$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: vH/sHlypfHVUT/Xr6Yi17YSmYgPuNaIyoGFURlBhiHc= Subject key identifier: 6C:7E:43:66:9E:E1:47:3D:B5:A5:0A:84:C1:BB:AA:2F:4B:F4:68:A2 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 01A0D8047E4C85D463B34778CBABD90B581A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 1674 Signing time: Fri 25 Sep 2026 10:02:48 +0000 Manifest this update: Fri 25 Sep 2026 10:02:48 +0000 Manifest next update: Sat 26 Sep 2026 10:02:48 +0000 Files and hashes: 1: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 2: G_q5f4vw9sXuTqx5koUR1CtdghA.roa (hash: /DXlK/XppxG3EnWKLZh5jMXkLtlLrmR+JVAULY2Fmuw=) 3: Kh4_VoB6YEgaSwRCsMKIhi6qzp4.roa (hash: e0GnvRoQCozfmziXi7HSJRfK79f9SZF+NnjU+2fBto0=) 4: VbMi_wHP2Osb2Lj2_Em7nJaGNqg.roa (hash: DXcUvI/zDgzBNbnxDQ9BXaRP7H2Z8Bv9bfXDaGGxiyQ=) 5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 8: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 9: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 10: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 11: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 12: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 13: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: pGPo8AsHfFF+SXI8uD8UrAygH8KPe6XiUlTXTiv24s0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d8:04:7e:4c:85:d4:63:b3:47:78:cb:ab:d9:0b:58:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Sep 25 10:02:48 2026 GMT Not After : Sep 26 10:02:48 2026 GMT Subject: CN=6c7e43669ee1473db5a50a84c1bbaa2f4bf468a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ab:ba:27:42:b0:0e:8f:6e:db:40:19:7a:7a: cb:90:a7:c1:6e:1c:a5:b0:9e:a1:ca:be:5d:e0:c8: 5c:29:79:1c:f2:c0:21:91:6c:1d:30:ad:d7:5a:4b: c7:16:29:c6:1e:d2:ae:71:7f:68:cf:97:51:59:b5: 42:ac:5e:dd:4c:88:86:66:b8:cb:71:e8:a5:3b:09: 4a:88:10:5d:b1:87:98:6b:62:f9:48:e5:18:18:61: 1f:4e:34:e5:d0:b7:09:17:61:b3:c1:8a:29:f0:a1: 29:ee:90:a0:77:5c:68:9c:43:c9:53:91:a9:c1:da: 00:3f:1d:94:60:bc:0f:c7:2a:dc:00:f6:eb:0b:83: 63:68:88:68:b9:57:c7:da:fb:e1:32:da:43:e8:ef: e7:e6:93:55:94:92:32:e0:f8:da:43:12:d4:a5:87: 51:b2:46:7e:57:82:bb:be:8d:67:5b:1a:43:2d:4f: 2a:b3:74:64:7b:5c:84:73:db:58:c2:9b:ab:d4:69: de:c5:39:ad:f4:46:53:ef:3e:55:cb:ff:1b:ac:c0: a3:60:9d:8c:6d:f4:1b:44:6d:2a:62:aa:5f:99:bd: 2e:05:b9:b4:78:61:31:a6:0a:a0:fd:e8:9b:00:81: d1:0b:5b:4b:d3:38:79:a0:72:68:cd:4e:37:6c:58: 20:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7E:43:66:9E:E1:47:3D:B5:A5:0A:84:C1:BB:AA:2F:4B:F4:68:A2 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:36:c7:2e:38:55:b4:c4:8f:67:2e:63:17:a9:ba:23:47:a5: 02:17:79:1c:66:95:7c:e1:92:b3:cd:1f:aa:fb:ab:e9:d6:7d: bd:99:b2:09:62:77:ec:f3:df:52:f7:b5:9d:df:41:42:e7:67: 66:5b:0b:0f:b0:2f:a8:00:c7:8e:de:94:fd:4f:9b:4b:c5:3c: f9:dc:45:eb:fe:1b:37:1d:d9:c5:6b:f1:26:69:f5:c2:ed:9c: 98:6d:43:ba:ab:10:20:fb:bc:0b:d4:0a:46:42:4d:ad:30:81: a9:48:c7:8b:75:95:99:1d:2b:c9:3e:7c:50:63:f2:21:87:89: b3:cb:4c:ec:fe:28:cb:0a:85:39:f7:3e:d1:b2:4a:eb:3d:e3: bb:f3:b2:5b:64:aa:6a:02:07:b6:f9:77:50:a3:d0:47:ba:cc: e4:18:3c:9c:06:42:5e:7d:1e:9e:2b:f4:90:fa:7c:7d:29:22: ee:fb:8e:7d:55:82:4b:f1:d8:03:1a:04:19:b3:7b:eb:6f:af: e1:cf:5b:41:ea:26:74:60:8a:77:1c:95:f2:97:dd:5d:7b:dd: ff:a4:e5:7e:fb:4d:1d:d6:89:6a:71:ad:d8:00:f3:86:d8:c6: a4:d5:17:e9:82:95:11:f9:b9:6c:3c:3f:d9:81:ec:c8:d1:26: d3:ac:b3:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDYBH5MhdRjs0d4y6vZC1gaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwOTI1MTAwMjQ4WhcNMjYwOTI2MTAwMjQ4WjAzMTEwLwYDVQQD Eyg2YzdlNDM2NjllZTE0NzNkYjVhNTBhODRjMWJiYWEyZjRiZjQ2OGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6u6J0KwDo9u20AZenrLkKfBbhyl sJ6hyr5d4MhcKXkc8sAhkWwdMK3XWkvHFinGHtKucX9oz5dRWbVCrF7dTIiGZrjL ceilOwlKiBBdsYeYa2L5SOUYGGEfTjTl0LcJF2GzwYop8KEp7pCgd1xonEPJU5Gp wdoAPx2UYLwPxyrcAPbrC4NjaIhouVfH2vvhMtpD6O/n5pNVlJIy4PjaQxLUpYdR skZ+V4K7vo1nWxpDLU8qs3Rke1yEc9tYwpur1GnexTmt9EZT7z5Vy/8brMCjYJ2M bfQbRG0qYqpfmb0uBbm0eGExpgqg/eibAIHRC1tL0zh5oHJozU43bFggcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGx+Q2ae4Uc9taUKhMG7qi9L9GiiMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTbHLjhV tMSPZy5jF6m6I0elAhd5HGaVfOGSs80fqvur6dZ9vZmyCWJ37PPfUve1nd9BQudn ZlsLD7AvqADHjt6U/U+bS8U8+dxF6/4bNx3ZxWvxJmn1wu2cmG1DuqsQIPu8C9QK RkJNrTCBqUjHi3WVmR0ryT58UGPyIYeJs8tM7P4oywqFOfc+0bJK6z3ju/OyW2Sq agIHtvl3UKPQR7rM5Bg8nAZCXn0eniv0kPp8fSki7vuOfVWCS/HYAxoEGbN762+v 4c9bQeomdGCKdxyV8pfdXXvd/6TlfvtNHdaJanGt2ADzhtjGpNUX6YKVEfm5bDw/ 2YHsyNEm06yzKg== -----END CERTIFICATE-----Generated at Fri Sep 25 16:30:54 2026 by rpki-client