$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json) Hash identifier: eae1Pf40hXlvE7l4ViLryKFrVfMiFEsN+wqI7gaOYWc= Subject key identifier: 34:09:1D:A5:50:48:13:CA:39:8B:A5:7F:42:3B:9C:D2:74:50:AE:8C Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 01A0BC1D8154B5EEDCC72509CE4E6DDC6ED4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft Manifest number: 1A69 Signing time: Sun 20 Sep 2026 00:00:45 +0000 Manifest this update: Sun 20 Sep 2026 00:00:45 +0000 Manifest next update: Mon 21 Sep 2026 00:00:45 +0000 Files and hashes: 1: 06KsS95-uc37njfmN_yGJWnyq6U.roa (hash: K4nK55gW5SZLVxc3BcynZpT0UUD5TASwk3Svrgii/lI=) 2: 1dppl4E5LeYed1_ddeBSXFRftKA.roa (hash: pN3g9tWO1Nl1OAJCCKTDocJwUcz7cU9lRTyplesScF8=) 3: 7hii_CBkhWFEcR7PBsbgDyXmQ9Y.roa (hash: VParP3CSdlBKMMaiiyOgc9apoYvJ3aLSGeumM5G2suQ=) 4: 9LHK8v8-9Ckf2KLnnMlZEiqUMBM.roa (hash: 0BBbEj9KrnkzQ7LI3Ja4k/fn10TEbD/JLEqh/Y7YN5Q=) 5: 9zJS2sLQdMyIEXItDHnz9vENCZc.roa (hash: smANRs03fyEMELSZXfc50FOww78+6TO01q3PcjqHhg0=) 6: HZuqAD7c7zD61eQDUNc43p13Rus.roa (hash: CLnSiDlapsSBOMDzZqR931D1WlMkd94ux2JTr6MJ7iY=) 7: MARvCBJj6pQzGNHhjfVRnTPDXRw.roa (hash: W1iO+ZpTnMCy3mYaAEE8YESIC/Lb3z77r6zn9zHVz2Q=) 8: NpN7l3_hUP3xVFpljOuMEBlStvc.roa (hash: T5g6uyNIkE7SmOO57cpKy2aBBJDWlR4fSl0bwzLwido=) 9: ZffOLXHzTQQ9w6R4Acsptb5X-ZQ.roa (hash: nT41EZi54SNK5Qom8A2J9oxN87+LC+L6D9g8JwOo3+E=) 10: b25kHpS94xs5d-Cb2gg_RWdRdqA.roa (hash: UnoS92iWWLeA3lFor4dioIwIwXhzelHfz1mr8ZCSkhY=) 11: bcSgZpZBwtbiIL48flh5F_NGfHo.roa (hash: I/NWDutoo/tdtpPAOJuOwfmfUJCK6YwHRmYnSpUxsCY=) 12: cA6GYxFNrQzJXvnUUCTkZ74uPLY.roa (hash: 9ZlPADtkA5tNsCz6vf4xeuKDXE0oMu2t/mqNk4DDlVc=) 13: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: M400EG3N8IbuP5pXitnzaqFrRVKX14g6qxpocrtW9Vg=) 14: laLTLAZUfnJXL9IgOMNUJBbcIYM.roa (hash: qH+8NsTPRO3q9UjCnJr8tq7a5R+TvAmnEtSTXrLT0C0=) 15: oX2NoeenvY6od0noJwHOC0vVDFU.roa (hash: PaRvm0af3RdwqkLgxZ1C0CNPV7CmkxdUeLl6SbuiQd4=) 16: sPqeNjwkgKgIPC9F-wg4yZRw5vo.roa (hash: gkiNfTfDhe6OjPwvNFzi/YKFCVBUpR1D9DW8GG28M8I=) 17: ww6ypu6XKZLBnCmu95aBOLrx3W4.roa (hash: MJWr+hVoOJcU+dBCIlq6NQXj1hTEMRYcYO7YQk9u0qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 00:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bc:1d:81:54:b5:ee:dc:c7:25:09:ce:4e:6d:dc:6e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Sep 20 00:00:45 2026 GMT Not After : Sep 21 00:00:45 2026 GMT Subject: CN=34091da5504813ca398ba57f423b9cd27450ae8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a4:b2:fb:15:f2:34:7f:ba:8a:de:58:97:e1: 44:0b:b7:63:c7:0a:61:dd:02:3f:a3:7c:43:03:d2: b5:c9:e4:04:f9:de:78:47:13:43:26:8c:3d:7e:1d: 97:db:40:92:b7:24:4d:79:91:39:b7:be:65:c7:03: cd:96:61:6b:fa:37:20:3c:0c:69:93:c6:31:a9:aa: 5c:da:b0:4e:10:30:6a:d9:8d:1f:95:ee:d3:ce:b7: c3:91:19:74:26:29:f1:32:6b:71:3f:88:f0:6e:9b: 1d:b0:d3:f6:1d:0d:20:3b:b1:43:38:fe:b0:70:08: 77:70:60:d1:79:2c:b1:8d:86:29:84:f6:2e:b1:fd: a7:d7:0c:38:6d:41:d4:f1:98:45:5d:00:55:6c:c3: 5c:07:75:ba:29:ac:93:bc:9f:a6:53:d6:d0:33:75: 18:4e:2c:4b:d8:34:c4:4e:83:08:1d:b1:9a:8d:b4: 6f:5d:b2:3b:65:39:65:42:02:46:d9:f1:59:2b:3f: 0c:6d:07:3b:4c:49:8c:d5:9b:7f:e4:f5:39:b3:34: d6:ee:78:a4:60:a3:b9:fd:a8:26:d0:09:fa:63:f6: c9:68:93:26:78:34:5a:4b:d7:59:5d:fb:1a:a6:7d: 0a:7c:99:14:0d:07:c2:f7:32:98:ef:25:60:06:7f: cc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:09:1D:A5:50:48:13:CA:39:8B:A5:7F:42:3B:9C:D2:74:50:AE:8C X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f9:59:5e:cd:39:e7:85:5b:93:be:89:98:79:99:1f:e9:6c: a7:0c:70:86:f5:e4:c3:51:20:3c:72:8d:3c:c8:ec:b8:3c:56: 49:85:27:b2:ee:33:29:b7:ad:4b:f7:a2:ab:d7:ed:e0:4e:33: d9:3e:68:92:3d:98:d9:81:f1:55:ee:58:79:32:0c:43:80:02: 95:91:cc:5b:27:0e:e7:79:41:09:00:a2:5f:0d:0e:c0:fa:17: 2a:f1:fe:4b:55:7a:f5:da:d6:77:92:54:f8:e1:92:ab:d2:d2: d0:1e:1a:01:7d:9c:fc:4f:2e:8e:6f:ae:48:56:58:8e:05:e9: 3d:a8:12:12:6e:aa:a1:f7:70:a3:fc:e1:58:b3:ef:a0:f0:fa: 88:70:a4:1d:de:53:ef:42:ac:ff:70:9e:8e:71:90:ab:39:36: 91:57:18:e1:9e:31:26:4d:e1:ec:77:94:b5:38:85:e6:e8:2f: ba:17:b5:13:e2:c6:42:56:35:db:a3:4f:be:e6:51:b0:72:f4: e7:81:ce:87:c4:73:90:51:64:1b:96:15:af:88:d8:df:f1:01: d4:5d:99:8d:55:4e:3e:d7:cb:0c:68:37:54:75:ef:ae:c9:ef: 3e:b9:cf:55:78:89:57:83:3c:e4:42:d4:d4:55:a0:d9:0e:c7: 2c:ae:3b:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC8HYFUte7cxyUJzk5t3G7UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjYwOTIwMDAwMDQ1WhcNMjYwOTIxMDAwMDQ1WjAzMTEwLwYDVQQD EygzNDA5MWRhNTUwNDgxM2NhMzk4YmE1N2Y0MjNiOWNkMjc0NTBhZThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqSy+xXyNH+6it5Yl+FEC7djxwph 3QI/o3xDA9K1yeQE+d54RxNDJow9fh2X20CStyRNeZE5t75lxwPNlmFr+jcgPAxp k8Yxqapc2rBOEDBq2Y0fle7TzrfDkRl0JinxMmtxP4jwbpsdsNP2HQ0gO7FDOP6w cAh3cGDReSyxjYYphPYusf2n1ww4bUHU8ZhFXQBVbMNcB3W6KayTvJ+mU9bQM3UY TixL2DTEToMIHbGajbRvXbI7ZTllQgJG2fFZKz8MbQc7TEmM1Zt/5PU5szTW7nik YKO5/agm0An6Y/bJaJMmeDRaS9dZXfsapn0KfJkUDQfC9zKY7yVgBn/MZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQJHaVQSBPKOYulf0I7nNJ0UK6MMB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPlZXs05 54Vbk76JmHmZH+lspwxwhvXkw1EgPHKNPMjsuDxWSYUnsu4zKbetS/eiq9ft4E4z 2T5okj2Y2YHxVe5YeTIMQ4AClZHMWycO53lBCQCiXw0OwPoXKvH+S1V69drWd5JU +OGSq9LS0B4aAX2c/E8ujm+uSFZYjgXpPagSEm6qofdwo/zhWLPvoPD6iHCkHd5T 70Ks/3CejnGQqzk2kVcY4Z4xJk3h7HeUtTiF5ugvuhe1E+LGQlY126NPvuZRsHL0 54HOh8RzkFFkG5YVr4jY3/EB1F2ZjVVOPtfLDGg3VHXvrsnvPrnPVXiJV4M85ELU 1FWg2Q7HLK47Tw== -----END CERTIFICATE-----Generated at Sun Sep 20 10:22:33 2026 by rpki-client