$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft File: BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json) Hash identifier: MjwDa9rA/uA/XaoiGI1uJWIlxprAQQpU/JxCJfSeHA4= Subject key identifier: AC:7A:28:A7:8C:7C:6B:83:FD:83:E1:77:10:05:92:D3:41:51:15:5A Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 01A0D0121BCE73201C4EF6F7A2A25FFB9AC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft Manifest number: 18CA Signing time: Wed 23 Sep 2026 21:00:42 +0000 Manifest this update: Wed 23 Sep 2026 21:00:42 +0000 Manifest next update: Thu 24 Sep 2026 21:00:42 +0000 Files and hashes: 1: 10dcNCG_-MDba38nWmOg4-lXn6k.roa (hash: qCJHM+Bc84ondhlGxroPFWE37OgXYxlzfthfFUOO7WQ=) 2: 2Bz-26WJXsOdub2NFv0tQ13PdRE.roa (hash: QF8IxA/E4ZZtbvv05FsyZ1FueR1nYjHpOtKqqYrP72o=) 3: 3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa (hash: mbq8Pr8PdKSRq7yIi7vQcXKq7HeKQhJfSwx0LhWnGCo=) 4: 5DciNWvtD44nvmowaEInWwk8YZA.roa (hash: 4oBae1cQkYxE+N4xYsBQQveSBxypTMY0DWM/AkkENtk=) 5: 5JKLYCytnUKhdyTa14LHQIEKdFE.roa (hash: eArX0/lwmj4LvmBl8JgKR0ALNuxr1zRBSWvGWN5uFfI=) 6: 5i-KLJS79COzLV51bb0tfcQ1uQQ.roa (hash: PnQ0h19PE6J2No2E8613gpettIVTQSAHkgDKgMMgppQ=) 7: 6JyU7nFUK0tk4VQCPlYI_ZKhXmo.roa (hash: UtIfPnWUVyz8gRBCn75+ObAHW0bhWki1PUUgeHyQ8CM=) 8: 6XFljtVK2V0PF6GXRVQaEjH3Eoo.roa (hash: JvGvYE3ny1jx3z80vidwb1suh41eSZYf4UKZ7JMDcio=) 9: 8Gf4ilOOHDPy8ShRA6DADyswUBw.roa (hash: Gg3fjKtbtCo3yrbVLuhlxWrBwdUSi5rHbyxOcOG2L30=) 10: 8HWIcI9N3AE2x8zYy673Vd_4kfo.roa (hash: LN2KpWeg+Ys04Rwx9lWA0rODgISnXB2tF8WbAfHw9WY=) 11: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: 6CoewUascALVvIFP5Z3XoVjrO8/Ii4hd5ieL5T6RYk4=) 12: C7ABxIBMFqY6WGHp-m3XASsH6n0.roa (hash: TZooGN1msR75BsEyRl0jLlYrZ8Y6P2v4AI3VUVqOn3U=) 13: CdcIcZHeB0GsHSds771hQUpQ7D8.roa (hash: YpLVoBlHUKYqmx9AhANgdWKDLZYZ8nUhqGpu7awPbPs=) 14: DMF7_LfD1ucYhDO0ohFJTTXvNDA.roa (hash: Cy/e5SaBm31dnw0xEGtIe3MOgTmE56seaObi9TTZpSI=) 15: D_yFeSNCNOPeNuhYpJ8Sj6yMqrw.roa (hash: dRua2mdx0T28GkQVz9QSWEzbAac9dJJsdOTGdnj90kk=) 16: FOLsAunRL-qwRUPITmX7DmjtTVo.roa (hash: 87JXVGkuJmGjpwYzfj6Y+tqb44jgW/uD+mWua5302PI=) 17: IYvPR6-UnbcPyQYUJJWwmHE7NK8.roa (hash: P03T/DLhEWvqxS/8YYp/V2MwoFNKYQGAgYeLfjxTL/Q=) 18: JdeaeLKAu5GEjINGKfvIKWcq3o4.roa (hash: a/heKXP0NtGbMelLoYKvGg/fN+ZyDqH56Dk+P1/eR2g=) 19: Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa (hash: qaufeqdeipVE1r+9GyOAZSAG0hMF1qh7wENk1s7zB2A=) 20: LXr6C48Lxn5qLALMmRCp0Zvklfc.roa (hash: xyDipUJK+J0EWyFs8iYbI4e4T5NfmKMOryR8EWn2OIs=) 21: OjeVFAg212uWEJPR4j0wAB5XdcE.roa (hash: NgMhCybIfen0bwNj/HLLxxGGd68yCqKlN9cakd8bl48=) 22: Ppvy7LfSl_8veNKT3PCYySGa_xM.roa (hash: KAldC7Ag1Jpktoi15FEM8qa7XkOMpiKNKU124uNCHgU=) 23: e4ScI9UDTbjinOVrH-HzMhxxYaQ.roa (hash: z4aixSBMgxj9VOGw7h6LRSs/oKtO4+/kMkfuz35WEDU=) 24: eBOwN9hT4zejM0AoU4iSaIEjz9s.roa (hash: fKITe0XHXVAprxbNBR9M8OQ9t4GQsguRxsVQ9HUhdnE=) 25: hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa (hash: /bY2rtzWMB1/BM4P1MtY/wIJQHWSb2VyMeLJaYe4zIY=) 26: iVkiAHYOg3HtM_uWUc76kLqrONs.roa (hash: XlSThvg6yDDSVBDMohDGUs845WGTZEUqqZulw7z2Ytg=) 27: iwqxgJYL8mBv3G61SG6QzZnZo_k.roa (hash: 3GX+FmWsXoIqZRfY2WtjR43yzm9CJ2GngD6fPIfSxPg=) 28: mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa (hash: W9XfH8Uvi+taIP3eFXkn/Sc4OUtrs4EPnOFSG+QrLlE=) 29: n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa (hash: 12jqzpGaLihSKEn4m7KQUtKkmWE3dp9k5ig5SAQQ3hM=) 30: rc3l3yce_wnaIAhkm-MVLQ6MlQs.roa (hash: nGpl03qXwZbg5LYiikckCucykULVlnfBwTrh22E2cqw=) 31: tPWk-AfReXdc60ikE9-d-q2ml5k.roa (hash: fuXAhmrSQOQKR0hkXAvHwO1y6kpzsA61B3meXSwM1d0=) 32: ugwrkIpRq29-B9wfVBIteF2KEoM.roa (hash: ukdyYgg1YHtbbV6wUaA9eMuBYuW9pmY61DiHuvFC67g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:12:1b:ce:73:20:1c:4e:f6:f7:a2:a2:5f:fb:9a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Sep 23 21:00:42 2026 GMT Not After : Sep 24 21:00:42 2026 GMT Subject: CN=ac7a28a78c7c6b83fd83e177100592d34151155a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0c:db:c1:55:18:c3:c6:a9:44:7a:88:66:57: 91:7b:4c:7c:bb:57:ab:5f:f9:b0:d3:5a:ee:cc:de: 12:4c:0b:c9:42:73:8e:98:b4:c1:9e:12:96:94:1c: e3:e2:70:99:a2:dc:2a:23:ee:47:f7:1a:53:ae:6a: 87:fa:06:16:ee:24:81:f5:02:bd:52:eb:7e:ee:34: 94:a7:17:0f:c8:14:95:aa:66:fd:e5:3f:49:c7:db: 0f:5c:45:4e:96:60:22:ba:a6:da:4c:e7:99:ea:33: 25:4a:37:eb:4b:17:a3:88:d0:65:22:7a:83:78:82: b3:a4:1d:cb:7b:e1:7d:c5:a7:98:99:51:bb:c4:ba: 6b:86:67:3c:53:1e:bf:a1:fb:82:a4:c8:f1:58:0d: a9:14:95:67:4c:0e:f0:5d:4a:20:dc:02:8d:a3:0f: f1:17:d9:56:ac:f6:4b:fe:6a:27:8d:0c:6c:b7:a7: ee:18:6c:b7:69:97:14:7d:08:ad:5f:a2:15:96:be: e5:72:bf:51:89:c1:82:3f:52:9d:cb:d7:18:8a:84: 0f:58:27:35:b6:9f:78:41:4a:c6:e8:f3:e5:e7:55: b5:d2:74:e7:68:41:30:34:3f:72:e7:bb:80:1c:bc: 4b:d6:5d:a9:fa:c4:ae:23:15:d0:66:eb:46:60:a6: 7e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7A:28:A7:8C:7C:6B:83:FD:83:E1:77:10:05:92:D3:41:51:15:5A X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:49:2c:8f:4f:75:ee:2f:6b:55:59:64:d7:a3:98:88:a2:1f: 03:e1:24:ee:66:3d:8b:70:e5:8c:24:01:0e:b0:d0:40:96:b4: 09:5e:4b:43:28:12:41:02:48:0a:f3:0c:e0:ed:6c:55:98:62: 42:91:6e:0f:c5:3c:99:9b:80:75:4c:2b:dc:49:b7:38:b9:cb: 57:95:3c:ce:71:6a:cc:f3:3c:02:d4:82:6a:67:2d:a9:78:47: c7:db:fb:a7:05:57:1a:c5:fa:37:bd:6b:67:7b:cc:bc:22:64: fa:e2:12:ed:99:6a:c8:61:bb:c8:f3:d1:a0:40:3c:ce:84:9e: 0d:c0:34:7b:49:b5:c4:27:68:8a:60:e9:78:a4:8d:f2:a8:d6: 3b:07:5e:bc:31:ff:51:71:cd:17:35:16:62:13:2c:db:ee:10: fe:6f:de:3b:15:cb:6a:b3:25:36:6e:97:62:b6:c5:25:4e:c6: 58:1d:cb:c5:3f:da:09:09:f8:35:57:c5:56:c0:f8:d3:4f:34: 05:04:32:38:de:31:38:fc:16:da:25:d4:3a:a8:08:08:16:cc: 82:a3:78:64:0f:2e:4d:0f:50:b2:8b:04:16:1b:e7:21:8d:d1: d8:de:b5:cc:44:2b:07:4b:f3:a0:d1:01:9f:18:4d:8e:9d:5e: 55:9e:38:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQEhvOcyAcTvb3oqJf+5rJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwOTIzMjEwMDQyWhcNMjYwOTI0MjEwMDQyWjAzMTEwLwYDVQQD EyhhYzdhMjhhNzhjN2M2YjgzZmQ4M2UxNzcxMDA1OTJkMzQxNTExNTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowzbwVUYw8apRHqIZleRe0x8u1er X/mw01ruzN4STAvJQnOOmLTBnhKWlBzj4nCZotwqI+5H9xpTrmqH+gYW7iSB9QK9 Uut+7jSUpxcPyBSVqmb95T9Jx9sPXEVOlmAiuqbaTOeZ6jMlSjfrSxejiNBlInqD eIKzpB3Le+F9xaeYmVG7xLprhmc8Ux6/ofuCpMjxWA2pFJVnTA7wXUog3AKNow/x F9lWrPZL/monjQxst6fuGGy3aZcUfQitX6IVlr7lcr9RicGCP1Kdy9cYioQPWCc1 tp94QUrG6PPl51W10nTnaEEwND9y57uAHLxL1l2p+sSuIxXQZutGYKZ+vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKx6KKeMfGuD/YPhdxAFktNBURVaMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUksj091 7i9rVVlk16OYiKIfA+Ek7mY9i3DljCQBDrDQQJa0CV5LQygSQQJICvMM4O1sVZhi QpFuD8U8mZuAdUwr3Em3OLnLV5U8znFqzPM8AtSCamctqXhHx9v7pwVXGsX6N71r Z3vMvCJk+uIS7ZlqyGG7yPPRoEA8zoSeDcA0e0m1xCdoimDpeKSN8qjWOwdevDH/ UXHNFzUWYhMs2+4Q/m/eOxXLarMlNm6XYrbFJU7GWB3LxT/aCQn4NVfFVsD40080 BQQyON4xOPwW2iXUOqgICBbMgqN4ZA8uTQ9QsosEFhvnIY3R2N61zEQrB0vzoNEB nxhNjp1eVZ44OQ== -----END CERTIFICATE-----Generated at Thu Sep 24 04:26:41 2026 by rpki-client