$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: bWgDlw1nh1UI67JNyYkKK8LoCfd+3D9Y2IHVFphLZKQ= Subject key identifier: 0E:66:7B:EA:49:CB:C1:CE:9E:91:F9:15:F1:E5:EA:7E:7B:1C:84:BA Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 01A0C7B3D180E3968AA6778202E5FC884A47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 1435 Signing time: Tue 22 Sep 2026 06:00:45 +0000 Manifest this update: Tue 22 Sep 2026 06:00:45 +0000 Manifest next update: Wed 23 Sep 2026 06:00:45 +0000 Files and hashes: 1: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=) 2: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: DQX+CYxLRJrNlXRfwkby0SELCWqAe6jIPMnDyEtzQ5k=) 4: M3d-ndtS-EWKNtc6mJwZhcKWXhE.roa (hash: IX96+0wugdLurSubiSiT1icuKiERC0yGvvvWL4yy+fQ=) 5: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=) 6: WyLq5mdKCW2UGDpdqrK7Xp2HJRc.roa (hash: 3yoswgkDWLABDVLm06inU+3X5NuNCflUQTjxzRiweyM=) 7: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=) 8: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=) 9: h3O572ai_eUifMk-F32TUL7VkXM.roa (hash: 66/7jgHjdxS0pR5qYD6CjCTDfR7QgTTO/qDff+KDDOM=) 10: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=) 11: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=) 12: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=) 13: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 05:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c7:b3:d1:80:e3:96:8a:a6:77:82:02:e5:fc:88:4a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Sep 22 06:00:45 2026 GMT Not After : Sep 23 06:00:45 2026 GMT Subject: CN=0e667bea49cbc1ce9e91f915f1e5ea7e7b1c84ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:12:f4:dd:26:a5:55:87:bd:2a:e1:f4:b4: 66:73:ff:b5:da:2d:d6:6e:0f:05:82:a8:c1:65:6e: 37:23:d5:30:b3:8a:05:12:13:50:99:01:cb:db:e5: 3b:49:ea:9a:05:55:de:cd:2e:36:aa:40:ac:d8:5f: 25:41:82:3c:dc:5e:00:59:61:40:10:46:23:4d:48: b7:a6:c8:4e:74:43:8a:8a:75:38:96:88:0f:63:b1: 30:73:54:22:7a:95:ba:8d:db:a7:68:7c:e3:1e:f5: 78:82:86:97:bf:7c:cc:d1:c0:c4:68:5a:06:5f:ee: fa:fc:88:e8:fb:eb:7e:da:24:1f:d1:46:bd:30:a8: ed:94:86:15:9e:56:56:37:37:f2:0c:23:13:09:b6: d9:49:25:e8:a6:6b:c9:ae:c1:eb:4b:c0:38:ec:73: 45:85:ed:33:90:b1:34:30:75:41:8c:9b:4d:06:52: f0:7c:94:a1:ab:b3:c8:da:6e:56:df:49:c2:8e:bc: 62:fd:7d:1f:78:80:60:c3:ad:a9:c4:62:f6:0c:71: 73:27:ca:de:80:9c:eb:52:2e:37:ea:65:f3:4a:c9: 6c:5f:d0:bc:fa:a5:ae:e7:02:2a:3d:94:f0:19:95: 09:57:d5:c1:8d:84:9f:d4:8e:d3:b1:fd:59:ca:8c: e2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:66:7B:EA:49:CB:C1:CE:9E:91:F9:15:F1:E5:EA:7E:7B:1C:84:BA X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:ca:c6:43:5d:34:91:c9:48:91:de:1d:b3:b9:3d:14:e5:63: 7d:d4:bf:93:9b:01:61:bf:75:fd:e2:f1:0d:63:29:57:eb:f8: fa:23:5c:c7:31:63:fe:fb:70:0c:b2:9b:b6:78:00:77:5d:e7: dd:5e:28:bc:b6:e3:ac:b3:95:af:b9:cf:bd:05:ef:96:17:ee: c2:9e:df:3b:ed:a5:42:fa:b0:76:97:da:c8:a1:55:60:d5:62: 15:22:63:ad:78:9d:48:25:23:d8:ec:aa:81:d5:c4:b9:05:56: f2:a8:ec:08:eb:73:f1:35:d4:f5:a5:55:be:98:30:91:a1:71: 1c:bc:f6:ed:bb:58:b2:95:e8:8a:e5:f4:4f:49:fc:67:7d:8f: cb:f0:99:e6:d5:69:4d:d9:a6:25:19:f9:75:a0:63:73:81:bf: ca:c7:9e:75:1d:c2:4c:9d:e9:60:63:83:1b:c6:ba:cf:63:96: 92:34:1c:61:ac:f2:88:0a:56:d4:ad:38:40:3a:af:1f:bc:53: ec:2b:0e:51:e8:8d:08:65:63:95:ec:74:43:e3:36:b3:c1:36: ad:cd:78:26:81:1f:7d:c4:30:3d:50:64:ce:36:1e:ac:a9:2f: cb:64:2f:8d:9f:47:d0:c4:6c:30:d0:a9:9e:6b:a9:95:19:f9: 0f:eb:13:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDHs9GA45aKpneCAuX8iEpHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwOTIyMDYwMDQ1WhcNMjYwOTIzMDYwMDQ1WjAzMTEwLwYDVQQD EygwZTY2N2JlYTQ5Y2JjMWNlOWU5MWY5MTVmMWU1ZWE3ZTdiMWM4NGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygkS9N0mpVWHvSrh9LRmc/+12i3W bg8FgqjBZW43I9Uws4oFEhNQmQHL2+U7SeqaBVXezS42qkCs2F8lQYI83F4AWWFA EEYjTUi3pshOdEOKinU4logPY7Ewc1QiepW6jdunaHzjHvV4goaXv3zM0cDEaFoG X+76/Ijo++t+2iQf0Ua9MKjtlIYVnlZWNzfyDCMTCbbZSSXopmvJrsHrS8A47HNF he0zkLE0MHVBjJtNBlLwfJShq7PI2m5W30nCjrxi/X0feIBgw62pxGL2DHFzJ8re gJzrUi436mXzSslsX9C8+qWu5wIqPZTwGZUJV9XBjYSf1I7Tsf1ZyoziawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5me+pJy8HOnpH5FfHl6n57HIS6MB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8rGQ100 kclIkd4ds7k9FOVjfdS/k5sBYb91/eLxDWMpV+v4+iNcxzFj/vtwDLKbtngAd13n 3V4ovLbjrLOVr7nPvQXvlhfuwp7fO+2lQvqwdpfayKFVYNViFSJjrXidSCUj2Oyq gdXEuQVW8qjsCOtz8TXU9aVVvpgwkaFxHLz27btYspXoiuX0T0n8Z32Py/CZ5tVp TdmmJRn5daBjc4G/yseedR3CTJ3pYGODG8a6z2OWkjQcYazyiApW1K04QDqvH7xT 7CsOUeiNCGVjlex0Q+M2s8E2rc14JoEffcQwPVBkzjYerKkvy2QvjZ9H0MRsMNCp nmuplRn5D+sTlw== -----END CERTIFICATE-----Generated at Tue Sep 22 12:54:15 2026 by rpki-client