$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json) Hash identifier: 2xktQgHQv7b5l0kEXC9Q2SSW3Txi0nvltORZ6d9VbJI= Subject key identifier: F6:FE:8D:FE:93:39:A2:D1:FF:5B:CA:13:90:43:C1:9A:D8:5D:2D:FA Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 01A0BF559454E55B487E34410F21D10E6885 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft Manifest number: 0323 Signing time: Sun 20 Sep 2026 15:00:51 +0000 Manifest this update: Sun 20 Sep 2026 15:00:51 +0000 Manifest next update: Mon 21 Sep 2026 15:00:51 +0000 Files and hashes: 1: 5bgXaKN4hNNnz1DSnp5RelfVjjU.roa (hash: dYGhF0WHwXTYiuMBvgCo0Nh2zgJTOeCE4oHJREko2dE=) 2: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (hash: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE=) 3: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (hash: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8=) 4: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (hash: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY=) 5: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (hash: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0=) 6: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (hash: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw=) 7: Uv6m5Ze8bGG3Zo-jWPLZit_cFAU.roa (hash: jJYA/CveQeDzpZWlaXQqIIF2Ui2N++3iqqXHakxy7Dw=) 8: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (hash: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE=) 9: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (hash: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4=) 10: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (hash: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c=) 11: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: CZT665VUNVhSdtadyO45hZkOXoGZueOSJkXCenIJPkU=) 12: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (hash: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0=) 13: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (hash: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:55:94:54:e5:5b:48:7e:34:41:0f:21:d1:0e:68:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Sep 20 15:00:51 2026 GMT Not After : Sep 21 15:00:51 2026 GMT Subject: CN=f6fe8dfe9339a2d1ff5bca139043c19ad85d2dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:bd:9f:da:5e:ae:0d:d1:fd:d0:a2:e3:bc:47: ab:86:fc:81:f9:a7:51:44:2a:31:38:58:4f:81:23: 79:c4:bf:e8:a0:78:c6:15:e1:d7:55:69:9f:c2:26: dc:54:54:b2:f6:6f:71:0b:c7:e7:1b:40:d0:b0:fe: 08:bc:83:08:5c:af:4b:52:85:92:29:5b:4c:f9:91: eb:89:2a:ee:95:8d:19:d0:56:83:3f:a1:e2:ea:fd: 7f:24:a3:67:12:d6:ac:e9:3b:ff:33:b4:bf:af:aa: dc:47:1e:bc:83:cf:36:dd:2e:3b:c9:db:7e:3e:11: 8d:df:6e:19:9a:e4:8e:45:59:90:d6:7a:67:f0:1b: 68:b4:2d:14:bf:06:14:66:1d:20:a8:df:ae:06:d6: 87:01:14:d9:00:ed:13:06:22:c4:72:ff:78:c5:5d: da:3a:51:f5:b2:01:b6:6b:bf:7b:10:ba:f4:ea:77: 4f:7d:37:74:c3:e6:e1:c4:8a:01:d8:59:9a:d6:4a: e0:41:aa:f3:55:18:c2:bd:21:61:3c:6e:f6:6a:b6: 18:fb:fe:73:73:70:f7:bd:4b:fc:71:7f:c7:6d:fe: 2a:30:15:6a:09:44:64:a8:b4:8d:8f:09:1d:24:c3: e9:f4:2a:91:db:b3:21:4e:79:c7:d4:c1:05:db:36: f2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FE:8D:FE:93:39:A2:D1:FF:5B:CA:13:90:43:C1:9A:D8:5D:2D:FA X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:f6:d6:f5:c2:4c:77:a3:83:ad:b3:8c:34:b3:cc:96:bf:a0: d9:84:42:6a:f0:7e:5c:73:da:ce:a8:c7:b2:9c:17:e8:5c:92: 6c:9e:d5:48:82:99:bf:f2:9f:fa:b0:71:d7:8f:b5:7f:8d:31: 49:ec:04:f7:b5:1f:9d:eb:e6:16:b1:3d:f0:24:dd:ea:3a:c9: 73:91:76:08:69:25:32:5f:3b:f2:3d:22:5d:b5:d2:d6:3f:82: a3:bd:d8:ea:67:72:8c:13:28:b0:3d:c8:3c:08:af:44:75:0b: 90:7f:ff:0a:34:54:aa:92:72:05:fc:0b:c1:3f:ed:18:d4:74: a6:7b:ed:e3:bb:fb:ee:27:9d:be:26:52:ae:01:d6:d3:70:19: e5:8e:9a:4f:8e:e9:d3:03:39:cf:ba:f3:cc:d5:ac:0e:0b:88: 8e:a7:59:c9:0d:c1:3f:d2:a2:95:9b:55:0b:04:83:e6:5a:da: 31:5a:12:22:4f:a3:53:34:17:08:e8:06:dc:e8:c2:0d:f7:9c: 66:8f:15:8c:29:53:bb:6b:fb:ae:d2:e3:66:3b:ca:4a:10:57: 4c:aa:b7:20:5f:d2:a7:da:34:a0:65:36:1c:7e:5b:a9:e3:0a: 80:87:60:d2:84:89:0a:36:e5:9d:f3:46:53:ae:d0:a2:7d:9d: dc:f4:bf:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/VZRU5VtIfjRBDyHRDmiFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwOTIwMTUwMDUxWhcNMjYwOTIxMTUwMDUxWjAzMTEwLwYDVQQD EyhmNmZlOGRmZTkzMzlhMmQxZmY1YmNhMTM5MDQzYzE5YWQ4NWQyZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7L2f2l6uDdH90KLjvEerhvyB+adR RCoxOFhPgSN5xL/ooHjGFeHXVWmfwibcVFSy9m9xC8fnG0DQsP4IvIMIXK9LUoWS KVtM+ZHriSrulY0Z0FaDP6Hi6v1/JKNnEtas6Tv/M7S/r6rcRx68g8823S47ydt+ PhGN324ZmuSORVmQ1npn8BtotC0UvwYUZh0gqN+uBtaHARTZAO0TBiLEcv94xV3a OlH1sgG2a797ELr06ndPfTd0w+bhxIoB2Fma1krgQarzVRjCvSFhPG72arYY+/5z c3D3vUv8cX/Hbf4qMBVqCURkqLSNjwkdJMPp9CqR27MhTnnH1MEF2zbyrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPb+jf6TOaLR/1vKE5BDwZrYXS36MB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/bW9cJM d6ODrbOMNLPMlr+g2YRCavB+XHPazqjHspwX6FySbJ7VSIKZv/Kf+rBx14+1f40x SewE97UfnevmFrE98CTd6jrJc5F2CGklMl878j0iXbXS1j+Co73Y6mdyjBMosD3I PAivRHULkH//CjRUqpJyBfwLwT/tGNR0pnvt47v77iedviZSrgHW03AZ5Y6aT47p 0wM5z7rzzNWsDguIjqdZyQ3BP9KilZtVCwSD5lraMVoSIk+jUzQXCOgG3OjCDfec Zo8VjClTu2v7rtLjZjvKShBXTKq3IF/Sp9o0oGU2HH5bqeMKgIdg0oSJCjblnfNG U67Qon2d3PS/EA== -----END CERTIFICATE-----Generated at Sun Sep 20 18:15:02 2026 by rpki-client