$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json) Hash identifier: FcAkCk7weynR6XDnsLwOJsA5Ss/fxtjjGQRQMakLneM= Subject key identifier: 1A:73:59:86:C6:39:CB:BD:3B:07:E1:59:97:2A:89:73:68:09:C2:6F Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Certificate serial: 01A0BEB12829D26F6B0A8681618FC112A670 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft Manifest number: 1A70 Signing time: Sun 20 Sep 2026 12:01:16 +0000 Manifest this update: Sun 20 Sep 2026 12:01:16 +0000 Manifest next update: Mon 21 Sep 2026 12:01:16 +0000 Files and hashes: 1: 044xYX9HsasQkNnZ6gNIrDun9Kk.asa (hash: QqGXRDWhRxy4fIleJhf8VPuBnT0lLwsILfpI5ZVk2bI=) 2: 21UC4Dg27lTwnVnoP-1hWx8Jrac.asa (hash: P5jYP5ImmwlHStzib0wGM6vyZuqyna1VWXgPkWJ521s=) 3: 3j6ITLuEAtzvq7lDDH-_99jLsyw.asa (hash: emyDEkQmvd9qMUG9y8IBKAbGI4wIM9zsTIQoNhtKSiU=) 4: 4blS8i-IvJFmYcw1UMVYU50adH4.roa (hash: PH25rQxOqMdKEUIOyGDzXkRgbKvHvrgDiCAwjxsY21M=) 5: Bv2hzFMshraYJZMhKiNAPQW5yzo.roa (hash: mozy1oa9z+5oxHPkAdcnEjtIYIUHTFuELC5cUHnd2ds=) 6: FXZzLUTLI2bnJX3HE0iocMnGK24.asa (hash: 0jHNXzmBRRsiRYGYoiH0GyC90Hc/n11rPyQ1ORy1E6M=) 7: GN5fvWr40gdv3JGN6vxjkZjGr-M.roa (hash: opZrG09Q9xFPvDT9n75han8TkL1qCnmykUVsSTdQ9Hw=) 8: ONEBxRFqRY2aPMMFa_3ak7_LP04.roa (hash: 6sHhfn9wB3VfYGqWY+wewX0hRZU1FUHpsvmiMpmOan0=) 9: SpVJq_aWC8IH5JWeljASL-sUdR4.roa (hash: WWb4Srs1EjuxCuzB13EtjRKgil05qhr6qF6kWwF7M7g=) 10: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: 831glZEBA/PKepVl1FHSAx5b/0cbgQ842MWJSVZBkPg=) 11: l5bd30j_MQRGXqfWahBHTqJdoFc.roa (hash: t0VGEeZo8Fahoj1ko4o+rBeCd1Be3+5NalKn7WyM9tU=) 12: lwxC-jH6X2q9Mt74lepdPD3W9EM.asa (hash: 4RgSfjSU8Flpmo/qpEf1hYBnqzjBw2dPRj3BdEOkib8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:b1:28:29:d2:6f:6b:0a:86:81:61:8f:c1:12:a6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Validity Not Before: Sep 20 12:01:16 2026 GMT Not After : Sep 21 12:01:16 2026 GMT Subject: CN=1a735986c639cbbd3b07e159972a89736809c26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e0:78:55:fd:09:4e:78:1f:70:44:e1:69:4d: 7d:ea:7a:39:29:df:35:a2:bd:70:21:b0:23:ad:eb: 8b:bf:62:60:c7:20:a6:70:dd:5d:1c:40:c5:1f:b9: b5:cb:0f:1e:85:87:ee:30:65:0f:51:52:f2:67:c8: 1a:82:57:d1:8c:d0:87:7a:41:ec:dc:07:74:3a:59: 4e:7b:6d:83:9a:49:c7:56:03:7b:48:3a:7c:41:e7: 43:d1:f9:66:2b:cf:d6:60:84:80:86:04:17:52:94: 78:71:4c:78:18:7e:8f:f6:f4:0f:7b:9c:86:9c:62: 60:00:88:1a:e8:52:05:63:a5:d5:4e:ef:42:24:ad: c6:44:4f:4b:0c:39:50:a9:9a:3d:d1:98:72:be:67: 04:56:18:3a:b1:d5:55:6b:72:0e:f6:4d:a7:ed:8f: db:0a:6f:2c:e0:22:32:ca:ea:c9:0f:93:59:d8:45: f3:7e:1b:97:a2:7d:f9:a9:ea:1f:4c:5e:00:74:16: bc:d0:74:49:ab:55:72:33:1a:13:fa:2b:50:cd:97: 41:80:47:17:e6:b4:c8:e7:0c:29:0e:4b:35:d1:b0: 56:2f:13:23:91:fb:03:01:d8:71:2d:f1:a3:fa:db: 0f:62:04:9a:0d:80:48:f2:40:c0:12:6f:1d:2a:49: dc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:73:59:86:C6:39:CB:BD:3B:07:E1:59:97:2A:89:73:68:09:C2:6F X509v3 Authority Key Identifier: keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1f:95:bf:3d:0f:db:86:82:e0:ae:67:95:6b:8b:a5:ba:4e: 24:c6:44:a5:95:e6:8f:7c:c5:ca:20:d6:95:29:63:17:83:06: a3:f2:29:89:3a:44:14:42:50:33:08:97:34:7a:97:7f:57:2e: 25:f3:c2:4f:93:9f:87:00:23:2f:d3:8e:6c:13:12:15:e2:b9: b3:d4:7e:c0:67:f6:9f:a5:53:b9:02:9a:41:44:ba:84:e8:c7: 5c:46:3c:6d:fa:f6:39:11:34:79:b2:7d:45:1b:f8:5d:b2:73: 80:72:e6:1c:92:70:6a:c4:4f:fc:e6:24:87:a8:0b:2f:b3:73: a9:34:61:83:7f:7e:f5:03:4d:41:d4:7a:de:b9:1e:b7:5b:db: b9:f1:74:be:b3:c0:c2:35:b0:b1:c3:56:41:d0:57:5b:49:72: b3:3a:b9:78:dd:00:c3:d5:a8:d4:b6:1b:6a:cd:95:71:a0:11: 4e:d2:3d:7f:ef:38:f0:0a:99:da:eb:39:20:98:b6:3e:fc:4d: 66:1b:90:e4:65:85:7a:af:93:cf:5e:48:b2:3b:da:4d:c5:4e: 4b:ed:81:aa:3b:f2:56:34:61:44:7a:88:c8:bc:1c:65:61:4f: f4:f3:df:62:d1:8e:9e:3f:c2:67:8b:6e:91:2c:a4:51:e8:9c: 38:d5:08:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+sSgp0m9rCoaBYY/BEqZwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4 MGIxZTMwHhcNMjYwOTIwMTIwMTE2WhcNMjYwOTIxMTIwMTE2WjAzMTEwLwYDVQQD EygxYTczNTk4NmM2MzljYmJkM2IwN2UxNTk5NzJhODk3MzY4MDljMjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OB4Vf0JTngfcEThaU196no5Kd81 or1wIbAjreuLv2JgxyCmcN1dHEDFH7m1yw8ehYfuMGUPUVLyZ8gaglfRjNCHekHs 3Ad0OllOe22DmknHVgN7SDp8QedD0flmK8/WYISAhgQXUpR4cUx4GH6P9vQPe5yG nGJgAIga6FIFY6XVTu9CJK3GRE9LDDlQqZo90ZhyvmcEVhg6sdVVa3IO9k2n7Y/b Cm8s4CIyyurJD5NZ2EXzfhuXon35qeofTF4AdBa80HRJq1VyMxoT+itQzZdBgEcX 5rTI5wwpDks10bBWLxMjkfsDAdhxLfGj+tsPYgSaDYBI8kDAEm8dKkncYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpzWYbGOcu9OwfhWZcqiXNoCcJvMB8GA1UdIwQY MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct ZmZiNzA5Zjc2NjhjLzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAex+Vvz0P 24aC4K5nlWuLpbpOJMZEpZXmj3zFyiDWlSljF4MGo/IpiTpEFEJQMwiXNHqXf1cu JfPCT5OfhwAjL9OObBMSFeK5s9R+wGf2n6VTuQKaQUS6hOjHXEY8bfr2ORE0ebJ9 RRv4XbJzgHLmHJJwasRP/OYkh6gLL7NzqTRhg39+9QNNQdR63rket1vbufF0vrPA wjWwscNWQdBXW0lyszq5eN0Aw9Wo1LYbas2VcaARTtI9f+848AqZ2us5IJi2PvxN ZhuQ5GWFeq+Tz15IsjvaTcVOS+2BqjvyVjRhRHqIyLwcZWFP9PPfYtGOnj/CZ4tu kSykUeicONUIBg== -----END CERTIFICATE-----Generated at Sun Sep 20 23:17:04 2026 by rpki-client