$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json) Hash identifier: jY9oh5QANVQh+rqW+MLirBAv3osR0vsE3iEStgYAjjU= Subject key identifier: 90:FA:4D:57:29:E5:85:0D:32:87:B5:05:90:C5:93:37:1E:BD:9A:C5 Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Certificate serial: 01A0C1B1C3C43D5F42AEBAE06DAA93AAB680 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft Manifest number: 1B0A Signing time: Mon 21 Sep 2026 02:00:47 +0000 Manifest this update: Mon 21 Sep 2026 02:00:47 +0000 Manifest next update: Tue 22 Sep 2026 02:00:47 +0000 Files and hashes: 1: 1-dWfWWM2Q4bjUSimugWWfOBMll4.roa (hash: 9k9cnyjwgTflpSvsCNop1Tp//B4oTSziXJvJrKx7enw=) 2: 1-vkSUj3IhBaF6QCupk9p-QFNkpg.roa (hash: NyoZpDBj6nyKZfID52EDPnf8kCWXyPjqV37Bafp3IEk=) 3: 1if2l0vuSUyA8aKOlZRwZBTqr58.roa (hash: MYKlinKANRkkXALYuH4dNJZg3DMiY6cZlGtlrNDBss0=) 4: 3OlFo1BIMO58jOKinsgaHCIGcPI.asa (hash: It3e1tK83I/+WtTNXWRr1Q1FRwlRAB4eApvNExQnd0Y=) 5: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (hash: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck=) 6: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: lniUFzJGqt/UWYJQi5qkgVjjegsf6jM3v5zIfe/rLWM=) 7: bSIf0T0EwRvYabxLmjmKKkxKJuc.roa (hash: QjhZut+rcecUKTU/gefSSs0Q8mSl4Rg0xTqiyiwiuWQ=) 8: k-YRkliMRVoXShQ8PbWy-9N7SjQ.roa (hash: lMxKbbsuVDDpKDp0TZpDMbjhyk3buYEiXF/UkdpZabc=) 9: oiD41d0i1VuwEQttPBFodXn6upI.roa (hash: uAOn8Pa9tipVHC9vk2BfHXqfrIzw8lI2qK4bQp5y4a8=) 10: qcBLaf6H5Hv30eXMa7IbsI7K2Eo.roa (hash: /8G6T8+RIvDyAMYfFzoKNpDCtHywa0CfF5MXcl8AVF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 02:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c1:b1:c3:c4:3d:5f:42:ae:ba:e0:6d:aa:93:aa:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Validity Not Before: Sep 21 02:00:47 2026 GMT Not After : Sep 22 02:00:47 2026 GMT Subject: CN=90fa4d5729e5850d3287b50590c593371ebd9ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:63:22:ef:3a:43:b1:a5:34:85:da:67:b9:e4: 1c:28:f6:05:cc:60:ba:93:b3:e5:aa:11:6d:8b:e2: d1:e7:f4:41:77:8c:2a:31:45:66:2e:4a:49:24:85: bf:99:c3:70:06:04:25:cd:03:28:24:88:ad:88:18: 04:90:57:95:22:17:8f:60:63:e5:65:da:16:4f:39: 63:1d:78:f4:bb:0a:b2:64:3d:e9:95:47:6c:10:ea: 64:70:2c:78:23:95:60:05:8b:69:38:3b:80:05:14: 5b:3d:85:04:8b:83:c8:fb:84:7c:c3:99:b0:89:1e: 25:1c:3d:69:e6:cd:ea:6c:ad:8d:93:d0:e6:54:4c: fa:5d:ff:5a:80:66:af:4b:0d:21:4e:f7:9c:7e:81: a0:85:6a:22:0d:5c:99:85:79:ed:b6:01:30:13:89: 3f:ad:c6:35:dd:94:f0:f2:c6:43:27:37:5c:ef:28: 79:58:30:2d:81:17:db:c4:cb:23:4b:55:f0:0b:98: 00:65:fb:6d:e0:6d:c7:74:c1:2b:db:b5:02:df:63: 6d:02:cc:54:65:25:79:ca:19:c4:e5:ba:81:0b:91: c5:07:d7:ba:2f:4f:30:ff:08:3a:c3:67:de:c9:6a: c9:37:3a:2e:6c:36:5a:4e:9e:5c:c4:de:e6:e3:d7: 59:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FA:4D:57:29:E5:85:0D:32:87:B5:05:90:C5:93:37:1E:BD:9A:C5 X509v3 Authority Key Identifier: keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a1:da:27:06:52:4f:ab:1d:61:b4:ed:2b:aa:b7:39:b7:c4: 4f:4a:67:08:3b:a6:3d:4e:d7:55:60:d5:2f:e8:ee:03:de:61: 30:6c:10:70:1a:a7:9a:7c:2d:f8:fa:44:c5:27:ce:6f:0a:29: b6:70:08:85:1b:3c:56:4f:95:f6:59:66:95:99:7a:9a:c5:0c: 77:93:a2:d2:77:73:3a:31:31:a7:60:9f:a4:80:a0:90:ac:02: 91:cc:52:22:41:98:06:e6:35:bf:59:19:35:38:2f:ba:07:89: a6:4f:ac:45:a1:c2:84:12:ae:8b:2f:dc:9f:ea:b2:da:45:80: ac:cb:78:a2:22:03:d9:21:28:d7:b5:01:a3:88:c4:89:b3:e6: 40:0f:b9:07:d2:37:7a:ef:67:c9:29:b0:a4:8c:ed:e5:6b:e5: 8a:73:1f:0d:d5:f0:33:1b:15:4d:50:ab:40:a4:df:3d:b0:cb: 6d:84:96:3a:a0:22:69:7a:11:e0:cf:4a:9f:16:9d:13:98:93: 90:fc:ab:28:ac:b4:f5:d3:77:a8:00:28:d2:91:66:51:de:f6: 50:96:d0:cb:e1:fa:63:50:3e:4d:ec:13:22:f4:74:b7:15:65: 8d:0e:45:d0:58:9d:09:ae:0b:cc:9a:0c:ca:79:99:18:a3:93: 3c:7f:2b:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDBscPEPV9CrrrgbaqTqraAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3 NTJhZTcwHhcNMjYwOTIxMDIwMDQ3WhcNMjYwOTIyMDIwMDQ3WjAzMTEwLwYDVQQD Eyg5MGZhNGQ1NzI5ZTU4NTBkMzI4N2I1MDU5MGM1OTMzNzFlYmQ5YWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Mi7zpDsaU0hdpnueQcKPYFzGC6 k7PlqhFti+LR5/RBd4wqMUVmLkpJJIW/mcNwBgQlzQMoJIitiBgEkFeVIhePYGPl ZdoWTzljHXj0uwqyZD3plUdsEOpkcCx4I5VgBYtpODuABRRbPYUEi4PI+4R8w5mw iR4lHD1p5s3qbK2Nk9DmVEz6Xf9agGavSw0hTvecfoGghWoiDVyZhXnttgEwE4k/ rcY13ZTw8sZDJzdc7yh5WDAtgRfbxMsjS1XwC5gAZftt4G3HdMEr27UC32NtAsxU ZSV5yhnE5bqBC5HFB9e6L08w/wg6w2feyWrJNzoubDZaTp5cxN7m49dZkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJD6TVcp5YUNMoe1BZDFkzcevZrFMB8GA1UdIwQY MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt MmI5MjBiZGUzOTkwLzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6HaJwZS T6sdYbTtK6q3ObfET0pnCDumPU7XVWDVL+juA95hMGwQcBqnmnwt+PpExSfObwop tnAIhRs8Vk+V9llmlZl6msUMd5Oi0ndzOjExp2CfpICgkKwCkcxSIkGYBuY1v1kZ NTgvugeJpk+sRaHChBKuiy/cn+qy2kWArMt4oiID2SEo17UBo4jEibPmQA+5B9I3 eu9nySmwpIzt5WvlinMfDdXwMxsVTVCrQKTfPbDLbYSWOqAiaXoR4M9KnxadE5iT kPyrKKy09dN3qAAo0pFmUd72UJbQy+H6Y1A+TewTIvR0txVljQ5F0FidCa4LzJoM ynmZGKOTPH8rmw== -----END CERTIFICATE-----Generated at Mon Sep 21 13:28:43 2026 by rpki-client