$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: BlahOKAA4x8GG852kV0XKf2USNdJOam+ZoK8JQBptck= Subject key identifier: 88:9E:AF:F9:B9:E4:89:8D:8A:A8:AF:18:0E:4B:A1:87:0B:83:03:EB Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 01A0BFC384869AAF6E35E16E02431F0BA7D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 073C Signing time: Sun 20 Sep 2026 17:00:56 +0000 Manifest this update: Sun 20 Sep 2026 17:00:56 +0000 Manifest next update: Mon 21 Sep 2026 17:00:56 +0000 Files and hashes: 1: 3ni1lXz0xo-b4HoXI3wRu6vJL-c.roa (hash: 7b3P7fNZC5J3JcfQvJqiC/2neHH6f8kadDw6/l3P8/Y=) 2: AmdO1jA2vkBtxkn2vv7Y1wu4dFM.roa (hash: wY1LZtovvbzyHM2W8YhMwLuam5z9V3nwmwDqM8gEEF4=) 3: BYtnuImtTGdi14Pvw9xlRKAL65k.roa (hash: hUoeJXbJ5fZg7WKvqap5HxU1pLmROBa7LXCxisf4SP4=) 4: CNFp8fRkRFtEQks7R0O2wgi6-xA.roa (hash: bXlKDyyKKGdmKBfoGxYPygp5JG45Ozo2FLYDRNT3VpM=) 5: HrFuB2F4P326FdIKDHmR_z_oGqs.roa (hash: d1+J0bs8Jd4Tmg8E7c67C6CZ18CYNi+0jZ3ouxTsd3M=) 6: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: kphVKpAH1a3o/MaIAkL+LPsZHCOWS38HmUq6dcfjLpc=) 7: Qw57jboYzWi7eNVtR4XFL50skyQ.asa (hash: gZacbBLwQEXYgJXLBy71iNIoJF93UncqIKQilDhd0Ik=) 8: YlYX0-EwdZ0RjwlcesbIkWVsVTo.roa (hash: 12tzR601qVt1Vj7EME9V9wBl6cqsNdP8VmiHIJgAu5Q=) 9: cNqycsZxVsHcATCP8JWqqaoM9SI.roa (hash: CX+xOUuMFEXPOxevDnRNct6cRUm/jc1q9b58M6PTWZo=) 10: gE3k0i8jHZvr5aE-wjNKPwzJxvE.roa (hash: CuCVWX3Bl6EYyE6nnbYJN+zyPfahHe62RUo//GoIy9o=) 11: lBlo6PUCc6IqER-nFwmpK7D7yqo.roa (hash: Z5uCFtdD3Jko3O/Znx9FA924V5ua0wn5UjLkJKE8KyE=) 12: qbksFEEwSTb2bBOnvyMaaJhR7Ss.roa (hash: qH3mt9TzRYD5CJqPjTYWZEejOSD69A/a1ZIdDauUkQo=) 13: urqr3QuscnM9Gexd4HqCzda04Hs.roa (hash: +eFtvrmvtLAGjqTjuO2JbNNCYDwjSBJV6qDXXX+HoPY=) 14: vK-KaBqhr8V_hwKd5waBGW1KRWw.roa (hash: oQWH0/V6kKajlzjedYwpIuxuJVBUj9/lA3fmpgeVLpQ=) 15: vsRZs78l22h0vnp-DI6scU3LKUA.roa (hash: 4WpHfFl6tIuHybFbUi60kzMtYBl55u5TXUCckR5iGfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:c3:84:86:9a:af:6e:35:e1:6e:02:43:1f:0b:a7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Sep 20 17:00:56 2026 GMT Not After : Sep 21 17:00:56 2026 GMT Subject: CN=889eaff9b9e4898d8aa8af180e4ba1870b8303eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:27:a9:4a:ee:b1:92:0d:a9:c8:ba:55:33: 5c:e1:17:87:19:5b:1c:c7:5d:70:fc:83:5d:c4:d3: cf:1c:9f:c3:9b:d6:af:83:7b:7b:c7:ae:d4:a5:00: 49:88:ab:e2:49:ba:bd:48:da:a7:68:75:3e:5c:bd: ac:6e:2e:41:a2:7e:89:00:9d:a0:42:12:9a:f6:8c: dc:92:42:e0:b1:fc:30:63:c5:18:ca:36:aa:24:63: 83:10:32:2f:18:01:eb:63:f3:20:a4:94:18:31:7d: b2:03:86:b9:e9:c5:65:38:3a:df:d1:79:c2:e2:14: ae:94:96:cd:61:ae:82:ef:4c:55:fb:a7:49:b5:e3: fb:2b:cb:db:09:c4:19:44:dc:1b:95:d2:0d:4a:8b: cc:1e:60:04:0e:25:1e:b0:77:9d:fa:7a:b7:fc:16: a8:59:56:7d:33:32:0b:56:48:28:7f:7c:bb:26:64: 62:35:eb:3c:77:61:67:44:52:4b:b5:ab:24:17:88: 87:94:29:23:66:d5:32:3d:87:52:f9:fc:93:a9:5e: 33:cd:4f:43:eb:3a:ae:19:82:2c:b0:98:d7:1f:52: 8e:0f:0f:79:4a:4d:10:df:29:f0:35:59:69:b8:ce: 54:9e:a9:e6:2d:3e:8c:19:e0:fd:0b:9f:95:cc:97: f5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9E:AF:F9:B9:E4:89:8D:8A:A8:AF:18:0E:4B:A1:87:0B:83:03:EB X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:4d:c6:e8:f4:3e:22:cf:47:a2:ff:a2:f9:51:20:d4:7d:b3: d7:a3:6e:30:53:f4:bd:29:c7:45:af:2f:98:e9:0c:04:24:73: 56:90:68:f3:ec:8a:d6:14:69:d5:7d:6e:dd:1d:ac:a3:d7:75: e1:e4:41:10:22:7a:08:b3:7e:89:53:1b:a0:41:8a:66:a2:81: 3b:bc:a3:bd:f3:09:93:11:06:3d:7d:3e:07:b5:9f:dd:38:2b: 72:46:02:af:c9:9d:5b:c9:e6:70:10:c0:0c:ed:f1:64:6a:50: 9d:e6:dd:cf:f8:4f:f7:f9:a7:ed:0f:75:81:13:6a:25:cf:b7: f4:83:6e:61:60:4f:ac:e9:1e:f1:a7:0d:8f:63:5b:9a:c3:de: c3:fc:63:3d:a1:8c:9a:4b:a4:38:93:2b:9f:0f:ff:05:c8:cc: ab:27:5c:6c:73:c6:f5:f0:bc:15:b4:ce:1f:75:41:42:9d:e2: 44:00:b5:2c:96:26:97:d9:c6:42:1c:e4:c9:58:96:df:be:2a: cc:6f:64:9d:e8:ed:c9:19:ab:29:3a:51:ea:bb:e3:d2:08:d8: ca:e0:25:14:80:1e:2e:17:37:8c:4c:fb:3b:f1:b7:f4:17:fc: d8:3c:e0:ba:70:33:27:f8:bf:47:0d:dd:2b:d0:9b:c1:f5:76: 77:cc:77:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/w4SGmq9uNeFuAkMfC6fQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjYwOTIwMTcwMDU2WhcNMjYwOTIxMTcwMDU2WjAzMTEwLwYDVQQD Eyg4ODllYWZmOWI5ZTQ4OThkOGFhOGFmMTgwZTRiYTE4NzBiODMwM2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4MnqUrusZINqci6VTNc4ReHGVsc x11w/INdxNPPHJ/Dm9avg3t7x67UpQBJiKviSbq9SNqnaHU+XL2sbi5Bon6JAJ2g QhKa9ozckkLgsfwwY8UYyjaqJGODEDIvGAHrY/MgpJQYMX2yA4a56cVlODrf0XnC 4hSulJbNYa6C70xV+6dJteP7K8vbCcQZRNwbldINSovMHmAEDiUesHed+nq3/Bao WVZ9MzILVkgof3y7JmRiNes8d2FnRFJLtaskF4iHlCkjZtUyPYdS+fyTqV4zzU9D 6zquGYIssJjXH1KODw95Sk0Q3ynwNVlpuM5UnqnmLT6MGeD9C5+VzJf1OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIier/m55ImNiqivGA5LoYcLgwPrMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoE3G6PQ+ Is9Hov+i+VEg1H2z16NuMFP0vSnHRa8vmOkMBCRzVpBo8+yK1hRp1X1u3R2so9d1 4eRBECJ6CLN+iVMboEGKZqKBO7yjvfMJkxEGPX0+B7Wf3TgrckYCr8mdW8nmcBDA DO3xZGpQnebdz/hP9/mn7Q91gRNqJc+39INuYWBPrOke8acNj2NbmsPew/xjPaGM mkukOJMrnw//BcjMqydcbHPG9fC8FbTOH3VBQp3iRAC1LJYml9nGQhzkyViW374q zG9knejtyRmrKTpR6rvj0gjYyuAlFIAeLhc3jEz7O/G39Bf82DzgunAzJ/i/Rw3d K9CbwfV2d8x3lw== -----END CERTIFICATE-----Generated at Sun Sep 20 19:43:21 2026 by rpki-client