$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft File: pnhXc98xO5FxG_a8WxSezCRrnok.mft (raw, json) Hash identifier: T9WgXwuisCs06D0wllvWVK5gJ2g5ErmL3NN2luxhLOk= Subject key identifier: 8A:19:47:D4:CC:87:E6:64:7C:1F:55:84:5A:DC:3A:EE:B1:A0:45:6E Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 01A0DBA8F1FCDBB4E33D2A9686D5E6F400D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft Manifest number: 183D Signing time: Sat 26 Sep 2026 03:01:17 +0000 Manifest this update: Sat 26 Sep 2026 03:01:17 +0000 Manifest next update: Sun 27 Sep 2026 03:01:17 +0000 Files and hashes: 1: C8g7Pi5B0RKpnrlAYnkGNfdVaNI.roa (hash: wxMFCVvSA3tdy7i3OaSOQ9SIAg2wmBIcYz9jkUGPtlk=) 2: Ine_1lLdl47bEMn6aiw9Axcdsgo.roa (hash: S/r8lpXeW/d857boj4AgP81lqUx6Xba1Zs9uDln2Uuk=) 3: L9nqjZgCKM_h4eShTqHdEr9Np6c.roa (hash: m3EOAebEcr3Ec2NVZh7NKfNA+27GisIbFErRrtFBX6k=) 4: NanNAKKpriw1xLHpXZYYWO89_ic.roa (hash: vJoNpzNu5goOWjEeID9l0AJGNtpWeDH6gI91uoAnwIk=) 5: O6JDbaslrGOSZKrdtuCBt6ssF94.roa (hash: 8ty72z4beTGAGlxyLGLA0AACx0Qa5f/MkundTg5sepM=) 6: Wvbb_a2COrZy8u2YHT4IAcPCo7A.roa (hash: JCvZpNcLMyYDQVI9nqJFb7h8bZSYYqo2EDX3T4my9ww=) 7: ZQQkerLBkFsKEtd48dsMSA_rmYI.roa (hash: 6NjK7e1f3uOhtOOeU7twP9rf1tXwX1yAjDALcNdcBDM=) 8: _dst1Xn6SlUI8nUoQkjpnLlhahc.roa (hash: BiPvKLoz5HOyAuWJJP0IXnbLHFFchqo6uteOhXIPeKs=) 9: dDB5YY9PZuYzIK0czNYk6awWuOU.roa (hash: B1+NRVwOUhTIMmxV8tnE89O/MNjbHirt4Fghn1v7gaE=) 10: eFI0tBDLnesndLqlj1NoxqsPUjg.roa (hash: hjKjXxMem27vbAFHspC4BJNh7EJxRAQg9zId7c2baKg=) 11: pnhXc98xO5FxG_a8WxSezCRrnok.crl (hash: DqhgK88YjvNiyU9ktTiKszxc/fV8UXCKNEr9qLIKbOc=) 12: vc_G7KIML4Y1r-1xS8CYjvgQZqM.roa (hash: tS0p7+VSda9ujT1sG9qz+xFqrdY93YlWHLxpRI2nhkg=) 13: vz8HwWs32wz7LdSPq6eo_tOp0to.roa (hash: 6psAckPnQ9/EqCFp17rxTfMjqVmehqU3pMQvhEu8MeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:db:a8:f1:fc:db:b4:e3:3d:2a:96:86:d5:e6:f4:00:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Sep 26 03:01:17 2026 GMT Not After : Sep 27 03:01:17 2026 GMT Subject: CN=8a1947d4cc87e6647c1f55845adc3aeeb1a0456e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:fc:2d:53:67:12:b8:14:00:b3:56:c3:5c: 02:8e:f8:20:8e:80:b9:fc:37:2f:1f:c5:ac:c8:5c: 7f:6b:be:2a:2d:ca:67:5b:52:93:c1:c2:5e:a5:32: 84:a7:de:a6:a5:cd:52:1b:fd:2c:92:19:a7:5c:c2: 19:a5:2b:4f:d6:63:7a:6c:3d:66:6c:5a:d1:bf:0b: 43:fd:6e:06:ca:ca:ac:a9:bf:f6:10:d1:38:43:86: e3:9b:6a:56:1c:0c:a4:e8:84:3c:33:76:bc:4e:57: 29:6d:ec:9c:43:60:3a:08:a9:ad:2d:16:91:9c:54: 44:c3:42:32:a2:d6:74:89:ad:1c:b6:41:73:95:66: 54:67:40:a3:1f:20:ad:17:b7:1e:08:03:d9:c6:1a: 43:f1:1d:0f:81:e3:58:3f:8e:7b:62:70:70:5a:aa: 3a:43:45:87:42:51:95:2f:2f:a1:58:86:29:7e:68: e6:d9:ee:e3:3c:e9:d5:93:39:74:a2:83:3b:03:6c: 5e:ba:9a:05:e2:da:ad:e4:ee:5f:9c:1f:67:3f:45: 54:ca:d8:d5:ce:70:27:ab:82:5c:5e:d3:bf:86:51: d5:d8:cc:08:f5:0b:c8:61:6f:c9:a5:b1:02:57:61: 2c:32:91:b8:82:10:f1:01:88:77:d9:da:7e:1d:10: 4e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:19:47:D4:CC:87:E6:64:7C:1F:55:84:5A:DC:3A:EE:B1:A0:45:6E X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c4:96:a5:05:6b:4c:f6:66:c8:74:ed:92:0f:71:5c:21:c6: ee:b2:1b:4b:d0:1c:ca:ea:2b:c5:73:d9:da:6b:9a:65:7b:8f: fe:ea:cf:fa:c9:8d:69:d7:07:b1:9f:bb:ca:a8:30:bf:f0:0b: b8:a6:6e:42:fd:2b:f2:22:03:90:53:97:c4:9e:10:e1:e7:ea: 63:29:27:0d:3c:07:60:1d:3a:87:aa:5c:70:79:d7:cf:1e:bc: 67:17:2e:6e:03:41:b3:28:4b:29:3a:18:82:43:32:12:ab:0c: 6c:05:3b:8f:6a:fc:06:af:5a:e8:df:8b:fe:cb:29:da:ec:be: c1:b8:74:b9:c1:43:b2:03:36:75:d6:39:bd:53:02:a8:a1:89: 84:7e:b3:8c:f1:a9:11:0d:89:f1:1e:d5:06:7b:b3:62:b8:f1: dd:cf:15:67:72:a5:cf:45:a5:84:e0:c8:b5:86:8c:6d:0d:e1: a8:18:8b:7d:f7:b6:f0:87:ce:9e:88:6b:03:73:7a:22:06:ac: 95:7b:6d:e2:91:9b:d4:ed:8f:1c:5f:c2:0c:54:94:a5:a3:af: 88:08:6d:dd:d2:4f:17:c9:b3:bd:b8:b3:40:ee:c0:f0:7b:c3: 57:5b:25:84:0c:ff:76:f9:b9:df:95:cf:83:2f:51:72:86:16: 2e:e9:6c:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDbqPH827TjPSqWhtXm9ADSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjYwOTI2MDMwMTE3WhcNMjYwOTI3MDMwMTE3WjAzMTEwLwYDVQQD Eyg4YTE5NDdkNGNjODdlNjY0N2MxZjU1ODQ1YWRjM2FlZWIxYTA0NTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupn8LVNnErgUALNWw1wCjvggjoC5 /DcvH8WsyFx/a74qLcpnW1KTwcJepTKEp96mpc1SG/0skhmnXMIZpStP1mN6bD1m bFrRvwtD/W4Gysqsqb/2ENE4Q4bjm2pWHAyk6IQ8M3a8TlcpbeycQ2A6CKmtLRaR nFREw0IyotZ0ia0ctkFzlWZUZ0CjHyCtF7ceCAPZxhpD8R0PgeNYP457YnBwWqo6 Q0WHQlGVLy+hWIYpfmjm2e7jPOnVkzl0ooM7A2xeupoF4tqt5O5fnB9nP0VUytjV znAnq4JcXtO/hlHV2MwI9QvIYW/JpbECV2EsMpG4ghDxAYh32dp+HRBOYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoZR9TMh+ZkfB9VhFrcOu6xoEVuMB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnsSWpQVr TPZmyHTtkg9xXCHG7rIbS9AcyuorxXPZ2muaZXuP/urP+smNadcHsZ+7yqgwv/AL uKZuQv0r8iIDkFOXxJ4Q4efqYyknDTwHYB06h6pccHnXzx68ZxcubgNBsyhLKToY gkMyEqsMbAU7j2r8Bq9a6N+L/ssp2uy+wbh0ucFDsgM2ddY5vVMCqKGJhH6zjPGp EQ2J8R7VBnuzYrjx3c8VZ3Klz0WlhODItYaMbQ3hqBiLffe28IfOnohrA3N6Igas lXtt4pGb1O2PHF/CDFSUpaOviAht3dJPF8mzvbizQO7A8HvDV1slhAz/dvm535XP gy9RcoYWLulskw== -----END CERTIFICATE-----Generated at Sat Sep 26 12:16:43 2026 by rpki-client