$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json) Hash identifier: HdOp7+kQ1NBPNbKfY8cdtnEh9d/2zUj5AWgfrBe7qvQ= Subject key identifier: 96:FB:75:70:39:8E:A8:A2:91:D1:29:EE:78:E2:C0:1C:91:09:9B:82 Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 01A106CA2501233F8B7E8379366262A0EEDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft Manifest number: 1288 Signing time: Sun 04 Oct 2026 12:01:13 +0000 Manifest this update: Sun 04 Oct 2026 12:01:13 +0000 Manifest next update: Mon 05 Oct 2026 12:01:13 +0000 Files and hashes: 1: 1-qgyilt4mW5S7R3DpKdq7Oz7i3g.roa (hash: p4IRMRrJZgnKi2WdlcOaJkOpKGoVzi49HMW6WN0NrJ8=) 2: 7YLSJcQGBA653iyy1fHxIGb92P0.roa (hash: h4RVKl8L8VOgh9a6P3PTZvMiWUsau7R0BpqtJhT+8/Y=) 3: 8lzOqg36QfNkeg8Q6Az_2mhb-pY.roa (hash: W0oPaRSAv7Mlqt/bxzWLXb0GBYOFj3ar/XeEXfhCbx8=) 4: LgR3McOgyTpzCVXi0apdiSU4UhY.roa (hash: O6hm7PXUeVsbsroLDw55f/gk3SNtDWgRnBz2fnXsCuw=) 5: QViCpxHL7TeWgNCiZk4rKUO-8KU.roa (hash: lHQxRnJhPCjs1WHfqXj6jxi3Fa+6Jf53oEHyU2j2aik=) 6: iy1Tvz9vWB_OyKw6kX0SPKuwaMg.roa (hash: f91SOkfNEhx8xn/tAVUdyzoJrhGRQTUbnnTsdxKuQ64=) 7: qI_-6h3iudeXwj_KCEW7jVNBeSs.roa (hash: VCf8NA7/YCd9pNMoP3NeZ5lHDYrKSJzJ143pwqaxHAQ=) 8: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: ipI5/DpnInlJg7VOpCk35kAqAhOsJijSqRADY1+CrWM=) 9: ws_lvviOWiUn6-n1_mvWXNHp31I.roa (hash: 3Nbd+pvEno+PaE0bZIzANyUWQU5DEYEW5i11jMtE2XI=) 10: x8JpwXfRjntSd4pmuLKwDDhw_i4.roa (hash: OFNInH/Vi9/sinG5vzHXVvidAVrgK9tFLxn9nt+UYfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:06:ca:25:01:23:3f:8b:7e:83:79:36:62:62:a0:ee:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Oct 4 12:01:13 2026 GMT Not After : Oct 5 12:01:13 2026 GMT Subject: CN=96fb7570398ea8a291d129ee78e2c01c91099b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:20:de:f7:3b:42:c8:ab:4c:eb:6b:29:2b:06: 6d:c7:af:e8:95:5e:fc:93:5c:c0:b7:31:bc:7e:82: 6e:00:73:c6:47:86:72:fa:fb:84:82:54:42:37:44: 76:1f:31:f1:36:6e:ca:68:ab:80:f8:95:33:7a:7d: 98:2b:5b:e4:5c:9a:7e:88:e3:d9:cf:52:56:67:94: 55:a2:ed:e3:05:71:94:ee:54:a0:f6:0d:00:f9:cc: 81:8e:63:4b:37:c8:a6:75:04:19:4f:31:89:23:95: 95:90:c2:c8:4a:b8:56:78:e5:bd:fa:5f:05:1f:9e: 57:60:4c:1a:ed:03:d2:43:ae:31:e4:31:3f:ca:be: c2:cb:d5:34:fc:93:f1:20:1b:ed:e4:b6:09:59:12: 1a:35:d6:1c:bb:c1:d1:04:dc:a8:51:01:aa:ba:3b: 76:07:96:21:eb:b1:9c:dd:c8:b9:fa:5b:0e:83:16: 35:cf:3b:7e:d5:6f:1d:3f:ed:5e:07:9a:3f:3c:d6: 73:a8:2e:77:1f:8e:3b:2d:64:07:2e:76:46:3d:1f: 1d:ba:76:54:66:33:de:02:17:7e:a8:52:66:49:4b: d3:12:75:b9:4b:76:f6:a9:f5:be:15:04:3c:6c:8a: 81:bd:78:b7:2e:f4:5f:f2:8c:17:94:27:7c:ef:55: 74:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FB:75:70:39:8E:A8:A2:91:D1:29:EE:78:E2:C0:1C:91:09:9B:82 X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:52:56:55:0b:00:a7:ca:62:5d:b0:d0:f5:bc:fa:a3:eb:95: 57:99:d0:52:07:f2:2f:9c:62:ae:d8:da:9d:a9:64:9b:da:ff: e4:f7:60:8a:48:67:92:d1:8a:91:6d:18:ce:a8:99:09:21:77: 1b:11:6f:f2:dd:28:00:b8:5a:29:9b:20:b9:c6:47:f2:df:b0: bb:9e:3e:21:f0:f3:1c:9e:04:f7:4b:3d:d7:06:0e:ca:68:ea: e9:16:ef:83:1b:b6:12:02:75:85:86:9c:07:53:7d:ed:92:f1: e2:28:7d:ff:7b:e8:91:0c:14:72:eb:97:f2:cb:a7:ec:fe:ea: ac:2d:0c:e2:38:ba:5b:8d:85:a7:20:53:26:6f:a9:5f:72:38: a9:82:3a:9d:ae:e8:19:18:e1:62:d2:46:ce:cc:3a:07:8d:af: bd:ef:e3:13:97:e7:8e:7c:ab:5d:59:a5:0c:f0:f6:52:13:67: d0:6d:bc:3f:d4:41:c1:1d:99:9f:11:d0:e1:0a:69:98:47:81: ea:60:47:d4:0f:61:32:a7:1e:af:36:52:a9:7d:11:14:7e:4a: 41:01:95:46:77:93:79:ef:d0:09:e7:5d:08:ef:4c:6f:cb:11: 89:b8:9b:ad:3b:22:2c:3c:f7:17:a3:15:d8:79:94:83:e4:a7: 58:c9:40:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEGyiUBIz+LfoN5NmJioO7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjYxMDA0MTIwMTEzWhcNMjYxMDA1MTIwMTEzWjAzMTEwLwYDVQQD Eyg5NmZiNzU3MDM5OGVhOGEyOTFkMTI5ZWU3OGUyYzAxYzkxMDk5YjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyDe9ztCyKtM62spKwZtx6/olV78 k1zAtzG8foJuAHPGR4Zy+vuEglRCN0R2HzHxNm7KaKuA+JUzen2YK1vkXJp+iOPZ z1JWZ5RVou3jBXGU7lSg9g0A+cyBjmNLN8imdQQZTzGJI5WVkMLISrhWeOW9+l8F H55XYEwa7QPSQ64x5DE/yr7Cy9U0/JPxIBvt5LYJWRIaNdYcu8HRBNyoUQGqujt2 B5Yh67Gc3ci5+lsOgxY1zzt+1W8dP+1eB5o/PNZzqC53H447LWQHLnZGPR8dunZU ZjPeAhd+qFJmSUvTEnW5S3b2qfW+FQQ8bIqBvXi3LvRf8owXlCd871V09QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJb7dXA5jqiikdEp7njiwByRCZuCMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlJWVQsA p8piXbDQ9bz6o+uVV5nQUgfyL5xirtjanalkm9r/5PdgikhnktGKkW0YzqiZCSF3 GxFv8t0oALhaKZsgucZH8t+wu54+IfDzHJ4E90s91wYOymjq6Rbvgxu2EgJ1hYac B1N97ZLx4ih9/3vokQwUcuuX8sun7P7qrC0M4ji6W42FpyBTJm+pX3I4qYI6na7o GRjhYtJGzsw6B42vve/jE5fnjnyrXVmlDPD2UhNn0G28P9RBwR2ZnxHQ4QppmEeB 6mBH1A9hMqcerzZSqX0RFH5KQQGVRneTee/QCeddCO9Mb8sRibibrTsiLDz3F6MV 2HmUg+SnWMlA0Q== -----END CERTIFICATE-----Generated at Sun Oct 4 23:06:03 2026 by rpki-client