$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json) Hash identifier: 9/AR3mqC+mvcBKQwUSbsDrkGuZuOAIjwiuX6TCNFHYk= Subject key identifier: FD:D5:85:67:0C:A5:B3:79:0B:DB:EF:10:9D:41:4B:5C:7C:05:4D:1E Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Certificate serial: 01A0BCC213A7AA8D2A2F2ED8A7FCE1F18340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft Manifest number: 1A6F Signing time: Sun 20 Sep 2026 03:00:30 +0000 Manifest this update: Sun 20 Sep 2026 03:00:30 +0000 Manifest next update: Mon 21 Sep 2026 03:00:30 +0000 Files and hashes: 1: 044xYX9HsasQkNnZ6gNIrDun9Kk.asa (hash: QqGXRDWhRxy4fIleJhf8VPuBnT0lLwsILfpI5ZVk2bI=) 2: 21UC4Dg27lTwnVnoP-1hWx8Jrac.asa (hash: P5jYP5ImmwlHStzib0wGM6vyZuqyna1VWXgPkWJ521s=) 3: 3j6ITLuEAtzvq7lDDH-_99jLsyw.asa (hash: emyDEkQmvd9qMUG9y8IBKAbGI4wIM9zsTIQoNhtKSiU=) 4: 4blS8i-IvJFmYcw1UMVYU50adH4.roa (hash: PH25rQxOqMdKEUIOyGDzXkRgbKvHvrgDiCAwjxsY21M=) 5: Bv2hzFMshraYJZMhKiNAPQW5yzo.roa (hash: mozy1oa9z+5oxHPkAdcnEjtIYIUHTFuELC5cUHnd2ds=) 6: FXZzLUTLI2bnJX3HE0iocMnGK24.asa (hash: 0jHNXzmBRRsiRYGYoiH0GyC90Hc/n11rPyQ1ORy1E6M=) 7: GN5fvWr40gdv3JGN6vxjkZjGr-M.roa (hash: opZrG09Q9xFPvDT9n75han8TkL1qCnmykUVsSTdQ9Hw=) 8: ONEBxRFqRY2aPMMFa_3ak7_LP04.roa (hash: 6sHhfn9wB3VfYGqWY+wewX0hRZU1FUHpsvmiMpmOan0=) 9: SpVJq_aWC8IH5JWeljASL-sUdR4.roa (hash: WWb4Srs1EjuxCuzB13EtjRKgil05qhr6qF6kWwF7M7g=) 10: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: za3hyRM/2bSgoSJTf/dk9k1l/qdZhzl/+/8UAuYeAYw=) 11: l5bd30j_MQRGXqfWahBHTqJdoFc.roa (hash: t0VGEeZo8Fahoj1ko4o+rBeCd1Be3+5NalKn7WyM9tU=) 12: lwxC-jH6X2q9Mt74lepdPD3W9EM.asa (hash: 4RgSfjSU8Flpmo/qpEf1hYBnqzjBw2dPRj3BdEOkib8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bc:c2:13:a7:aa:8d:2a:2f:2e:d8:a7:fc:e1:f1:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Validity Not Before: Sep 20 03:00:30 2026 GMT Not After : Sep 21 03:00:30 2026 GMT Subject: CN=fdd585670ca5b3790bdbef109d414b5c7c054d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:e0:be:96:bc:4d:8f:61:93:2e:d8:ec:30: 05:c6:d8:6e:5e:9a:55:34:15:c0:81:00:77:3f:0f: ae:73:8f:4d:4b:92:60:0c:a6:b2:dd:5c:07:52:13: c0:6a:b4:8e:14:ed:e2:e0:91:e5:3e:1a:41:60:d6: 5d:e0:4e:0e:45:89:cb:2a:6b:5c:72:e6:c1:7f:8f: bc:39:b8:ca:9f:a1:54:e4:7c:c1:b3:b8:02:a6:32: 64:06:f8:02:ec:b4:6b:4b:d4:5a:e6:04:33:14:15: 70:6b:58:60:ba:a5:eb:4e:ba:09:ec:4a:18:54:ff: f0:e5:7b:35:0a:d3:26:62:b6:a1:a1:99:00:f8:19: 2d:da:46:47:79:4f:e0:36:d3:33:dc:72:49:c2:c3: ef:76:55:af:68:97:e8:8a:54:d1:20:78:3a:92:26: 15:91:9b:06:7c:8f:44:5a:90:6e:84:e7:fb:24:d9: 7a:50:3e:e6:f6:72:8c:1e:b4:73:fb:e9:68:dd:38: fd:ab:2d:4c:30:b3:7d:24:d0:05:ec:88:3f:e0:d8: 10:bb:59:63:59:77:04:f1:5b:8b:1d:f9:40:f2:4a: a2:a9:ae:71:84:7f:d8:2e:6f:2d:af:9f:09:57:c0: 83:3a:22:86:c5:80:a5:4f:70:fe:b6:a5:09:37:0b: 59:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D5:85:67:0C:A5:B3:79:0B:DB:EF:10:9D:41:4B:5C:7C:05:4D:1E X509v3 Authority Key Identifier: keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:fe:90:93:00:7e:cf:7f:68:b4:86:90:1b:99:ae:52:ff:6a: 16:d9:0b:d5:ff:02:aa:bf:b7:ab:04:75:95:b9:d4:30:2b:4b: 6b:9b:a1:1d:c7:94:ba:f4:b7:38:35:da:79:50:6c:43:93:c5: 22:04:51:6c:53:08:65:37:86:b6:53:e5:62:f8:1b:10:bd:07: 6b:77:e8:fa:88:18:0b:10:f6:73:db:82:93:03:7f:94:18:9b: c3:87:a4:ff:60:4e:5c:68:af:63:a2:2e:db:02:af:4d:ae:d9: 34:a0:f4:7a:05:aa:16:ce:fd:2c:61:6b:90:c8:49:a3:dd:ad: e5:56:4e:55:ab:18:c9:d8:7f:f6:b4:d8:c1:64:b0:9d:cd:25: 6e:d9:08:ce:6c:9b:04:34:28:0f:c4:4e:f0:c5:53:7e:43:74: 2f:8d:3a:7b:68:be:96:0b:b7:29:b3:43:20:00:d8:68:e9:87: dc:a0:bb:a6:1e:5b:ce:2f:f4:2f:03:d9:94:0b:da:aa:12:1e: 42:96:c1:01:1e:67:0e:a2:2f:72:1c:09:df:e5:c8:e4:c8:d1: 96:cc:f7:66:9a:85:02:97:c2:21:a8:70:5a:b2:e7:c0:2e:29: d7:01:dc:30:34:51:6b:b5:9b:46:80:07:b5:82:0b:d0:d0:f3: e7:22:ee:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC8whOnqo0qLy7Yp/zh8YNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4 MGIxZTMwHhcNMjYwOTIwMDMwMDMwWhcNMjYwOTIxMDMwMDMwWjAzMTEwLwYDVQQD EyhmZGQ1ODU2NzBjYTViMzc5MGJkYmVmMTA5ZDQxNGI1YzdjMDU0ZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOrgvpa8TY9hky7Y7DAFxthuXppV NBXAgQB3Pw+uc49NS5JgDKay3VwHUhPAarSOFO3i4JHlPhpBYNZd4E4ORYnLKmtc cubBf4+8ObjKn6FU5HzBs7gCpjJkBvgC7LRrS9Ra5gQzFBVwa1hguqXrTroJ7EoY VP/w5Xs1CtMmYrahoZkA+Bkt2kZHeU/gNtMz3HJJwsPvdlWvaJfoilTRIHg6kiYV kZsGfI9EWpBuhOf7JNl6UD7m9nKMHrRz++lo3Tj9qy1MMLN9JNAF7Ig/4NgQu1lj WXcE8VuLHflA8kqiqa5xhH/YLm8tr58JV8CDOiKGxYClT3D+tqUJNwtZuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3VhWcMpbN5C9vvEJ1BS1x8BU0eMB8GA1UdIwQY MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct ZmZiNzA5Zjc2NjhjLzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQf6QkwB+ z39otIaQG5muUv9qFtkL1f8Cqr+3qwR1lbnUMCtLa5uhHceUuvS3ODXaeVBsQ5PF IgRRbFMIZTeGtlPlYvgbEL0Ha3fo+ogYCxD2c9uCkwN/lBibw4ek/2BOXGivY6Iu 2wKvTa7ZNKD0egWqFs79LGFrkMhJo92t5VZOVasYydh/9rTYwWSwnc0lbtkIzmyb BDQoD8RO8MVTfkN0L406e2i+lgu3KbNDIADYaOmH3KC7ph5bzi/0LwPZlAvaqhIe QpbBAR5nDqIvchwJ3+XI5MjRlsz3ZpqFApfCIahwWrLnwC4p1wHcMDRRa7WbRoAH tYIL0NDz5yLuog== -----END CERTIFICATE-----Generated at Sun Sep 20 13:58:30 2026 by rpki-client