$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json) Hash identifier: HCY0FiwrMzZgnQ59cFUttwCqI8bcqK+Rdt8yi2iepl4= Subject key identifier: 91:9C:4F:C0:A8:EE:33:13:57:49:49:7F:0E:2E:28:FF:7A:27:56:60 Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 01A0BEB07B4BB6491959941B213266951F8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft Manifest number: 1B77 Signing time: Sun 20 Sep 2026 12:00:31 +0000 Manifest this update: Sun 20 Sep 2026 12:00:31 +0000 Manifest next update: Mon 21 Sep 2026 12:00:31 +0000 Files and hashes: 1: 19Q2Dwhtepvh3WfcRXocelqULL8.roa (hash: 5gim+c2a2kpRDHritwN6RumGls9psmp/ew2vMiVkt54=) 2: 4SJJucH40Dscf3Ue62wtU0DfH6E.roa (hash: QGCBTFVXrzql7PtcPo7oGZ6zg9NODVzu4Qj7AspLapc=) 3: 9NFbvxj2w7VM6vxKq1Roz_jojjQ.roa (hash: kit6Kwkn9tJ2JznDgHVoh92jAz03quG3UuogXP7lLQY=) 4: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: pV0DYk0pxF7smWGMsCRYz0lDMN7tsYJZoNMIRTBb4qs=) 5: Fm8UQDDxRj3AapGVONseve1Vu_c.roa (hash: /MMrY/Cw2vuv3Ihg0AIYNFIDKJbp4cDD3gVv3uf72Gk=) 6: GM3ERJU6CIy7dwdH0zdNwprJcyY.roa (hash: IlzjX1IkwyvBmzjj9sSoXNpn+4Aebe2rR4YjxBC4Rpw=) 7: HOHhNiuwB0cMh5RUFF-1lXt5zw8.roa (hash: k0AGLs0YgoPPmCz6XJ6TT1Z/0Wgwq5Qa6Ym6t+Mb83g=) 8: HmuiSy6DiqyFIS3hKu7LdivnQl0.roa (hash: AUDFtOT4GZ2PlVwxPCH5qqp0l2hQvma3gFblT+w1Ox0=) 9: IKu2yGBkoazXpkiiazb1p4jf3OI.roa (hash: sGPG+CicCuj6ii9AJ1UODtX4hYRlCD8JM7C2FLI0Fac=) 10: RahpEOjDk8JGqVaMnjYNHjqMCDk.roa (hash: 3i16wtfdxMwVP4jwU43s2Etd+QzTAEC6HDDbzF8Ohw4=) 11: TC_eT-_uQmNc7oH25j9ouSW_pbQ.roa (hash: tFzELYSe05eXp55I4gzQwEHo9uvcyGGItcMS2z7uaLI=) 12: oe9__c4vQI-1sLDyADedRP1CO-k.roa (hash: oY6L5eGC8aMPjhIdr6obVmsLpQESXuitNzVikpRUca0=) 13: pXmxylidYiS8qdJ3VaZ9yLskNbE.roa (hash: TusGBQalo9CLc6zboQZGITSpw51x7npY2VYZcmB0+eY=) 14: vOegqKH11j2ljvuv3PcKJ5eKLGQ.roa (hash: Xifos647golhy2/qMNU8LvVXxPFJdsELgOMybMZy3CM=) 15: xBCJBwVBWVhFXMpZnk1hhNHEtus.roa (hash: JhFeug15ySPa9A1JPmxH1r0jpNDX2NFdPlUO6jS53AM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:b0:7b:4b:b6:49:19:59:94:1b:21:32:66:95:1f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Sep 20 12:00:31 2026 GMT Not After : Sep 21 12:00:31 2026 GMT Subject: CN=919c4fc0a8ee33135749497f0e2e28ff7a275660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:32:c8:e6:2f:d9:ef:e9:6e:f2:37:1e:19:09: 99:5b:24:aa:bc:22:5e:3f:75:49:b2:9d:28:41:20: 23:36:34:db:02:98:c2:0a:10:c9:a5:36:a6:cc:13: 2f:2f:85:03:55:7a:ae:43:61:6b:81:62:49:e5:68: 9b:92:a4:51:65:31:68:3f:33:5f:ce:d1:7a:a2:38: 06:1a:15:46:8c:9e:5d:b2:69:4a:67:3b:2b:18:a5: 6a:b7:47:6c:0c:7b:f9:1f:67:a3:e7:05:00:46:ee: eb:48:d0:3a:99:5b:fc:0e:a5:a3:e8:67:e5:31:fc: fa:f1:19:e6:ed:f0:64:36:d9:88:d1:b4:ea:3f:7d: b0:90:ef:5e:81:f5:01:32:29:da:c0:76:1f:d6:f6: 77:7e:f7:8d:ec:3e:18:bd:00:6b:a8:36:f8:0a:bc: b2:85:7f:a6:b0:d2:0d:27:ef:b3:ee:35:d5:07:f6: f3:5d:5b:00:3c:7d:f2:05:0c:68:6a:fb:76:86:16: e5:0a:fe:b1:0c:65:16:81:50:47:61:bf:6b:24:b7: 0e:44:a5:4a:21:de:b9:e5:fb:9d:e9:d4:58:d0:c4: a5:9a:15:d2:cf:2b:5a:7d:cb:6b:52:e0:1d:d5:2b: 76:6e:dc:37:5c:bf:cd:41:94:b2:d3:fd:20:8b:10: 20:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9C:4F:C0:A8:EE:33:13:57:49:49:7F:0E:2E:28:FF:7A:27:56:60 X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:eb:b2:49:bf:cb:44:4a:3a:a9:2a:6b:0b:2d:b5:36:d5:a8: c2:bb:60:1a:1b:f2:52:4d:6d:0d:b0:71:b3:1b:0a:bc:c4:74: ee:1f:3f:42:43:9d:1d:c4:0b:18:32:69:c2:80:b2:5b:0c:9f: e5:3f:e1:dd:40:c7:ea:a7:d7:b5:eb:5a:ea:11:d7:cb:6b:f4: ae:c8:f7:c9:2a:5c:a1:6f:8b:c2:7d:e9:61:f1:1c:3d:0c:bf: 46:ba:4e:66:b9:14:21:59:93:6b:24:0a:e7:2c:bf:e3:27:f9: ce:91:af:2f:7a:65:91:a6:06:7f:59:d1:ac:36:33:31:2f:ec: 41:55:08:29:61:5f:8e:29:a3:31:ce:51:e8:77:db:a9:01:4c: 7f:3d:b2:56:dd:3b:25:6e:20:d2:26:bf:43:7d:4d:1f:09:61: ba:75:47:0e:6c:ae:2a:26:6b:52:75:8f:c0:8d:41:b1:31:67: b9:6b:d9:c3:35:5d:ba:d0:23:a0:c1:df:f7:8f:56:f9:cf:93: cd:09:16:1a:83:6f:28:18:df:3d:a8:19:3e:6e:10:c6:38:66: 7b:dd:a1:5b:2e:dd:a9:4d:02:e6:d0:97:e2:cf:01:ef:10:21: 93:36:bc:78:35:90:d1:81:92:08:9a:9e:99:82:c5:81:20:63: 87:25:46:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+sHtLtkkZWZQbITJmlR+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwOTIwMTIwMDMxWhcNMjYwOTIxMTIwMDMxWjAzMTEwLwYDVQQD Eyg5MTljNGZjMGE4ZWUzMzEzNTc0OTQ5N2YwZTJlMjhmZjdhMjc1NjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTLI5i/Z7+lu8jceGQmZWySqvCJe P3VJsp0oQSAjNjTbApjCChDJpTamzBMvL4UDVXquQ2FrgWJJ5WibkqRRZTFoPzNf ztF6ojgGGhVGjJ5dsmlKZzsrGKVqt0dsDHv5H2ej5wUARu7rSNA6mVv8DqWj6Gfl Mfz68Rnm7fBkNtmI0bTqP32wkO9egfUBMinawHYf1vZ3fveN7D4YvQBrqDb4Cryy hX+msNINJ++z7jXVB/bzXVsAPH3yBQxoavt2hhblCv6xDGUWgVBHYb9rJLcORKVK Id655fud6dRY0MSlmhXSzytafctrUuAd1St2btw3XL/NQZSy0/0gixAgnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGcT8Co7jMTV0lJfw4uKP96J1ZgMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKeuySb/L REo6qSprCy21NtWowrtgGhvyUk1tDbBxsxsKvMR07h8/QkOdHcQLGDJpwoCyWwyf 5T/h3UDH6qfXteta6hHXy2v0rsj3ySpcoW+Lwn3pYfEcPQy/RrpOZrkUIVmTayQK 5yy/4yf5zpGvL3plkaYGf1nRrDYzMS/sQVUIKWFfjimjMc5R6HfbqQFMfz2yVt07 JW4g0ia/Q31NHwlhunVHDmyuKiZrUnWPwI1BsTFnuWvZwzVdutAjoMHf949W+c+T zQkWGoNvKBjfPagZPm4Qxjhme92hWy7dqU0C5tCX4s8B7xAhkza8eDWQ0YGSCJqe mYLFgSBjhyVG1g== -----END CERTIFICATE-----Generated at Sun Sep 20 19:23:41 2026 by rpki-client