8b:39:ec: d3:b1:30:8b:f7:55:5e:bf:ba:c9:4b:3b:a4:41:72: 14:98:ee:21:70:a0:06:63:aa:f5:82:c0:c0:8c:42: dc:da:1f:0b:be:cf:62:80:dc:f5:f7:24:1f:19:19: 21:06:51:4f:bc:b0:80:8f:c5:32:29:a2:20:6a:51: ac:3c:bb:cb:21:14:be:2a:05:0a:65:01:7d:f5:74: 25:19:a8:bf:7a:08:8e:a3:2e:77:32:55:be:0d:e4: ae:86:4c:8c:67:b6:d6:16:40:50:f7:61:55:74:19: e0:ce:94:06:dc:f2:da:88:f6:af:6d:72:77:10:49: c7:23:8b:c3:e4:b3:3a:30:c6:02:5f:98:93:38:01: 3e:e1:1e:b0:80:c4:39:63:55:d7:28:65:79:df:f4: f3:2e:5d:21:62:95:f7:80:32:31:c2:f9:b2:31:1b: 2b:1f:7c:e2:71:bf:2a:fb:4f:d6:af:e5:ba:84:b3: eb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F8:BE:2C:81:9F:AD:F8:EE:F2:8C:0E:1C:0B:E6:36:BD:29:52:B4 X509v3 Authority Key Identifier: keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:62:a8:ab:99:d1:cf:cb:72:05:a8:a8:e8:56:a1:bd:ff:29: 92:ef:b9:ec:27:95:7f:c3:27:c3:90:bf:94:ed:c6:79:49:d1: e9:7c:39:cf:e6:16:9e:93:15:f2:0d:85:97:64:84:ac:3b:c8: 85:c2:8d:48:44:78:8c:66:52:5a:ee:76:ff:31:1f:20:89:69: 53:61:97:ad:51:9f:80:37:37:90:da:b0:35:26:98:bc:e0:82: 74:6f:dc:06:4f:7a:80:16:94:98:d9:47:00:da:fa:46:7e:65: ee:0e:90:90:f7:2d:28:d8:88:31:b4:69:04:11:d8:f0:4b:d8: 06:bd:6f:c4:78:a8:3e:cb:e9:58:4e:9c:0a:b5:20:50:b6:80: 13:cb:1d:8f:6a:7b:8b:f1:d3:87:d3:d5:0a:a9:53:fb:35:0a: 04:26:dd:7b:b8:d4:28:21:a3:f1:b6:0e:f6:01:4c:e1:44:58: 08:d4:1d:f4:75:15:0a:e7:17:da:df:6e:70:ec:d2:6e:ee:37: 42:e2:8d:f1:7a:a0:ce:a7:41:ff:0a:74:2d:0c:2a:14:6e:00: 2b:11:3f:93:2d:65:b0:c0:e9:40:1d:fd:01:bc:f8:57:e1:f5: 92:4f:4d:7f:27:eb:93:11:e9:bf:5c:5e:89:5e:65:07:cc:e0: 68:fa:e8:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDWFLYZZjTHe8XuhhRtyU+9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5 N2I5ZDAwHhcNMjYwOTI1MDEwMTE2WhcNMjYwOTI2MDEwMTE2WjAzMTEwLwYDVQQD Eyg0ZmY4YmUyYzgxOWZhZGY4ZWVmMjhjMGUxYzBiZTYzNmJkMjk1MmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw21NBYOi5Ae7ATU2Vz5O66gYT+Ev fl/3H559wDSD+3haZ+SZfWgpU2uW5I3FKzU++ZxUY03zLkAk22osLSwrmGeffEt5 rCSLOezTsTCL91Vev7rJSzukQXIUmO4hcKAGY6r1gsDAjELc2h8Lvs9igNz19yQf GRkhBlFPvLCAj8UyKaIgalGsPLvLIRS+KgUKZQF99XQlGai/egiOoy53MlW+DeSu hkyMZ7bWFkBQ92FVdBngzpQG3PLaiPavbXJ3EEnHI4vD5LM6MMYCX5iTOAE+4R6w gMQ5Y1XXKGV53/TzLl0hYpX3gDIxwvmyMRsrH3zicb8q+0/Wr+W6hLPrnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/4viyBn6347vKMDhwL5ja9KVK0MB8GA1UdIwQY MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt NzU1MTgwOWNiNzMxLzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2Koq5nR z8tyBaio6Fahvf8pku+57CeVf8Mnw5C/lO3GeUnR6Xw5z+YWnpMV8g2Fl2SErDvI hcKNSER4jGZSWu52/zEfIIlpU2GXrVGfgDc3kNqwNSaYvOCCdG/cBk96gBaUmNlH ANr6Rn5l7g6QkPctKNiIMbRpBBHY8EvYBr1vxHioPsvpWE6cCrUgULaAE8sdj2p7 i/HTh9PVCqlT+zUKBCbde7jUKCGj8bYO9gFM4URYCNQd9HUVCucX2t9ucOzSbu43 QuKN8XqgzqdB/wp0LQwqFG4AKxE/ky1lsMDpQB39Abz4V+H1kk9NfyfrkxHpv1xe iV5lB8zgaProDg== -----END CERTIFICATE-----Generated at Fri Sep 25 07:15:33 2026 by rpki-client