$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json) Hash identifier: ZW9uY+Okp3U+g0cr9+pVQ7yw4EywDB98l7b9YmDFRig= Subject key identifier: 68:03:27:89:8A:8C:DC:F9:EA:16:76:21:54:01:1B:DD:2C:6C:88:FD Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e Certificate serial: 01A0DACD4079DA4369D5C0A454D81AF1A663 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft Manifest number: 1ACC Signing time: Fri 25 Sep 2026 23:01:19 +0000 Manifest this update: Fri 25 Sep 2026 23:01:19 +0000 Manifest next update: Sat 26 Sep 2026 23:01:19 +0000 Files and hashes: 1: 9KBqGjnL-5oJ5B6DzcxjqiI7EQM.roa (hash: LIvm7nAVKXaLM9rEsrAxwOlhblCh+te14HXeeWgrThQ=) 2: LmM48ME-vV9knrJxSTQaxjQp3co.asa (hash: EudqvBBerqU77vXqzfKyktKs74IC9c1mzsls/2yJHmE=) 3: Pug44zlPI02ycyK9Q_88Xy9Y-Hg.roa (hash: FnYDgGWIFWVGuhKvHnMrJ7Cya4d1b5GKWMt1Csm8Zgs=) 4: TuuV3R_pLiwXMlOjTuF_uOOQUKQ.roa (hash: x74/PQH6T0L5thYcJT0BIF/7nXPoUee65OsSO1RpsSI=) 5: UMBADPmHHgDZKMzHfthGrwp5OI8.asa (hash: R3dkgSia4Z4c6J2EEiXrzXeUHBgOo67dEot1UkUA4t0=) 6: XWNNEFomn9bKgvzZUcc40UaOsbg.roa (hash: /H5U7m5xCacMvYYK2MppLjlzRXDKTMF2JjarWQi18pE=) 7: Z791839m53XNRuRerPXFnx_mGZ0.roa (hash: 8q0wPQ9bEvLfi3oi1ten4qb/6lS1ZqrefxTS++baSZM=) 8: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: Q6n3wyhbv8QoGBRXBKXX44PmSsm4Ck7CD+DzoxDXf/I=) 9: chkkpC1wf4PBAO07r8AaazA2rnI.asa (hash: VlBFOTypBDda09dJ/OfOd69SgWHtcRGMPQP/H7cWGAw=) 10: gpGsmzdGl23LNL8X2Aq-5iXeAzA.roa (hash: iLtj4+Bdb3J8UxkSZ4/mHgKq1j4CU4BIOVKfADMle94=) 11: p5I2rBokj4nhJ_YUk_dcJCNwjNY.asa (hash: JePaqX8dDtt3ljOEbNRemCQgG9iiJBvpk8UC44tWVtA=) 12: wMThe2cBB531pXzWqFpjonQuHQ8.roa (hash: Y8v6UOfwMmgJZQNzDFQ/23Nn2NW5kKuc76L2jWsCysM=) 13: y-MtqUQxYN7HeVnOQGAy52MjLe8.roa (hash: /bCO17JMK+2NzpP4wufXIXJcR0ZbA6NT7EQZcGDDLZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:da:cd:40:79:da:43:69:d5:c0:a4:54:d8:1a:f1:a6:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e Validity Not Before: Sep 25 23:01:19 2026 GMT Not After : Sep 26 23:01:19 2026 GMT Subject: CN=680327898a8cdcf9ea16762154011bdd2c6c88fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:07:69:70:12:84:17:96:0f:a2:55:38:88: a1:42:33:7f:d5:ec:78:81:1f:ed:54:3d:af:fd:2e: f6:68:36:99:2f:0d:24:4e:b3:03:6b:fe:91:5e:34: 90:9e:e3:34:9a:75:66:b5:23:d6:04:29:e0:d1:94: 54:14:b4:a6:a4:24:67:c9:42:0f:52:9f:a2:12:91: 4c:6b:eb:e7:b7:45:4d:7c:73:91:82:bf:96:2b:ef: 8b:c0:51:fc:84:44:e1:6e:19:1f:7f:c1:8c:32:02: 05:37:f8:07:b9:55:aa:ff:63:86:27:ac:82:aa:c8: 4d:0d:76:bc:68:47:5a:e8:3a:e8:09:38:72:9f:da: 1b:1c:60:12:c0:f5:01:f4:e7:41:43:43:90:be:c4: b6:1f:90:ae:50:b4:ef:42:02:5b:fb:b4:ec:a8:fa: a3:2d:47:91:3b:55:ee:d9:3f:81:46:9f:12:69:b4: 47:ab:cf:7c:b6:eb:a9:94:cd:f4:b4:5f:3f:23:06: 67:e3:40:bf:68:ea:8b:98:70:44:66:48:d3:fa:76: 2e:c9:22:86:fb:fa:c1:98:d6:f1:3f:b4:c7:3a:1a: 83:23:d3:42:55:bf:d0:55:e0:39:86:94:95:64:90: b3:63:03:43:67:f0:06:b7:cb:40:87:4d:45:c7:b4: ad:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:03:27:89:8A:8C:DC:F9:EA:16:76:21:54:01:1B:DD:2C:6C:88:FD X509v3 Authority Key Identifier: keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6a:60:b4:2c:72:d6:72:4c:f5:2e:1d:4d:83:1e:b3:5a:e0: a4:38:d3:d6:ce:f3:07:18:b6:0f:5f:50:86:19:11:2d:65:aa: 33:31:02:2c:5c:c0:05:b2:d7:6d:4d:25:4e:08:b4:45:0f:0e: 43:84:aa:fa:0e:12:f4:90:e3:2f:b7:2a:cc:88:32:00:59:95: ad:e4:3b:44:c3:23:84:72:39:9c:53:cf:59:8d:c2:d3:2e:91: e1:6b:f6:ee:3a:00:c4:c7:7f:74:8b:3b:9a:e7:05:3b:1b:30: b6:81:64:ad:1a:6d:13:24:66:dc:87:b3:76:f2:e9:71:5f:bf: 44:71:00:02:10:a5:43:ef:45:69:54:0a:0d:42:a0:cc:c1:fd: d0:f0:4d:7d:83:0b:19:1c:8e:2b:a7:97:f5:46:09:98:2e:c0: e3:93:60:ae:be:6a:71:b8:3c:cd:e8:0d:62:85:12:4d:41:64: b4:bf:6c:01:06:94:5a:91:d2:06:7c:c5:c9:24:a3:1b:fc:e0: e5:e9:b3:88:bc:be:3f:b4:ed:e9:99:a4:6d:5e:17:b4:20:f4: 8f:e5:c7:25:d6:b8:37:9f:3d:39:57:6d:47:90:4d:d1:a6:ad: 41:b8:37:5f:2b:e1:72:ab:c8:a2:da:e6:3e:4f:49:6e:e1:18: 61:a2:e9:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDazUB52kNp1cCkVNga8aZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1 ZDAwN2UwHhcNMjYwOTI1MjMwMTE5WhcNMjYwOTI2MjMwMTE5WjAzMTEwLwYDVQQD Eyg2ODAzMjc4OThhOGNkY2Y5ZWExNjc2MjE1NDAxMWJkZDJjNmM4OGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0sHaXAShBeWD6JVOIihQjN/1ex4 gR/tVD2v/S72aDaZLw0kTrMDa/6RXjSQnuM0mnVmtSPWBCng0ZRUFLSmpCRnyUIP Up+iEpFMa+vnt0VNfHORgr+WK++LwFH8hEThbhkff8GMMgIFN/gHuVWq/2OGJ6yC qshNDXa8aEda6DroCThyn9obHGASwPUB9OdBQ0OQvsS2H5CuULTvQgJb+7TsqPqj LUeRO1Xu2T+BRp8SabRHq898tuuplM30tF8/IwZn40C/aOqLmHBEZkjT+nYuySKG +/rBmNbxP7THOhqDI9NCVb/QVeA5hpSVZJCzYwNDZ/AGt8tAh01Fx7StcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgDJ4mKjNz56hZ2IVQBG90sbIj9MB8GA1UdIwQY MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt MWZiYzY0MWI1MGIxLzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGpgtCxy 1nJM9S4dTYMes1rgpDjT1s7zBxi2D19QhhkRLWWqMzECLFzABbLXbU0lTgi0RQ8O Q4Sq+g4S9JDjL7cqzIgyAFmVreQ7RMMjhHI5nFPPWY3C0y6R4Wv27joAxMd/dIs7 mucFOxswtoFkrRptEyRm3IezdvLpcV+/RHEAAhClQ+9FaVQKDUKgzMH90PBNfYML GRyOK6eX9UYJmC7A45Ngrr5qcbg8zegNYoUSTUFktL9sAQaUWpHSBnzFySSjG/zg 5emziLy+P7Tt6ZmkbV4XtCD0j+XHJda4N589OVdtR5BN0aatQbg3XyvhcqvIotrm Pk9JbuEYYaLppg== -----END CERTIFICATE-----Generated at Sat Sep 26 02:09:50 2026 by rpki-client