$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft File: J5O96Uauk208rME2pfMjnt8kMfQ.mft (raw, json) Hash identifier: NPNe78dSExYbjYBksTqX7GIVEVqGy8MjtN9msR06BMU= Subject key identifier: AF:E4:2D:46:17:43:8C:57:49:69:06:3A:2B:66:46:2F:F2:8A:D7:88 Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Certificate serial: 01A0E1070AB58E7E08AA0F9E6344CE5C4030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft Manifest number: 152C Signing time: Sun 27 Sep 2026 04:02:09 +0000 Manifest this update: Sun 27 Sep 2026 04:02:09 +0000 Manifest next update: Mon 28 Sep 2026 04:02:09 +0000 Files and hashes: 1: 3MWi_sarB7UU3XV2Gox6fZeLswg.roa (hash: HWOigSGmjipZJyJg7lhUPHpbYL3EZByxIWX1N59lfc0=) 2: 5kQhTa9ppYhx0-CCDfhKsuGf-F4.roa (hash: Sc1YqqqQsHs863EggapJXNlkCp4JP0U2dmGwhrCZoUE=) 3: 7p2gKAHI0KadZksvxWzRGB1iB8g.roa (hash: rCQSaVA3Y3nCZOYBasM7SntiluDtvkssVDLJ9FgZ0z0=) 4: DZyx25x41UHPF3i1Veq-pYVddR4.roa (hash: 54obthyULOowTluftKwz8zXmO0WsXPGi7FNKcmk8zDQ=) 5: G0U9wtdHDnyBIqwX7oOrIllxbZ0.roa (hash: CVc7pFfQIeN+QGnFpM9jEldfs0RXoWa357t/1ugAP7E=) 6: J5O96Uauk208rME2pfMjnt8kMfQ.crl (hash: jbIDGC+xl167MXDEXJhcz3Azdwv+dnyxaY8IS6T5AEo=) 7: Ov9ZaMCFhJajMjOsXNoKkzhVj7w.roa (hash: Osr/NiaK8ha6IKNjhgOfYzSiPqzBhMGmuLXsdthjQ3k=) 8: ay8yAoc88wAj2V0brdWw5VdAYUE.roa (hash: uEoLe7XoIo5DxCpUn3Ll+nX3PqXVlfbcylC6QSJzhLc=) 9: nN3rX15y-KQiHmZ0fpAsaNSvwnU.roa (hash: 0oA4F2JQGbyYxaGrlY3X98PqMdWzLbRbe+bzFWz2G3g=) 10: xEE6xqB7U2qU7v-vbVNDUw-0jHk.roa (hash: l81cbgljLxJEOmCHiRfdvTZ8zxD8bx74QDpt+tnTEx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 04:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e1:07:0a:b5:8e:7e:08:aa:0f:9e:63:44:ce:5c:40:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Validity Not Before: Sep 27 04:02:09 2026 GMT Not After : Sep 28 04:02:09 2026 GMT Subject: CN=afe42d4617438c574969063a2b66462ff28ad788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7a:e7:c0:79:cd:6d:63:b0:d6:91:29:59:24: 8e:e5:56:85:70:76:cd:95:11:50:fc:6e:1f:fa:08: 30:e8:ae:78:b1:06:4a:51:51:85:1f:64:d8:4e:04: a4:8c:2c:34:61:bf:ca:ba:dd:e1:6d:db:c4:d4:3c: d9:77:a0:c5:34:bd:0d:f2:51:ea:8f:bd:7a:d4:ee: 1f:54:a1:54:a1:81:3f:e2:8e:de:b4:b1:5d:7f:de: 45:cd:71:59:f8:bf:ba:ed:7b:ca:11:3a:56:5c:3b: 00:76:95:4d:c2:b2:9d:8d:7b:57:2b:db:50:f4:ed: ed:77:d1:d1:a9:ff:31:64:04:52:4a:c9:8b:fb:3f: 0b:5b:b4:87:06:c5:77:47:a4:8f:9f:40:c7:7b:9e: 6b:ef:36:14:48:ae:c2:f9:53:0a:78:e3:1e:01:8c: 38:d7:bd:68:90:4e:c8:85:a2:f7:e4:24:5c:02:f8: 41:67:f8:fa:1e:9b:76:8a:dd:55:8b:b8:71:5f:3f: 27:82:2a:5a:72:5f:e9:67:19:39:3b:4c:4b:92:5c: 03:bf:f1:5f:0d:37:aa:c4:38:a1:76:1e:be:84:db: a8:78:44:ae:95:96:91:e1:c6:28:e7:f0:19:8e:63: 02:22:03:80:24:17:f0:43:26:63:60:e8:74:80:28: 80:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E4:2D:46:17:43:8C:57:49:69:06:3A:2B:66:46:2F:F2:8A:D7:88 X509v3 Authority Key Identifier: keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:cf:97:0f:ff:ce:20:2c:98:61:82:1b:9e:26:4c:4b:7c:9e: a2:5b:1e:20:fc:2d:62:f0:b4:a8:d8:d2:89:87:d4:e6:dc:85: 37:2d:b5:2c:4a:0b:03:b7:88:21:41:f6:85:c7:42:c9:bf:e8: fc:d9:27:af:2f:94:6c:df:b4:74:c8:fe:6d:c5:3e:94:78:12: 8f:10:2b:29:b5:19:35:cc:2a:97:05:25:9c:71:6c:ac:d2:d4: ab:ca:2e:dc:47:29:98:10:2b:fb:d3:d8:ce:80:ee:f5:07:08: 9d:bf:e5:25:d5:98:b1:a5:07:09:a6:bb:78:0b:e3:81:7f:aa: 38:65:8d:7d:50:0e:15:17:30:df:9b:95:cf:6a:ea:63:78:81: d3:41:e0:ed:d2:b1:49:69:a8:0f:75:25:a6:92:de:01:d8:3c: d3:23:68:88:7b:92:39:97:c1:77:e2:03:66:25:d9:8e:d3:0b: cf:dd:79:53:44:ee:43:2a:db:a2:d1:46:ed:73:01:95:f5:42: cc:96:1e:e5:2a:b9:a0:27:38:30:a1:1f:94:b6:f0:c3:65:ae: d5:33:8e:89:98:cb:0a:ab:dc:86:da:38:e4:1a:43:e2:6a:09: b5:ad:29:7b:4c:1a:76:49:b4:bc:50:9e:40:31:da:1a:72:11: 3c:c5:c1:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDhBwq1jn4Iqg+eY0TOXEAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy NDMxZjQwHhcNMjYwOTI3MDQwMjA5WhcNMjYwOTI4MDQwMjA5WjAzMTEwLwYDVQQD EyhhZmU0MmQ0NjE3NDM4YzU3NDk2OTA2M2EyYjY2NDYyZmYyOGFkNzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynrnwHnNbWOw1pEpWSSO5VaFcHbN lRFQ/G4f+ggw6K54sQZKUVGFH2TYTgSkjCw0Yb/Kut3hbdvE1DzZd6DFNL0N8lHq j7161O4fVKFUoYE/4o7etLFdf95FzXFZ+L+67XvKETpWXDsAdpVNwrKdjXtXK9tQ 9O3td9HRqf8xZARSSsmL+z8LW7SHBsV3R6SPn0DHe55r7zYUSK7C+VMKeOMeAYw4 171okE7IhaL35CRcAvhBZ/j6Hpt2it1Vi7hxXz8ngipacl/pZxk5O0xLklwDv/Ff DTeqxDihdh6+hNuoeESulZaR4cYo5/AZjmMCIgOAJBfwQyZjYOh0gCiA6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/kLUYXQ4xXSWkGOitmRi/yiteIMB8GA1UdIwQY MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et OTJjM2JmNzRhOTdiLzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAc+XD//O ICyYYYIbniZMS3yeolseIPwtYvC0qNjSiYfU5tyFNy21LEoLA7eIIUH2hcdCyb/o /Nknry+UbN+0dMj+bcU+lHgSjxArKbUZNcwqlwUlnHFsrNLUq8ou3EcpmBAr+9PY zoDu9QcInb/lJdWYsaUHCaa7eAvjgX+qOGWNfVAOFRcw35uVz2rqY3iB00Hg7dKx SWmoD3UlppLeAdg80yNoiHuSOZfBd+IDZiXZjtMLz915U0TuQyrbotFG7XMBlfVC zJYe5Sq5oCc4MKEflLbww2Wu1TOOiZjLCqvchto45BpD4moJta0pe0wadkm0vFCe QDHaGnIRPMXB4w== -----END CERTIFICATE-----Generated at Sun Sep 27 14:08:08 2026 by rpki-client