$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json) Hash identifier: b1aMSC8ZtFFThMNNtSMpZO9QpqbsOBzMLZvaOmxG6AQ= Subject key identifier: AE:93:49:B8:FC:91:32:CD:D9:D1:6B:8A:4A:FC:57:83:2E:C0:6A:3C Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 01A0C3321CFDB34022BB37EA4B0A2F8A1ECF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft Manifest number: 10CF Signing time: Mon 21 Sep 2026 09:00:36 +0000 Manifest this update: Mon 21 Sep 2026 09:00:36 +0000 Manifest next update: Tue 22 Sep 2026 09:00:36 +0000 Files and hashes: 1: 1-8-9AuENiX1nQK68jdWDU7AN2UU.roa (hash: eYe4nG8cfHyj0bQa4PtsDLyspDOBkb74jmYyTxJzxnw=) 2: 2wyh_QhMgMqC_O4n1IvcnhHRGBk.roa (hash: ao/nwpiJU1qsY5iD/g3xyfwFgyAPEV6fkSVForiTS1k=) 3: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: 1XVfwq0faE+wv5I7WOJZv9/07tzS9AjP5nLMtEmcr5s=) 4: AcP7JE9k0_Nz5fFv3kJCDQhlgm4.roa (hash: /xkgYNVDBtLC88fxRmIeqBVLBwwlx87rKcoHwgUu3dI=) 5: Cbwy7ZTHRdEOY7GRBfFj_luZf7c.roa (hash: 35gqWtEcP4/HxKKbREK7gqnsXOG4vXjbmy1ljsXsfXo=) 6: Cdey4x25Y71jAjsi-w5ror1Em9w.roa (hash: 9Nkc6pZ1LY8cZ4nIVazJu4RFkDfce5y0UNDPuC2XOUU=) 7: Fu5kT9TxojjMx5c9WVqjL4KHnHY.roa (hash: OkWCwFJEccvJXScWm+KM/QkYp8L4OehLKl/qIjl3hPk=) 8: HV2EMgnuAtaqMPLEmHXYarCVNpI.roa (hash: kJvWjQO6p4obvK17uUJOQOaQMh6VU7iH+I1+ZH63XpI=) 9: LvnAY2pckzRLAzMxTjPE9zCN3Ag.roa (hash: woZLLhApCfVxkyZ50HpqXpM/zC7yGzb4mBQNzIbCauE=) 10: Q03PdSGrQJ1a3WGfZ-bc5I0qaws.roa (hash: 2OnqRPuaN0v+Zan9ND6ygbAA1lh/p4DcTNqdYBIoSGo=) 11: RUzsZjQOmWwABCIUkcshejkaol8.roa (hash: RBKNBE9V3LhFEz+JeieM4xs1FwZeU1f7a5C0ApeFYFE=) 12: U0sKMofxXdVOw-0XJTrnhs5_ivw.roa (hash: 2ArYsgltaFdadzwNfrDc7gLpkClQBPjzaHH3uLWf38s=) 13: WcBb746Ge3KAEF-yLyH5I6ZFE0E.roa (hash: QXm/UopRYCraXfnadtlxCqtDzUMyQNtipIGzmPAgbf4=) 14: XUImnZKdlu7MDc0FxppzhVw4AFU.roa (hash: owXiNqfnKaJDDUXdUHghHE0onKUOIoOQu55R09C97Zg=) 15: dXpQm6W-fzeDoM6ANaDna4LeJJw.roa (hash: X+KL+RuBzuWO/Tf7EZrDXYxpoc28BH51yAUJezDMoh8=) 16: q6_QV7_dR_nUmUjkdnn1Ol_C4hk.roa (hash: e/CCQvEkZLvzTnUS4WnPQ1yCXPvY5eeas48ASlaEDPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:32:1c:fd:b3:40:22:bb:37:ea:4b:0a:2f:8a:1e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Sep 21 09:00:36 2026 GMT Not After : Sep 22 09:00:36 2026 GMT Subject: CN=ae9349b8fc9132cdd9d16b8a4afc57832ec06a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:11:c7:d8:34:bf:71:7a:98:ee:4f:36:2b: c0:62:f1:2d:09:ac:be:37:c3:2d:c3:0c:91:0e:a5: c5:d3:c6:76:a3:8a:74:43:0a:e0:ed:ab:c7:fc:09: db:12:31:48:3b:4e:63:2e:ce:8b:f4:b2:a8:26:16: db:a0:83:0e:2e:0e:04:61:09:3d:b3:a0:db:45:21: e9:30:f7:f4:7d:be:c7:3e:b3:5c:88:eb:d6:09:ab: 80:a1:e3:0b:d6:9e:52:c0:45:eb:83:1e:56:34:01: 9f:c5:18:86:b2:9a:47:5a:01:78:20:97:ea:3c:b7: 34:31:d9:a2:bc:48:bd:10:18:00:ee:7a:54:b6:0c: 5b:4b:6e:60:5f:bf:4a:4a:b4:10:64:5b:b6:ff:0e: 64:c8:2e:8a:45:6a:28:0c:f6:07:07:96:d1:12:70: 53:5b:48:ae:03:9b:63:15:39:2f:f6:19:d2:af:67: c3:99:98:16:d6:3b:60:79:94:e7:21:e6:c6:9b:1e: f5:c8:92:ce:a0:55:7d:0f:60:f3:21:aa:ab:1d:99: 72:b5:45:05:d8:63:8b:e4:4b:3c:32:2f:f0:2d:69: 3a:8b:4c:2d:27:9b:c7:f0:ac:3c:4f:bb:c5:da:0a: 9a:d4:55:11:c5:78:93:94:6c:ab:41:5f:64:f0:4f: 1c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:93:49:B8:FC:91:32:CD:D9:D1:6B:8A:4A:FC:57:83:2E:C0:6A:3C X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:48:fb:0e:17:73:43:60:d0:1e:a6:03:b1:d3:df:b7:af:75: 39:df:e3:e4:be:e4:94:18:40:f1:0e:6d:43:28:25:a4:dc:5a: 2f:49:99:59:e8:12:06:00:a4:5f:79:bc:89:64:56:fe:7b:14: db:72:ad:f2:e0:68:e8:8f:06:87:15:49:7f:a4:9c:a5:95:de: 48:84:15:90:3f:e7:56:42:58:8a:ab:0d:cf:f3:60:f3:24:be: b4:69:14:57:1a:58:ef:04:36:c4:8c:6e:9b:95:03:89:77:b6: 2e:98:0e:2f:c7:f2:f7:5f:a5:ac:51:11:fc:de:e0:8f:f6:c1: 2a:17:14:db:a7:74:65:2c:1a:64:9f:23:fd:3b:fb:2e:5d:65: 46:ed:53:f4:a0:de:9a:31:cc:60:00:f7:ec:c6:46:ac:2b:4f: d2:5f:9a:ff:36:9e:0a:8b:52:da:2c:3a:80:a3:5f:50:79:cf: 60:5d:b9:ca:3f:0d:03:bc:b5:d9:63:63:52:69:b7:c5:e6:16: 42:50:1b:f7:17:24:67:cb:bc:20:f5:b6:a1:ad:fc:03:f6:88: 7c:18:2c:a4:af:a1:e7:1f:f6:23:5c:51:bf:89:c3:5c:ac:5f: 7c:0b:fa:bf:da:5a:98:1f:31:38:70:d8:cf:73:4e:25:6f:b2: 78:22:0b:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDDMhz9s0AiuzfqSwovih7PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjYwOTIxMDkwMDM2WhcNMjYwOTIyMDkwMDM2WjAzMTEwLwYDVQQD EyhhZTkzNDliOGZjOTEzMmNkZDlkMTZiOGE0YWZjNTc4MzJlYzA2YTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3IRx9g0v3F6mO5PNivAYvEtCay+ N8MtwwyRDqXF08Z2o4p0Qwrg7avH/AnbEjFIO05jLs6L9LKoJhbboIMOLg4EYQk9 s6DbRSHpMPf0fb7HPrNciOvWCauAoeML1p5SwEXrgx5WNAGfxRiGsppHWgF4IJfq PLc0MdmivEi9EBgA7npUtgxbS25gX79KSrQQZFu2/w5kyC6KRWooDPYHB5bREnBT W0iuA5tjFTkv9hnSr2fDmZgW1jtgeZTnIebGmx71yJLOoFV9D2DzIaqrHZlytUUF 2GOL5Es8Mi/wLWk6i0wtJ5vH8Kw8T7vF2gqa1FURxXiTlGyrQV9k8E8cswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6TSbj8kTLN2dFrikr8V4MuwGo8MB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEj7Dhdz Q2DQHqYDsdPft691Od/j5L7klBhA8Q5tQyglpNxaL0mZWegSBgCkX3m8iWRW/nsU 23Kt8uBo6I8GhxVJf6ScpZXeSIQVkD/nVkJYiqsNz/Ng8yS+tGkUVxpY7wQ2xIxu m5UDiXe2LpgOL8fy91+lrFER/N7gj/bBKhcU26d0ZSwaZJ8j/Tv7Ll1lRu1T9KDe mjHMYAD37MZGrCtP0l+a/zaeCotS2iw6gKNfUHnPYF25yj8NA7y12WNjUmm3xeYW QlAb9xckZ8u8IPW2oa38A/aIfBgspK+h5x/2I1xRv4nDXKxffAv6v9pamB8xOHDY z3NOJW+yeCILuQ== -----END CERTIFICATE-----Generated at Mon Sep 21 12:35:53 2026 by rpki-client