$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft File: fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json) Hash identifier: wxF3VxcgiI//4gmmKyRsBch0J63jyX8icdalHrUDQB4= Subject key identifier: 7C:18:A3:3F:B6:70:C5:2A:2E:E4:45:7B:19:05:FC:CE:2F:45:D0:6B Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80 Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380 Certificate serial: 01A0E8F6F4409BF4437799B87941047CF764 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft Manifest number: 1A9F Signing time: Mon 28 Sep 2026 17:01:33 +0000 Manifest this update: Mon 28 Sep 2026 17:01:33 +0000 Manifest next update: Tue 29 Sep 2026 17:01:33 +0000 Files and hashes: 1: 5SEARh8FCEo871iB7G34fI2Kpe4.roa (hash: m8tzPmTHhc1WTCJBLsi032NvSAtwSGzKJid4Omy7Mh4=) 2: BBgeRSvbUJdniHYX4zOgCcL8ACY.roa (hash: PLe5zqvpsl1axyHkG+6mNC+e0kIU1k+pLvAFxSmrAmU=) 3: GINhKUhmBtKk0TkbBRxpcNSu6zI.roa (hash: AfFS2Kk3dLWfENSQf5EMy1ayLLvaFvbW7wW4mzMrY2c=) 4: GcjqtR6eaVf9zI7HkXKSnJA3w6w.roa (hash: A4MXiuxUupC9OPHA/5SoE0YyMSrNretsQcoN/Jow0+w=) 5: UxGBNLJORbA-dUtSWizJlzSR79A.roa (hash: iSbtbOdc4793QhhKCfmSFXrRr7lnZaOwHAQy1vMKWow=) 6: VI1RqKQ9FUKeH02MRHEork21o40.roa (hash: wdOOodFBuGweEJw4KzRpikC1wFqxQBn+ps1AczyBeZ8=) 7: Yu1zmysTEBKjL5YYLMMg4Z_eWEA.roa (hash: KRT9o5BiHue3+B57E9epeCM9JN4yPOhoqN4HYF+hLEU=) 8: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: xVTLitqnGD2EWBI0LyK4VOGipq/HS0TsR/CrRpQO6sc=) 9: gxHDLsArjTiXKEpHJWMyRpUv3cY.roa (hash: dCObsibTUgKigew1g86RJZOg/QuYkH7A+/+pCpHO7nk=) 10: nuyOFFadfRrO-PHC8XAHyHRujfs.roa (hash: /f8gp/JEgFhNhBZOt0Zfqqd/+VO8Z7hxkEAexMPxwQE=) 11: u1nf-Thyw228svKtPSH3GG9Q0kM.roa (hash: zfCV7njN88258Q8HEPbW3g+KPAWnYoYtUU7LB/pH0+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 14:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e8:f6:f4:40:9b:f4:43:77:99:b8:79:41:04:7c:f7:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380 Validity Not Before: Sep 28 17:01:33 2026 GMT Not After : Sep 29 17:01:33 2026 GMT Subject: CN=7c18a33fb670c52a2ee4457b1905fcce2f45d06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8b:4c:a5:3b:ab:e1:07:b6:70:18:90:7a:93: d4:3a:7a:0b:9e:32:94:d7:e8:cf:2e:fb:51:78:be: 68:17:d8:f4:28:bc:cf:ee:4d:e3:03:5b:05:52:15: 87:07:2b:47:42:db:75:02:9f:06:6c:84:b8:cf:cc: 42:d3:1d:ed:90:7c:82:e0:aa:a8:27:7e:5c:1e:65: 79:6e:20:81:6e:50:5d:9b:7c:eb:ca:1c:09:58:99: a1:0d:b6:c0:b9:57:3a:92:84:31:aa:e2:56:e9:d6: f2:23:a5:27:35:0b:c5:16:ee:c4:60:de:4e:57:c2: 35:f2:c4:ba:dd:c2:f3:09:83:a4:16:6f:38:1d:03: cc:f7:f3:76:a7:2a:eb:84:32:51:b6:2d:72:d7:54: 9c:03:f4:d8:90:10:2d:15:2c:a7:b6:6c:1b:56:14: 5c:c9:f9:8d:1c:dd:d4:ad:88:82:99:56:35:d7:a2: c7:12:08:9b:75:d9:55:d2:0f:d3:f4:21:7f:78:1c: f7:f5:11:70:79:cf:a4:64:02:6a:58:81:99:6e:d1: 8e:e0:7f:39:13:b3:25:7c:68:7f:34:44:70:97:d6: 7d:75:80:a8:78:c0:e0:c8:2f:bb:64:9a:15:28:64: 98:78:a6:b4:60:cc:c0:4f:8c:87:d7:ae:af:9f:1c: 68:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:18:A3:3F:B6:70:C5:2A:2E:E4:45:7B:19:05:FC:CE:2F:45:D0:6B X509v3 Authority Key Identifier: keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:16:49:f3:c6:d0:29:3a:a1:cc:31:b9:a4:33:1c:84:49:9d: 63:0a:f2:a6:4c:6e:96:b7:f2:2b:bd:5c:a0:37:a7:ba:9c:ee: a5:65:5f:47:7f:ef:cf:09:11:02:c0:af:46:9d:14:52:ca:ec: 73:1b:4e:53:54:da:55:26:60:03:c6:3e:f6:9d:a5:61:e1:42: cd:24:ee:f8:53:29:17:a6:5f:21:8c:6a:ce:d1:35:d0:c2:89: d2:74:55:12:20:0f:19:5d:da:34:b9:a0:86:01:bd:41:65:aa: 2a:22:db:cd:f8:0d:76:dc:82:c7:27:c6:33:36:a2:7d:fa:48: 95:80:a4:2c:28:5d:4b:33:8e:dc:a0:81:9b:67:e2:d0:02:52: a8:3b:cd:fd:bc:88:e2:0a:9f:69:95:33:1e:a3:4a:a2:97:cd: 68:f6:38:23:3e:ad:a6:3b:4c:5f:e8:a8:f7:af:fe:22:f1:32: 5f:f2:07:01:d5:1e:ae:38:41:0c:96:2d:74:c1:58:c0:30:47: f2:b8:f5:49:14:ca:ba:d2:0e:b2:c1:e9:11:de:bc:f5:e8:72: 24:91:c0:c6:bf:bf:52:00:2b:14:9b:4a:88:dd:2e:9e:39:af: 73:71:9a:bf:1a:f7:40:64:c6:b6:19:57:f5:ef:d4:1f:88:f3: 3e:bb:52:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDo9vRAm/RDd5m4eUEEfPdkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2MzOWQxODk5ZTY5OWJmNTE3NzQxOGVlMzgxNDg5ZWRm ZjQzODAwHhcNMjYwOTI4MTcwMTMzWhcNMjYwOTI5MTcwMTMzWjAzMTEwLwYDVQQD Eyg3YzE4YTMzZmI2NzBjNTJhMmVlNDQ1N2IxOTA1ZmNjZTJmNDVkMDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ItMpTur4Qe2cBiQepPUOnoLnjKU 1+jPLvtReL5oF9j0KLzP7k3jA1sFUhWHBytHQtt1Ap8GbIS4z8xC0x3tkHyC4Kqo J35cHmV5biCBblBdm3zryhwJWJmhDbbAuVc6koQxquJW6dbyI6UnNQvFFu7EYN5O V8I18sS63cLzCYOkFm84HQPM9/N2pyrrhDJRti1y11ScA/TYkBAtFSyntmwbVhRc yfmNHN3UrYiCmVY116LHEgibddlV0g/T9CF/eBz39RFwec+kZAJqWIGZbtGO4H85 E7MlfGh/NERwl9Z9dYCoeMDgyC+7ZJoVKGSYeKa0YMzAT4yH166vnxxo4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwYoz+2cMUqLuRFexkF/M4vRdBrMB8GA1UdIwQY MBaAFHw8OdGJnmmb9Rd0GO44FInt/0OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAt MDYzZmNkZDNhMDU3LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAtMDYzZmNkZDNhMDU3 LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORZJ88bQ KTqhzDG5pDMchEmdYwrypkxulrfyK71coDenupzupWVfR3/vzwkRAsCvRp0UUsrs cxtOU1TaVSZgA8Y+9p2lYeFCzSTu+FMpF6ZfIYxqztE10MKJ0nRVEiAPGV3aNLmg hgG9QWWqKiLbzfgNdtyCxyfGMzaiffpIlYCkLChdSzOO3KCBm2fi0AJSqDvN/byI 4gqfaZUzHqNKopfNaPY4Iz6tpjtMX+io96/+IvEyX/IHAdUerjhBDJYtdMFYwDBH 8rj1SRTKutIOssHpEd689ehyJJHAxr+/UgArFJtKiN0unjmvc3Gavxr3QGTGthlX 9e/UH4jzPrtSrw== -----END CERTIFICATE-----Generated at Mon Sep 28 20:42:25 2026 by rpki-client