$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft File: DimJADVf30JUwggx8tfuO-xCm9s.mft (raw, json) Hash identifier: x240ybYw5i/CVGCxht7X19LqmPBQXWsmriA2BguxV/o= Subject key identifier: 5E:4B:41:EA:F8:F3:60:05:80:61:ED:18:73:6C:35:7A:FE:FC:81:7B Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 01A0C2FAC49427FCB46F2F3774BE163C4017 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft Manifest number: 02D2 Signing time: Mon 21 Sep 2026 08:00:09 +0000 Manifest this update: Mon 21 Sep 2026 08:00:09 +0000 Manifest next update: Tue 22 Sep 2026 08:00:09 +0000 Files and hashes: 1: 5H5HvQv575nFSmKSZOWkpoNmJa4.roa (hash: C7AqddrBTGFSdtwcxzGRSd2Sbb+zBQZFF1QXO0RlcUs=) 2: 5mS0a5DKsKUWo9swyJpnqpHouXc.roa (hash: Ex+vAEyQsrUoaiDO20Pjp4tHdlovsh4eps8dvFj9mfk=) 3: 7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (hash: J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=) 4: AcToql_UqNBfG1rjDk5FIUcSzS4.roa (hash: S2Tpi4kDrEf93PoUW4sACQhMZl5q7cDANwyMjE4r/9E=) 5: DimJADVf30JUwggx8tfuO-xCm9s.crl (hash: kw/EfiVD2cbor5C/Z7QgZ6ykh0F2JbcA1Nm03nsSrAo=) 6: I0FnsRSHuCIlE5UfwEVWK3D0hR8.roa (hash: dR+nGhBOUGjcCFb5F8ZxMzX7iIcWLc6xb1ZqHmYGR/c=) 7: IkrFRF3Ttgw4FIDBgBDVg0dJ4b4.roa (hash: WGPpKc4dj5grwNnhEEktJ194QdHxK76K6rqlpp7lrFs=) 8: JsPIoXS0PpUsyOfC959Y4j3xCwM.roa (hash: BX1vpydloz/So1cOf6efq9hS22PCaYbgOF7mgCl+KYc=) 9: LWCb_rn7dtaoroBNMd5nV8LGQ1I.roa (hash: saQHmdyeeE4qKDwnXpH56fkp0rFvJK6q7KF3ePpi/JU=) 10: OCvApHO5mjUuV4yskONg4kSU_tU.roa (hash: SD3pfUSDH8g2hAqab8oUoG9VqzVkLCW7ntgh81aWSJo=) 11: Yte9L4xekX_uW58axTYZcgt8FmY.roa (hash: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4=) 12: ZbbPFYZ5et4E0DLQLx7QgD_-n_4.roa (hash: kpo5V1Kis4etv3McfweDJYMJDNmzmYsbcpdv1gAavks=) 13: _zcItGlmx6998FM_OkVMktHXtJY.roa (hash: BVU2FfRsrCVxlC5hx2l9rOZ/f3ofzH78ETxGPtN8M6c=) 14: wfJt5mTsUXow9fCWX31R-Dkmuu0.roa (hash: Ogc3m/G0BZohp0lL37SmmZBmPpDZV56wfDB8yNtIYXE=) 15: wxAG3X_yNVOiL2lU8MWKtnA7yu8.roa (hash: 1/q+7+8/xJC9sx0Oq0j0TwpS9hM9lMperyMfuXBmbDg=) 16: x2XYLxaNKJRFn9DehiizW9aYMTk.roa (hash: Osl107YeRkqGDPiFlpVzUDvS4jF+uDx9WoyD7Axzjng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 08:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c2:fa:c4:94:27:fc:b4:6f:2f:37:74:be:16:3c:40:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Sep 21 08:00:09 2026 GMT Not After : Sep 22 08:00:09 2026 GMT Subject: CN=5e4b41eaf8f360058061ed18736c357afefc817b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:fc:c4:27:fd:f2:dc:8a:79:98:eb:6d:f3: 0c:f9:b2:ea:78:ae:17:3a:a2:28:68:8f:41:65:4b: 15:db:9a:4b:d9:08:5f:8f:e7:e0:e8:32:10:ed:2f: 41:0d:9c:8e:f4:d6:b2:96:fe:c0:75:6f:28:9c:99: 4e:98:d0:57:30:bf:74:ab:68:f8:f7:80:8b:00:53: c4:20:4d:92:51:bd:83:00:fd:7c:02:4d:d8:5e:11: 0f:6f:df:f7:82:97:86:ea:0e:a6:08:15:e6:da:02: 38:04:47:e9:29:52:90:67:50:b9:29:57:e6:9a:5d: 7b:10:8f:99:04:3d:4a:1b:d3:04:2e:3c:3d:74:5c: b0:ce:eb:87:48:89:85:1d:84:60:78:b9:bd:35:47: 43:39:60:27:9a:35:62:0f:a6:b7:0b:fb:79:63:11: 47:f2:c6:5e:8c:d1:36:2a:87:e7:6c:9c:94:ef:6e: e7:57:95:5f:d1:88:b2:6d:64:c0:db:90:50:0a:cf: 42:07:74:2b:4c:be:5f:54:d1:0e:2a:92:f4:7e:e9: 1f:54:c9:90:f2:21:ee:9a:77:3e:f2:1a:ed:6c:e8: 2b:52:96:d5:20:27:a9:90:06:31:88:bd:6f:60:f9: bf:8b:11:83:10:cb:8b:65:46:1a:3e:c9:77:23:c4: 4c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4B:41:EA:F8:F3:60:05:80:61:ED:18:73:6C:35:7A:FE:FC:81:7B X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:85:0a:e8:6e:1e:ee:5d:ba:e3:3e:48:99:32:64:f9:fb:ac: 0e:89:b4:86:ca:3d:b6:91:a1:17:9b:3c:14:f1:a1:4a:04:ef: c6:ce:1c:44:3d:25:7c:4d:db:60:49:e3:a9:bf:dd:b9:1c:da: 87:d8:e9:6b:dc:f0:89:96:2c:d4:91:03:0d:37:c2:b5:45:e9: 48:2b:09:af:d2:59:8e:91:d3:37:1f:b0:f9:8d:b9:af:06:6e: cb:5d:3e:36:c6:a8:eb:c2:0e:88:a7:1d:71:45:81:79:1e:72: 91:ac:9b:41:db:96:08:0f:a8:e2:b1:a6:b7:a1:98:8d:95:d3: 81:a8:d0:3f:c1:6b:89:29:bb:60:0c:00:c3:c4:ab:a8:47:bb: 07:1f:25:16:18:49:f1:36:39:1d:86:b9:98:2d:39:65:1d:88: a2:67:c9:70:3c:07:c2:c2:a7:7c:cb:57:1d:89:b9:11:bc:6a: d9:b6:0c:5e:e2:b5:66:44:8c:9e:01:31:6f:c2:36:9c:4f:a6: 8d:a7:4a:79:2e:28:a8:eb:0d:4d:2f:d4:b7:8e:c9:01:99:82: e5:bf:ef:b7:d9:d5:d4:e8:17:f2:40:97:a0:48:fc:53:d4:9e: 46:8f:69:55:c3:18:8f:76:f4:42:7b:3e:ec:86:99:a8:68:d0: 43:ca:26:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDC+sSUJ/y0by83dL4WPEAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjYwOTIxMDgwMDA5WhcNMjYwOTIyMDgwMDA5WjAzMTEwLwYDVQQD Eyg1ZTRiNDFlYWY4ZjM2MDA1ODA2MWVkMTg3MzZjMzU3YWZlZmM4MTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/f8xCf98tyKeZjrbfMM+bLqeK4X OqIoaI9BZUsV25pL2Qhfj+fg6DIQ7S9BDZyO9Naylv7AdW8onJlOmNBXML90q2j4 94CLAFPEIE2SUb2DAP18Ak3YXhEPb9/3gpeG6g6mCBXm2gI4BEfpKVKQZ1C5KVfm ml17EI+ZBD1KG9MELjw9dFywzuuHSImFHYRgeLm9NUdDOWAnmjViD6a3C/t5YxFH 8sZejNE2KofnbJyU727nV5Vf0YiybWTA25BQCs9CB3QrTL5fVNEOKpL0fukfVMmQ 8iHumnc+8hrtbOgrUpbVICepkAYxiL1vYPm/ixGDEMuLZUYaPsl3I8RMXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5LQer482AFgGHtGHNsNXr+/IF7MB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYUK6G4e 7l264z5ImTJk+fusDom0hso9tpGhF5s8FPGhSgTvxs4cRD0lfE3bYEnjqb/duRza h9jpa9zwiZYs1JEDDTfCtUXpSCsJr9JZjpHTNx+w+Y25rwZuy10+Nsao68IOiKcd cUWBeR5ykaybQduWCA+o4rGmt6GYjZXTgajQP8FriSm7YAwAw8SrqEe7Bx8lFhhJ 8TY5HYa5mC05ZR2IomfJcDwHwsKnfMtXHYm5Ebxq2bYMXuK1ZkSMngExb8I2nE+m jadKeS4oqOsNTS/Ut47JAZmC5b/vt9nV1OgX8kCXoEj8U9SeRo9pVcMYj3b0Qns+ 7IaZqGjQQ8omtA== -----END CERTIFICATE-----Generated at Mon Sep 21 17:28:26 2026 by rpki-client