$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json) Hash identifier: AXoIDwNx2hMnyAuMk9nan3jz13y9Dzq3j/1sqzH8oWI= Subject key identifier: 59:76:AF:E6:53:39:FD:6B:C8:96:9A:87:4F:D5:3D:0F:C1:32:BB:9A Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701 Certificate serial: 01A0BDD4C03A371CE5FEA75B1507401B1F14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft Manifest number: 1A80 Signing time: Sun 20 Sep 2026 08:00:31 +0000 Manifest this update: Sun 20 Sep 2026 08:00:31 +0000 Manifest next update: Mon 21 Sep 2026 08:00:31 +0000 Files and hashes: 1: 2rYrAzNGLRy2kebzewAymxyAgFI.roa (hash: 7lRGKU9DPcDtXv+u0hXbpyy4aMqg0Uw+oprnJUe2LzA=) 2: 4oMfwBT0VCqApq0Mz9B5u8oEdgY.asa (hash: B40/yiGXsK8OX28pGDLWCXmBEnfMWxpGQtWVYUoy2PU=) 3: GmKW5_EHkoH0GvuRNXDDZJBTr9w.asa (hash: WTnAG5IBd9zYOkgfV7EwghTiMnsdkoRczSviULKHvJk=) 4: O0zW5TfYvBKPM_06y39fr20GlgU.roa (hash: o9IJqdu4tvBH89+q/ixOEY64sxONXtm+OJZs9bCwOus=) 5: PY4zk8ZdTV8J6IiAD0rRER8XcM4.asa (hash: ds1r0Q17VFau1bpjzlPurN1iqObqDOJcn+qwvKgVZdM=) 6: Y19P_g-vBYYPjku8AAu-CeAzWW0.roa (hash: 0p9ZYZuTWuetqmVFdCZJU25sYbQjPpo04+Hro2GGGZA=) 7: fL71-L22cKxM7CZQLZouesgJu3U.roa (hash: sUDVv41sxROa/YEaIzj5YrqXpRn04S1uEQsUbtMaqsM=) 8: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: /y91qNjKPbvyRAI67QtAvgkpKYwP9U/L9utY3ysUsFw=) 9: kWoDnbDfKRrdPEqboPrzUYeYutU.asa (hash: KIa+NGQ3X/m6SyP7wk2j8x0CtEKUsyJ76G3KolFP4Sw=) 10: nWTiWDUsZBq6y-Llds3TNYkdAzA.roa (hash: lu7dgyssWpWTBNpOq8brqIrMrxMRYIWthZEExVfrpEk=) 11: psPWwnT647exV4ggiJz8vloBaHU.roa (hash: P5hGKQcqsDsWZRv7ouHrUVvJ+SAHh8mal8JYlkQ7E8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bd:d4:c0:3a:37:1c:e5:fe:a7:5b:15:07:40:1b:1f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f25e6a6893f466d2695e90670c047443643701 Validity Not Before: Sep 20 08:00:31 2026 GMT Not After : Sep 21 08:00:31 2026 GMT Subject: CN=5976afe65339fd6bc8969a874fd53d0fc132bb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:3d:55:6d:d4:9a:77:82:5e:41:9a:17:9b: 96:bd:5e:7b:cf:e5:a2:9a:9a:80:c7:46:e3:d5:f0: 41:bf:74:a6:a3:d7:6d:64:66:92:fc:04:bd:67:5b: a0:03:ba:5b:e8:4e:24:c2:97:3c:f7:1a:60:7a:47: 36:10:f5:f7:9f:c3:12:4f:62:16:fb:cc:bd:26:59: 91:a2:22:7b:a8:dc:82:fd:2e:64:d4:95:05:ea:b2: 21:93:ba:f8:41:79:0f:72:60:98:cd:d8:6c:b0:51: 88:9e:68:de:9e:d0:28:15:ea:00:19:08:65:14:8c: d6:05:e6:4d:22:19:10:6c:ed:a4:db:bd:9f:02:81: 96:e0:12:69:80:bb:3e:e6:87:38:81:5b:5a:42:66: 8f:41:3c:b1:fd:e3:41:4a:fe:7a:da:93:22:ba:aa: 19:da:bd:09:05:35:be:78:6b:4b:5e:97:78:84:81: 5f:5c:6b:df:7c:f1:57:19:c3:d3:e7:fd:79:61:6a: 94:84:ef:3e:ba:0e:ca:de:d9:cc:80:dc:46:b4:a1: 75:97:58:97:b8:52:38:16:47:74:b3:32:df:31:e2: 5c:2e:26:f1:da:f2:59:ad:ef:9d:90:44:35:36:87: ae:ac:d2:de:ef:d3:5b:62:a3:94:d6:b2:09:14:3b: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:76:AF:E6:53:39:FD:6B:C8:96:9A:87:4F:D5:3D:0F:C1:32:BB:9A X509v3 Authority Key Identifier: keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:94:29:34:e4:ab:70:c7:dd:2e:26:94:76:46:9f:00:0b:f9: b6:97:19:9d:a9:6a:56:8a:0b:4c:6e:ed:de:b4:ac:92:ee:87: d3:94:a7:69:b2:1c:2d:25:2a:27:ad:d5:eb:55:eb:8c:a1:07: 61:e2:e1:ef:66:7c:e5:e5:1e:d9:af:c9:95:6c:72:87:b0:eb: 35:9f:56:ad:9d:2c:a1:ff:f0:22:17:05:04:16:f6:4d:d1:c0: ce:10:e3:a1:9c:c0:07:8e:b8:f2:a3:70:56:c6:74:2e:d3:6e: 22:08:12:56:74:4f:04:38:ad:9c:f0:a4:62:bc:cd:44:03:51: 67:1f:e1:54:04:87:f6:9a:f5:4c:c8:da:44:d8:7a:84:2a:24: e9:61:fc:fb:0f:0d:c1:4b:91:3b:fc:32:29:c2:32:7e:3d:ae: ca:36:9a:11:f4:e0:6e:56:c3:46:43:86:e0:f9:84:bd:fd:18: b2:da:4c:ed:1f:ca:b3:d8:9c:b7:ca:e9:7e:6b:61:dd:06:40: 03:e1:95:d8:32:99:a5:d9:8e:37:e5:e7:93:24:3a:47:6f:5f: 87:7a:4f:9d:27:61:69:74:1b:bf:db:3f:b3:da:fb:1a:73:ba: 70:2a:ac:6e:7b:2d:24:63:90:9c:42:e1:be:4b:f5:80:3b:9f: 15:43:a7:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC91MA6Nxzl/qdbFQdAGx8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2 NDM3MDEwHhcNMjYwOTIwMDgwMDMxWhcNMjYwOTIxMDgwMDMxWjAzMTEwLwYDVQQD Eyg1OTc2YWZlNjUzMzlmZDZiYzg5NjlhODc0ZmQ1M2QwZmMxMzJiYjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowc9VW3UmneCXkGaF5uWvV57z+Wi mpqAx0bj1fBBv3Smo9dtZGaS/AS9Z1ugA7pb6E4kwpc89xpgekc2EPX3n8MST2IW +8y9JlmRoiJ7qNyC/S5k1JUF6rIhk7r4QXkPcmCYzdhssFGInmjentAoFeoAGQhl FIzWBeZNIhkQbO2k272fAoGW4BJpgLs+5oc4gVtaQmaPQTyx/eNBSv562pMiuqoZ 2r0JBTW+eGtLXpd4hIFfXGvffPFXGcPT5/15YWqUhO8+ug7K3tnMgNxGtKF1l1iX uFI4Fkd0szLfMeJcLibx2vJZre+dkEQ1NoeurNLe79NbYqOU1rIJFDtg+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFl2r+ZTOf1ryJaah0/VPQ/BMruaMB8GA1UdIwQY MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJQpNOSr cMfdLiaUdkafAAv5tpcZnalqVooLTG7t3rSsku6H05SnabIcLSUqJ63V61XrjKEH YeLh72Z85eUe2a/JlWxyh7DrNZ9WrZ0sof/wIhcFBBb2TdHAzhDjoZzAB4648qNw VsZ0LtNuIggSVnRPBDitnPCkYrzNRANRZx/hVASH9pr1TMjaRNh6hCok6WH8+w8N wUuRO/wyKcIyfj2uyjaaEfTgblbDRkOG4PmEvf0YstpM7R/Ks9ict8rpfmth3QZA A+GV2DKZpdmON+XnkyQ6R29fh3pPnSdhaXQbv9s/s9r7GnO6cCqsbnstJGOQnELh vkv1gDufFUOnqg== -----END CERTIFICATE-----Generated at Sun Sep 20 13:59:27 2026 by rpki-client