$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: MHEPO48SgfZWGagecWpRG+2MRJaL+4Jp9ojq9sxkcAM= Subject key identifier: F9:53:6D:19:85:69:8C:1C:6F:24:1E:3E:63:96:1A:FC:0D:41:69:33 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 01A0BD9D729BACBC57DF942BC98ABAE902DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 1A75 Signing time: Sun 20 Sep 2026 07:00:07 +0000 Manifest this update: Sun 20 Sep 2026 07:00:07 +0000 Manifest next update: Mon 21 Sep 2026 07:00:07 +0000 Files and hashes: 1: 1GSwP0TJJ65wZd3Pvgc8v_kBblo.roa (hash: a1H7+zWC5aLIH4mpt/TNCBcUHA1NWPW383gUe+s7/0o=) 2: 7-5FXkLEwhC1Xxo7xjKu4F60EXI.roa (hash: ucTykSSMA4mgLZSWsX8h0H8ANki2lK6au/mQg7PDaVg=) 3: AWyqQuO48E7EaLT6RH2W8bAgQ3s.asa (hash: y1Ag5qpmzSxVFKEJWy+4MLdDTnH6Pp80lG+LaPL+S8M=) 4: Gpn9n84tYhkYaDMGGKjziY1wajo.asa (hash: +9BgoCUtarT6JeveJ/0Adks2MenEvBj4hlB1aELk8Yw=) 5: SZuulJfBXrOx7TVvq98RfpuWX20.roa (hash: JF3u4qfuygewpcEyq0MIU/fiok0/dp1CnGO7/QRkKCw=) 6: dHHbPSJCfsQDNB_7r8SiDBIMBFc.roa (hash: 4Z63pDrERLa8AbCyht1J3U8XYsimBFftB4yxdfy6SeU=) 7: duJlSdUfuEBVAcmWXk5MpTvh7ig.roa (hash: GXDP1gVMBP52IUaX8G6mObb5IGesyXrYT/V3KEUXfjY=) 8: ea4uOAYmH3F8T77vuYMudZrhuRA.roa (hash: EEiZnb2JPsq/yqrG0Q7hp0FOlD5s4bXDR5+0nIVOWD4=) 9: ffyLyRVME5oJGVerDANtY5IMHo8.roa (hash: KCiQSpQfQbYAD6/iMj3Iuvok4R8kKREKJx6rRxehp2s=) 10: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: SAocxESV2+JwNHgWB96XngCFRRjQ7+X5YGauK5z8780=) 11: nNl6NGyF3T8vJ8AAtIkn4-0X5T8.roa (hash: dpRxbGigIJULOJ37FZ/ZTlPFJRhup86+sQ8jgaZzcbo=) 12: tgKyxQJIrIZGZt0JdqobdwHEFBU.roa (hash: R6TZ097sd703JL66PHi/DAt6butDAQ5ZZOyHFsfEnNE=) 13: v48B8D2cx6Vfn0QWuxNAWmV0PcY.roa (hash: nZy5DmP+kA6doyrWI6VdmNLG6LOJw4xuX2hBgEO7v+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 07:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bd:9d:72:9b:ac:bc:57:df:94:2b:c9:8a:ba:e9:02:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Sep 20 07:00:07 2026 GMT Not After : Sep 21 07:00:07 2026 GMT Subject: CN=f9536d1985698c1c6f241e3e63961afc0d416933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e2:b3:65:34:5a:cf:10:04:b9:36:73:b6:d4: 80:6f:ed:fe:30:be:26:dc:6e:7e:4b:66:01:09:d2: 31:7e:fb:ea:d6:0d:d0:4a:39:2a:01:b8:c7:ed:8e: 21:bc:0f:25:f8:e2:06:86:98:56:08:91:1b:ad:ee: b2:7d:f2:fc:b7:74:d8:af:d5:41:7b:d5:39:4f:7c: 8c:39:9d:16:7f:da:ce:ee:2c:8b:a5:2c:4b:c9:17: b8:9e:97:41:c8:50:5b:13:10:33:ce:ca:7e:cd:e0: 56:30:b3:54:9c:58:4d:c4:38:20:6f:df:05:36:f5: 3e:c3:29:7a:d8:65:1e:f9:08:d7:e3:26:a1:15:ae: 61:90:54:fd:19:bb:54:ad:0b:f7:74:e1:f3:ee:01: 7a:c6:73:2c:83:aa:c0:6b:24:75:6d:08:b7:be:be: e0:8b:cd:8b:cd:60:0a:e5:45:dc:0e:21:1d:55:34: 4e:8e:d0:07:66:27:24:13:9e:f8:87:07:65:3e:a8: 77:a9:19:e4:c2:d8:1c:cf:43:20:55:71:89:6f:2d: 43:27:15:2a:50:15:69:c3:7c:5f:e8:a8:93:ee:cf: e8:2a:9a:f9:8e:0c:dd:fe:85:40:77:fb:e3:81:39: 9b:5a:19:b7:29:31:5d:f8:1e:bf:60:db:0c:c4:0d: b1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:53:6D:19:85:69:8C:1C:6F:24:1E:3E:63:96:1A:FC:0D:41:69:33 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:fd:57:ec:35:20:d4:34:5b:1a:90:61:e4:da:2d:4d:ce:8a: b1:c4:32:68:76:85:f1:31:61:c5:57:e8:83:38:c3:c7:96:a2: a2:ec:bc:c9:ba:98:a4:00:6f:c2:ac:d6:88:93:43:f0:5b:7e: ba:0b:5c:80:dd:e5:fa:c4:d3:8b:e6:dc:c6:96:b0:59:2b:eb: af:a7:71:eb:f0:13:90:84:32:df:8d:3f:e7:e9:52:a8:1e:00: ca:f1:92:94:df:81:ab:99:c6:c0:95:cc:4a:95:bc:79:46:a2: 81:f3:82:12:13:67:71:c8:f5:ec:43:2f:93:38:f2:db:0c:12: 1d:94:af:a3:32:ec:07:22:b0:e2:78:67:3c:55:8e:bf:10:db: 9d:3e:cc:51:cf:00:26:f5:dd:8d:7c:31:ec:8b:17:15:ce:c5: 12:bf:94:e7:c5:3e:3b:3e:77:fd:2b:74:38:af:cb:3d:2b:35: 12:38:d0:ca:c1:87:7b:bd:d7:df:f3:41:04:51:94:b8:59:03: 2c:64:0b:94:dc:97:f9:2e:72:cb:c1:8c:fe:e7:4c:96:d0:60: fb:bc:70:32:12:6e:61:46:45:10:82:c4:68:44:41:b1:6e:ec: c8:69:5e:bc:4f:43:e6:e1:32:4f:4b:f3:89:be:d9:88:a2:ff: 18:09:18:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC9nXKbrLxX35QryYq66QLaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwOTIwMDcwMDA3WhcNMjYwOTIxMDcwMDA3WjAzMTEwLwYDVQQD EyhmOTUzNmQxOTg1Njk4YzFjNmYyNDFlM2U2Mzk2MWFmYzBkNDE2OTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uKzZTRazxAEuTZzttSAb+3+ML4m 3G5+S2YBCdIxfvvq1g3QSjkqAbjH7Y4hvA8l+OIGhphWCJEbre6yffL8t3TYr9VB e9U5T3yMOZ0Wf9rO7iyLpSxLyRe4npdByFBbExAzzsp+zeBWMLNUnFhNxDggb98F NvU+wyl62GUe+QjX4yahFa5hkFT9GbtUrQv3dOHz7gF6xnMsg6rAayR1bQi3vr7g i82LzWAK5UXcDiEdVTROjtAHZickE574hwdlPqh3qRnkwtgcz0MgVXGJby1DJxUq UBVpw3xf6KiT7s/oKpr5jgzd/oVAd/vjgTmbWhm3KTFd+B6/YNsMxA2xcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlTbRmFaYwcbyQePmOWGvwNQWkzMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWf1X7DUg 1DRbGpBh5NotTc6KscQyaHaF8TFhxVfogzjDx5aiouy8ybqYpABvwqzWiJND8Ft+ ugtcgN3l+sTTi+bcxpawWSvrr6dx6/ATkIQy340/5+lSqB4AyvGSlN+Bq5nGwJXM SpW8eUaigfOCEhNnccj17EMvkzjy2wwSHZSvozLsByKw4nhnPFWOvxDbnT7MUc8A JvXdjXwx7IsXFc7FEr+U58U+Oz53/St0OK/LPSs1EjjQysGHe73X3/NBBFGUuFkD LGQLlNyX+S5yy8GM/udMltBg+7xwMhJuYUZFEILEaERBsW7syGlevE9D5uEyT0vz ib7ZiKL/GAkYag== -----END CERTIFICATE-----Generated at Sun Sep 20 16:48:03 2026 by rpki-client