$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json) Hash identifier: AuB6/Kq5l/OowJD1od1eqUncr32TB8+FukQHhQsvIe0= Subject key identifier: B2:14:89:27:A0:C2:E5:1B:2E:04:DF:4D:2C:8F:FA:54:F5:0A:C8:1A Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 01A0BC540954CC6518E75A440C481B92FC91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft Manifest number: 1656 Signing time: Sun 20 Sep 2026 01:00:18 +0000 Manifest this update: Sun 20 Sep 2026 01:00:18 +0000 Manifest next update: Mon 21 Sep 2026 01:00:18 +0000 Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: 4+8w+gUZFnRYMMqb4rLElwKORF293MNszxk8fNOYsBw=) 2: 3SoEwaHYmzBhPq3SqrK7-97FxfY.asa (hash: DUPJ+1lMqiRx5QPupK6EYyCTyvEki+rd8cq0JTEqc4k=) 3: 4dRn2JrP2QCTAWF-YiqGTdGG-aY.asa (hash: 5OSvsuPPRn9OvkRvh/NzOUAFS7gn9Nx/H8X3BJxRZYE=) 4: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=) 5: KJiyDl7iQPSHbczb71sauO3rVJk.asa (hash: xzLdynVvAziPI6SDyPFLHYP7bi2ATNLAOqyCRqeT3is=) 6: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=) 7: M8G0hHzNaUEBYlJ18I-LLmZFBKM.asa (hash: 1CwhbIx2C5nHDxmbbu2xhBW2STO+MmyMS7p2LGmo9hk=) 8: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=) 9: T5M14oqasE4RWqdrD07qXbN8eGY.asa (hash: OCqN8M2KvS/h05iREDnHi+l1MPqvKGu7Rk6ZjCf3xcE=) 10: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=) 11: XHeb1AmUfX1kngDYx7cK3_EIu7Q.asa (hash: y1sVzdki0bbI48xSY39Q5D3JsNtDyY7oJ/qahJmputE=) 12: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=) 13: id-lxRpZAXWjSQIYTHcFpR-BOiA.roa (hash: DJLygWwBzeOc6zwCMgS/e3psiWC9iHIdC8QxaCCmABU=) 14: mwjxtKPuHdDhkzcGADt1aiLxCIc.asa (hash: Wy5bjzVJWOG5tUKCM7dwY8G4WJIDxlDcCw2Ld4jrHPw=) 15: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=) 16: vEGsYuYY06TvYutYs-QyPdXXq4Q.roa (hash: UCMk3rT/wVrhtk6MMSMiEAtXXbsHSrVjnWedze014rg=) 17: xVaYIBw7M6bRv3MOmzyAcV4by3I.asa (hash: PgzXvKG2TR216H34m8dFRwASPrUVU9Y5qcUdR1XkLTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 01:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bc:54:09:54:cc:65:18:e7:5a:44:0c:48:1b:92:fc:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: Sep 20 01:00:18 2026 GMT Not After : Sep 21 01:00:18 2026 GMT Subject: CN=b2148927a0c2e51b2e04df4d2c8ffa54f50ac81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:2f:f9:4c:36:31:60:7b:84:90:fb:02:55: 1c:cc:15:06:ac:99:4b:a9:a7:f2:55:ff:d6:d8:c6: 4f:48:ab:c6:29:6b:d2:2e:9d:93:d9:ad:2a:22:7f: b6:d9:c0:d5:71:cd:f8:c3:5a:99:fb:9e:0a:97:76: 54:74:21:6c:35:44:e2:4f:3f:8f:07:c3:61:bf:92: c9:0a:9a:cc:cb:56:d5:ee:f9:ba:40:86:cd:e1:92: 1e:d1:54:0e:6f:fb:21:92:bf:c7:a4:5c:50:2e:f9: ab:db:5e:c5:7f:b7:db:e4:08:f7:2a:b4:7d:fb:61: e9:4f:8a:81:f8:c5:9d:c3:c9:81:94:56:1d:85:ab: fc:55:9e:bf:6a:84:08:18:2f:28:f6:d5:3a:61:f6: c5:e3:2c:d4:6b:0f:bb:ff:1a:14:94:6c:fb:8d:82: 43:49:7b:2c:73:38:ad:8c:27:d4:bf:35:65:4a:fc: 52:7a:a3:cb:f5:aa:d0:be:78:72:cf:42:18:ed:c6: de:3c:4f:21:7c:a5:11:e4:c6:f3:2a:2b:bc:26:c0: dc:65:ac:ed:2a:59:40:a4:1a:d0:ca:fd:77:8d:a0: ec:c5:b3:c9:58:45:65:df:b4:95:97:0b:fc:61:c1: 7c:70:cd:f1:f0:49:dd:70:86:69:f3:ea:bd:48:b7: e0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:14:89:27:A0:C2:E5:1B:2E:04:DF:4D:2C:8F:FA:54:F5:0A:C8:1A X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a9:5f:5d:96:9e:a3:51:87:e7:21:e6:e4:f9:4c:c3:cd:99: b9:20:ca:14:d1:7b:6f:7d:32:a1:bf:b0:f3:80:a0:a2:13:5e: cd:45:00:fa:c9:a9:20:4c:00:eb:23:2c:8a:55:a5:d9:ae:f0: 8e:db:5f:f3:2e:da:af:de:3e:a3:2d:73:10:e8:b6:13:18:d9: cf:e7:16:73:56:ca:7e:d0:54:02:ea:86:1d:d8:59:8b:36:04: 02:bc:d1:19:f2:fa:d3:88:1d:ea:28:ba:04:70:8b:de:15:9d: a9:46:31:b9:28:ba:f8:4f:62:eb:a8:40:8d:ba:97:7f:7e:9f: fe:0a:ea:0c:3f:2d:8c:b9:21:1e:b2:f0:29:24:67:8e:dc:9a: 41:fe:df:07:dd:f7:cd:52:c1:d9:91:35:f3:5f:33:ad:56:b8: b4:cd:7a:a8:8c:19:04:f1:25:3b:fe:54:a7:4e:5e:bc:b6:6e: 1a:9c:f5:58:8d:fb:21:41:9b:08:de:2e:53:f2:76:d8:84:3b: 86:aa:7a:ad:35:67:48:0f:dc:4a:be:8c:6a:c6:90:98:1e:9e: fa:13:8e:59:ce:18:d7:28:da:96:97:8d:99:28:07:b8:f1:d5: 38:21:0f:e0:97:9d:15:f4:95:a4:62:e0:39:31:d1:9a:db:66: d3:4d:86:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC8VAlUzGUY51pEDEgbkvyRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjYwOTIwMDEwMDE4WhcNMjYwOTIxMDEwMDE4WjAzMTEwLwYDVQQD EyhiMjE0ODkyN2EwYzJlNTFiMmUwNGRmNGQyYzhmZmE1NGY1MGFjODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfwv+Uw2MWB7hJD7AlUczBUGrJlL qafyVf/W2MZPSKvGKWvSLp2T2a0qIn+22cDVcc34w1qZ+54Kl3ZUdCFsNUTiTz+P B8Nhv5LJCprMy1bV7vm6QIbN4ZIe0VQOb/shkr/HpFxQLvmr217Ff7fb5Aj3KrR9 +2HpT4qB+MWdw8mBlFYdhav8VZ6/aoQIGC8o9tU6YfbF4yzUaw+7/xoUlGz7jYJD SXssczitjCfUvzVlSvxSeqPL9arQvnhyz0IY7cbePE8hfKUR5MbzKiu8JsDcZazt KllApBrQyv13jaDsxbPJWEVl37SVlwv8YcF8cM3x8EndcIZp8+q9SLfg4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIUiSegwuUbLgTfTSyP+lT1CsgaMB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKlfXZae o1GH5yHm5PlMw82ZuSDKFNF7b30yob+w84CgohNezUUA+smpIEwA6yMsilWl2a7w jttf8y7ar94+oy1zEOi2ExjZz+cWc1bKftBUAuqGHdhZizYEArzRGfL604gd6ii6 BHCL3hWdqUYxuSi6+E9i66hAjbqXf36f/grqDD8tjLkhHrLwKSRnjtyaQf7fB933 zVLB2ZE1818zrVa4tM16qIwZBPElO/5Up05evLZuGpz1WI37IUGbCN4uU/J22IQ7 hqp6rTVnSA/cSr6MasaQmB6e+hOOWc4Y1yjalpeNmSgHuPHVOCEP4JedFfSVpGLg OTHRmttm002Gjg== -----END CERTIFICATE-----Generated at Sun Sep 20 12:47:15 2026 by rpki-client