$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft File: T9ZCEC691_ImjBTCfj678mtMr-s.mft (raw, json) Hash identifier: PyZdPQG7yFCBzkd1LI855GXhn1zqcIxjnxua08GxsrE= Subject key identifier: B9:C5:92:56:4E:2B:56:D5:B1:D4:42:60:11:44:26:C0:25:70:33:63 Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb Certificate serial: 019FA9E31940D961B5153A2D3D2A13FAA2C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft Manifest number: 01F9 Signing time: Tue 28 Jul 2026 18:01:00 +0000 Manifest this update: Tue 28 Jul 2026 18:01:00 +0000 Manifest next update: Wed 29 Jul 2026 18:01:00 +0000 Files and hashes: 1: BOT5KFIXJpkIbzlxtuVva-pqcW8.roa (hash: V0+HzlrzgNuQq4OTP8iqfYcbyGXd1T0uSkmpDamsFm0=) 2: FXU6diYKcbRIsw4MmevlGTpvGb0.roa (hash: aFnvjS1XXi7qixi4xTsDLaU24Ku8jOZbxW9SYMuhSJc=) 3: IXv7GLa92HnV3l1DApAceTiWeyw.roa (hash: wbQSrQRDyv+cAs4TzHktwX1YmUunTHit+MVHYBjMrCw=) 4: JIP6keB7F7Gm2ZlkQopa4DPs_us.roa (hash: jFlq3BusUmP4qYxCaXEGJylNWdexiUDC80OW6u36VHU=) 5: T9ZCEC691_ImjBTCfj678mtMr-s.crl (hash: w4ATjyBprBEDECFsqhyDEY8tmOpjMx8exxNy/8SpdP4=) 6: TbZ4UxM472uZwvxUqFwV48R32GU.roa (hash: +tVWlpFmpYRQxsehBjuSGd5DAH2rij5I3LuhqNxfiC0=) 7: VNfg-QglXGIujd90KUvMXS6gBSY.roa (hash: i1z1xtfhhF9sKthwdcoGahPZ+gLqvmKabhZTgAjg+1Q=) 8: YuXGy4DeeKK817s02xmtLVstl_M.roa (hash: 3pU1tPDQwQuNiKFX6sho9jHiT+VzWttOjYDmMxptk5w=) 9: ZTOkVo51zjkueJP-_jF8sE0dlwI.roa (hash: qWI1aXm7aJOa2gqUSo121mJhm0HQWb9xB4CjBEm9B2Y=) 10: _TQA3DaHi33-kcVw47n7VlGKNYM.roa (hash: 55WFfRlQOcBvN56rtMErkYgOyBcWRjE4WY7WLvG7TY4=) 11: gh269-L8TbTY3-TVP_7aO8lyx58.roa (hash: VbOH7TTnQt8mmF2t2Xgvv1Gs0QXIq8ndLB+CWsdxeFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:e3:19:40:d9:61:b5:15:3a:2d:3d:2a:13:fa:a2:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb Validity Not Before: Jul 28 18:01:00 2026 GMT Not After : Jul 29 18:01:00 2026 GMT Subject: CN=b9c592564e2b56d5b1d44260114426c025703363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:38:ac:56:46:2a:bf:f9:4f:6d:78:e6:c8:d5: 42:d6:1a:57:31:6c:37:9c:e0:79:2d:16:8c:fa:49: 5e:08:11:3b:1b:6b:ad:4b:85:31:c7:f9:ad:e5:9c: ad:b1:be:98:72:a1:84:28:03:4b:0d:1b:77:37:02: d2:d6:7f:dc:02:d5:a7:61:b4:cc:3a:a3:09:cf:38: 9f:00:d6:f4:40:1a:e8:0e:b7:1f:ed:aa:57:a5:4e: 4a:03:8b:ca:6d:9e:81:41:05:af:01:30:48:42:27: a7:57:36:fc:1f:8d:94:cf:59:13:9c:b9:91:c4:5f: 05:68:02:07:c1:43:b7:c9:47:30:cd:5c:24:df:01: c8:9c:f8:a8:ef:df:cf:dd:07:97:aa:30:f3:ad:f7: b2:c5:fe:ef:ec:3c:bc:80:77:87:97:3a:fd:7e:cd: f6:61:c2:03:31:b1:27:32:ff:a3:54:47:17:4a:2b: 13:a9:d6:db:8d:99:c6:63:a5:6c:e6:cc:6f:f3:70: 65:a7:ad:db:57:cf:20:63:a6:12:26:a8:98:99:17: 17:28:86:c9:df:5e:0b:b5:01:97:64:a0:63:b2:6c: 2c:83:fb:73:a3:ff:57:a5:ce:7f:c1:51:d3:54:f3: 38:1a:a7:1d:f3:72:3d:0e:5e:4a:3e:41:18:3a:8d: 41:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C5:92:56:4E:2B:56:D5:B1:D4:42:60:11:44:26:C0:25:70:33:63 X509v3 Authority Key Identifier: keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:af:04:dd:dd:bf:18:49:83:0c:f9:d1:b5:c7:bd:df:28:80: 10:43:be:c4:84:9f:7d:ed:06:47:d2:a6:0d:1e:3b:7c:0f:e1: e9:88:80:bd:a3:df:de:b5:31:f5:e5:b2:2e:2c:6c:c7:7c:50: 2f:19:82:46:ba:94:b9:13:6c:e5:5f:43:21:44:b0:93:65:d2: 37:b5:5a:2e:d3:b6:e8:60:87:8e:ea:1c:80:2f:cc:cb:b5:10: c3:11:d9:e3:af:78:ee:89:23:27:24:0d:70:4f:95:87:d9:d8: 70:0f:c6:54:42:de:15:60:c7:2c:90:32:19:4c:c4:da:39:2e: 9c:69:7c:80:45:b2:80:1b:42:65:cb:ed:03:1e:fa:06:34:a6: 86:d9:1b:b1:2f:59:4a:32:11:76:66:71:e1:bb:6f:14:7c:bd: 0f:7e:22:3a:95:d1:a6:48:5e:8b:1a:d7:1b:f5:bb:a3:63:1f: 1d:1c:38:37:4f:4a:f1:6a:d6:a8:eb:16:cd:63:73:77:8c:90: 6e:28:2d:9e:d7:4d:f8:4d:41:2e:25:7e:37:8a:d9:d4:65:f0: b7:ef:65:47:0e:87:a1:a5:c5:e3:09:db:7c:95:0d:01:72:ee: 6a:7a:be:4d:ca:48:fa:64:bd:70:39:5b:98:f2:7b:47:0a:e1: 99:93:93:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+p4xlA2WG1FTotPSoT+qLBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZDY0MjEwMmViZGQ3ZjIyNjhjMTRjMjdlM2ViYmYyNmI0 Y2FmZWIwHhcNMjYwNzI4MTgwMTAwWhcNMjYwNzI5MTgwMTAwWjAzMTEwLwYDVQQD EyhiOWM1OTI1NjRlMmI1NmQ1YjFkNDQyNjAxMTQ0MjZjMDI1NzAzMzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDisVkYqv/lPbXjmyNVC1hpXMWw3 nOB5LRaM+kleCBE7G2utS4Uxx/mt5Zytsb6YcqGEKANLDRt3NwLS1n/cAtWnYbTM OqMJzzifANb0QBroDrcf7apXpU5KA4vKbZ6BQQWvATBIQienVzb8H42Uz1kTnLmR xF8FaAIHwUO3yUcwzVwk3wHInPio79/P3QeXqjDzrfeyxf7v7Dy8gHeHlzr9fs32 YcIDMbEnMv+jVEcXSisTqdbbjZnGY6Vs5sxv83Blp63bV88gY6YSJqiYmRcXKIbJ 314LtQGXZKBjsmwsg/tzo/9Xpc5/wVHTVPM4Gqcd83I9Dl5KPkEYOo1B7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnFklZOK1bVsdRCYBFEJsAlcDNjMB8GA1UdIwQY MBaAFE/WQhAuvdfyJowUwn4+u/JrTK/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQt Zjk0MWNjMzlhNzFlLzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQtZjk0MWNjMzlhNzFl LzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbK8E3d2/ GEmDDPnRtce93yiAEEO+xISffe0GR9KmDR47fA/h6YiAvaPf3rUx9eWyLixsx3xQ LxmCRrqUuRNs5V9DIUSwk2XSN7VaLtO26GCHjuocgC/My7UQwxHZ46947okjJyQN cE+Vh9nYcA/GVELeFWDHLJAyGUzE2jkunGl8gEWygBtCZcvtAx76BjSmhtkbsS9Z SjIRdmZx4btvFHy9D34iOpXRpkheixrXG/W7o2MfHRw4N09K8WrWqOsWzWNzd4yQ bigtntdN+E1BLiV+N4rZ1GXwt+9lRw6HoaXF4wnbfJUNAXLuanq+TcpI+mS9cDlb mPJ7RwrhmZOT2Q== -----END CERTIFICATE-----Generated at Wed Jul 29 00:37:04 2026 by rpki-client