$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: Gpcp5GQbIQDuNCP+6vauDzayUJORPSrjzudLqdUJkQM= Subject key identifier: C5:80:A3:CC:56:73:CE:5E:12:E5:37:AC:96:94:51:BF:42:30:3E:E0 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 01A0C0D645BE10B3C2F4F13CEEB51B521C6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 19AE Signing time: Sun 20 Sep 2026 22:01:03 +0000 Manifest this update: Sun 20 Sep 2026 22:01:03 +0000 Manifest next update: Mon 21 Sep 2026 22:01:03 +0000 Files and hashes: 1: 47sWOPTHnZb9BF-ya3p9tYZmQl0.roa (hash: RBzAZuMSt44/uQERR1k3fKGneZwh+1kpWY7wx6/NCk0=) 2: DUa5gfrd1mbJghmCA9wsPUgatiA.roa (hash: vgkaB+FL8lKIjouXupzJZRb3iZtU+i3kKGIirTBXniA=) 3: IoSQ968prEWE2iPAfiHq62Q9HRQ.roa (hash: sMFfoE8ew6Os6X7T5w3iP4CHenQCaCmWxqa3HE4kDyg=) 4: Jz8RZAWrUimyuGnjG5ub7oNokXU.roa (hash: IeObP/asysAN8PfUm4Hn659vFyCN9hWBT1PSEjvx9O8=) 5: Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa (hash: NqeN3nGFqChISvovOPomv7J85KVugMZmXFAJ2wHhcOc=) 6: R2uv8D1AC8qkVVlzoluUFlx0Uzc.roa (hash: Px0hZ7oJHqm6VJaRC8v/ew/nIaAHwORSGtXPvMgDntg=) 7: RcBVtc8qZ-WY09LgrXE9UddKRjU.roa (hash: PrGLDOIIW6h+3jbP4QXwCv6loJxjMEdM94B7tYzfRzI=) 8: SHESg-pXJr_Het0W-3cbbUvLLUk.roa (hash: eBtq6k5xafILrBSAzCCl8DxL+vNsikVlShGU83ALNOQ=) 9: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: ggGZObc+dkI3TM4jegn0uc1gsxlNi6qzuntssuBzWX0=) 10: Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa (hash: YYmhifcK+2gNYjzHbIMtaIo+1gijW4PRQWGsmCHjKJg=) 11: aUcHGsfbW0LISPIyDevqEjn1Mp8.roa (hash: fbCvEiA8MdH3odLJSEwrCK+swIxRtwa+tYa7l/mkrVw=) 12: biH_EEWeOJOtLOQq6iGC0yelYn0.roa (hash: P54s2GoQrkvwJ9KXymJfJ8rzco9Uv1wsEklV2MlObyE=) 13: gAbatwVqafpDL9WTtIX0TlfDD98.roa (hash: JDzbm14+9mpQN3vnbFMcnevA6T8g7/UNXI8LqyzblhQ=) 14: psnLTq9oj0zoEtX755KpVPy0ws8.roa (hash: 8tn9lCYFdmG1BOJcqSY0wLhBU8frfgy5f/M7MDD6IgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 22:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c0:d6:45:be:10:b3:c2:f4:f1:3c:ee:b5:1b:52:1c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Sep 20 22:01:03 2026 GMT Not After : Sep 21 22:01:03 2026 GMT Subject: CN=c580a3cc5673ce5e12e537ac969451bf42303ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d4:1b:f4:3a:cd:09:7e:01:cc:1c:9f:2e:a7: 92:57:83:94:6a:0c:0f:9a:90:3a:8e:ed:0d:bd:6e: c1:92:e5:39:3d:d7:47:6e:75:8c:05:6a:53:fc:d4: 0c:ff:67:05:69:70:6e:a7:26:3f:f3:3e:ea:f2:4b: 39:b6:29:75:85:1c:c5:4d:8d:e9:75:c4:c5:51:e8: 74:57:45:4f:21:a4:37:27:1a:e8:ae:63:f4:b5:df: 1d:0d:81:9d:6e:4a:5e:0f:da:03:10:40:20:01:bc: 11:19:c4:ac:c8:19:91:f3:4a:9e:43:63:27:76:d0: 7e:39:8e:74:2b:4d:5f:ae:01:93:82:53:79:eb:92: 03:51:40:76:e1:0a:8d:41:10:ee:97:04:bf:5c:11: 85:70:1a:c3:2d:40:77:4c:58:f4:37:b5:14:78:54: db:b5:9e:6c:af:a3:25:e2:d1:b4:c8:64:c0:c5:93: 48:c2:1f:16:ac:15:0c:e4:c7:0b:1d:ac:a3:51:89: 5d:f7:0e:2a:62:c5:da:96:66:f8:e1:a5:b6:44:e2: 1b:43:8d:2e:77:a1:e8:38:2c:fd:b7:2f:8f:60:3f: a8:c5:11:1f:6f:7e:e1:22:d3:80:f1:92:5a:db:8a: 11:40:0b:59:6f:33:49:5d:e4:e5:2e:2e:d6:ce:96: 22:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:80:A3:CC:56:73:CE:5E:12:E5:37:AC:96:94:51:BF:42:30:3E:E0 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:07:9a:75:0f:ec:2e:cf:3e:01:2d:be:19:5c:10:0a:e6:48: dd:48:df:39:2c:5b:d8:98:9b:1b:80:ef:5d:f2:4d:2c:6d:61: a8:ce:fe:b0:94:b6:e4:ee:7a:c0:10:33:77:c5:55:c8:e7:4b: 57:d8:42:c3:45:da:5c:b9:f0:d7:eb:59:e1:6e:56:90:3b:2c: 47:5c:70:1d:72:22:31:6b:db:00:ee:a2:7f:95:45:b9:86:17: 03:4e:fb:e8:62:fa:51:27:66:f6:0f:01:d0:1f:43:e5:b0:d5: db:de:b5:d7:15:f4:86:71:a1:1d:62:b5:e6:96:14:04:33:95: 23:2c:71:63:48:0b:e2:68:30:f7:ff:29:9f:c1:74:94:90:b8: 88:4d:19:e0:c4:dd:c6:3e:f0:3e:07:94:6e:54:ee:25:e8:8a: 28:f4:b4:7f:da:1c:c3:37:fe:f1:58:52:db:cc:26:9c:02:c1: f6:6f:8f:fe:62:74:6e:13:ac:c6:d2:35:e7:07:4c:c3:23:17: d6:38:cd:d2:a3:1e:53:b4:e6:4c:1d:29:af:a2:46:60:1f:3b: 90:2c:d2:17:80:7b:67:06:83:1c:d1:55:cf:41:29:f4:27:78: b1:a8:cd:b6:44:bf:86:0c:5d:a0:2e:19:6d:a8:3f:4c:be:c3: eb:74:0b:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDA1kW+ELPC9PE87rUbUhxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwOTIwMjIwMTAzWhcNMjYwOTIxMjIwMTAzWjAzMTEwLwYDVQQD EyhjNTgwYTNjYzU2NzNjZTVlMTJlNTM3YWM5Njk0NTFiZjQyMzAzZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtQb9DrNCX4BzByfLqeSV4OUagwP mpA6ju0NvW7BkuU5PddHbnWMBWpT/NQM/2cFaXBupyY/8z7q8ks5til1hRzFTY3p dcTFUeh0V0VPIaQ3JxrormP0td8dDYGdbkpeD9oDEEAgAbwRGcSsyBmR80qeQ2Mn dtB+OY50K01frgGTglN565IDUUB24QqNQRDulwS/XBGFcBrDLUB3TFj0N7UUeFTb tZ5sr6Ml4tG0yGTAxZNIwh8WrBUM5McLHayjUYld9w4qYsXalmb44aW2ROIbQ40u d6HoOCz9ty+PYD+oxREfb37hItOA8ZJa24oRQAtZbzNJXeTlLi7WzpYifQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWAo8xWc85eEuU3rJaUUb9CMD7gMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQeadQ/s Ls8+AS2+GVwQCuZI3UjfOSxb2JibG4DvXfJNLG1hqM7+sJS25O56wBAzd8VVyOdL V9hCw0XaXLnw1+tZ4W5WkDssR1xwHXIiMWvbAO6if5VFuYYXA0776GL6USdm9g8B 0B9D5bDV29611xX0hnGhHWK15pYUBDOVIyxxY0gL4mgw9/8pn8F0lJC4iE0Z4MTd xj7wPgeUblTuJeiKKPS0f9ocwzf+8VhS28wmnALB9m+P/mJ0bhOsxtI15wdMwyMX 1jjN0qMeU7TmTB0pr6JGYB87kCzSF4B7ZwaDHNFVz0Ep9Cd4sajNtkS/hgxdoC4Z bag/TL7D63QLAw== -----END CERTIFICATE-----Generated at Mon Sep 21 09:15:42 2026 by rpki-client