$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: 4QhTbEYYeO0LuJR0eaN91o0xZRiOwWM8FX55o4pamW4= Subject key identifier: 6C:C8:DF:28:B8:29:BF:29:E9:C6:79:DE:11:86:5F:39:48:35:86:09 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 01A0C47B513CE4250FCF0E037037AE706A11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 1546 Signing time: Mon 21 Sep 2026 15:00:11 +0000 Manifest this update: Mon 21 Sep 2026 15:00:11 +0000 Manifest next update: Tue 22 Sep 2026 15:00:11 +0000 Files and hashes: 1: 5GxvHZCMMVes7bAUdIaYsXEtdX4.roa (hash: x5pIX8HDxeQPjQseodSp8HJv0Ul8z850CXMOjeGpMb0=) 2: 5i8pJicwht3G-29N8gSePvi-neM.roa (hash: M5MbRvYtpMldz8xu0SCTyDZEqGvq8XvujJr3JK2yABw=) 3: E7Rm0aUdHrYBhOFVzUfIL2fIx1g.roa (hash: r3HZ3F7FXoFuLxCixJgEocAqMUN20PxmzrQVGnHd8Uc=) 4: NJ5Ft9nE4KuBN7HLQnKzgQ0mpXo.roa (hash: hBgheJjYW2NTuQX0GMNpUdScgOBs91Gnhme3LbGhhOA=) 5: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: TM6fnij86RnWYssIAuwob1cMAAjwDTIHFMt7H5fCp7c=) 6: Wg9e837QOmrPZ6kJBIC8tEaMEc4.roa (hash: HxZPcDMVde46E0YraYcux12OmT61HV19peqYpruy8ck=) 7: Y9g5RafdGF3cNhPA6x2FBbgWPQ4.roa (hash: 8GiMf+v1riQWRCrUxNvQcQr4xkt3wgt3m4cw6E13FaY=) 8: ctQ_pi7dHsaofgQDy3s_3MF0z5c.roa (hash: LuXSDcOcTzSmFT/Y8M2/v07fi5jciWmvVvQylNBVZ2A=) 9: ff1Fa-kOqddev469q_q9QwdHNOQ.roa (hash: w2PaSCsne5WpEMiMwnCdvo+2V64rmEO1ylIDUMBUfOM=) 10: kRWKSnE2BdhL2P09-15fn5hrxHI.roa (hash: 4gfL53RlpeXbUFwGxhLDWwBqrCzTTRLbTh1kbzrX4j8=) 11: kZfuHKDAiQJXBvJliXqrjaU0XIg.roa (hash: DHMZVeLexmvq1Vc8FbkkKH/pRR44r4WIYoKUwGuSUU0=) 12: lnT80rw_Ryd-z_u4DO17nxl0A5w.roa (hash: wdCITiVG5nvublaggiVZXX2U+oaT1yDZ4/O9JgAyQzQ=) 13: oua9Kp44reoXheBwYMVIn0LsMK8.roa (hash: SAiOCmUsajRvlJSQ1si4F2WehUWy/HXpu9iNYf9XYuQ=) 14: whz1b1ik747CMiJFQQrkzi5a7vs.roa (hash: q5NZbknzGV4wjrsW4T1rPpniNdjNXJbM67VTZR8o7Oo=) 15: zt0vn-Fh3T0JcalRjhRB-Eg10pY.roa (hash: ZkfO9/jzoHTqMuf/g6245EMxohpj+UHCz0pRarj0WJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c4:7b:51:3c:e4:25:0f:cf:0e:03:70:37:ae:70:6a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Sep 21 15:00:11 2026 GMT Not After : Sep 22 15:00:11 2026 GMT Subject: CN=6cc8df28b829bf29e9c679de11865f3948358609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:78:09:ed:ec:29:e3:87:f2:c4:35:89:d2:20: 2c:8e:63:26:18:9e:a1:f3:55:9e:e7:48:77:32:3d: 6b:36:05:ea:4c:00:9c:c8:52:21:49:a6:37:40:25: a6:3d:41:14:71:14:f3:06:7e:dd:2c:52:c6:ce:85: 80:e7:01:27:ef:76:f6:b1:50:31:ac:fc:26:a4:46: e2:a2:6c:61:22:b0:49:d3:e9:51:46:87:3a:93:38: 4a:b1:d9:b9:66:38:3d:a8:a7:78:34:f7:61:47:cc: 12:29:24:dc:45:15:d2:eb:db:59:41:21:01:08:fe: 0f:77:96:4f:e7:38:3e:40:da:df:90:41:42:cd:17: 82:1d:02:ee:2d:b8:28:36:0b:7d:61:aa:ec:67:b3: 2a:00:ae:0f:24:0b:b1:19:2f:6c:05:e9:6c:c9:47: 2d:64:c0:a4:df:eb:cb:44:76:45:90:87:19:b4:76: 8a:df:eb:8f:12:ea:ef:f8:51:bc:e0:75:ed:0c:a9: b9:6f:9a:61:a3:81:83:d9:c2:0f:b2:cc:da:b7:b0: 1b:2c:f4:1d:fd:6e:ea:64:57:63:60:ae:9d:ac:e3: 61:36:14:49:17:4c:eb:7a:73:be:8a:42:37:be:8c: 90:83:bd:7f:e5:db:7e:5b:0e:e3:a1:75:cd:e7:24: 09:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C8:DF:28:B8:29:BF:29:E9:C6:79:DE:11:86:5F:39:48:35:86:09 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:87:56:2a:4b:35:c7:2c:f2:71:d5:29:ed:ec:a4:f7:80:91: 36:76:04:d8:c1:83:b6:33:f1:44:34:6f:e0:11:81:41:7a:d9: 77:ea:2f:61:69:bd:4f:53:56:90:00:fd:8b:86:67:81:7c:9d: 32:9d:52:42:5a:88:15:5a:c0:f5:b6:8e:c9:2e:d2:3f:de:10: 4f:1a:cd:70:2e:38:df:b1:35:60:85:cb:e6:0a:9a:df:06:b1: e0:e9:a5:b0:ee:f4:62:52:8a:b0:32:cb:31:69:52:92:88:5d: e4:d7:1a:85:f6:a1:5a:23:35:48:39:4b:a6:b9:cd:2f:25:6f: 09:cd:d4:9e:d7:c0:db:fc:27:95:31:48:a6:8b:13:a0:4e:40: 9e:5b:09:5c:95:75:4e:04:87:fd:3d:55:0f:b5:92:df:c8:6b: 74:e1:88:4e:19:2a:ea:62:7f:cd:10:05:0c:0d:45:7a:3e:49: 88:28:a6:c4:6e:cb:fb:0d:ab:20:f6:36:1c:56:52:fe:84:6e: fb:b1:10:0d:11:79:29:cc:e7:8e:70:61:4c:65:9d:48:29:e4: b4:e9:cf:00:79:d8:b7:20:6d:6d:d6:9f:ef:d5:37:8f:34:75: 6e:22:71:50:b9:39:0c:de:34:7f:4e:04:ec:a3:75:86:25:b5: de:3f:0e:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDEe1E85CUPzw4DcDeucGoRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjYwOTIxMTUwMDExWhcNMjYwOTIyMTUwMDExWjAzMTEwLwYDVQQD Eyg2Y2M4ZGYyOGI4MjliZjI5ZTljNjc5ZGUxMTg2NWYzOTQ4MzU4NjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzngJ7ewp44fyxDWJ0iAsjmMmGJ6h 81We50h3Mj1rNgXqTACcyFIhSaY3QCWmPUEUcRTzBn7dLFLGzoWA5wEn73b2sVAx rPwmpEbiomxhIrBJ0+lRRoc6kzhKsdm5Zjg9qKd4NPdhR8wSKSTcRRXS69tZQSEB CP4Pd5ZP5zg+QNrfkEFCzReCHQLuLbgoNgt9YarsZ7MqAK4PJAuxGS9sBelsyUct ZMCk3+vLRHZFkIcZtHaK3+uPEurv+FG84HXtDKm5b5pho4GD2cIPsszat7AbLPQd /W7qZFdjYK6drONhNhRJF0zrenO+ikI3voyQg71/5dt+Ww7joXXN5yQJlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzI3yi4Kb8p6cZ53hGGXzlINYYJMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4dWKks1 xyzycdUp7eyk94CRNnYE2MGDtjPxRDRv4BGBQXrZd+ovYWm9T1NWkAD9i4ZngXyd Mp1SQlqIFVrA9baOyS7SP94QTxrNcC4437E1YIXL5gqa3wax4OmlsO70YlKKsDLL MWlSkohd5NcahfahWiM1SDlLprnNLyVvCc3UntfA2/wnlTFIposToE5AnlsJXJV1 TgSH/T1VD7WS38hrdOGIThkq6mJ/zRAFDA1Fej5JiCimxG7L+w2rIPY2HFZS/oRu +7EQDRF5KcznjnBhTGWdSCnktOnPAHnYtyBtbdaf79U3jzR1biJxULk5DN40f04E 7KN1hiW13j8OZQ== -----END CERTIFICATE-----Generated at Mon Sep 21 20:25:07 2026 by rpki-client