$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: 4UsMAjIGaqRdxvZGg4hJpkTKR7x0msZ+k8LAq3x/KTA= Subject key identifier: 2B:A1:91:55:38:EF:1A:E6:97:B8:AC:BF:FB:5B:59:B3:B0:D8:B0:F7 Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 01A0C368C24859FFD646906B9C0B5484FCDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 0DCF Signing time: Mon 21 Sep 2026 10:00:17 +0000 Manifest this update: Mon 21 Sep 2026 10:00:17 +0000 Manifest next update: Tue 22 Sep 2026 10:00:17 +0000 Files and hashes: 1: 0jPQz2jIHrU0FvHsrF-XRZUhtzs.roa (hash: W/W8DjgReH/V+5pe/5+3BKwvc8dz5PRxxtmAIvZ373s=) 2: 3h4R6YLSiEPNhWmPNTd7KLX1X3U.roa (hash: LjFP5plUCIY5Si52J4E1UiGHvt4F3YfbtrTK+AdpPww=) 3: 5-J1fvpVb5dSg5m7dEENTI_oJOo.roa (hash: Bf76p0mhCDufIxhGH9tYyhZ/kCkHidGNBcKyGnHkKdg=) 4: AD3DllK0spDacTrZOzUoNjsaEXY.roa (hash: E0XWVs3lhPoRvEa16ZsuDhIGmQin6DlhoQyYSbyhShU=) 5: GjPVQb4kXTSvkfi7RIf8VINvr0I.roa (hash: IEYuHwwge+E1Azg2p77WeZYvh7BllQ5PwJDFCZ3eVLU=) 6: HVCa9r5thWjsE4kAoaBRSlvTvK4.roa (hash: QayBo0rlXlFxr86ACWyOG/yDe9UFq1WxBL/y2YeNVL4=) 7: RHDQQEmbcOrqTmjc99mQ-Eu0900.roa (hash: x+3xhE8Ho8gzcy+Ei5kfiLpvFaz62BymEv0joq6kEPs=) 8: SUXWC1-mJgzNHKufisllq7xTG84.roa (hash: ldGYAfxW+U7Nx0a/VnBHDnXxlaedoq5faATK1ilEgPY=) 9: ScPX6tqlw5o1ZcCYpkNMnCrj72U.roa (hash: OWPE9KkCxV1y82ynMwT7Wfz+7H4kVGPyxV8fArKWLm0=) 10: WdQ6he_P5F-cOEeRR1TiPU-zU-s.roa (hash: vQjmo6B5bhn28fdIrHICw7DprEul1mU/rEs6H7jrIrc=) 11: n6eR2WfCXImcpQbWii3OXMfT1io.roa (hash: 9i7i+fHrN+OULt3g7OjkSiNbFJDZzaQ5rh/6y0F1XFE=) 12: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: MAj5TXYn0UVSTkbYNO+Cr18sGP+2XneMNISc0PGxqVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:68:c2:48:59:ff:d6:46:90:6b:9c:0b:54:84:fc:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Sep 21 10:00:17 2026 GMT Not After : Sep 22 10:00:17 2026 GMT Subject: CN=2ba1915538ef1ae697b8acbffb5b59b3b0d8b0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:1d:ce:0c:d7:b3:ad:25:b8:ee:52:fe:30: a5:96:a5:b9:04:f0:1f:b3:0a:0c:88:a0:19:87:cd: 0f:2b:62:b9:1a:a5:c9:1e:30:31:59:87:98:ef:cc: e9:7f:da:da:8b:92:5d:d7:c1:ff:5b:0c:ce:3c:65: de:4c:d3:bc:51:d7:90:87:66:04:4a:92:f5:bc:4f: b4:a7:c1:fe:bf:64:84:99:ca:ff:89:5e:a3:11:07: 34:76:27:96:79:40:a3:e6:b2:dc:34:b0:d6:ec:23: 0c:58:58:8c:c1:63:d7:f4:e5:bc:cb:34:10:ae:3a: ca:42:60:f6:da:fa:9b:1f:0a:b4:95:c0:e5:b7:93: 85:3b:cc:af:ea:4d:4b:b1:bb:ba:40:d2:ca:1d:30: 70:d2:b4:1a:ff:38:57:06:2a:bc:2a:1b:43:18:0e: 9d:4c:bd:f4:bf:12:8b:ce:bb:6f:5d:6d:e4:20:d4: 93:06:94:4b:19:9f:db:ce:c4:67:0d:4f:24:b4:ac: e7:82:3a:2d:e1:91:5a:5c:43:89:86:a9:6a:dd:4b: 63:b3:a3:d4:36:b1:8b:1e:10:55:7e:35:c1:94:cd: f0:10:d7:6a:8f:cf:33:01:2f:34:5b:c3:d3:28:5f: a4:c7:6d:2d:06:7c:7f:4a:81:58:74:b6:2c:45:22: 90:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A1:91:55:38:EF:1A:E6:97:B8:AC:BF:FB:5B:59:B3:B0:D8:B0:F7 X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:71:19:cf:cb:40:99:0b:d5:45:41:e5:7a:88:9d:c2:78:47: c2:ac:46:eb:04:90:ac:1b:36:ba:c9:44:46:69:55:1a:31:bc: ad:24:40:34:3e:66:74:4d:28:69:f2:ce:17:3d:f0:90:6a:7c: 8f:16:e5:20:8c:7e:fb:7f:b2:11:b4:e2:76:6e:2a:83:04:11: a0:a4:0f:92:16:f5:7a:1f:22:12:6c:86:b7:9f:9a:d9:b2:77: d3:41:82:10:a1:3c:05:74:cc:b8:10:98:89:0d:5b:7e:01:a4: df:98:af:0e:b7:67:66:1c:d5:e9:ef:9f:2b:52:59:e3:20:2d: 4d:72:07:c0:95:0f:c3:39:0e:da:05:4a:30:23:fb:d9:f5:ca: 79:de:7b:fd:1e:f9:16:a7:44:a6:32:ac:96:06:cd:e9:fb:06: 38:fe:6e:c5:e8:ed:c2:0c:3f:67:8d:d3:c3:f5:cb:34:96:12: 8c:42:35:7b:b1:f0:1b:58:94:3f:c5:3e:00:2c:ee:e6:35:c5: c4:b5:14:48:6f:f4:b4:ce:c8:4d:4e:db:71:54:e8:0e:e0:57: 54:bc:ae:34:57:24:1a:0a:b1:5f:73:cd:7e:3a:94:9f:af:62: 84:0f:41:8f:0a:8b:31:35:79:5e:96:71:81:f2:1a:c8:55:dd: ca:5b:ef:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDDaMJIWf/WRpBrnAtUhPzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwOTIxMTAwMDE3WhcNMjYwOTIyMTAwMDE3WjAzMTEwLwYDVQQD EygyYmExOTE1NTM4ZWYxYWU2OTdiOGFjYmZmYjViNTliM2IwZDhiMGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN4dzgzXs60luO5S/jCllqW5BPAf swoMiKAZh80PK2K5GqXJHjAxWYeY78zpf9rai5Jd18H/WwzOPGXeTNO8UdeQh2YE SpL1vE+0p8H+v2SEmcr/iV6jEQc0dieWeUCj5rLcNLDW7CMMWFiMwWPX9OW8yzQQ rjrKQmD22vqbHwq0lcDlt5OFO8yv6k1Lsbu6QNLKHTBw0rQa/zhXBiq8KhtDGA6d TL30vxKLzrtvXW3kINSTBpRLGZ/bzsRnDU8ktKzngjot4ZFaXEOJhqlq3Utjs6PU NrGLHhBVfjXBlM3wENdqj88zAS80W8PTKF+kx20tBnx/SoFYdLYsRSKQjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuhkVU47xrml7isv/tbWbOw2LD3MB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXEZz8tA mQvVRUHleoidwnhHwqxG6wSQrBs2uslERmlVGjG8rSRAND5mdE0oafLOFz3wkGp8 jxblIIx++3+yEbTidm4qgwQRoKQPkhb1eh8iEmyGt5+a2bJ300GCEKE8BXTMuBCY iQ1bfgGk35ivDrdnZhzV6e+fK1JZ4yAtTXIHwJUPwzkO2gVKMCP72fXKed57/R75 FqdEpjKslgbN6fsGOP5uxejtwgw/Z43Tw/XLNJYSjEI1e7HwG1iUP8U+ACzu5jXF xLUUSG/0tM7ITU7bcVToDuBXVLyuNFckGgqxX3PNfjqUn69ihA9BjwqLMTV5XpZx gfIayFXdylvv3Q== -----END CERTIFICATE-----Generated at Mon Sep 21 19:43:54 2026 by rpki-client