$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: 83hU1/sZVkWMB0ehsd1CfdVTMFS8IQum8144vBVStPg= Subject key identifier: 7F:6D:39:1D:56:4A:D8:21:03:14:12:47:09:7F:26:67:35:83:0E:01 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 01A0D614AABBB507D7A7EBEC872627689AE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 1A83 Signing time: Fri 25 Sep 2026 01:01:13 +0000 Manifest this update: Fri 25 Sep 2026 01:01:13 +0000 Manifest next update: Sat 26 Sep 2026 01:01:13 +0000 Files and hashes: 1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=) 2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=) 3: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=) 4: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: rNaNJNJTe6ZgtV2aHZRWk17b+Q5EeblD3Ma3TLK/EoY=) 5: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=) 6: WimZdTjw5Lm8MtebopYruWKL5rI.roa (hash: ZsNGt4iJIvs0TYMA8I/lIAfczIzjQsE/8A1JQl2JcVU=) 7: a7uJpq_z_q_yhJkmebNUtHZmFJc.roa (hash: KAwQnqnyhO/yRaqgGOzpu3c6bjgpIJkUCJpunP3swCs=) 8: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=) 9: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=) 10: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=) 11: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=) 12: iKMbSLMsYD3IPy4aFTgWFbR5-7Q.roa (hash: FLy0rWO0Tm6EmloSEokoF4mkm9Xo/LOqQZJUxQFOv+k=) 13: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=) 14: wK7E2CITjHSS2oNwJxLPpiywZOo.asa (hash: oIOlXpucAgwg2lcnJgT+OLAJmqqKdwc6n/6fCi8en3s=) 15: waZz0IyLkJZ2XZs5mcy2zeGt7KA.roa (hash: PLFFtAchWYCJ5jmh6ddgth619HvoXK3NBze7KzilKF8=) 16: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:14:aa:bb:b5:07:d7:a7:eb:ec:87:26:27:68:9a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Sep 25 01:01:13 2026 GMT Not After : Sep 26 01:01:13 2026 GMT Subject: CN=7f6d391d564ad82103141247097f266735830e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:58:df:c1:63:9d:ea:bb:30:2a:25:95:25:a9: 21:77:d9:a6:9b:eb:39:8d:aa:45:3b:0c:86:69:eb: f9:fc:9c:38:23:49:88:45:40:ec:c4:f8:85:cd:50: 70:91:1d:dc:a0:18:cd:62:ed:ea:88:7f:35:6e:27: 2f:d8:67:29:3c:d2:5d:54:69:33:33:cc:b8:c4:f8: 98:0a:f1:d9:3f:56:b3:60:70:5f:8d:5b:c6:ff:6e: e5:ee:22:b1:9e:4f:66:54:f7:44:82:42:62:98:ae: df:7f:b1:5b:04:64:b0:fb:e9:d0:f9:30:d8:37:0b: a8:31:c5:9f:f0:46:cd:b1:8d:26:3d:d9:85:46:10: 4c:75:12:48:1e:02:07:77:3c:69:75:7e:4c:ff:fa: f4:28:f2:e7:9a:4b:f0:c4:e5:e0:41:2d:6e:d7:f4: 7d:94:f1:4b:21:a5:61:30:01:c4:d6:d5:02:71:ed: 10:bc:c1:c6:1d:04:41:03:22:91:c4:c5:be:2d:2b: 93:6b:18:ae:a2:f0:0a:bf:5b:38:85:01:3f:70:d7: 97:f5:77:29:97:66:b2:41:18:dc:83:df:64:74:d9: 41:7d:a3:33:83:c6:15:68:72:47:28:9e:52:52:6f: 4b:3a:e7:07:8c:f4:d7:e0:33:00:e5:e1:a0:47:81: 07:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6D:39:1D:56:4A:D8:21:03:14:12:47:09:7F:26:67:35:83:0E:01 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:3a:bd:c5:dc:a6:09:00:c4:9e:20:7f:f9:03:f7:3b:7b:0f: 45:81:e7:a9:86:c2:23:bf:35:73:e3:d1:73:70:0d:d5:48:73: 40:31:7f:fc:d9:ef:01:31:51:ed:fa:65:ca:1f:4c:17:16:19: 95:f5:08:50:de:09:4f:5c:38:1e:71:f0:3a:98:9c:94:c6:7a: d1:df:c4:8e:4a:6c:06:84:94:87:d3:4b:56:eb:26:82:c6:e5: 77:c2:fd:7e:aa:2a:5c:ab:aa:62:53:86:4b:34:72:56:25:6d: b4:c0:5e:33:ef:07:86:68:5a:c4:13:2c:eb:31:c9:d3:fb:cd: ac:ec:62:c2:11:2b:d7:a0:ec:0c:4d:0c:67:f9:73:eb:d0:fd: 6b:18:e5:ac:de:94:78:35:a2:39:23:3a:4c:23:9c:f1:63:81: 78:9f:65:f7:e2:a2:8a:d3:7a:b9:e5:f4:ec:07:5e:c9:00:4d: b6:8e:70:15:9e:85:26:8b:0f:a0:31:45:ca:d3:0e:3d:4b:61: f9:00:16:53:58:92:87:ec:36:dd:90:c0:05:d1:e4:af:df:51: b0:ee:0c:7b:77:43:c7:4f:9c:c1:49:7a:75:24:3d:c7:d8:c4: fa:39:66:0d:70:54:ee:52:94:04:6d:da:69:01:e1:af:5e:d0: 93:31:a0:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDWFKq7tQfXp+vshyYnaJrhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwOTI1MDEwMTEzWhcNMjYwOTI2MDEwMTEzWjAzMTEwLwYDVQQD Eyg3ZjZkMzkxZDU2NGFkODIxMDMxNDEyNDcwOTdmMjY2NzM1ODMwZTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFjfwWOd6rswKiWVJakhd9mmm+s5 japFOwyGaev5/Jw4I0mIRUDsxPiFzVBwkR3coBjNYu3qiH81bicv2GcpPNJdVGkz M8y4xPiYCvHZP1azYHBfjVvG/27l7iKxnk9mVPdEgkJimK7ff7FbBGSw++nQ+TDY NwuoMcWf8EbNsY0mPdmFRhBMdRJIHgIHdzxpdX5M//r0KPLnmkvwxOXgQS1u1/R9 lPFLIaVhMAHE1tUCce0QvMHGHQRBAyKRxMW+LSuTaxiuovAKv1s4hQE/cNeX9Xcp l2ayQRjcg99kdNlBfaMzg8YVaHJHKJ5SUm9LOucHjPTX4DMA5eGgR4EHOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9tOR1WStghAxQSRwl/Jmc1gw4BMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxTq9xdym CQDEniB/+QP3O3sPRYHnqYbCI781c+PRc3AN1UhzQDF//NnvATFR7fplyh9MFxYZ lfUIUN4JT1w4HnHwOpiclMZ60d/EjkpsBoSUh9NLVusmgsbld8L9fqoqXKuqYlOG SzRyViVttMBeM+8HhmhaxBMs6zHJ0/vNrOxiwhEr16DsDE0MZ/lz69D9axjlrN6U eDWiOSM6TCOc8WOBeJ9l9+KiitN6ueX07AdeyQBNto5wFZ6FJosPoDFFytMOPUth +QAWU1iSh+w23ZDABdHkr99RsO4Me3dDx0+cwUl6dSQ9x9jE+jlmDXBU7lKUBG3a aQHhr17QkzGgkg== -----END CERTIFICATE-----Generated at Fri Sep 25 08:56:54 2026 by rpki-client