$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft File: gnYDqTvKMbAY9RH21LC3VG6WM2I.mft (raw, json) Hash identifier: 3ANf+8fcUUz+nKedRreOTyCI9Z7N2jFykpDXn/DCpNs= Subject key identifier: B9:E6:F4:93:F0:F1:32:E7:7D:E7:17:95:D7:17:36:B1:B6:BC:80:B6 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 01A0D8049C4FDFC35611ACCDE8453DADFC9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft Manifest number: 1B03 Signing time: Fri 25 Sep 2026 10:02:55 +0000 Manifest this update: Fri 25 Sep 2026 10:02:55 +0000 Manifest next update: Sat 26 Sep 2026 10:02:55 +0000 Files and hashes: 1: 1-UMvRKVvD5QzsC1RJIFAioK-mEs.roa (hash: cY/EkTeqSslspKNTMCfMPqb7ocfNcYNdxMAXgd+AwHE=) 2: 1-ujynZWH9--RNNC5_Uk-oM46YWY.roa (hash: Z97zfAIXnGKGU4beYEDjMrYWLoViOMxIYSMPQ34jGYc=) 3: 3yh-cYJ83qkN3q-7nEdcSlIj_20.roa (hash: dzEvA83A9jCVdqMsmWHuaDF5o7orRdQLIGhwCqyVCPI=) 4: 459DwuTQ4u0L5Vb8ymCw0jAhBow.roa (hash: R0D1GwtAzqy7rVtSGPweXeDbIoiclk2OGprKctUsxyE=) 5: 4eivQ2nDLeDdl1fAIHvWW6YvmGo.roa (hash: bAX+3N2k8RlvVykaPe2LmehMRssiIT2G4C0pgs5YX9k=) 6: 5hLk4CzA74yVnJ8R2Lz9mlfqzdI.roa (hash: 5TCFaKhrSo2pvg2qnUOf/Mpxm8y6kaDaGlkmH+sSYm0=) 7: 6Xl0kCUh2Z8ijjILpu5SGChdqG8.roa (hash: uUUQXcs1B5lsLuM7i1EJbbgK3RipIKQPg4yrGKArEPc=) 8: AlXg91UMAygxLeoq_VpzKVSK-zI.roa (hash: eUqHFEnUoHvc5mCAUj3SUrBYfTcyscIn0nZYAYnkeo8=) 9: BxGrV8A6iDDKjqHMu12FNwL2n3Q.roa (hash: pM719+JyUQctGBU4zyYhSazZkgZQIBOvLFuwl/fwC1A=) 10: NzMqRMx2wmMXmT6NtefKQfYnz50.roa (hash: wXq59lFngAiushVXXnkjtS1taojv2dmBZYCLjShRhnw=) 11: ROZhmusy1NDknUF5aPaZGu5NXA4.roa (hash: UAuXcLj79aVhKSKK569wYuvrITgWR3uMrjyjPiEXMnE=) 12: gnYDqTvKMbAY9RH21LC3VG6WM2I.crl (hash: bqh1bqjSc/2ygpLee7BHRAsKvTvIuyHOVir8tghnC5c=) 13: lLg9uhFLvwX-TZ1lP5U8AuVpRdU.roa (hash: wtfQN0HLBS2wll9XuGkM9TIQzuZqWOMet+moFUJksOQ=) 14: uWmLk5k2zxERG5iAn6QzDWqDfPs.roa (hash: pll+MttvkQdtFZD9rTubFBhF/TVVXiRM3xiehM6Bwxg=) 15: vSuybQCz3O_TwTJ8F2zSY2i4mk0.roa (hash: pXN0taHTbSlWFeoaKh0Luyrryn2wSn3jH/I7mlt3zMg=) 16: x--VU7ZbGYFtGJI4ezWE-LDaQNI.roa (hash: zVsZGJ3VSfQ6Ddsl5FH2swWgU1UOjj4mJWMcxek3/Sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d8:04:9c:4f:df:c3:56:11:ac:cd:e8:45:3d:ad:fc:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Sep 25 10:02:55 2026 GMT Not After : Sep 26 10:02:55 2026 GMT Subject: CN=b9e6f493f0f132e77de71795d71736b1b6bc80b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b3:cf:4c:de:b7:3f:30:1c:69:6c:eb:7c:dc: 67:0f:d9:e7:50:f7:09:a3:70:3c:e2:75:6d:48:16: 3f:fc:5d:72:e9:ce:a7:cb:9d:e8:d8:6e:7c:a1:be: 9a:a5:b0:e6:3d:f7:2b:81:c7:cb:b0:a6:14:17:73: 04:5f:3e:b6:5c:d7:fd:70:46:2f:24:5a:81:02:09: 2d:27:79:a4:49:de:9b:41:54:e1:db:0c:b5:80:be: 79:ff:4e:3d:34:7b:1e:3f:d9:71:fc:9f:ac:14:a4: e3:d1:b5:00:63:0b:19:e8:ec:9d:83:70:b8:16:81: cc:a5:dd:7b:f2:22:7d:39:cd:75:ef:a8:89:ed:83: 43:cb:0e:c3:3a:a4:3f:c0:1d:3d:fb:fc:b5:6f:09: 59:5f:b7:09:6e:1d:3d:98:9e:0d:0c:5c:55:5b:18: 1c:5e:69:01:c5:a3:80:a6:96:9b:7e:ee:4b:af:eb: 64:3a:aa:fe:de:05:99:73:d5:18:a7:11:24:c3:68: 54:32:22:65:a0:1c:11:15:a5:82:9f:df:bb:d7:09: d9:d6:59:57:9f:e5:8d:d8:cb:4e:bc:49:31:33:34: f7:99:24:41:f9:0b:1c:d8:02:f5:98:fd:11:7c:71: 9e:bf:09:bc:5c:5c:6c:ce:51:0f:ae:da:fc:05:aa: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E6:F4:93:F0:F1:32:E7:7D:E7:17:95:D7:17:36:B1:B6:BC:80:B6 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4c:3b:9b:ef:66:7f:34:a7:2e:23:b8:54:ba:16:d2:5a:62: ba:d2:91:34:97:ff:93:8f:06:a7:57:33:06:aa:63:3d:f3:6c: 03:d5:43:a4:b7:bf:d7:58:1f:83:e4:1d:fc:e4:82:fb:87:82: a6:ce:36:bf:ae:8d:90:84:1b:d9:4a:b3:7c:20:4c:a3:34:ba: d8:6a:68:cc:66:b6:63:56:91:1d:f6:ac:96:b1:98:e0:75:80: 51:d7:af:f6:76:50:c1:4e:46:67:7b:ad:96:49:40:fe:d5:2f: de:1e:f6:ea:ec:db:4a:00:e3:1b:cd:7b:27:72:46:23:cd:90: 4b:4c:e5:7c:7f:1d:a7:1b:8f:c9:3d:dd:ef:00:80:38:7b:de: 37:5b:25:90:c1:42:82:f4:b5:08:ff:ee:ec:fe:95:42:a6:29: f1:97:01:03:e0:c5:a1:43:29:f9:47:b2:da:f2:91:ec:8b:c2: 90:86:64:cb:af:2e:a4:05:38:bb:2f:d9:36:54:84:0e:d9:89: a3:0e:e1:08:6a:53:30:24:a9:2c:55:2f:19:15:69:e0:2b:63: df:3c:bc:fc:1b:6e:70:d8:43:d8:eb:41:43:ef:19:47:0b:ab: 55:69:04:53:1e:f7:60:9d:4d:b6:f3:68:45:a1:66:26:4d:30: 46:3f:d2:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDYBJxP38NWEazN6EU9rfybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwOTI1MTAwMjU1WhcNMjYwOTI2MTAwMjU1WjAzMTEwLwYDVQQD EyhiOWU2ZjQ5M2YwZjEzMmU3N2RlNzE3OTVkNzE3MzZiMWI2YmM4MGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbPPTN63PzAcaWzrfNxnD9nnUPcJ o3A84nVtSBY//F1y6c6ny53o2G58ob6apbDmPfcrgcfLsKYUF3MEXz62XNf9cEYv JFqBAgktJ3mkSd6bQVTh2wy1gL55/049NHseP9lx/J+sFKTj0bUAYwsZ6Oydg3C4 FoHMpd178iJ9Oc1176iJ7YNDyw7DOqQ/wB09+/y1bwlZX7cJbh09mJ4NDFxVWxgc XmkBxaOAppabfu5Lr+tkOqr+3gWZc9UYpxEkw2hUMiJloBwRFaWCn9+71wnZ1llX n+WN2MtOvEkxMzT3mSRB+Qsc2AL1mP0RfHGevwm8XFxszlEPrtr8Baq5GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnm9JPw8TLnfecXldcXNrG2vIC2MB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUw7m+9m fzSnLiO4VLoW0lpiutKRNJf/k48Gp1czBqpjPfNsA9VDpLe/11gfg+Qd/OSC+4eC ps42v66NkIQb2UqzfCBMozS62GpozGa2Y1aRHfaslrGY4HWAUdev9nZQwU5GZ3ut lklA/tUv3h726uzbSgDjG817J3JGI82QS0zlfH8dpxuPyT3d7wCAOHveN1slkMFC gvS1CP/u7P6VQqYp8ZcBA+DFoUMp+Uey2vKR7IvCkIZky68upAU4uy/ZNlSEDtmJ ow7hCGpTMCSpLFUvGRVp4Ctj3zy8/BtucNhD2OtBQ+8ZRwurVWkEUx73YJ1NtvNo RaFmJk0wRj/Saw== -----END CERTIFICATE-----Generated at Fri Sep 25 17:36:11 2026 by rpki-client