$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json) Hash identifier: 1wVZtL5quChf8xqNW+Ty06DMfHC6+V5OQn5ba5B/q/4= Subject key identifier: B2:34:F9:44:61:2D:DE:EB:0D:F1:6C:F6:29:3C:CB:52:AE:2D:00:05 Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311 Certificate serial: 01A0C39FDA01B0EE616F2F69790C24292957 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft Manifest number: 0AA2 Signing time: Mon 21 Sep 2026 11:00:28 +0000 Manifest this update: Mon 21 Sep 2026 11:00:28 +0000 Manifest next update: Tue 22 Sep 2026 11:00:28 +0000 Files and hashes: 1: 0j8mKPNVQTMhrPMoTB8vqumItaY.roa (hash: RfwfX7kQEbOpbeZ05eE31bx2DYFysCnm/nQLdjd7Xnk=) 2: 1-5SN3I-IsoUjfo8g5-hBdsRRZ9o.roa (hash: s09l3XLrS1nG2HYt50hW4zF2T2VLAEk4Mtf1043eyYs=) 3: 1-kTvZ0CIAu8uTw7fU1T6vT9hc9c.roa (hash: me+ftvQPzHdAUrIuYjuuG8bbQjdCu8RbriElDkqOOBo=) 4: 5obQTKQQdziyHt3lp7e0Ce026vk.roa (hash: Le5yUrWQi3zm2wIsTvW5Oct4jk04f+5rZXXqRfdqn8k=) 5: 8dffgbceyZZN2GD0DQntG3Z8fxU.roa (hash: 7MA6pNhMj3p3AaurB3f6qiL2uGgtlKFoFp4bhK94tNs=) 6: DgRXfU03npME4V1AwAX0ThBtZQ0.roa (hash: 28zui3LwnRaze+dAHIDUkVVoknpCffM0WP9r0d8Uduw=) 7: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: Rxe3fi8ap88bEZfqblgZ5BW+JGecKp3rXFJjSF7fgyg=) 8: MW-Of09W86VTd-ehIdYpnjmPXXs.roa (hash: LD0GodrBLFRUB6lFsPKkTSv+4sIk7vBheqeA3m5nPOo=) 9: RTZmGDdPCU2SBV4lhMEH2Sp_2-o.roa (hash: vYRw7atU1j7YPp403PSxl0yUcReYPk7klM3aD3yLz8o=) 10: XfaQx2F1DQ7dZJr9-a__hDM5coI.roa (hash: Uj4xi+1RpyiVvP8zoS4JaQonnJeBy+gzjAcazMu9DFA=) 11: ZIEMV2zIloE52-qgOXdFi1j85Tk.roa (hash: NwScYVj2gBSbhZaCbwwZMrlWYVdDowjEWEzxULRwSVQ=) 12: bq7p2c5vJ2AuacchZjMY0iRJ4d8.roa (hash: 18rUuCK206j5Kf25J505Px18ULYGnExtH3WZ9ccpOUo=) 13: ihH2jmcAzRuRb0DXObKEK01lyBE.roa (hash: 8lNi9w5SpA0dQSPNcnFbf41In6HTCs+i7pcqGwmC+bY=) 14: zSQtHn132zkYiODR-nP8aHtUQYA.roa (hash: 0IThsqQjeAvQaaBM3736hRL6ffPhT8HNYOS2v2AnKs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 11:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:9f:da:01:b0:ee:61:6f:2f:69:79:0c:24:29:29:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311 Validity Not Before: Sep 21 11:00:28 2026 GMT Not After : Sep 22 11:00:28 2026 GMT Subject: CN=b234f944612ddeeb0df16cf6293ccb52ae2d0005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:f7:c6:1b:69:b0:d8:6c:e8:13:de:90:6d: 6e:66:00:4d:8c:c9:48:1e:67:1f:11:36:17:96:1b: 3a:a5:c6:45:fd:f3:b1:98:1f:bd:ec:0f:a2:57:19: 29:f2:33:d5:f8:a6:f8:88:41:15:e2:a5:bc:63:91: ca:5e:9b:86:72:13:7e:e3:3e:27:8d:7e:be:02:1e: 1a:fb:d1:cb:f9:62:5f:3b:99:70:f0:7d:d3:8b:4e: 42:b7:5d:76:1c:e7:a4:43:be:2c:63:e1:32:03:5c: 96:3c:ee:dc:3b:62:bf:af:5a:a7:15:f1:53:7a:ea: 1d:dd:a2:aa:18:fd:4f:7f:a0:1a:37:52:9a:3b:80: 02:10:16:c0:81:8a:f0:91:be:ee:65:4a:76:8c:8f: 7f:aa:f9:70:93:1c:c4:4a:7b:bf:b9:f9:70:36:43: 12:13:a4:a9:f0:3c:0d:21:15:09:b9:27:f1:2f:81: 03:fa:e0:de:e6:a3:69:0f:c0:92:28:ac:f4:e2:e0: ff:2f:ce:76:96:a9:91:fc:d2:2b:c5:3f:7c:8a:95: 26:15:3b:82:2d:c9:7b:e2:51:bc:bf:6a:13:d1:57: c0:ae:12:ce:73:ab:b6:06:53:e9:e5:69:b4:c2:42: db:e6:8a:8d:33:52:50:4f:4c:21:c9:24:0b:b7:6f: aa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:34:F9:44:61:2D:DE:EB:0D:F1:6C:F6:29:3C:CB:52:AE:2D:00:05 X509v3 Authority Key Identifier: keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:52:35:1e:73:c8:85:47:24:10:14:0a:bd:79:a0:c0:a1:73: 1c:c9:dd:4c:93:38:c8:18:69:46:fc:a7:80:61:c9:fa:66:b7: be:d3:d8:6e:9c:49:39:eb:09:c3:61:84:23:f9:3b:6e:b2:0b: 04:a5:38:46:c5:e7:c9:33:95:fc:7d:16:67:7e:8c:a1:7a:b1: d0:49:0c:0c:83:03:59:14:8c:5f:1d:ff:af:98:14:be:5a:ce: f9:ee:27:c2:ad:6b:74:ba:1b:1a:f3:4e:6e:d3:ee:96:72:04: 51:e4:83:9c:e9:f3:66:ae:4e:e4:cd:9e:ab:18:1b:4e:64:12: b0:11:96:40:bf:9f:6e:8c:1d:0c:ff:d6:04:3b:75:e2:fe:18: 4d:62:dd:a8:db:2c:0c:d2:78:92:fa:23:d2:28:61:12:fc:14: 9e:23:6a:33:cd:46:5b:40:d9:bf:1e:79:ad:cf:7d:ea:a7:5d: d4:79:af:cb:ad:09:c8:08:52:6a:6d:01:19:ff:02:ef:c2:ee: b6:d7:93:b5:7f:7a:91:0d:fe:fa:86:e7:cf:f0:76:6e:49:6e: 9b:2d:93:60:8f:4a:03:64:b9:ef:d1:32:26:25:1f:90:41:7c: fa:c7:88:91:65:1f:8b:46:a8:b0:fb:91:02:79:2e:78:d2:3a: db:43:de:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDDn9oBsO5hby9peQwkKSlXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNjRmODFiOWUzNmI4NDk5MTc3ODc2NzhkMDE0ZGI0YmZj ZWYzMTEwHhcNMjYwOTIxMTEwMDI4WhcNMjYwOTIyMTEwMDI4WjAzMTEwLwYDVQQD EyhiMjM0Zjk0NDYxMmRkZWViMGRmMTZjZjYyOTNjY2I1MmFlMmQwMDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWX3xhtpsNhs6BPekG1uZgBNjMlI HmcfETYXlhs6pcZF/fOxmB+97A+iVxkp8jPV+Kb4iEEV4qW8Y5HKXpuGchN+4z4n jX6+Ah4a+9HL+WJfO5lw8H3Ti05Ct112HOekQ74sY+EyA1yWPO7cO2K/r1qnFfFT euod3aKqGP1Pf6AaN1KaO4ACEBbAgYrwkb7uZUp2jI9/qvlwkxzESnu/uflwNkMS E6Sp8DwNIRUJuSfxL4ED+uDe5qNpD8CSKKz04uD/L852lqmR/NIrxT98ipUmFTuC Lcl74lG8v2oT0VfArhLOc6u2BlPp5Wm0wkLb5oqNM1JQT0whySQLt2+qNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLI0+URhLd7rDfFs9ik8y1KuLQAFMB8GA1UdIwQY MBaAFA5k+BueNrhJkXeHZ40BTbS/zvMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTct YzhmMTgyZTk1ZWE1LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTctYzhmMTgyZTk1ZWE1 LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1I1HnPI hUckEBQKvXmgwKFzHMndTJM4yBhpRvyngGHJ+ma3vtPYbpxJOesJw2GEI/k7brIL BKU4RsXnyTOV/H0WZ36MoXqx0EkMDIMDWRSMXx3/r5gUvlrO+e4nwq1rdLobGvNO btPulnIEUeSDnOnzZq5O5M2eqxgbTmQSsBGWQL+fbowdDP/WBDt14v4YTWLdqNss DNJ4kvoj0ihhEvwUniNqM81GW0DZvx55rc996qdd1Hmvy60JyAhSam0BGf8C78Lu tteTtX96kQ3++obnz/B2bklumy2TYI9KA2S579EyJiUfkEF8+seIkWUfi0aosPuR AnkueNI620PesA== -----END CERTIFICATE-----Generated at Mon Sep 21 20:13:14 2026 by rpki-client