$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: QzNQtsX57H/4NzgICT97/oZnuLhQbvvaWGZEho71BkI= Subject key identifier: 99:69:C8:54:D1:F8:A1:1D:1F:2C:61:99:64:77:E2:05:B1:F6:C7:BB Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 01A0CB2312923987E025AD27EC7CC660268A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 10AE Signing time: Tue 22 Sep 2026 22:01:08 +0000 Manifest this update: Tue 22 Sep 2026 22:01:08 +0000 Manifest next update: Wed 23 Sep 2026 22:01:08 +0000 Files and hashes: 1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=) 2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=) 3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=) 4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=) 5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=) 6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=) 7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: /C3G2x9pL6OQy5tmtpdnZDycDQ07PwfTenAFDJZilSo=) 8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=) 9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=) 10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=) 11: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=) 12: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=) 13: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 22:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cb:23:12:92:39:87:e0:25:ad:27:ec:7c:c6:60:26:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Sep 22 22:01:08 2026 GMT Not After : Sep 23 22:01:08 2026 GMT Subject: CN=9969c854d1f8a11d1f2c61996477e205b1f6c7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ef:2b:98:57:02:aa:83:06:da:49:fe:45:8e: 0b:15:af:2c:39:d2:1e:7c:fa:b6:66:03:35:f7:af: 9d:d1:23:c7:0d:33:72:32:b4:2a:c6:b1:59:62:27: 07:1e:c9:09:28:27:69:47:42:df:1a:3a:01:3e:86: f7:9f:7f:8a:67:8f:87:7d:ce:6e:ae:9e:74:df:55: 32:dc:3c:b4:e6:0e:13:21:08:cb:a3:92:b8:f2:8f: b7:cf:a4:0e:63:ec:7b:84:4a:60:5c:bd:ac:8c:8f: bc:cb:0b:2b:f4:40:96:86:3e:37:c5:ce:90:a7:07: 60:d6:da:f1:81:4c:16:8c:50:f3:61:da:f9:5b:db: 7d:de:db:4c:90:d7:08:38:63:2c:a4:c3:14:8e:fb: 25:d3:70:b4:2e:dd:20:16:60:b5:49:05:88:eb:3c: f7:a6:b2:54:74:eb:0e:0a:e9:43:ad:36:38:34:ea: 85:a7:4d:e1:de:8c:2e:4e:17:47:81:85:6c:82:9e: 81:f0:aa:b9:da:1b:ac:11:1f:cb:bf:96:ae:b1:ea: e9:5a:24:2a:85:cf:d8:50:87:09:32:48:eb:03:09: 55:dd:e1:a0:75:6e:48:bd:b0:e4:4b:bc:25:dd:f2: 31:43:2c:82:ca:d8:d7:91:9c:46:d1:e8:cf:8d:5b: 99:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:69:C8:54:D1:F8:A1:1D:1F:2C:61:99:64:77:E2:05:B1:F6:C7:BB X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:29:cf:ff:d7:47:33:a2:9a:70:1d:3d:43:0c:ac:1c:a9:95: 7e:84:9b:ed:09:25:71:e1:a1:13:0f:90:21:e7:3a:c7:6f:5d: 8e:06:94:44:d9:ba:00:84:59:7b:20:21:44:f5:5a:01:7d:98: c4:7f:25:c2:c3:ad:36:29:8e:81:a9:d4:3e:d9:62:4c:cb:41: ef:32:f2:0c:47:d5:72:78:5c:7a:cb:b3:39:f2:5d:03:1f:99: 97:4a:96:76:48:88:de:80:2d:cb:9a:f4:5b:1e:7b:5c:b1:25: cf:b7:e1:17:f1:b7:d0:45:f5:61:0a:48:03:cf:b7:6a:93:7e: 6f:21:80:91:42:75:5f:14:a1:e8:4f:7d:28:cd:66:bb:39:2f: a1:6b:92:c9:38:99:7d:f4:8c:c6:4b:67:3b:44:0a:52:8e:3e: 7d:17:b0:28:36:03:51:96:e3:19:3e:40:b0:fe:bf:25:96:c7: c5:d2:c2:93:b2:dd:d0:f0:76:83:c8:7d:89:37:e2:87:ef:82: a2:32:55:db:03:e5:04:80:fc:1d:18:6b:51:b9:2c:0f:32:0b: 99:8a:e3:67:63:b0:90:37:36:2b:8d:8e:26:40:28:47:89:ff: 6e:51:db:9d:ad:94:3f:33:68:1c:5c:89:c5:a1:8d:b7:c6:2d: 84:4c:c1:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDLIxKSOYfgJa0n7HzGYCaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwOTIyMjIwMTA4WhcNMjYwOTIzMjIwMTA4WjAzMTEwLwYDVQQD Eyg5OTY5Yzg1NGQxZjhhMTFkMWYyYzYxOTk2NDc3ZTIwNWIxZjZjN2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu8rmFcCqoMG2kn+RY4LFa8sOdIe fPq2ZgM196+d0SPHDTNyMrQqxrFZYicHHskJKCdpR0LfGjoBPob3n3+KZ4+Hfc5u rp5031Uy3Dy05g4TIQjLo5K48o+3z6QOY+x7hEpgXL2sjI+8ywsr9ECWhj43xc6Q pwdg1trxgUwWjFDzYdr5W9t93ttMkNcIOGMspMMUjvsl03C0Lt0gFmC1SQWI6zz3 prJUdOsOCulDrTY4NOqFp03h3owuThdHgYVsgp6B8Kq52husER/Lv5auserpWiQq hc/YUIcJMkjrAwlV3eGgdW5IvbDkS7wl3fIxQyyCytjXkZxG0ejPjVuZcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlpyFTR+KEdHyxhmWR34gWx9se7MB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSnP/9dH M6KacB09QwysHKmVfoSb7QklceGhEw+QIec6x29djgaURNm6AIRZeyAhRPVaAX2Y xH8lwsOtNimOganUPtliTMtB7zLyDEfVcnhcesuzOfJdAx+Zl0qWdkiI3oAty5r0 Wx57XLElz7fhF/G30EX1YQpIA8+3apN+byGAkUJ1XxSh6E99KM1muzkvoWuSyTiZ ffSMxktnO0QKUo4+fRewKDYDUZbjGT5AsP6/JZbHxdLCk7Ld0PB2g8h9iTfih++C ojJV2wPlBID8HRhrUbksDzILmYrjZ2OwkDc2K42OJkAoR4n/blHbna2UPzNoHFyJ xaGNt8YthEzB3w== -----END CERTIFICATE-----Generated at Wed Sep 23 02:29:25 2026 by rpki-client