$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: 9VWCLloGx22hhbeCKlruJejLjVl4gsw7TQsO9mzigVA= Subject key identifier: 37:73:C1:02:91:11:6C:20:EF:86:91:54:2A:75:7E:57:F1:88:81:DA Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 01A0BFC2E9461AC6D7A2630B939850FFCA87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 1A05 Signing time: Sun 20 Sep 2026 17:00:17 +0000 Manifest this update: Sun 20 Sep 2026 17:00:17 +0000 Manifest next update: Mon 21 Sep 2026 17:00:17 +0000 Files and hashes: 1: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (hash: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8=) 2: ABhJOuq81aAMPa4_YYIO3v-t4oU.roa (hash: 0eeFSSqt4KgbYUOgEizxWBOCbjrR9YB3YtAIVlPFnN4=) 3: IPWNhyQxn8-D80dsDEI3Muy7j4w.roa (hash: JR2kZnfGEReYvLarJyG91LQRoVZfPpAoA2dBMj0ig2w=) 4: MJk2hRWFPXbWPid66y-yooVzeJI.roa (hash: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=) 5: Mcn8ffph0vFbf5y77sp8qX9cvuQ.roa (hash: oh6B2oDiINNmRv7LyEyRUP7+GJCatnxM+IyU6VV9yRs=) 6: Oi-RJ2dhND8R3bCPKlX2wVza8B4.roa (hash: AY1jUsJQoUBtPYQaCHvczNv8Mdfj3rI4udwi0diUU84=) 7: TXWio7T0yQ8fPQNndu5iMXKIPyk.roa (hash: Ptazack76ll8xJWikp2M96Ej4NUgmKdtpGkA8A7sIE0=) 8: __KT70ir2b12tsfvWsQwOzZ4SWs.roa (hash: U40qvVXwLqE+3d+p8VD5hkkPBVtM5TzS/GB+oxmksS0=) 9: ceKjGHCvCXf_MEK8NMfyXBnLoVU.roa (hash: hhPEmrABIH3Expe/KF3PZ8pAmJCxcVnuEeGLXskO2EU=) 10: dNyetmWu_99kmHhkiZvcLr-cuzU.roa (hash: forzVhrHGmXFVsQJmgLEUSqJW9c/HnLATZaoS4TWk3M=) 11: gnoYrT4knURKrt5KKBfShHVozwM.roa (hash: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM=) 12: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (hash: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg=) 13: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: EsIN5/JoHG1/NvX0gAEPRYZs6PFFV0K15hjcFVjgUmE=) 14: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (hash: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI=) 15: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (hash: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU=) 16: vDEzYqBkCfgUY7uwB1YZdOKY4lA.roa (hash: FWKvLV4V8Zp4mvo/6tBcMGGo3HEXFD5ePSPM/5NPrKo=) 17: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (hash: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:c2:e9:46:1a:c6:d7:a2:63:0b:93:98:50:ff:ca:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Sep 20 17:00:17 2026 GMT Not After : Sep 21 17:00:17 2026 GMT Subject: CN=3773c10291116c20ef8691542a757e57f18881da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:83:3d:f8:e1:72:cf:4a:4e:23:32:e7:03: 5c:33:cc:6f:40:aa:ad:34:ad:ae:3b:1f:a3:c5:5b: 00:67:c0:cb:fd:ee:f9:93:67:a8:a2:a2:86:28:3c: de:7d:85:d9:03:42:90:74:a9:a5:66:ec:66:72:88: 7a:ca:ed:e3:8d:e5:e7:28:83:5f:a0:e0:99:58:92: b6:0a:fc:1f:71:c5:40:e6:f9:0d:07:5c:34:f2:fe: d0:16:95:bb:6f:b0:03:ea:f0:54:83:51:01:64:b0: 6e:7e:44:ef:76:e5:ce:1a:90:79:37:51:5e:99:f6: b2:0e:6e:16:1f:92:58:01:27:24:12:1c:a2:08:4f: d5:3c:b5:d7:88:cc:39:23:58:eb:cb:a6:ba:9d:2a: 38:69:da:e2:4d:6b:05:f5:f2:fe:a3:03:d9:bf:1e: c6:45:e9:2d:b6:75:c7:93:ea:b8:fa:92:08:4a:a0: d4:2b:3b:0e:d4:a0:83:a7:9f:90:c2:9a:78:9f:83: 5a:93:82:c0:7c:09:9e:50:d1:62:a2:c8:61:25:70: 24:3e:7a:67:9a:6a:1b:e1:c5:cb:81:27:6d:47:e1: 55:00:4c:56:63:25:10:64:ca:8f:31:3a:22:c5:26: d3:f7:f4:67:48:36:57:5f:7a:33:c9:32:a8:81:f3: aa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:73:C1:02:91:11:6C:20:EF:86:91:54:2A:75:7E:57:F1:88:81:DA X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:b9:f3:ac:dc:8f:80:35:95:18:0c:c0:78:c7:61:f7:25:e1: dd:fe:c7:ad:9d:ca:2d:65:c2:16:48:2b:34:f7:7b:52:90:08: d5:3a:f4:93:24:3c:02:0d:44:55:92:b4:d5:30:ab:fc:63:1a: a0:db:6e:e2:61:8b:41:a1:c0:21:03:c4:39:67:4d:88:c3:cb: b1:84:a2:b0:14:61:93:06:84:c2:a4:fb:62:b7:f6:c2:d8:04: d0:f3:02:4d:48:dd:cb:bc:d0:29:17:3d:d9:e6:a3:d4:5e:91: f3:9b:cb:55:56:95:2f:1a:7a:10:fa:e4:c2:b5:77:c3:1e:43: 0b:7b:b3:75:44:2f:62:99:a1:c6:b8:a9:a0:dc:63:74:6b:87: 52:94:b2:08:c9:4f:ff:ce:84:03:57:e4:94:40:a8:0d:29:7a: 01:19:65:e0:ab:4d:c3:77:db:2a:a7:d1:2b:e0:23:99:f1:75: 0a:88:e5:76:c7:a5:a7:db:5e:fd:67:9b:48:3e:31:12:26:ca: 67:f0:78:d3:cb:3a:df:67:d2:a1:de:8a:61:ce:8d:98:fe:47: f0:be:f8:2f:61:32:e6:f1:91:78:4c:1d:59:83:4f:3b:6a:75: 50:03:93:36:ae:94:aa:ec:d0:84:b3:fc:15:c0:75:a2:40:ee: 7e:e0:42:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/wulGGsbXomMLk5hQ/8qHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjYwOTIwMTcwMDE3WhcNMjYwOTIxMTcwMDE3WjAzMTEwLwYDVQQD EygzNzczYzEwMjkxMTE2YzIwZWY4NjkxNTQyYTc1N2U1N2YxODg4MWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFuDPfjhcs9KTiMy5wNcM8xvQKqt NK2uOx+jxVsAZ8DL/e75k2eooqKGKDzefYXZA0KQdKmlZuxmcoh6yu3jjeXnKINf oOCZWJK2CvwfccVA5vkNB1w08v7QFpW7b7AD6vBUg1EBZLBufkTvduXOGpB5N1Fe mfayDm4WH5JYASckEhyiCE/VPLXXiMw5I1jry6a6nSo4adriTWsF9fL+owPZvx7G RekttnXHk+q4+pIISqDUKzsO1KCDp5+Qwpp4n4Nak4LAfAmeUNFioshhJXAkPnpn mmob4cXLgSdtR+FVAExWYyUQZMqPMToixSbT9/RnSDZXX3ozyTKogfOqZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdzwQKREWwg74aRVCp1flfxiIHaMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbnzrNyP gDWVGAzAeMdh9yXh3f7HrZ3KLWXCFkgrNPd7UpAI1Tr0kyQ8Ag1EVZK01TCr/GMa oNtu4mGLQaHAIQPEOWdNiMPLsYSisBRhkwaEwqT7Yrf2wtgE0PMCTUjdy7zQKRc9 2eaj1F6R85vLVVaVLxp6EPrkwrV3wx5DC3uzdUQvYpmhxripoNxjdGuHUpSyCMlP /86EA1fklECoDSl6ARll4KtNw3fbKqfRK+AjmfF1Cojldselp9te/WebSD4xEibK Z/B408s632fSod6KYc6NmP5H8L74L2Ey5vGReEwdWYNPO2p1UAOTNq6UquzQhLP8 FcB1okDufuBCJQ== -----END CERTIFICATE-----Generated at Sun Sep 20 19:42:34 2026 by rpki-client