$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft File: A9uVtDb1McTmAvOWEK1T4m_f8VM.mft (raw, json) Hash identifier: 7cTrYE0402ZBrVhqVB2rhnOvw1wW+ZgFw2zLWWitSxc= Subject key identifier: 25:02:6D:E1:9C:7A:C1:96:0C:11:11:C5:95:58:4C:38:6F:3A:99:C7 Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53 Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153 Certificate serial: 01A0BEB16864E84DDC5185DA490193826C2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft Manifest number: 40 Signing time: Sun 20 Sep 2026 12:01:32 +0000 Manifest this update: Sun 20 Sep 2026 12:01:32 +0000 Manifest next update: Mon 21 Sep 2026 12:01:32 +0000 Files and hashes: 1: 1_QmXSAoe0b8taNpxUnZobBZmPQ.roa (hash: 9SMBjKl9NUPhxIwfFFPsmWL9Xi6y6+eVN85q6Nncpe0=) 2: 5HQWQxWdiy9EfQsIdQfOtGFhqAY.roa (hash: lNpBXc4brXPdyM4KdW/2eUa9on7qU0nbG6K7g8xL5rQ=) 3: A9uVtDb1McTmAvOWEK1T4m_f8VM.crl (hash: PBWHL3EDUNN9O2vWlc5FsSLuYoekx1gCP3UZcb9cQJ8=) 4: B1fQ2LImDzdDVrCDt4hIE8SUiY8.roa (hash: 0qzVZwboOKOK4wMKRb+MgasxkdGzjvY5iwVbOB4L2Vk=) 5: MKwiTdenphsYJ_kfTrcYo6UcD7I.roa (hash: nL9/mDZHDkh6gnqmoDFsouH6WUNsxINNDWtgs1jzkN4=) 6: Udd8VR3v6kWAPxifsBkp_SMlTzs.roa (hash: KfN08etDIWVn0Cz/yeU1yvPeWnaf4FOHuTeCGL/wkRA=) 7: XSfbPkvAFn3bhwJrBb3NgfJrWWE.roa (hash: e15uaNhvcCYBGRuKUIfJisu17/id98Z3TDf9Lo+NzRM=) 8: c0ZhaaZLIq15Oh_EgpTHm1B0c3Y.roa (hash: KT9KE79BSMnOUe9aMNfX3v6pUeJuFhmDw4RlRZ4SGW4=) 9: fJfk9udARV5inAKL917bZTd1EeQ.roa (hash: +ZHDuvPpsboDixA57iFt3QrxGUysB/3TF0CL20bof8s=) 10: lACClWJozZ2tD2fNvzjVVMhwmwI.roa (hash: IjdsAeFrshBWpjF/8m+vmuGJHcJ+aPot1Nr+V0xwglE=) 11: pi-ROLtMli7awGKUJO7UQ8Lvjn0.roa (hash: uwBBbyFPu4jWRTLTB2q1IA2l9Rly7f5Y/eDPv1LfJd0=) 12: pnHxiuSPObCg3GJJHIb0nmQxT6w.roa (hash: 8UsS7TipjrlCjjP90mKbnimagxlN22XPBZvkz8In7H4=) 13: q0L4UH47dCCDH60yZ_7AGNsn8qc.roa (hash: R7WRquGBsi9blcrsLvQ+AKqFw8Ezybqro9Uldd7Wbk8=) 14: sxHKxaxeqjCtyAXNtZ5N7PdG5kE.roa (hash: N2Kx7hvudVkhzuQ3LNBFw9LCsukl6jF7WE6axgq0NWY=) 15: uuQfg9kOGM3Zs2fZiwSZJKx0Frg.roa (hash: ccvfSFwgf7wVJZtroZjn/1/gK5jeTRUamoxFt3ZuiG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 12:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:b1:68:64:e8:4d:dc:51:85:da:49:01:93:82:6c:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153 Validity Not Before: Sep 20 12:01:32 2026 GMT Not After : Sep 21 12:01:32 2026 GMT Subject: CN=25026de19c7ac1960c1111c595584c386f3a99c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d8:07:14:2a:ae:93:48:a8:30:41:b1:89:4f: 10:e6:ee:fe:d2:0f:27:a0:cc:63:2d:45:f1:be:c6: 8b:5c:c1:16:ee:41:6c:f3:61:96:0b:22:d8:b7:a1: aa:39:e6:03:9c:af:4e:0b:1a:75:e3:1a:24:37:17: ab:9c:cf:a0:eb:04:1c:dd:e9:60:10:00:8b:a4:10: 0d:22:4f:2f:81:bf:f0:a2:be:b7:9e:4e:ff:b2:85: d5:26:18:aa:dc:ad:da:fc:1a:f1:5a:ac:0f:62:f1: 87:75:da:2c:03:5d:4b:5c:73:54:c1:2a:e4:77:b8: 16:f0:f4:99:b0:27:a8:ca:a2:8d:a2:eb:16:f6:c9: cf:0b:fe:ad:14:3f:b2:aa:25:e1:dd:e7:6f:d9:98: 4e:2c:28:04:19:5e:4f:3b:71:ba:3c:e7:20:cc:1f: 8d:24:05:81:d0:dc:bb:d7:f9:30:16:23:88:7d:a6: 1c:16:ad:52:d7:12:4d:b4:7a:ec:cc:a9:47:d9:16: 4e:98:82:c0:24:02:08:6f:71:e7:4c:8a:8b:05:08: 2e:fd:68:b4:fb:be:6b:34:cf:04:1a:4a:95:e6:16: be:58:c9:00:82:b3:b8:cc:06:b7:68:8e:c7:1c:54: 53:3c:ab:91:72:47:a5:6d:45:c2:56:40:6a:80:6c: 3b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:02:6D:E1:9C:7A:C1:96:0C:11:11:C5:95:58:4C:38:6F:3A:99:C7 X509v3 Authority Key Identifier: keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0a:59:4d:e8:34:a1:78:bb:f9:90:b1:e9:87:1c:94:82:c3: dd:95:df:45:18:74:70:c0:e8:49:fb:b2:a8:e9:e6:20:9b:60: ae:ba:d9:12:50:c8:69:c7:21:a5:a6:b4:a7:2f:95:b5:84:2d: 97:50:4c:6e:ea:82:b3:a7:12:c0:c9:5d:ff:d5:df:64:03:d6: 43:26:83:5a:2a:06:cc:71:b2:47:95:b7:ed:59:6c:1c:9b:37: a3:f1:fd:e2:84:bd:eb:28:27:b5:50:65:fa:b8:d1:49:ad:54: 8c:9b:a2:aa:15:a4:08:d9:7c:37:15:80:bf:f2:32:69:4b:7c: 79:b1:48:28:30:73:f4:39:e2:92:25:9e:cf:fb:d2:3f:26:61: 61:3e:6a:0b:e8:f4:15:5f:b7:19:5e:f6:20:42:42:31:50:5e: 22:5a:6e:de:ae:7b:ee:b2:4a:a5:c1:80:60:7f:e1:fa:27:c4: 39:a9:21:ab:fa:6e:b3:be:64:c9:33:30:83:3c:48:8e:31:4f: 32:83:e9:d0:62:a2:ed:4b:fc:e7:24:a0:e7:7b:53:16:5c:22: 6f:4a:4c:e5:74:7c:11:ce:b5:90:5a:16:2a:7a:54:5b:a7:50: 93:9b:92:a1:d1:40:f3:83:0d:c4:4c:59:70:5c:e4:f3:5c:2e: 10:7e:25:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+sWhk6E3cUYXaSQGTgmwrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZGI5NWI0MzZmNTMxYzRlNjAyZjM5NjEwYWQ1M2UyNmZk ZmYxNTMwHhcNMjYwOTIwMTIwMTMyWhcNMjYwOTIxMTIwMTMyWjAzMTEwLwYDVQQD EygyNTAyNmRlMTljN2FjMTk2MGMxMTExYzU5NTU4NGMzODZmM2E5OWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndgHFCquk0ioMEGxiU8Q5u7+0g8n oMxjLUXxvsaLXMEW7kFs82GWCyLYt6GqOeYDnK9OCxp14xokNxernM+g6wQc3elg EACLpBANIk8vgb/wor63nk7/soXVJhiq3K3a/BrxWqwPYvGHddosA11LXHNUwSrk d7gW8PSZsCeoyqKNousW9snPC/6tFD+yqiXh3edv2ZhOLCgEGV5PO3G6POcgzB+N JAWB0Ny71/kwFiOIfaYcFq1S1xJNtHrszKlH2RZOmILAJAIIb3HnTIqLBQgu/Wi0 +75rNM8EGkqV5ha+WMkAgrO4zAa3aI7HHFRTPKuRckelbUXCVkBqgGw7iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUCbeGcesGWDBERxZVYTDhvOpnHMB8GA1UdIwQY MBaAFAPblbQ29THE5gLzlhCtU+Jv3/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTl1VnREYjFNY1RtQXZPV0VLMVQ0bV9mOFZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zMWQyMzgtOTQ0Yi00MjgzLWI3MTAt MzM3MTMzYWJiM2UwLzEvQTl1VnREYjFNY1RtQXZPV0VLMVQ0bV9mOFZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8zMWQyMzgtOTQ0Yi00MjgzLWI3MTAtMzM3MTMzYWJiM2Uw LzEvQTl1VnREYjFNY1RtQXZPV0VLMVQ0bV9mOFZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwpZTeg0 oXi7+ZCx6YcclILD3ZXfRRh0cMDoSfuyqOnmIJtgrrrZElDIacchpaa0py+VtYQt l1BMbuqCs6cSwMld/9XfZAPWQyaDWioGzHGyR5W37VlsHJs3o/H94oS96ygntVBl +rjRSa1UjJuiqhWkCNl8NxWAv/IyaUt8ebFIKDBz9DnikiWez/vSPyZhYT5qC+j0 FV+3GV72IEJCMVBeIlpu3q577rJKpcGAYH/h+ifEOakhq/pus75kyTMwgzxIjjFP MoPp0GKi7Uv85ySg53tTFlwib0pM5XR8Ec61kFoWKnpUW6dQk5uSodFA84MNxExZ cFzk81wuEH4lzA== -----END CERTIFICATE-----Generated at Sun Sep 20 20:10:59 2026 by rpki-client