$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft File: SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json) Hash identifier: Rw13XO2vV1rPgpVHXGTblGhLge1VGEJksyCF8SdS/EQ= Subject key identifier: AE:08:6E:1B:A6:27:AE:F6:DF:74:A5:25:38:08:C6:B5:C3:29:F2:16 Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 01A0CC36764FACC769F2197144CDA4111E7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft Manifest number: 0FCF Signing time: Wed 23 Sep 2026 03:01:56 +0000 Manifest this update: Wed 23 Sep 2026 03:01:56 +0000 Manifest next update: Thu 24 Sep 2026 03:01:56 +0000 Files and hashes: 1: 8DylJ6bMwHx9Bdrvn2E9Zu5-6Yc.roa (hash: vmfPrDMZxv7M04Wo8WXPZw8AXlVkf20vtyHb5e8KwgU=) 2: 9Cp-MTJ4qLd92W1VLnGQl0LXr-c.roa (hash: 5gwGzTjze+ZsjYP/6JdA+Sy/zd3Nz2uvd4XnkQoXRfg=) 3: CiMQMlsaob6RUwchgCgnZuTjr8s.roa (hash: Ar1fgrhz+dRsI5kSs4y0oWEzM2iAvsmrTdXD/xtv77Y=) 4: E4JbKjh9d4V-tkS22c4Y2xMCkFg.roa (hash: 7djPzKioQUY77MCLFItH4oWSHNi6vM51IHyM3Wgv2dk=) 5: My1lWafqU6ikUvtq4M-ub2MxD1I.roa (hash: UvpW6m+Ws53gXcKKs+IbQFznyrhTBzwk2z9Qv12jd1c=) 6: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: m98pbN3TSrw+EVR8vVGzc7QyJvuKP298+jSJwAPPjZ8=) 7: UVRNeFdK0MFmPktuaxuakdFBiyw.roa (hash: Qe3jYuCQSRz8rrbqzPjF4ta2+ILAQBCmo8wsXzpnbtM=) 8: YfIHk0vhXMsawbQpQSUx4NkqARo.roa (hash: jyjsv+8CT/zFqpfSyQvWtrC5fl6L+Qm0Q0VVf1vxxCM=) 9: _GXs5D3IvlrXACIDGV1jenI0WNE.roa (hash: YXv+qavyugnUTBH4aVvxk6AhP8epVFfWY0KRl4DJGts=) 10: f9XaNrWrnsnye9Nnn2-Ly1K5UOI.roa (hash: W/HCDixp3chA9F+ml8Y61wZheEIzzJOIG7tl8p8DNMs=) 11: iRf_gs5n9xup496QtRtuInpoD-U.roa (hash: BDQw7Ot2/EiioII6Hz7qQJc1eJwtGMRxOvQFtmCg1xA=) 12: jteFQiK73wa6i4lrpiIPNofIe0U.roa (hash: G8t6kOJLv2x/ceaMNLBszGM9PcNzECaWuzPtlc+XAqM=) 13: lHqP6_LNIJjH2DY1nkYIw_wx6vg.roa (hash: HTFvctpryJcVZOxTlZV4EEM5WCYV9Pw93rtuaN3DxLg=) 14: mjB_YwpdfbzEMOoCN657fTyMgX4.roa (hash: zKy3p/lM5a5D8i2Rw65iFKwlrzxpy3cP+UdwJk2L738=) 15: uUDKYyFFirLuGqR8U0Iysb1Nw8I.roa (hash: Y7R75luVVqvdP03OWGWhzCZwuixQZrQDRe/qiiGkEy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cc:36:76:4f:ac:c7:69:f2:19:71:44:cd:a4:11:1e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Sep 23 03:01:56 2026 GMT Not After : Sep 24 03:01:56 2026 GMT Subject: CN=ae086e1ba627aef6df74a5253808c6b5c329f216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:57:38:09:51:05:2f:ba:c3:01:f5:eb:8c:07: 71:34:62:35:03:2e:3a:37:d9:ca:31:26:38:7d:6b: 7e:ed:91:26:bd:9e:c2:80:ef:73:11:5d:51:60:fe: 0e:27:fe:6c:0f:88:2c:0d:b8:76:24:92:57:23:04: 7a:4c:6c:40:df:d2:4b:88:76:f4:73:3d:f4:19:fb: 48:a7:23:46:b3:9c:a7:9d:53:3a:7a:73:2c:b5:88: 49:8b:b7:28:70:d1:f0:2e:1f:6f:e6:ac:19:1b:13: 73:d6:b0:1d:5f:18:fe:1f:ff:1d:37:18:f8:a9:d0: b4:ef:16:89:f1:ca:73:0f:f4:a7:68:84:44:b5:7e: ae:d9:5b:48:60:5d:ca:27:bd:32:e5:17:4f:29:1e: 18:76:c3:f5:7a:26:24:6d:6c:e2:fc:e9:2d:ce:09: 2e:a3:fb:21:51:b2:b2:41:97:07:41:3d:7f:25:2a: 0d:9b:a7:b3:64:7c:33:c0:c1:9d:76:86:56:18:b7: 46:4e:8b:17:2d:9c:ac:14:46:3a:c7:67:c0:5b:1c: 4f:78:6c:e0:cd:d0:54:15:77:e1:09:12:2f:6b:0a: 8c:e6:21:13:28:46:ed:2e:ef:d3:75:74:d8:28:14: 69:23:cb:6a:75:0a:56:b6:fb:01:0f:e2:da:b4:7e: 3a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:08:6E:1B:A6:27:AE:F6:DF:74:A5:25:38:08:C6:B5:C3:29:F2:16 X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:14:f9:04:65:82:7c:45:b2:08:a5:ce:25:35:21:48:12:76: a5:d6:e5:af:e7:33:9d:03:e5:77:d1:bb:1d:cd:f0:8f:a7:81: 2d:99:53:7b:ce:8a:a3:11:68:03:16:a0:12:ab:0b:8a:22:4c: 99:fe:43:ab:9d:ad:2b:68:76:ac:a8:70:d5:0e:d1:d2:8a:18: 58:a4:9b:48:f3:c0:10:47:52:86:70:05:6d:00:7d:9b:49:01: 63:b9:48:20:1b:86:6f:84:76:54:3e:60:c2:bf:e3:2b:7f:f8: 6c:a6:ff:15:5f:2d:45:09:1f:6d:d9:80:06:fc:49:6f:99:81: 5e:3f:6f:eb:9d:ab:cd:86:cd:61:88:df:ae:6d:5e:26:dd:0f: c7:bc:ca:1d:eb:55:74:fc:cd:0a:d2:fb:a6:e4:5a:51:f3:d1: 09:aa:df:d3:5e:89:7b:4c:33:4e:1a:5e:f2:ec:f8:6d:70:a2: 76:69:d2:e1:ae:5c:44:69:7b:d7:4e:6a:4e:f2:29:06:e1:df: 22:07:f2:42:1a:57:75:71:1f:44:ae:8b:0d:9e:c0:c2:5d:cb: 10:d2:0c:39:59:aa:b8:99:a6:87:a3:6a:ad:0a:8a:d0:d5:b2: 1e:f8:b6:76:23:68:76:6d:11:ec:96:e9:0a:7e:84:8c:71:89: ec:53:90:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDMNnZPrMdp8hlxRM2kER5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwOTIzMDMwMTU2WhcNMjYwOTI0MDMwMTU2WjAzMTEwLwYDVQQD EyhhZTA4NmUxYmE2MjdhZWY2ZGY3NGE1MjUzODA4YzZiNWMzMjlmMjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1c4CVEFL7rDAfXrjAdxNGI1Ay46 N9nKMSY4fWt+7ZEmvZ7CgO9zEV1RYP4OJ/5sD4gsDbh2JJJXIwR6TGxA39JLiHb0 cz30GftIpyNGs5ynnVM6enMstYhJi7cocNHwLh9v5qwZGxNz1rAdXxj+H/8dNxj4 qdC07xaJ8cpzD/SnaIREtX6u2VtIYF3KJ70y5RdPKR4YdsP1eiYkbWzi/Oktzgku o/shUbKyQZcHQT1/JSoNm6ezZHwzwMGddoZWGLdGTosXLZysFEY6x2fAWxxPeGzg zdBUFXfhCRIvawqM5iETKEbtLu/TdXTYKBRpI8tqdQpWtvsBD+LatH46iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4IbhumJ67233SlJTgIxrXDKfIWMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRT5BGWC fEWyCKXOJTUhSBJ2pdblr+cznQPld9G7Hc3wj6eBLZlTe86KoxFoAxagEqsLiiJM mf5Dq52tK2h2rKhw1Q7R0ooYWKSbSPPAEEdShnAFbQB9m0kBY7lIIBuGb4R2VD5g wr/jK3/4bKb/FV8tRQkfbdmABvxJb5mBXj9v652rzYbNYYjfrm1eJt0Px7zKHetV dPzNCtL7puRaUfPRCarf016Je0wzThpe8uz4bXCidmnS4a5cRGl7105qTvIpBuHf IgfyQhpXdXEfRK6LDZ7Awl3LENIMOVmquJmmh6NqrQqK0NWyHvi2diNodm0R7Jbp Cn6EjHGJ7FOQyQ== -----END CERTIFICATE-----Generated at Wed Sep 23 11:08:43 2026 by rpki-client