$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: /CUJuUx2c7wa4wa9pM6IBZtLp7d++toCghPrUW7OVfg= Subject key identifier: FA:37:EA:FE:F4:62:CF:6E:0F:59:CE:B7:2D:99:EF:E9:E1:EE:AA:4F Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 01A0CA7DE2926428300A77C2F2C4CF1A0A09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 1814 Signing time: Tue 22 Sep 2026 19:00:42 +0000 Manifest this update: Tue 22 Sep 2026 19:00:42 +0000 Manifest next update: Wed 23 Sep 2026 19:00:42 +0000 Files and hashes: 1: 1kKPv2wUltItuWIjU1ilVcX9VLE.roa (hash: il+uT7sf8sbrAGYBj61G15BD0mwhGRvyVxYl0y6GFnU=) 2: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (hash: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE=) 3: 8eTvO2TZdJIMeT5I77o8e5hLDyI.roa (hash: RW0q4KTs9SZCv80GUyltUUK1ZfZgWc4IG8Rp/qHyA3g=) 4: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 5: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 6: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 7: JWwcCyO1rTwTxLjbz3l2SouJTAA.roa (hash: AgH3qdVNL3CHi6p+2Mst499KFQUzntafoYHZrzYZW8s=) 8: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 9: Lmglx6k3OhVfB6qXrSYWY-3n7wU.roa (hash: jOlTc86u7s0cDJRLkmCFCCAUXlp7wxNhr83b5DVvky8=) 10: WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa (hash: uW36/EhLhyw8heI0tUnFU6wiInPtS+CcO/PTS29AqYY=) 11: XjjwvZsrXx6sUtsiWwMw-1uwefI.roa (hash: RD/89w2/8ZIshxnP3ME483+xP0ONXiXxPqHiP1Ie+hY=) 12: bV3Qg5HtML1zUsJYAwV_qsAoITg.roa (hash: ZhHWbujHVFO1260mH7gJeRdvHPIcZ7THBcA3XZdsUfs=) 13: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 14: cOMhRxduLw18TIe2EJANKourNbc.roa (hash: vRamlKR5R5SmfC3d0sMnuMWhFKCo/1NfKoqnzL94OGM=) 15: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: jbeYPlb7BbohgnPojwbom48QGnE9f9zBv6F+/GAtlXw=) 16: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 17: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 18: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) 19: yhFaGf2_vHhBZgwwXE8xm1OTXQE.roa (hash: 3+krivSCZ6wgsfWjmVU3sW4pnSZcLq6UgbbbbMppVNI=) 20: zKma2lZxd28aMOIa5GKySj7K3F4.roa (hash: z2dVlW8SWBq0rqcswBgsfVdqo5mJ3Cgdk6gd4jQUscA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ca:7d:e2:92:64:28:30:0a:77:c2:f2:c4:cf:1a:0a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Sep 22 19:00:42 2026 GMT Not After : Sep 23 19:00:42 2026 GMT Subject: CN=fa37eafef462cf6e0f59ceb72d99efe9e1eeaa4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:22:37:4a:0d:9d:49:f7:83:82:ce:c1:b7: d2:13:3e:90:8d:c8:6f:80:fb:72:11:1f:8f:2d:dc: 80:2a:5a:ee:2a:84:f5:0e:12:68:ef:32:6c:87:c6: f5:69:f8:6b:fa:5c:1c:98:55:0e:15:3a:7e:6c:a4: 1b:a4:a3:a5:f5:0a:26:39:ed:4c:5f:cd:cd:a0:e4: f6:24:e2:34:9b:75:0d:c0:7f:25:98:0a:b5:fa:f7: 73:c3:f6:57:8b:ee:d2:47:26:93:9f:9b:6b:9b:b9: 9c:f5:11:b9:2b:0f:b4:e2:e5:65:44:3f:8c:74:c4: 6a:ef:5e:94:fa:b7:c1:75:1e:64:2f:32:53:c5:ec: 2b:1c:77:a5:35:cb:6b:4d:8c:c7:de:76:62:c0:d9: 98:0f:1d:2a:90:15:b7:8f:2b:ac:6e:c9:e5:3e:9c: a1:f8:d3:b7:b5:89:e8:f2:8a:af:48:0d:b1:66:e5: 06:7c:73:c9:26:9b:f2:a2:59:74:65:79:50:c6:17: e1:f6:13:56:67:95:be:88:6f:2c:79:82:0c:78:51: 97:f8:bb:9a:82:93:93:22:c1:c2:75:c4:85:4a:f3: 0f:60:c0:f7:e5:d0:06:3f:8a:15:6b:78:c2:c7:91: 2b:ea:7e:99:65:68:5a:e2:4d:94:40:7c:52:e8:8a: 05:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:37:EA:FE:F4:62:CF:6E:0F:59:CE:B7:2D:99:EF:E9:E1:EE:AA:4F X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:e2:7f:f8:fc:90:94:8a:14:0d:27:36:3f:d3:3b:60:96:9f: 2a:09:36:1b:b0:2b:0f:73:c9:ff:cf:2a:2b:4c:02:01:14:32: bf:78:01:49:ba:9d:1e:70:06:e1:5f:06:e4:87:bc:d9:9b:34: e2:9c:d5:b8:5d:5b:8d:77:98:0d:83:4e:92:8a:ea:20:f0:9f: d3:bc:94:1b:5c:f0:af:05:70:97:d4:87:49:96:dd:ae:93:b0: 18:6a:03:c0:cf:cd:e4:63:23:43:f2:63:04:4a:aa:59:50:5a: d0:5f:7d:23:7f:b2:fb:2f:5e:18:a2:80:bb:01:d6:00:06:43: c0:48:f1:14:bb:c3:bb:78:2d:33:bc:46:f4:7c:6c:ff:22:d8: dd:7c:a2:c2:c9:ce:10:ee:af:0c:1a:85:c5:1d:5e:1b:6e:6a: 03:fe:f1:a2:fb:40:55:e8:c4:56:cd:59:e8:50:c8:c7:98:d4: 68:d4:6b:33:f0:65:7d:3c:a1:7d:98:4c:7d:41:3c:49:71:ac: 3a:d9:1a:96:f3:af:b6:62:a0:f1:b6:43:2f:bd:78:71:e7:f5: d4:92:33:28:08:a1:4e:9c:37:c4:7d:85:56:d8:7a:8a:fa:2c: fd:bc:22:21:bc:9c:53:83:e7:bf:81:e4:df:cc:2f:65:cd:38: 1a:4c:bc:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDKfeKSZCgwCnfC8sTPGgoJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwOTIyMTkwMDQyWhcNMjYwOTIzMTkwMDQyWjAzMTEwLwYDVQQD EyhmYTM3ZWFmZWY0NjJjZjZlMGY1OWNlYjcyZDk5ZWZlOWUxZWVhYTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscoiN0oNnUn3g4LOwbfSEz6Qjchv gPtyER+PLdyAKlruKoT1DhJo7zJsh8b1afhr+lwcmFUOFTp+bKQbpKOl9QomOe1M X83NoOT2JOI0m3UNwH8lmAq1+vdzw/ZXi+7SRyaTn5trm7mc9RG5Kw+04uVlRD+M dMRq716U+rfBdR5kLzJTxewrHHelNctrTYzH3nZiwNmYDx0qkBW3jyusbsnlPpyh +NO3tYno8oqvSA2xZuUGfHPJJpvyoll0ZXlQxhfh9hNWZ5W+iG8seYIMeFGX+Lua gpOTIsHCdcSFSvMPYMD35dAGP4oVa3jCx5Er6n6ZZWha4k2UQHxS6IoFdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPo36v70Ys9uD1nOty2Z7+nh7qpPMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+J/+PyQ lIoUDSc2P9M7YJafKgk2G7ArD3PJ/88qK0wCARQyv3gBSbqdHnAG4V8G5Ie82Zs0 4pzVuF1bjXeYDYNOkorqIPCf07yUG1zwrwVwl9SHSZbdrpOwGGoDwM/N5GMjQ/Jj BEqqWVBa0F99I3+y+y9eGKKAuwHWAAZDwEjxFLvDu3gtM7xG9Hxs/yLY3XyiwsnO EO6vDBqFxR1eG25qA/7xovtAVejEVs1Z6FDIx5jUaNRrM/BlfTyhfZhMfUE8SXGs OtkalvOvtmKg8bZDL714cef11JIzKAihTpw3xH2FVth6ivos/bwiIbycU4Pnv4Hk 38wvZc04Gky8SA== -----END CERTIFICATE-----Generated at Wed Sep 23 05:09:16 2026 by rpki-client