$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft File: J5O96Uauk208rME2pfMjnt8kMfQ.mft (raw, json) Hash identifier: hou17qvQIc7z8ClsRtDDs5kYYNdjvX21EL+R7i8wWRY= Subject key identifier: 58:68:01:9C:39:AE:15:15:73:9D:8F:BE:3E:5F:67:F1:7B:BF:DD:DA Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Certificate serial: 01A0CDB64B041AF9C86F566C3F7CE7C00C73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft Manifest number: 1522 Signing time: Wed 23 Sep 2026 10:01:11 +0000 Manifest this update: Wed 23 Sep 2026 10:01:11 +0000 Manifest next update: Thu 24 Sep 2026 10:01:11 +0000 Files and hashes: 1: 3MWi_sarB7UU3XV2Gox6fZeLswg.roa (hash: HWOigSGmjipZJyJg7lhUPHpbYL3EZByxIWX1N59lfc0=) 2: 5kQhTa9ppYhx0-CCDfhKsuGf-F4.roa (hash: Sc1YqqqQsHs863EggapJXNlkCp4JP0U2dmGwhrCZoUE=) 3: 7p2gKAHI0KadZksvxWzRGB1iB8g.roa (hash: rCQSaVA3Y3nCZOYBasM7SntiluDtvkssVDLJ9FgZ0z0=) 4: DZyx25x41UHPF3i1Veq-pYVddR4.roa (hash: 54obthyULOowTluftKwz8zXmO0WsXPGi7FNKcmk8zDQ=) 5: G0U9wtdHDnyBIqwX7oOrIllxbZ0.roa (hash: CVc7pFfQIeN+QGnFpM9jEldfs0RXoWa357t/1ugAP7E=) 6: J5O96Uauk208rME2pfMjnt8kMfQ.crl (hash: 2LFomxXCYQEc7+EdUne9YM0KsT0ZJ7NknUKCUbu1U6o=) 7: Ov9ZaMCFhJajMjOsXNoKkzhVj7w.roa (hash: Osr/NiaK8ha6IKNjhgOfYzSiPqzBhMGmuLXsdthjQ3k=) 8: ay8yAoc88wAj2V0brdWw5VdAYUE.roa (hash: uEoLe7XoIo5DxCpUn3Ll+nX3PqXVlfbcylC6QSJzhLc=) 9: nN3rX15y-KQiHmZ0fpAsaNSvwnU.roa (hash: 0oA4F2JQGbyYxaGrlY3X98PqMdWzLbRbe+bzFWz2G3g=) 10: xEE6xqB7U2qU7v-vbVNDUw-0jHk.roa (hash: l81cbgljLxJEOmCHiRfdvTZ8zxD8bx74QDpt+tnTEx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 10:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:b6:4b:04:1a:f9:c8:6f:56:6c:3f:7c:e7:c0:0c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Validity Not Before: Sep 23 10:01:11 2026 GMT Not After : Sep 24 10:01:11 2026 GMT Subject: CN=5868019c39ae1515739d8fbe3e5f67f17bbfddda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:d2:c9:4c:d8:19:45:08:60:c2:ec:57:af: a3:1f:c1:66:87:6b:b7:8f:66:ad:15:cc:b3:69:dd: c6:d9:1d:fa:d9:eb:5a:7e:f9:fe:51:a5:b7:c4:36: 5f:48:bd:b8:9b:8f:8a:2f:4c:da:16:19:c0:8f:14: 41:0c:49:04:45:71:45:e1:ca:00:21:0b:ce:60:fe: 8a:00:60:fb:68:b1:4b:99:c9:14:df:3e:78:f2:90: 72:e2:87:a2:4e:4b:f2:cf:1f:ed:d9:f9:83:cd:23: 5f:3a:2d:65:0a:63:bd:b3:a4:dc:af:a9:5b:07:da: d5:73:52:a3:69:6d:b6:09:7e:25:ee:02:14:35:57: 6d:a8:52:c0:28:ed:05:f4:48:d0:14:a6:42:bd:cc: ee:41:6c:38:2d:02:94:c6:24:95:c3:e7:9b:72:ee: 12:7d:77:d3:6b:70:3d:c6:10:22:d1:99:5c:61:23: 73:84:89:2c:a2:24:f5:a4:48:ba:e8:75:d2:95:9b: c5:2e:96:42:c7:2b:8e:81:87:20:c5:6f:28:8b:2d: 4e:c7:68:13:6b:f0:d9:66:d3:96:66:5d:f6:00:23: 02:07:d6:85:39:ff:79:5c:a0:49:9c:53:b1:2a:6d: fd:1b:13:ff:ba:30:fd:c4:44:d4:75:60:88:27:69: ef:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:68:01:9C:39:AE:15:15:73:9D:8F:BE:3E:5F:67:F1:7B:BF:DD:DA X509v3 Authority Key Identifier: keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:7a:80:22:19:bf:49:0e:bf:a1:c5:74:aa:52:ab:dd:f8:da: 21:99:c8:65:cd:60:57:c2:d5:01:13:7a:20:89:9c:70:ab:b3: ad:d2:1b:a8:45:85:dc:21:49:34:62:b4:b1:b8:10:d2:ac:08: c4:ec:ac:34:b6:d1:e9:c8:1c:ab:04:b3:81:8e:89:7c:da:e0: 50:f7:55:dd:76:96:36:45:bf:13:69:7b:a3:20:55:3a:11:2c: e0:41:f0:62:c1:fe:0c:b4:58:71:a9:9f:a0:48:23:dc:df:78: 7f:e2:5f:4a:76:a4:c2:1b:1e:fb:80:11:60:37:21:a7:33:20: 7b:7f:33:ae:24:f0:fd:7e:12:80:8b:8d:47:be:4c:3f:ce:34: c1:bc:94:28:ee:61:1d:da:27:44:95:97:8b:c2:db:2e:5a:50: 51:ba:ca:f9:db:dd:21:fa:d2:ea:1d:b7:2f:a3:04:15:06:05: b7:ae:13:d5:2d:af:b7:4d:78:33:bc:e7:dd:8e:f5:62:14:ec: 59:13:da:76:0f:a4:ea:9c:21:be:17:08:fb:5e:53:fe:b0:08: 68:70:e7:76:b6:24:fb:7e:df:d8:e7:cb:5b:12:74:19:5e:59: 19:b4:50:3d:4f:5b:5d:7c:73:28:e1:21:5b:53:be:4c:7e:95: 6d:bc:be:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNtksEGvnIb1ZsP3znwAxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy NDMxZjQwHhcNMjYwOTIzMTAwMTExWhcNMjYwOTI0MTAwMTExWjAzMTEwLwYDVQQD Eyg1ODY4MDE5YzM5YWUxNTE1NzM5ZDhmYmUzZTVmNjdmMTdiYmZkZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/HSyUzYGUUIYMLsV6+jH8Fmh2u3 j2atFcyzad3G2R362etafvn+UaW3xDZfSL24m4+KL0zaFhnAjxRBDEkERXFF4coA IQvOYP6KAGD7aLFLmckU3z548pBy4oeiTkvyzx/t2fmDzSNfOi1lCmO9s6Tcr6lb B9rVc1KjaW22CX4l7gIUNVdtqFLAKO0F9EjQFKZCvczuQWw4LQKUxiSVw+ebcu4S fXfTa3A9xhAi0ZlcYSNzhIksoiT1pEi66HXSlZvFLpZCxyuOgYcgxW8oiy1Ox2gT a/DZZtOWZl32ACMCB9aFOf95XKBJnFOxKm39GxP/ujD9xETUdWCIJ2nvrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhoAZw5rhUVc52Pvj5fZ/F7v93aMB8GA1UdIwQY MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et OTJjM2JmNzRhOTdiLzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnqAIhm/ SQ6/ocV0qlKr3fjaIZnIZc1gV8LVARN6IImccKuzrdIbqEWF3CFJNGK0sbgQ0qwI xOysNLbR6cgcqwSzgY6JfNrgUPdV3XaWNkW/E2l7oyBVOhEs4EHwYsH+DLRYcamf oEgj3N94f+JfSnakwhse+4ARYDchpzMge38zriTw/X4SgIuNR75MP840wbyUKO5h HdonRJWXi8LbLlpQUbrK+dvdIfrS6h23L6MEFQYFt64T1S2vt014M7zn3Y71YhTs WRPadg+k6pwhvhcI+15T/rAIaHDndrYk+37f2OfLWxJ0GV5ZGbRQPU9bXXxzKOEh W1O+TH6Vbby+UA== -----END CERTIFICATE-----Generated at Wed Sep 23 19:47:49 2026 by rpki-client