$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft File: FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json) Hash identifier: fXhAR9mglPzs5WOzJyT4MEwiUHo3cupwt+64J6j6pJE= Subject key identifier: 45:63:3C:2A:37:08:A2:91:8A:73:8B:CF:46:A8:5F:3E:84:F3:83:48 Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Certificate serial: 01A0D4CAD149257481D1090E1790063ED09B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft Manifest number: 1AA4 Signing time: Thu 24 Sep 2026 19:00:56 +0000 Manifest this update: Thu 24 Sep 2026 19:00:56 +0000 Manifest next update: Fri 25 Sep 2026 19:00:56 +0000 Files and hashes: 1: 43xKNj8d1J5ZbdUCB9huFf51dlY.roa (hash: 0C77rsfbABsBAgXhMhHrXliF4EtBR+zdrxbfWGDutkA=) 2: B8WZmrTIa2ia6GnyZAc3UYzn6nU.roa (hash: aDzq92qdJqLonxrkAlG+0ptE83HlOqTUO72kLOAz1Z0=) 3: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: 0pfJaqdm2LzZBEvk+7k5EW9T7+4sOAwq3LP26dzturo=) 4: IgfAmjFLqVW-uCkvUtRuUz3fQFI.asa (hash: 1m1DNwPZO7HOKfXGKGJtUoAVRSnQcqTWcdbAqBMwcJk=) 5: Mqx-zb562ywYV8pX6wNPPIxwnPA.roa (hash: OtbembzOi1Q67rhuvfY9lENyB3xApH7b2U9zu5YCpzg=) 6: NAB7jeRg8xs-PO6aq-mV0JJ8Kt8.roa (hash: BsmxkgNXTeP+5y0lVg3F5Vd5iIuPFhBIw5y8AiZA+lg=) 7: OFmVOiCQetrNkOtmu3zCnKSHdbQ.asa (hash: Hjgzl6kCFsNx4hG5pItQKTRXXfWNO1jZJVBkNf2hlCc=) 8: VsDKu8p7jOW_6XSjzPi6HRYFCeE.roa (hash: meHtFxM6jSoAy9Y7SaMHGYbPp+WrlG0Kpg1DeuyayZE=) 9: X01sfTguEZRlbViMsVbdLRhWtwM.asa (hash: ITEiwLtEtyei9oziGBBYKolA2UiS65//73HaFywy0cU=) 10: ZYc4R1ZUoLFLDb0ExiBMqNZo4PI.asa (hash: hLDXFm9fYXyP3hsrCVS9C7xEpV87H1Pnzgc7QhcK0xY=) 11: bFkaQMapJshDo2hgXls_q4kXpds.asa (hash: Sdg8D0zVBbo49fzIHdCt36EnpRZv3zi4DnsZ64hwpRw=) 12: dAyDeUp51SPbYS8fxmJNG0482Ng.asa (hash: 6/i5RS8ShUMSXbYzZlVqHGyL8kobjym9yxw0gdprH7E=) 13: oxOGLICEA4GzU1uD1B6su4tziyQ.roa (hash: TvZctkDtv5gSKLWgki0lkEZNOjTs1UPnuilELJQxzxc=) 14: plAxktASIb4YACIP-hXXxq1vBPQ.asa (hash: YS1t0iZi+tG5TRUgxqQhrFYuMkSCCdM92QwP+HVjJ7w=) 15: xTbA2Nqn_OGftZ3ziVysvYIrYsc.roa (hash: AKh2Xxbl7XMpoBpUm83TcjMuEMCZWE9rKYeV/5q4Gew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:ca:d1:49:25:74:81:d1:09:0e:17:90:06:3e:d0:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Validity Not Before: Sep 24 19:00:56 2026 GMT Not After : Sep 25 19:00:56 2026 GMT Subject: CN=45633c2a3708a2918a738bcf46a85f3e84f38348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cc:29:b8:de:34:96:c2:47:7c:a0:48:4d:1c: 45:65:fe:ee:24:92:fc:76:3f:33:c4:e1:89:cc:9d: 67:67:6b:21:5c:14:33:0a:2b:d7:70:e0:0a:94:86: cd:00:2b:ee:92:5a:ac:1b:b8:1b:e7:97:ad:b3:f7: 04:1d:67:42:7c:46:35:63:15:18:22:f8:3a:47:cd: ec:96:ae:fd:6c:da:95:4c:45:a3:b2:c8:35:f0:16: fd:6f:e4:3d:6a:04:cb:24:fa:01:ad:d3:32:72:37: cb:66:bc:e8:02:ab:02:4b:fd:bd:f3:d4:a4:44:bb: 26:15:7e:00:83:4a:cb:f0:00:6b:38:ed:e7:dd:dc: 6b:9c:85:41:fe:28:ad:b4:2f:f1:5e:b4:77:c2:a8: 69:38:5b:ae:a1:6a:53:7e:2c:9f:92:27:30:f6:39: dd:61:de:ef:5d:79:0c:a8:99:b2:9d:24:f5:1e:37: 4e:42:ce:2e:5a:b4:7e:05:8d:c8:2e:d3:b6:a4:d3: 9f:f4:55:0d:a2:3c:8c:a5:04:bb:71:b2:5b:e5:01: e3:d4:e6:7f:b7:c0:77:28:31:22:f0:c7:52:62:ca: 5f:a3:3b:18:da:4f:9d:55:53:76:ca:8b:c0:0d:38: 0c:a9:c7:54:ab:a2:00:68:d2:d0:a7:57:48:5a:51: 1d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:63:3C:2A:37:08:A2:91:8A:73:8B:CF:46:A8:5F:3E:84:F3:83:48 X509v3 Authority Key Identifier: keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c7:89:6b:e5:db:3a:40:22:7c:9a:dd:69:51:8c:8d:8f:14: d9:de:ae:40:14:bd:a3:dc:aa:52:05:a6:cf:e6:83:3e:91:ef: 32:34:5a:9c:44:bc:e3:a1:b0:88:3e:be:63:11:96:ba:6b:e8: 0e:89:38:60:eb:e1:24:3e:2e:ea:af:6d:a8:75:f1:da:b9:67: 45:6f:19:8c:c3:d9:b7:4f:1e:03:5d:13:a2:6b:a8:e9:1c:44: a4:a5:62:13:5b:ce:71:1e:1e:ec:d5:dc:0a:6b:a1:09:c0:b0: 5e:fc:a0:4a:f4:2e:e0:f8:2a:14:a2:b7:86:0c:49:4a:f6:20: 57:24:9c:29:76:e9:9c:cd:e3:7f:22:1b:02:b4:9e:92:ce:a5: 82:d7:83:b9:5c:05:f9:1a:be:68:51:5f:b7:54:a2:a1:01:e7: 05:98:bb:67:4d:c4:dc:88:51:6b:19:ea:83:a6:f4:7b:1c:31: b8:c8:6d:fc:a4:46:b9:77:2f:9f:b8:be:f7:60:ae:db:2f:fb: 04:21:8d:1d:42:e7:c2:36:94:79:18:d8:fe:12:09:89:59:b7: fa:40:fe:28:89:77:84:b5:02:fe:ef:3a:5d:87:32:7a:83:b4: 83:7f:dd:96:95:52:72:07:f5:e8:40:dd:57:65:f5:75:91:d4: b3:39:6d:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUytFJJXSB0QkOF5AGPtCbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx MzY5Y2EwHhcNMjYwOTI0MTkwMDU2WhcNMjYwOTI1MTkwMDU2WjAzMTEwLwYDVQQD Eyg0NTYzM2MyYTM3MDhhMjkxOGE3MzhiY2Y0NmE4NWYzZTg0ZjM4MzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMwpuN40lsJHfKBITRxFZf7uJJL8 dj8zxOGJzJ1nZ2shXBQzCivXcOAKlIbNACvuklqsG7gb55ets/cEHWdCfEY1YxUY Ivg6R83slq79bNqVTEWjssg18Bb9b+Q9agTLJPoBrdMycjfLZrzoAqsCS/2989Sk RLsmFX4Ag0rL8ABrOO3n3dxrnIVB/iittC/xXrR3wqhpOFuuoWpTfiyfkicw9jnd Yd7vXXkMqJmynST1HjdOQs4uWrR+BY3ILtO2pNOf9FUNojyMpQS7cbJb5QHj1OZ/ t8B3KDEi8MdSYspfozsY2k+dVVN2yovADTgMqcdUq6IAaNLQp1dIWlEd5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVjPCo3CKKRinOLz0aoXz6E84NIMB8GA1UdIwQY MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt NGNmZTQwZjA3YTZiLzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8eJa+Xb OkAifJrdaVGMjY8U2d6uQBS9o9yqUgWmz+aDPpHvMjRanES846GwiD6+YxGWumvo Dok4YOvhJD4u6q9tqHXx2rlnRW8ZjMPZt08eA10Tomuo6RxEpKViE1vOcR4e7NXc CmuhCcCwXvygSvQu4PgqFKK3hgxJSvYgVyScKXbpnM3jfyIbArSeks6lgteDuVwF +Rq+aFFft1SioQHnBZi7Z03E3IhRaxnqg6b0exwxuMht/KRGuXcvn7i+92Cu2y/7 BCGNHULnwjaUeRjY/hIJiVm3+kD+KIl3hLUC/u86XYcyeoO0g3/dlpVScgf16EDd V2X1dZHUszltvg== -----END CERTIFICATE-----Generated at Fri Sep 25 04:13:16 2026 by rpki-client