$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft File: b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json) Hash identifier: YozwEYP9Ws2BIYVTIKVmtk1HQeDeeTm+obJCrYoBR2c= Subject key identifier: 86:1F:9E:C6:65:01:77:70:BF:CD:CA:89:52:D2:83:E8:C4:DA:4C:32 Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20 Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20 Certificate serial: 01A0C7EB25C26F5C8863F4B19F950FA5D1C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft Manifest number: 1AD7 Signing time: Tue 22 Sep 2026 07:01:11 +0000 Manifest this update: Tue 22 Sep 2026 07:01:11 +0000 Manifest next update: Wed 23 Sep 2026 07:01:11 +0000 Files and hashes: 1: 0ilD8kn0R7q1FBSpS_1ImAaBVIw.roa (hash: r9gpGa/Fs+XSMlMSIjeCe4Ey3b9cLg0idanhrHIE4vU=) 2: 1-ygVXvpX3v0iELiClfnmQNYwGyE.roa (hash: X5he1s+27okfT854bA2DHGCg/8azuLS5wg9wh4BAYOk=) 3: 11MSR6RwQdS9PcJnQG3HC0PzfJ0.roa (hash: CvrDms5T5mm1Pd4WoiIkr1es421j/l8bnrXNm+cQNiA=) 4: 51dyEH9mB-2TlQnmwCI1JrmBgNc.roa (hash: 8rWJfuEn+9HWKYdaijzyW6l/fo2ZUakPYbK2Xz7Khfw=) 5: 81IrEqThFJ71oZltC7sydtXNojo.roa (hash: tEfEiIXn9wfKX7SvDjdARvZLxRgzMJ/S8JlSOukelog=) 6: AMQlobx9HParaeDL7T0v3tR4_mg.roa (hash: DvsmpIh8xvNvja7LOYbDo2D2JDk07c51OKvsQR0zZ1A=) 7: AXyzBE0tybxRg9_jdKm4jNHR7bw.roa (hash: nfQgADgYeSKYxfzdRmUnB0z2SSRcFjYrl/PLdcFMeDw=) 8: B4KN2Yd9w7WkWLGwOUk8aBVr0Ko.roa (hash: +Lzs31fW3zuwQ9tYMA1nRcRlZN8oqEJ97KqkruTLEYU=) 9: CP1-ZWFt3LQXYmFLwdbDKA6-btk.roa (hash: hFhoH59R3e+GZod8NYfc3YpX1Y6SV4cXhI67xJcoHls=) 10: JxJo9qALLP7eJJE5vuTtbxNKarg.roa (hash: HkVv74vSVM+BvE4aRbMZl6E3E6sT2RpvFk2i93TTTiE=) 11: _BfUEuTWI4mH7z3tL2xj4fNLk8w.roa (hash: PZxV1RVfs2NX+n/RPHStsER54mLHjvguw+Y+i8qfbk0=) 12: _g7NYGu7EgLM-JyG677gAc99ISI.roa (hash: uHPD2j/d4/7LW+Vl6Kpwce5f7NuD1gag8TG/5Nj0SWs=) 13: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: X8KZKmq1QeOBo3KhQTinM9DlFPUTmjzWvm6MuE0d+wU=) 14: bQYx_xQSdi96aXvakBARQlWzcuo.roa (hash: paxG2U4ADDtULZYvAzrh9UihW/30QbEMMaBJ7NEhmYo=) 15: d-4qmY002a-_uZF-wZrqxgBd3jo.roa (hash: wELkh8aWcGv9h9k1xpDhpOETMsDuMx2CZz3t9VUJyYk=) 16: fxuyMV_7iGJ5rjIPhk3y0WiOc-Y.roa (hash: kZWQ/Ewlc4WMwycM0JTInlzSOn7k6IqfaiPaxpvk380=) 17: g4ShtOVoK1sOm96RfSspdLumCvI.roa (hash: dbDK/BecQeIz6Zb33EjyuQY6S7PvjAP+A9ZP96sRxE8=) 18: glWxdut08Vwn-qxiS-pyw1KuV6s.roa (hash: RXAylKSGn5n8hPtBxyqJXbZqVSosVeuUL9onv9ffIJ8=) 19: p8KWXhQ17kNHqWtAUgCDpcUShPM.roa (hash: yT7/vJlEJytYxIwgAmSPUlSELtY4hqOC1H64eBjtuzU=) 20: qo7ie-ZCOxr3kULK0wr2-czci7A.roa (hash: tjSzYVU1BPWM+eWE8epAD1zQp+0FNjjYVtJc8ORfDvE=) 21: tqsZBMiwtDAO2q_BZMmxFG_HXxU.roa (hash: 0oZRjG6UEUwVZ184rw3R5X/+u67d+G2cxLuM4O/eVMI=) 22: u3tBTHFA6uA1xiho6mlx2A99Pkg.roa (hash: FgLJ+SuCyCEVccEPsDGFLFFI0Fpbheu8wLy47VogJN8=) 23: vELnjGZG0HPMMI6eyVMJCb07tlM.roa (hash: hBZn4JkNx5C+fP4A7VfhJIdgWEeaLDhsZs+aBB3PMpI=) 24: wuAhjlqZE30FVLwQleXy0QZKBvk.roa (hash: 5iJlr5RtTjgZN/jpYBVCGzQoWJShbs43qhZUZnZDc2U=) 25: y85mnQhYcTqIlHoOqLBACOAgO30.roa (hash: jzPimPMQ/CRKxhNSxbGWi85rto/NzANA5JxRUar8Ci0=) 26: yJBe4wL__q5eFSy_v2lsZXclqhQ.roa (hash: waMNp3qW5tHL4UcllPTtbvZg9/Osk4C76/bHTxN/Vec=) 27: zVfHB6xgYbJtJCm4H5EGRk3hC7k.roa (hash: c3yZq0K5+Oc2hAEr0nxCqDN3oLQT4Nw1D6AMcTqSbJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 05:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c7:eb:25:c2:6f:5c:88:63:f4:b1:9f:95:0f:a5:d1:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20 Validity Not Before: Sep 22 07:01:11 2026 GMT Not After : Sep 23 07:01:11 2026 GMT Subject: CN=861f9ec665017770bfcdca8952d283e8c4da4c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f6:c5:21:97:df:bc:10:37:ba:e5:0d:be:52: fb:e2:4f:15:70:82:4e:9e:86:79:1a:b2:d8:1c:23: 18:fd:ee:63:19:8b:c5:a0:9c:d8:2d:6b:42:4a:75: 11:e7:97:71:39:c8:72:65:64:6f:4b:7a:4f:e2:69: 81:c0:49:62:b8:15:d5:c9:89:60:5c:8a:10:09:ab: 1d:ee:1e:f0:b1:e8:90:ed:17:37:d3:c0:95:27:a7: 88:71:02:a9:c6:5f:4d:e5:3e:bc:89:b7:1f:c8:b8: 86:b8:b1:25:cc:b2:79:bf:07:bf:90:0d:ea:24:e6: c6:59:25:0b:78:23:2b:51:ea:2f:e4:66:68:29:94: ff:37:14:4f:00:e4:54:d8:2d:18:fa:42:d4:02:63: 6a:94:5a:e6:5f:ae:69:b6:d3:40:4f:09:9f:0f:10: 18:4c:41:3c:91:0a:8e:5b:b2:b7:87:32:75:c3:15: 1c:91:de:8d:51:02:49:5e:c7:4e:0a:e8:a6:4b:58: 55:11:a5:2d:3c:bb:45:6d:e4:72:e7:ca:77:b3:c7: a6:ed:3a:1b:e2:b5:81:e9:65:4c:70:6e:a3:6c:61: da:4e:99:a3:8c:8a:bb:ba:e7:35:f0:2f:a0:4d:11: 47:ad:a9:70:a8:16:b0:3f:f4:52:aa:91:f8:fa:32: 94:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1F:9E:C6:65:01:77:70:BF:CD:CA:89:52:D2:83:E8:C4:DA:4C:32 X509v3 Authority Key Identifier: keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0f:71:e4:ae:0c:f1:37:46:61:08:a7:f2:e3:3a:48:8f:13: 28:d3:63:7e:de:4d:11:70:8b:6d:36:ff:c0:9e:18:1c:7f:2f: a2:12:83:e0:66:61:1f:bd:ca:42:89:b8:8c:a6:4d:54:13:a5: 1c:84:e6:5d:d3:be:fc:f6:3b:4a:a4:dd:66:55:3b:7e:2a:93: b8:20:f7:e6:fe:0d:ba:2d:9e:5d:e3:81:98:be:e0:fe:61:96: 7b:18:fe:83:ca:cf:14:aa:4b:6e:34:4d:48:cc:ff:94:b0:33: ef:99:e5:7b:0d:08:f0:57:e0:62:9a:f3:36:7a:63:a4:6f:9d: 1a:e2:ac:0b:63:64:12:ca:64:67:8c:d6:97:52:39:e8:98:0e: 60:de:59:56:22:a6:c4:41:03:2f:60:2e:45:d5:38:f0:c9:fa: b3:7d:65:bc:ae:08:a4:79:4d:51:4c:b6:75:64:7d:1e:dc:90: 2f:11:89:d0:47:5e:d3:2d:32:b9:89:c6:91:82:23:c9:60:f9: 5a:da:77:23:69:64:99:87:52:72:0d:ba:ef:7f:e3:ba:d7:ad: 39:2a:3c:3a:2f:06:d8:3b:ae:11:39:8d:28:ee:9e:a3:c8:06: e5:c1:1d:44:5b:1c:a6:c5:dc:d5:e3:2f:b9:8a:69:01:81:ba: fb:ba:8a:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDH6yXCb1yIY/Sxn5UPpdHBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0 OTRlMjAwHhcNMjYwOTIyMDcwMTExWhcNMjYwOTIzMDcwMTExWjAzMTEwLwYDVQQD Eyg4NjFmOWVjNjY1MDE3NzcwYmZjZGNhODk1MmQyODNlOGM0ZGE0YzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PbFIZffvBA3uuUNvlL74k8VcIJO noZ5GrLYHCMY/e5jGYvFoJzYLWtCSnUR55dxOchyZWRvS3pP4mmBwEliuBXVyYlg XIoQCasd7h7wseiQ7Rc308CVJ6eIcQKpxl9N5T68ibcfyLiGuLElzLJ5vwe/kA3q JObGWSULeCMrUeov5GZoKZT/NxRPAORU2C0Y+kLUAmNqlFrmX65pttNATwmfDxAY TEE8kQqOW7K3hzJ1wxUckd6NUQJJXsdOCuimS1hVEaUtPLtFbeRy58p3s8em7Tob 4rWB6WVMcG6jbGHaTpmjjIq7uuc18C+gTRFHralwqBawP/RSqpH4+jKU/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYfnsZlAXdwv83KiVLSg+jE2kwyMB8GA1UdIwQY MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt YmE3YzdkODE5MGNhLzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAig9x5K4M 8TdGYQin8uM6SI8TKNNjft5NEXCLbTb/wJ4YHH8vohKD4GZhH73KQom4jKZNVBOl HITmXdO+/PY7SqTdZlU7fiqTuCD35v4Nui2eXeOBmL7g/mGWexj+g8rPFKpLbjRN SMz/lLAz75nlew0I8FfgYprzNnpjpG+dGuKsC2NkEspkZ4zWl1I56JgOYN5ZViKm xEEDL2AuRdU48Mn6s31lvK4IpHlNUUy2dWR9HtyQLxGJ0Ede0y0yuYnGkYIjyWD5 Wtp3I2lkmYdScg2673/jutetOSo8Oi8G2DuuETmNKO6eo8gG5cEdRFscpsXc1eMv uYppAYG6+7qKRw== -----END CERTIFICATE-----Generated at Tue Sep 22 11:28:13 2026 by rpki-client