$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: adlj0E9xLkZxp8olBGWsYxfTCDD7MK+rhGU//yHRa74= Subject key identifier: EB:1A:56:72:A5:5D:B0:61:FC:1C:CA:E2:81:11:03:44:39:83:01:DD Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 01A0D0492FEFF7A9AD2014F2EF428AA2D6E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 12C2 Signing time: Wed 23 Sep 2026 22:00:52 +0000 Manifest this update: Wed 23 Sep 2026 22:00:52 +0000 Manifest next update: Thu 24 Sep 2026 22:00:52 +0000 Files and hashes: 1: 0V-6Ocf6ckJP0OmiGxbtIBGBZmU.roa (hash: BeQPwwhAk0wYxfBBr2kzYrvOfYh+U9/Tjif4YIzJ0F8=) 2: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 3: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 4: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 5: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 6: B0aX47W6kux6EP5PxGcHbpo8GWc.roa (hash: zBSMeOkMWOykqlpzJJhOtskJsuEZJB5nwz0BJ2knqw0=) 7: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 8: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: oSn4dHqYf/buyTdDNXf2LP+1IIKFQsgV1R0zhIelmvA=) 9: ISsGxHIyrOPNYfVnvYomPgXoioM.roa (hash: Rohi1FBRyCEDtd+NeWD1TRuQbRscn3zM0CYpnIqNU38=) 10: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 11: g-_CUB36AWobIcG-jmmWcyiDx-E.roa (hash: WlfHF8ayshGFfQ441VT2aPbuyQS92Aj33Z++6XcJ8YE=) 12: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 13: ltlQZdBprIAZtA0AlHcwNThjuJ8.roa (hash: w4tQk9JwHDO4yRlDh9QyPlHelxD0WmS14timwLhZHpI=) 14: uMOXrFLqc5T0Yg1zrL_Jmk4aCZ8.roa (hash: jeR1y8042HqLS1mMvheBMUQZBnBjFCW3QvpduHp+6M0=) 15: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 22:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:49:2f:ef:f7:a9:ad:20:14:f2:ef:42:8a:a2:d6:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Sep 23 22:00:52 2026 GMT Not After : Sep 24 22:00:52 2026 GMT Subject: CN=eb1a5672a55db061fc1ccae281110344398301dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:97:af:c4:3c:de:24:a6:25:d5:b3:d6:a3: 5a:11:1e:e1:39:db:61:05:2e:52:39:3a:6e:c1:74: e3:f7:f8:37:47:37:68:70:30:60:70:eb:d8:2a:41: 82:b6:8b:87:ea:60:e6:cf:82:c1:93:47:56:08:13: 71:33:18:e8:c1:c0:09:e3:f6:0d:4f:fa:ca:02:80: 95:40:52:f6:ee:bc:96:18:43:7b:7d:a4:7c:5d:63: d9:95:8b:19:79:ad:45:1b:5e:94:1a:e4:8b:b2:5f: e5:25:95:a5:58:de:63:b3:43:ea:de:61:c8:38:0a: f5:93:95:5e:d3:67:d3:fa:23:ff:ad:42:7c:ed:07: 50:9b:76:d7:d8:ca:db:e5:de:52:bc:61:dd:10:7f: 98:24:20:bb:f1:0e:e6:d7:62:05:f1:19:31:dd:6e: ce:b1:e9:db:ca:12:69:67:14:05:dd:59:b8:cf:ab: c8:c1:a9:c2:c5:06:5c:18:78:40:1f:05:4e:3d:fd: 09:98:c0:53:ce:86:84:52:22:49:b4:5e:43:ed:a1: 3e:17:62:f0:4f:d7:cb:97:58:1f:42:0f:49:37:73: 5a:98:8b:3e:22:f1:46:43:2d:93:37:50:8f:45:62: d7:ff:d0:a6:f5:8c:70:5d:66:f0:fa:fd:a2:0d:f3: 33:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1A:56:72:A5:5D:B0:61:FC:1C:CA:E2:81:11:03:44:39:83:01:DD X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:61:3d:08:c3:27:fe:d2:a9:ce:ab:10:a8:af:fa:c6:b4:be: f5:b1:51:45:d1:44:66:36:d5:42:39:dc:81:68:5d:03:33:c0: 26:4a:f3:78:56:02:f6:ba:03:ca:50:a7:dc:a7:37:3c:6a:69: f1:e9:13:b7:44:da:92:30:8b:21:13:d0:20:00:7a:d0:12:90: b3:e8:21:1d:fa:91:64:2d:7e:63:e8:19:47:33:bc:d9:e7:4a: 03:ac:3d:af:b9:df:ad:ae:ae:19:5d:c5:3a:f1:cd:38:2c:68: 5a:5d:a2:80:7b:87:94:cd:94:d8:1a:f1:ea:20:88:cf:3a:99: 20:ba:b8:13:9e:39:ba:4a:29:33:fb:cc:4c:1a:05:1d:8e:92: b6:b1:55:39:8e:e5:e6:c5:92:33:9e:ac:9e:f1:cd:7a:a1:19: b5:e4:95:84:9b:fc:3d:3a:bb:66:80:47:6a:5e:1b:ef:ba:eb: d6:36:df:f7:eb:91:82:6d:e9:8c:01:55:46:01:8e:e3:a4:34: f6:c2:7c:c5:36:c2:0c:8d:b4:5e:58:6a:73:81:e3:fd:60:51: 0c:bd:07:0a:35:a9:ce:34:05:3c:83:ac:9f:80:80:c0:19:6d: e4:71:48:e0:01:3b:df:4b:7d:d4:fd:c2:24:24:0b:9a:60:6d: 00:f5:c5:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQSS/v96mtIBTy70KKotbmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwOTIzMjIwMDUyWhcNMjYwOTI0MjIwMDUyWjAzMTEwLwYDVQQD EyhlYjFhNTY3MmE1NWRiMDYxZmMxY2NhZTI4MTExMDM0NDM5ODMwMWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHSXr8Q83iSmJdWz1qNaER7hOdth BS5SOTpuwXTj9/g3RzdocDBgcOvYKkGCtouH6mDmz4LBk0dWCBNxMxjowcAJ4/YN T/rKAoCVQFL27ryWGEN7faR8XWPZlYsZea1FG16UGuSLsl/lJZWlWN5js0Pq3mHI OAr1k5Ve02fT+iP/rUJ87QdQm3bX2Mrb5d5SvGHdEH+YJCC78Q7m12IF8Rkx3W7O senbyhJpZxQF3Vm4z6vIwanCxQZcGHhAHwVOPf0JmMBTzoaEUiJJtF5D7aE+F2Lw T9fLl1gfQg9JN3NamIs+IvFGQy2TN1CPRWLX/9Cm9YxwXWbw+v2iDfMzCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsaVnKlXbBh/BzK4oERA0Q5gwHdMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2E9CMMn /tKpzqsQqK/6xrS+9bFRRdFEZjbVQjncgWhdAzPAJkrzeFYC9roDylCn3Kc3PGpp 8ekTt0TakjCLIRPQIAB60BKQs+ghHfqRZC1+Y+gZRzO82edKA6w9r7nfra6uGV3F OvHNOCxoWl2igHuHlM2U2Brx6iCIzzqZILq4E545ukopM/vMTBoFHY6StrFVOY7l 5sWSM56snvHNeqEZteSVhJv8PTq7ZoBHal4b77rr1jbf9+uRgm3pjAFVRgGO46Q0 9sJ8xTbCDI20Xlhqc4Hj/WBRDL0HCjWpzjQFPIOsn4CAwBlt5HFI4AE730t91P3C JCQLmmBtAPXF0g== -----END CERTIFICATE-----Generated at Thu Sep 24 07:25:04 2026 by rpki-client