$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft File: 52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json) Hash identifier: aqkj1U785K7sz+bB4cscx2/DSBY8wElLRN5dyNs1PtY= Subject key identifier: E9:A1:89:3C:18:EE:0C:76:F8:FE:FC:19:53:A5:09:A9:F6:6A:AC:CF Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af Certificate serial: 01A0CCDA1D90507B28CDFB258795017A3D37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft Manifest number: 1ABA Signing time: Wed 23 Sep 2026 06:00:41 +0000 Manifest this update: Wed 23 Sep 2026 06:00:41 +0000 Manifest next update: Thu 24 Sep 2026 06:00:41 +0000 Files and hashes: 1: 0AHImsbMetIR9BMrmd3qpDL6OSc.roa (hash: DTeCz+/e8dz3wJQ9sOWTPFZL93bF/N1lUR+tm2DzoBc=) 2: 2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa (hash: CfFJBlNu8bngGenYW74kMkvKFLTo885Zt17Qhidzd/I=) 3: 4NasKMzTYIVVFp-ICFK_D4b8RHc.roa (hash: QS3B9ES6p11t5I186zFeNR/WrVazilsqPckCmSgVmek=) 4: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: DruoHZbxthysL0/aOrBDiA2wex/6z93MO/UE9wm1lUQ=) 5: BAXXlSV06uuaY8KhG2sNC8heH1s.roa (hash: ajZgoDJ8e9hLXYtp4Hn5DX0X8/kHLIPyvG3eppF2AQs=) 6: E6Wekcit-EQ3TZTNVUcjRu1lw6U.roa (hash: 2zO8BVKL4MFsWKURY5zzeGF0sEV2VJqOByilAEcD1Z0=) 7: SqJOIStSbkS_sk9tOgXlq4DG9kU.roa (hash: ewVntvl+465lh5V5DV4NxkandQKCa7/BAmKlR+Vmpqw=) 8: YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa (hash: 6EGPa2utleZno/C5hAqexr1JPSm93VrZZ+jL9Q+c4xU=) 9: aHOZHoVN5QFnBBDS6rpLN3diXhQ.roa (hash: ogzaNg6aZ7diJ0sN2cYk/78mRgYs+1QRi/kMrxIJaB8=) 10: lC16rIMMnqHHfbg9MNxvqn7mqxk.roa (hash: Mdn1l4dZ+NSM4dG4u4z56RyJO1WeprirQF3/FTo90cM=) 11: rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa (hash: YE/iZ6y3DFs2Aj9gfYd2A/ANh76BH41kT6FkdNGSzDE=) 12: xpxr_92IWsuej6bfAgqLqQUs73Y.roa (hash: SdlpdPv3TErYNP0rQDc+xp4+NVPK61knKJ+cBP47Oms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 22:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cc:da:1d:90:50:7b:28:cd:fb:25:87:95:01:7a:3d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af Validity Not Before: Sep 23 06:00:41 2026 GMT Not After : Sep 24 06:00:41 2026 GMT Subject: CN=e9a1893c18ee0c76f8fefc1953a509a9f66aaccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1a:d7:ad:0d:00:a0:ee:1b:01:a6:ea:4d:36: 4a:dc:a0:8d:ef:42:b1:05:6c:b4:d9:80:99:b5:83: 8a:b7:59:bc:51:f3:b4:b3:af:cb:67:c2:c2:d9:65: 20:aa:93:b5:1f:3e:52:b4:ef:44:db:00:5f:fd:96: 3e:c1:80:bc:c6:a6:d2:5f:91:f6:52:61:9e:35:b3: ce:d4:32:85:a0:bc:7d:74:1f:81:70:3b:5d:46:3a: 4f:53:54:a1:a8:a1:ca:2d:11:92:1a:e1:4c:de:a2: b0:44:9f:f4:ee:61:94:66:1e:bb:af:7a:98:79:aa: ab:e3:ca:77:d2:f5:29:81:71:88:13:06:9c:8f:f3: 73:19:82:2f:f6:2d:46:2b:c6:51:5f:a5:ce:0e:d7: 8f:25:32:c6:92:73:9d:55:12:d5:8f:14:ff:3c:0f: 40:c2:b6:e8:0a:34:a8:1c:98:00:e0:cd:8a:fe:06: 98:c2:81:87:14:ed:dd:86:4f:9a:35:34:25:94:ea: 67:21:25:59:ed:c7:74:e9:a7:ae:f2:7e:50:ef:87: 2f:01:b3:d5:48:1f:6b:b2:2e:a9:10:66:3c:15:84: be:c8:61:f1:a9:3b:81:4e:0a:43:8e:98:0b:d7:9e: 79:78:47:3f:4f:35:aa:2d:e0:09:81:40:86:bd:6d: c0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A1:89:3C:18:EE:0C:76:F8:FE:FC:19:53:A5:09:A9:F6:6A:AC:CF X509v3 Authority Key Identifier: keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e6:ae:41:84:e3:14:63:78:70:b4:cd:8d:9d:10:a9:f9:a1: c6:c4:32:6e:f0:7c:45:79:35:d6:88:7b:69:6a:bc:37:39:b5: b5:cd:98:24:a3:84:2b:3c:99:aa:61:55:bf:e4:c4:c1:3f:24: 05:81:e9:87:9c:a9:15:7f:9b:88:de:36:61:e7:ca:c6:17:ce: 4e:27:e7:84:17:84:af:23:41:d1:1d:18:65:50:09:47:18:2d: 89:b3:d9:5a:24:e8:c7:4b:11:94:0f:38:05:82:73:4a:e1:44: 23:f0:90:61:dd:ea:06:91:8b:83:9c:fa:31:7a:4d:ec:11:2f: c6:a9:a0:3e:93:1a:6e:83:d9:67:4b:ee:f8:16:ee:ce:af:98: 3e:9f:1a:63:3f:e0:9d:ce:9b:ad:e4:04:0d:38:4e:b3:05:a5: 4b:a9:61:86:08:7c:ef:58:28:49:64:e3:81:07:05:65:6d:a8: ab:11:33:04:85:59:34:a3:68:03:9f:bc:cf:a5:3f:2b:5f:04: d1:e6:e1:40:d9:a1:7a:55:a9:2b:22:da:1a:cd:fb:19:40:6f: db:f6:82:95:1c:86:0d:6e:6a:ac:ca:de:52:9b:2c:b3:fa:40: 09:ab:f7:b6:27:0a:c6:db:4b:44:39:e8:09:8d:04:b2:1a:5b: 9a:66:ef:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDM2h2QUHsozfslh5UBej03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2 ODQ2YWYwHhcNMjYwOTIzMDYwMDQxWhcNMjYwOTI0MDYwMDQxWjAzMTEwLwYDVQQD EyhlOWExODkzYzE4ZWUwYzc2ZjhmZWZjMTk1M2E1MDlhOWY2NmFhY2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhrXrQ0AoO4bAabqTTZK3KCN70Kx BWy02YCZtYOKt1m8UfO0s6/LZ8LC2WUgqpO1Hz5StO9E2wBf/ZY+wYC8xqbSX5H2 UmGeNbPO1DKFoLx9dB+BcDtdRjpPU1ShqKHKLRGSGuFM3qKwRJ/07mGUZh67r3qY eaqr48p30vUpgXGIEwacj/NzGYIv9i1GK8ZRX6XODtePJTLGknOdVRLVjxT/PA9A wrboCjSoHJgA4M2K/gaYwoGHFO3dhk+aNTQllOpnISVZ7cd06aeu8n5Q74cvAbPV SB9rsi6pEGY8FYS+yGHxqTuBTgpDjpgL1555eEc/TzWqLeAJgUCGvW3AawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmhiTwY7gx2+P78GVOlCan2aqzPMB8GA1UdIwQY MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt ZDI0ZjU2MmRlZGQyLzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuauQYTj FGN4cLTNjZ0QqfmhxsQybvB8RXk11oh7aWq8Nzm1tc2YJKOEKzyZqmFVv+TEwT8k BYHph5ypFX+biN42YefKxhfOTifnhBeEryNB0R0YZVAJRxgtibPZWiTox0sRlA84 BYJzSuFEI/CQYd3qBpGLg5z6MXpN7BEvxqmgPpMaboPZZ0vu+Bbuzq+YPp8aYz/g nc6breQEDThOswWlS6lhhgh871goSWTjgQcFZW2oqxEzBIVZNKNoA5+8z6U/K18E 0ebhQNmhelWpKyLaGs37GUBv2/aClRyGDW5qrMreUpsss/pACav3ticKxttLRDno CY0EshpbmmbvaQ== -----END CERTIFICATE-----Generated at Wed Sep 23 08:10:27 2026 by rpki-client