$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json) Hash identifier: lqpIZp0vzKuBQod/2QgeBFW4mETFKFBP1ILgXUywDNQ= Subject key identifier: CF:BC:84:D7:D4:2A:0E:24:85:B9:BB:3F:4B:15:D8:19:92:76:1D:4D Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 01A1DD26D34F165B4BCE08DF14222C1E675A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft Manifest number: 03B7 Signing time: Sun 15 Nov 2026 03:01:11 +0000 Manifest this update: Sun 15 Nov 2026 03:01:11 +0000 Manifest next update: Mon 16 Nov 2026 03:01:11 +0000 Files and hashes: 1: 5bgXaKN4hNNnz1DSnp5RelfVjjU.roa (hash: dYGhF0WHwXTYiuMBvgCo0Nh2zgJTOeCE4oHJREko2dE=) 2: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (hash: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE=) 3: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (hash: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8=) 4: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (hash: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY=) 5: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (hash: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0=) 6: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (hash: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw=) 7: Uv6m5Ze8bGG3Zo-jWPLZit_cFAU.roa (hash: jJYA/CveQeDzpZWlaXQqIIF2Ui2N++3iqqXHakxy7Dw=) 8: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (hash: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE=) 9: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (hash: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4=) 10: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (hash: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c=) 11: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: CqLNI9jA7I7gBkRv0b2Xr9JAHQP+PD0Qj0x5JGuAJOc=) 12: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (hash: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0=) 13: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (hash: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 03:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:26:d3:4f:16:5b:4b:ce:08:df:14:22:2c:1e:67:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Nov 15 03:01:11 2026 GMT Not After : Nov 16 03:01:11 2026 GMT Subject: CN=cfbc84d7d42a0e2485b9bb3f4b15d81992761d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:e1:3a:51:1f:e7:e8:ba:51:30:73:15:9a: 5e:d8:e0:85:aa:24:84:2e:b5:2b:1d:90:60:76:58: 18:df:23:f4:a9:8a:fb:12:fb:66:28:92:14:32:49: 6a:9a:5d:8b:9a:05:d5:47:99:5b:de:ba:46:f3:fe: db:b8:71:45:1b:2d:af:04:02:3c:91:cb:9a:f4:7d: e7:5e:1f:7d:b5:1f:59:ee:2b:e2:ac:21:a5:1f:69: 43:b0:89:a0:aa:0c:63:c6:6d:33:37:b2:78:69:37: 8c:25:e9:a9:a7:f4:97:46:81:f7:05:f0:bc:c2:bb: 90:a5:f6:10:04:86:a5:d1:90:0e:93:60:c4:66:22: 77:32:f2:eb:d4:ca:b4:a4:72:af:b2:b2:6e:8a:f7: 0a:b9:e6:90:1a:a5:69:2e:3b:85:67:1c:3d:fb:a0: 5a:29:90:b2:0d:ae:28:79:e5:5d:44:39:44:87:e9: bb:04:3a:4a:8c:b8:d5:4a:d6:27:d9:02:78:51:3c: f5:f1:c4:90:d5:bf:80:38:a0:45:f7:1a:1e:da:61: 39:58:19:f9:b0:80:24:d0:ce:bd:21:20:f0:7b:49: 34:60:18:65:4e:8f:59:75:f6:95:08:c8:a3:3b:a9: 0d:bd:63:f4:4a:5c:66:61:16:8c:fb:45:62:bd:3c: 63:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BC:84:D7:D4:2A:0E:24:85:B9:BB:3F:4B:15:D8:19:92:76:1D:4D X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:02:0a:3a:d8:7b:41:cc:25:b3:b5:99:06:b3:90:a2:fc:5e: 45:c0:4b:99:08:2f:d0:2d:22:18:be:83:d3:71:29:97:d3:7a: be:a9:8c:d0:c9:2f:1e:5b:96:f5:bc:07:78:76:bf:ee:96:95: 01:36:bf:24:92:69:50:fb:65:be:08:3d:21:12:62:64:d8:21: c3:fb:b3:38:89:f0:c1:0d:26:3a:63:a2:96:65:e7:0f:a3:ce: 3f:a4:21:39:35:66:62:f5:62:66:7c:f4:bb:80:97:18:86:85: 6d:3a:71:28:c9:75:ae:09:11:ef:ab:85:35:f6:7c:b0:d9:ff: 94:8f:9d:1d:06:5b:7a:e5:ac:b2:3f:79:41:bb:e3:80:7d:04: b3:0c:1c:6b:20:4f:39:9a:f5:28:d6:ee:77:83:6a:16:70:02: e8:30:15:fb:2f:97:78:6f:cf:bc:26:bb:5f:d7:a1:70:2b:3b: ff:3b:0b:8f:f8:24:82:b9:c0:94:e4:d4:7e:e0:1c:0a:30:9d: 5d:c5:8f:d7:92:9c:30:04:b1:57:47:ca:58:a5:92:af:24:01: 8c:41:30:81:98:29:c2:05:d2:3b:f8:91:5f:0a:e8:23:69:ec: 56:20:36:d7:55:08:95:17:15:21:b4:16:f4:da:52:71:1a:63: ad:3d:c9:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdJtNPFltLzgjfFCIsHmdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYxMTE1MDMwMTExWhcNMjYxMTE2MDMwMTExWjAzMTEwLwYDVQQD EyhjZmJjODRkN2Q0MmEwZTI0ODViOWJiM2Y0YjE1ZDgxOTkyNzYxZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKLhOlEf5+i6UTBzFZpe2OCFqiSE LrUrHZBgdlgY3yP0qYr7EvtmKJIUMklqml2LmgXVR5lb3rpG8/7buHFFGy2vBAI8 kcua9H3nXh99tR9Z7ivirCGlH2lDsImgqgxjxm0zN7J4aTeMJempp/SXRoH3BfC8 wruQpfYQBIal0ZAOk2DEZiJ3MvLr1Mq0pHKvsrJuivcKueaQGqVpLjuFZxw9+6Ba KZCyDa4oeeVdRDlEh+m7BDpKjLjVStYn2QJ4UTz18cSQ1b+AOKBF9xoe2mE5WBn5 sIAk0M69ISDwe0k0YBhlTo9ZdfaVCMijO6kNvWP0SlxmYRaM+0VivTxjqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+8hNfUKg4khbm7P0sV2BmSdh1NMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAIKOth7 Qcwls7WZBrOQovxeRcBLmQgv0C0iGL6D03Epl9N6vqmM0MkvHluW9bwHeHa/7paV ATa/JJJpUPtlvgg9IRJiZNghw/uzOInwwQ0mOmOilmXnD6POP6QhOTVmYvViZnz0 u4CXGIaFbTpxKMl1rgkR76uFNfZ8sNn/lI+dHQZbeuWssj95QbvjgH0EswwcayBP OZr1KNbud4NqFnAC6DAV+y+XeG/PvCa7X9ehcCs7/zsLj/gkgrnAlOTUfuAcCjCd XcWP15KcMASxV0fKWKWSryQBjEEwgZgpwgXSO/iRXwroI2nsViA211UIlRcVIbQW 9NpScRpjrT3Jlw== -----END CERTIFICATE-----Generated at Sun Nov 15 13:09:29 2026 by rpki-client