$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json) Hash identifier: STg4B7duxc9t4F0WEOutVofMMs5rq40W7f6TyXme88o= Subject key identifier: 44:05:78:8A:58:FE:BA:D1:48:36:24:2B:6D:6C:0F:9A:AF:B5:CF:6D Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 01A0D49434878A8A8C5AC68617EC998E2325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft Manifest number: 032E Signing time: Thu 24 Sep 2026 18:01:17 +0000 Manifest this update: Thu 24 Sep 2026 18:01:17 +0000 Manifest next update: Fri 25 Sep 2026 18:01:17 +0000 Files and hashes: 1: 5bgXaKN4hNNnz1DSnp5RelfVjjU.roa (hash: dYGhF0WHwXTYiuMBvgCo0Nh2zgJTOeCE4oHJREko2dE=) 2: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (hash: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE=) 3: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (hash: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8=) 4: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (hash: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY=) 5: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (hash: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0=) 6: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (hash: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw=) 7: Uv6m5Ze8bGG3Zo-jWPLZit_cFAU.roa (hash: jJYA/CveQeDzpZWlaXQqIIF2Ui2N++3iqqXHakxy7Dw=) 8: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (hash: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE=) 9: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (hash: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4=) 10: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (hash: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c=) 11: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: d9bAqU0bEzBW7pYMglJjbhmzKAS23Q4h9CCOKJHLaqE=) 12: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (hash: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0=) 13: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (hash: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 18:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:94:34:87:8a:8a:8c:5a:c6:86:17:ec:99:8e:23:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Sep 24 18:01:17 2026 GMT Not After : Sep 25 18:01:17 2026 GMT Subject: CN=4405788a58febad14836242b6d6c0f9aafb5cf6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:36:63:c6:68:81:9a:1c:9f:bf:2f:fc:6f:d4: 86:ad:5c:e3:0d:4c:ee:ed:e2:73:55:01:66:13:dd: a0:b1:22:37:17:17:e0:11:1d:08:02:f0:c8:9c:f3: fa:11:b3:6e:38:72:1d:e5:2c:21:a7:b8:90:01:c3: 73:47:9f:28:92:4b:62:f1:e0:cf:4d:6c:12:31:d7: b6:d6:80:55:52:47:56:21:7e:9d:43:b6:93:47:a3: 0c:b8:ea:51:3d:35:44:1e:11:62:84:0c:a0:99:41: a0:1c:f5:b0:dc:50:dc:6e:70:33:63:51:44:49:bc: e2:18:93:3a:6e:f6:db:e2:cb:6c:0b:80:88:68:54: ee:5b:db:36:0b:3b:cd:6a:b0:03:15:6c:e3:07:60: 36:6e:5b:51:75:11:d0:78:af:95:35:0d:23:b6:58: 96:9f:5a:b9:57:b5:07:77:41:03:fc:f1:3a:89:62: e0:b2:d4:4e:d8:99:b7:b8:30:7f:89:b0:65:01:37: d4:ba:b4:34:59:2a:de:4e:d5:0a:12:3b:13:0b:39: ef:a8:27:2a:20:1e:38:f3:5b:9e:13:4b:9c:ba:ad: 7e:b1:f6:de:9a:69:14:46:22:f5:29:46:ed:b8:9e: 0a:18:85:35:bc:ea:3e:70:cc:5f:1c:86:7f:6b:4c: 20:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:05:78:8A:58:FE:BA:D1:48:36:24:2B:6D:6C:0F:9A:AF:B5:CF:6D X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:3e:48:e0:b5:60:74:72:be:2b:80:03:04:2f:f9:58:1c:75: 5e:b2:7e:16:5e:20:dc:51:38:6d:ff:a2:93:18:06:60:d0:83: 0c:28:c1:fc:3f:05:28:25:e1:02:9f:2a:da:3b:20:bf:37:b8: 11:5c:29:f6:fc:a2:ae:22:db:8b:83:4c:3d:64:12:32:8a:93: 5f:8e:9b:8f:9c:22:81:5c:30:81:19:4d:ba:1c:b5:0d:14:42: 90:59:8f:67:4b:4d:95:e4:66:40:5d:a0:ff:3b:4e:09:25:1e: 13:a3:de:f7:7e:f1:92:7b:a1:92:43:19:49:23:77:07:6a:fc: b3:13:d4:29:bb:ee:18:8e:c1:94:f1:da:28:a6:c5:e2:69:18: 6e:71:3b:bb:34:7c:64:55:e9:2a:c7:60:f6:a1:ee:1d:f3:be: 11:d9:ee:87:bc:07:e8:bf:b6:8b:72:11:89:00:fa:65:21:ea: bd:bc:45:c2:d5:0b:d2:53:76:06:28:82:a6:e3:61:38:89:80: 61:e7:82:bf:0b:a1:93:5b:a7:a4:8a:d9:f5:5b:11:ab:70:7a: 74:01:99:f6:c9:48:df:7d:d3:ef:c0:e2:97:bf:d9:02:6f:f8: f1:c3:bb:b1:d9:f7:ba:89:a4:b1:00:f6:1c:ff:bb:5c:4d:49: 43:d6:b1:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUlDSHioqMWsaGF+yZjiMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwOTI0MTgwMTE3WhcNMjYwOTI1MTgwMTE3WjAzMTEwLwYDVQQD Eyg0NDA1Nzg4YTU4ZmViYWQxNDgzNjI0MmI2ZDZjMGY5YWFmYjVjZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzZjxmiBmhyfvy/8b9SGrVzjDUzu 7eJzVQFmE92gsSI3FxfgER0IAvDInPP6EbNuOHId5Swhp7iQAcNzR58okkti8eDP TWwSMde21oBVUkdWIX6dQ7aTR6MMuOpRPTVEHhFihAygmUGgHPWw3FDcbnAzY1FE SbziGJM6bvbb4stsC4CIaFTuW9s2CzvNarADFWzjB2A2bltRdRHQeK+VNQ0jtliW n1q5V7UHd0ED/PE6iWLgstRO2Jm3uDB/ibBlATfUurQ0WSreTtUKEjsTCznvqCcq IB4481ueE0ucuq1+sfbemmkURiL1KUbtuJ4KGIU1vOo+cMxfHIZ/a0wgbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQFeIpY/rrRSDYkK21sD5qvtc9tMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApz5I4LVg dHK+K4ADBC/5WBx1XrJ+Fl4g3FE4bf+ikxgGYNCDDCjB/D8FKCXhAp8q2jsgvze4 EVwp9vyiriLbi4NMPWQSMoqTX46bj5wigVwwgRlNuhy1DRRCkFmPZ0tNleRmQF2g /ztOCSUeE6Pe937xknuhkkMZSSN3B2r8sxPUKbvuGI7BlPHaKKbF4mkYbnE7uzR8 ZFXpKsdg9qHuHfO+Ednuh7wH6L+2i3IRiQD6ZSHqvbxFwtUL0lN2BiiCpuNhOImA YeeCvwuhk1unpIrZ9VsRq3B6dAGZ9slI333T78Dil7/ZAm/48cO7sdn3uomksQD2 HP+7XE1JQ9ax+g== -----END CERTIFICATE-----Generated at Fri Sep 25 02:33:28 2026 by rpki-client