$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: WS7nsS0mGrPxgB23Upj1w1ODDjeRqOjug6WoAbdaVRg= Subject key identifier: 8A:36:23:A1:8F:24:ED:FA:CA:BA:08:D2:EC:1C:17:A7:EB:A7:2D:95 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 01A0D426966E456AE63DA83883AD71109D39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 1672 Signing time: Thu 24 Sep 2026 16:01:33 +0000 Manifest this update: Thu 24 Sep 2026 16:01:33 +0000 Manifest next update: Fri 25 Sep 2026 16:01:33 +0000 Files and hashes: 1: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 2: G_q5f4vw9sXuTqx5koUR1CtdghA.roa (hash: /DXlK/XppxG3EnWKLZh5jMXkLtlLrmR+JVAULY2Fmuw=) 3: Kh4_VoB6YEgaSwRCsMKIhi6qzp4.roa (hash: e0GnvRoQCozfmziXi7HSJRfK79f9SZF+NnjU+2fBto0=) 4: VbMi_wHP2Osb2Lj2_Em7nJaGNqg.roa (hash: DXcUvI/zDgzBNbnxDQ9BXaRP7H2Z8Bv9bfXDaGGxiyQ=) 5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 8: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 9: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 10: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 11: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 12: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 13: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: JqLuZ9VU8+dGz5TYyI3lGIVmeIS+simjC9MuhZbYOgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 16:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:26:96:6e:45:6a:e6:3d:a8:38:83:ad:71:10:9d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Sep 24 16:01:33 2026 GMT Not After : Sep 25 16:01:33 2026 GMT Subject: CN=8a3623a18f24edfacaba08d2ec1c17a7eba72d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e2:9c:be:e9:c6:50:74:3c:2a:27:ee:d9:47: bc:60:13:57:5d:e8:d4:12:ab:28:03:ac:26:ec:ea: 44:9d:eb:4f:52:f2:e4:58:52:a1:83:08:aa:c3:09: 81:c3:3c:db:4f:6f:c1:2b:6f:00:7a:94:f3:b1:1f: 13:d3:27:73:d1:9b:3d:65:c8:b7:0f:d4:a0:4c:c8: e0:40:ff:a2:ca:52:7d:c5:77:75:6e:00:4b:dc:ab: b8:36:0c:eb:83:5c:f0:e7:b2:c6:4f:62:d5:07:40: a8:45:86:3d:46:97:fb:5e:fe:2c:6e:15:50:38:20: 5b:04:4b:70:81:0c:4c:a4:90:5b:28:22:01:02:35: 47:d5:47:fc:9f:93:95:0e:aa:f2:ed:14:1f:0f:b2: 44:2a:32:16:66:ae:ee:85:86:0e:3b:2b:d3:3c:69: f0:66:5a:10:2c:58:90:fb:85:74:00:80:ef:48:ee: 42:16:75:e4:56:b4:b9:37:1c:92:43:74:f1:f7:1d: d4:49:30:93:c2:aa:b5:70:68:92:e8:b9:2e:ee:d2: cb:e7:ce:47:c7:1a:36:07:f6:ef:7b:71:0c:66:b9: 58:ca:42:1e:d3:5c:87:52:8d:bc:c9:00:1a:88:d7: e7:9d:ba:ed:da:bd:48:20:a7:f1:ca:ae:27:b2:95: b7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:36:23:A1:8F:24:ED:FA:CA:BA:08:D2:EC:1C:17:A7:EB:A7:2D:95 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:fb:51:f4:dc:f5:51:7a:09:9b:01:68:7d:45:42:2b:71:68: 84:d9:20:dc:9a:b5:39:29:f3:a6:80:4b:25:58:f2:2b:ce:80: 82:56:ee:d5:9a:d5:91:f8:b2:4c:3b:1d:3c:1e:14:72:6a:05: ba:1a:47:c5:85:49:fd:6c:ca:da:cf:74:87:f4:c5:15:9f:db: cd:ee:13:9a:f3:a6:42:30:f6:d2:bc:1c:35:1a:68:c1:21:56: da:de:af:74:d2:d0:90:7b:ab:ca:7b:fb:7d:7f:b8:f9:8f:0d: 24:fa:9a:fa:9a:c8:30:51:c9:ae:28:0d:80:85:97:4c:77:f5: d3:4a:4e:5a:52:12:10:be:12:94:43:35:74:0d:b3:34:db:cf: 8c:84:6b:ae:d0:1b:45:e3:89:71:b3:4f:c3:44:a9:72:88:f5: 23:dc:ac:89:a7:3b:93:c5:7e:68:3f:17:d1:4d:f6:8e:82:fa: b2:8a:cb:b8:5a:3d:c6:32:d0:8c:f9:c7:a2:a3:3c:16:c8:c4: e9:ae:ca:70:e2:9e:8e:d5:a5:59:79:6d:65:9c:ef:22:b0:c5: b4:58:9d:25:86:5c:00:d9:69:34:e9:8f:21:52:e9:c1:b9:cf: 26:ab:0f:ed:18:74:80:e5:69:0d:fe:35:08:68:86:40:ec:5a: ae:bd:3a:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUJpZuRWrmPag4g61xEJ05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwOTI0MTYwMTMzWhcNMjYwOTI1MTYwMTMzWjAzMTEwLwYDVQQD Eyg4YTM2MjNhMThmMjRlZGZhY2FiYTA4ZDJlYzFjMTdhN2ViYTcyZDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuKcvunGUHQ8Kifu2Ue8YBNXXejU EqsoA6wm7OpEnetPUvLkWFKhgwiqwwmBwzzbT2/BK28AepTzsR8T0ydz0Zs9Zci3 D9SgTMjgQP+iylJ9xXd1bgBL3Ku4Ngzrg1zw57LGT2LVB0CoRYY9Rpf7Xv4sbhVQ OCBbBEtwgQxMpJBbKCIBAjVH1Uf8n5OVDqry7RQfD7JEKjIWZq7uhYYOOyvTPGnw ZloQLFiQ+4V0AIDvSO5CFnXkVrS5NxySQ3Tx9x3USTCTwqq1cGiS6Lku7tLL585H xxo2B/bve3EMZrlYykIe01yHUo28yQAaiNfnnbrt2r1IIKfxyq4nspW3IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIo2I6GPJO36yroI0uwcF6frpy2VMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvtR9Nz1 UXoJmwFofUVCK3FohNkg3Jq1OSnzpoBLJVjyK86Aglbu1ZrVkfiyTDsdPB4UcmoF uhpHxYVJ/WzK2s90h/TFFZ/bze4TmvOmQjD20rwcNRpowSFW2t6vdNLQkHurynv7 fX+4+Y8NJPqa+prIMFHJrigNgIWXTHf100pOWlISEL4SlEM1dA2zNNvPjIRrrtAb ReOJcbNPw0Spcoj1I9ysiac7k8V+aD8X0U32joL6sorLuFo9xjLQjPnHoqM8FsjE 6a7KcOKejtWlWXltZZzvIrDFtFidJYZcANlpNOmPIVLpwbnPJqsP7Rh0gOVpDf41 CGiGQOxarr06ZQ== -----END CERTIFICATE-----Generated at Fri Sep 25 01:22:21 2026 by rpki-client