$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft File: Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json) Hash identifier: IA3Mc6ocWKVsRqefSDQ2THJpvogd/oNAxPosP1ItGNE= Subject key identifier: DE:E9:B6:A5:F8:60:22:CB:89:7E:89:00:39:1B:D6:F4:19:47:71:EA Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Certificate serial: 01A0D0B6F5078E910AFFCA1D5EBA9AD74DC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft Manifest number: 1A3C Signing time: Thu 24 Sep 2026 00:00:46 +0000 Manifest this update: Thu 24 Sep 2026 00:00:46 +0000 Manifest next update: Fri 25 Sep 2026 00:00:46 +0000 Files and hashes: 1: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: SL/xSS17zUIfFhpGQgHXrdXgRG02GMSvbXnr5DDZYys=) 2: H_7ICe9bA6bKL6KxaXlnbRtE9DQ.roa (hash: myn2XXBsyfDvjK8OtF68llJ02gjDW6IloTyqRTy6l4w=) 3: Hs51wq2_SIQJ1nds1uh8F6Dx3ik.roa (hash: qxptTNT2o/4UgSRP/kpcf65j1wxXKH/EWbmmjxAt01o=) 4: N2OatwOOlKKioT0NRltvF2MW-2A.roa (hash: AtT0Hq5M6f320Q4NS840MNR01KALlUtkbsCAVvpe4jQ=) 5: OnrSgXShMD1_YxLsr4K4NR2DYjo.roa (hash: bEj/ZTsWrileSoseeV3gIpSqKmunzW5sU0pOXuBCYTw=) 6: P36bForyKz3A1xYxUt5uRvnbjGo.roa (hash: CVAU2pcmHNPpR0Ea2g62GxYoWi/yJ4n8I1Gjfyzzm7o=) 7: SM90LiH91VtlPCGHFr3CKSsHv0Y.roa (hash: XAYb3lsOE4KC9elTgFUEcm0bx9BxW9iNpIaDYCdyiew=) 8: UqleOCOfPnolHy26c63w8sv6kxk.roa (hash: TFhiCPhgDCJT/VB/4VLTfoJPPS4mOC/hIwRArT1aGa4=) 9: hA4LZGEpLGlLMjbHRVLskAR0nGU.roa (hash: VmVFGxtwjgzGgXnpNKA7htr01o6wk9c+gM+jTcxW2ok=) 10: kTAGdAP94XB_eZK0C7vAHDqzJI8.roa (hash: CuJkjxQNxfp3wO54mRyTZ1oYxOazwRwfQjI9X+1M5ho=) 11: r_euWEHWB_wzU16rSDnkg8NIiGM.roa (hash: 12QG/5iTtnjlTjpFN6Uc829CvAhr4LDM2fjYVha8AqA=) 12: uZHn0r02l2agjVRMRfZ3xICbMLw.roa (hash: YR/6cl0OhmlwCiQwg5TQ7bSWNguLPLl/GP2GOc23T+k=) 13: yYOwtyKahcxZCOoytNIFiE-qAW8.roa (hash: eofnDKszG901n4rKY8DsTQFASkhAGR/8+Zpt3ZNH6qA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:b6:f5:07:8e:91:0a:ff:ca:1d:5e:ba:9a:d7:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Validity Not Before: Sep 24 00:00:46 2026 GMT Not After : Sep 25 00:00:46 2026 GMT Subject: CN=dee9b6a5f86022cb897e8900391bd6f4194771ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:aa:c9:86:0e:b4:7f:f7:d2:60:1f:2f:5a:68: 96:f6:4f:45:e0:8a:2d:6a:ec:01:12:52:a7:79:61: 08:ff:99:85:35:82:ea:e7:5e:0b:62:c0:5a:09:d6: 27:88:12:5b:9d:f4:40:ad:73:31:11:a0:ed:d8:7c: c1:43:63:e1:07:d9:6c:f6:14:6a:b4:cf:55:5f:1c: 6d:d6:5f:d9:f3:36:33:35:b3:79:f5:e3:8e:0e:98: f0:ba:c8:f2:4c:61:b5:5f:43:23:03:55:59:d8:1b: 8d:a1:a8:2c:2e:29:c0:b2:74:6a:5a:9b:44:07:1b: 11:f4:f3:9f:cb:fb:f4:09:72:a3:d3:2a:a7:7e:43: 56:7d:f0:eb:a5:87:f6:09:23:09:9a:7a:e8:43:88: 8a:eb:7e:ef:c7:19:45:d2:83:e4:46:98:81:ba:4c: a2:b6:74:28:70:77:4f:4f:97:d5:c3:09:86:c4:c0: 16:ef:6a:84:9b:82:b3:67:31:97:03:ea:b2:62:aa: 38:10:94:c5:21:cb:9d:ab:f5:64:24:c9:d3:ed:7c: 25:b7:75:45:de:a5:ec:b3:43:a8:39:7d:4e:d9:07: 67:58:03:eb:8b:0f:7f:00:49:fe:6e:4e:fc:64:99: 09:57:e1:04:89:40:f5:bd:fa:02:61:0d:ab:31:f0: f5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E9:B6:A5:F8:60:22:CB:89:7E:89:00:39:1B:D6:F4:19:47:71:EA X509v3 Authority Key Identifier: keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:97:69:92:5b:c1:7e:44:39:7b:1f:ff:ce:6d:d9:1b:3b:76: 96:7d:3a:3f:ed:7a:65:3c:d0:0b:8d:b8:c9:62:6b:39:83:af: 07:eb:75:7d:c6:95:cb:88:26:20:ed:ee:25:07:dd:aa:d7:e1: 18:64:4b:e9:1f:1d:12:4f:91:82:fb:99:86:40:3d:8f:27:5d: b1:14:4a:35:1a:36:4b:28:c6:8a:34:60:58:30:8c:04:7c:1d: 6c:6c:a7:42:6b:63:cd:c2:25:a3:c2:dd:92:7b:a3:7c:cc:6d: 02:a5:1d:7c:09:ff:56:f1:13:56:ac:62:00:45:04:b2:ee:e9: d2:b8:88:fb:d5:b2:4e:ad:d2:40:d1:a7:4f:60:d5:37:32:84: 40:98:b6:17:94:df:44:8e:54:0a:01:04:03:3e:79:44:6e:1c: ff:f7:ea:77:63:4f:34:31:27:3a:4e:1e:20:99:b3:b8:7a:bb: 41:83:2c:46:61:05:9d:59:61:18:02:20:1a:a2:f9:58:9b:79: 6c:5a:45:a4:3c:58:ba:86:33:01:f4:da:37:07:a6:06:65:57: 7d:a2:47:08:c2:d8:7a:41:7b:0f:3e:9d:55:7e:74:99:a2:52: 48:91:b8:37:83:29:03:57:2e:96:47:bf:59:30:b8:b9:2e:35: 11:5a:00:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQtvUHjpEK/8odXrqa103AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlM2YzMWM5ZWFjZTZmMGE1ZWNjZGI4ZGYyYjAxYzczNTE1 Njg2ODYwHhcNMjYwOTI0MDAwMDQ2WhcNMjYwOTI1MDAwMDQ2WjAzMTEwLwYDVQQD EyhkZWU5YjZhNWY4NjAyMmNiODk3ZTg5MDAzOTFiZDZmNDE5NDc3MWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36rJhg60f/fSYB8vWmiW9k9F4Iot auwBElKneWEI/5mFNYLq514LYsBaCdYniBJbnfRArXMxEaDt2HzBQ2PhB9ls9hRq tM9VXxxt1l/Z8zYzNbN59eOODpjwusjyTGG1X0MjA1VZ2BuNoagsLinAsnRqWptE BxsR9POfy/v0CXKj0yqnfkNWffDrpYf2CSMJmnroQ4iK637vxxlF0oPkRpiBukyi tnQocHdPT5fVwwmGxMAW72qEm4KzZzGXA+qyYqo4EJTFIcudq/VkJMnT7Xwlt3VF 3qXss0OoOX1O2QdnWAPriw9/AEn+bk78ZJkJV+EEiUD1vfoCYQ2rMfD1UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7ptqX4YCLLiX6JADkb1vQZR3HqMB8GA1UdIwQY MBaAFA4/Mcnqzm8KXszbjfKwHHNRVoaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYt ZGQ1ZGRkMDVkYjBiLzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYtZGQ1ZGRkMDVkYjBi LzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJdpklvB fkQ5ex//zm3ZGzt2ln06P+16ZTzQC424yWJrOYOvB+t1fcaVy4gmIO3uJQfdqtfh GGRL6R8dEk+RgvuZhkA9jyddsRRKNRo2SyjGijRgWDCMBHwdbGynQmtjzcIlo8Ld knujfMxtAqUdfAn/VvETVqxiAEUEsu7p0riI+9WyTq3SQNGnT2DVNzKEQJi2F5Tf RI5UCgEEAz55RG4c//fqd2NPNDEnOk4eIJmzuHq7QYMsRmEFnVlhGAIgGqL5WJt5 bFpFpDxYuoYzAfTaNwemBmVXfaJHCMLYekF7Dz6dVX50maJSSJG4N4MpA1culke/ WTC4uS41EVoAMg== -----END CERTIFICATE-----Generated at Thu Sep 24 04:22:48 2026 by rpki-client