$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: rV0P/yrBEmCeQMAE1+ITXlo77/tYcDz6TRDzudqz3nY= Subject key identifier: 46:54:51:E4:C5:A6:D8:0C:16:8D:AA:4F:99:8F:DB:DA:CE:37:D3:A5 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 01A0CC6BD6F577F1F1FE60D91BEC007A360D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 166E Signing time: Wed 23 Sep 2026 04:00:14 +0000 Manifest this update: Wed 23 Sep 2026 04:00:14 +0000 Manifest next update: Thu 24 Sep 2026 04:00:14 +0000 Files and hashes: 1: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 2: G_q5f4vw9sXuTqx5koUR1CtdghA.roa (hash: /DXlK/XppxG3EnWKLZh5jMXkLtlLrmR+JVAULY2Fmuw=) 3: Kh4_VoB6YEgaSwRCsMKIhi6qzp4.roa (hash: e0GnvRoQCozfmziXi7HSJRfK79f9SZF+NnjU+2fBto0=) 4: VbMi_wHP2Osb2Lj2_Em7nJaGNqg.roa (hash: DXcUvI/zDgzBNbnxDQ9BXaRP7H2Z8Bv9bfXDaGGxiyQ=) 5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 8: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 9: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 10: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 11: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 12: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 13: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: QoN9fZfbreMOOCo3OwZbNSqvlVDDerZXzVJ4rXlGT4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 04:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cc:6b:d6:f5:77:f1:f1:fe:60:d9:1b:ec:00:7a:36:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Sep 23 04:00:14 2026 GMT Not After : Sep 24 04:00:14 2026 GMT Subject: CN=465451e4c5a6d80c168daa4f998fdbdace37d3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a3:84:b9:6e:09:88:d4:1d:eb:7f:ab:48:e0: c7:25:0e:1c:d8:22:20:79:10:cd:33:25:eb:43:8e: 57:b6:c6:fc:05:15:84:8a:26:af:c3:7c:ec:de:5e: e3:e7:ce:db:1c:4a:5a:35:7d:f6:6c:ec:f0:19:0c: dc:57:25:94:73:c9:d2:98:83:7b:94:36:95:38:5d: 3c:8c:c6:3d:42:e6:04:8b:7b:ee:91:57:a5:dd:26: fd:4f:a2:1c:0b:ca:46:4a:f3:e0:a2:d0:83:88:fb: 34:da:54:33:93:dd:08:87:55:bb:79:21:1e:87:26: cf:01:80:71:2f:a4:63:2d:81:f0:5f:54:67:55:17: 17:ad:01:f2:a8:e0:a1:3a:76:f3:92:9a:fd:8d:58: e9:fc:2a:cc:bc:d3:f4:ce:a4:ca:81:de:80:a4:83: 27:06:0c:b3:94:18:6f:1a:fb:e4:19:f9:50:64:d4: 37:33:ad:9a:f5:41:fa:1c:28:3c:0e:da:98:17:33: 50:55:57:35:15:17:bf:7c:1f:d1:a0:af:19:90:f3: ac:14:ab:45:8b:03:cc:3c:bc:54:10:4b:6c:3f:97: d6:fb:5f:78:e1:3e:31:54:a5:66:cb:9f:6c:f2:60: 77:50:b8:ea:47:5a:1d:b5:8b:c2:fd:74:37:e1:6f: ab:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:54:51:E4:C5:A6:D8:0C:16:8D:AA:4F:99:8F:DB:DA:CE:37:D3:A5 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2b:25:96:eb:df:b8:13:f0:4a:45:e1:cd:6b:0a:bc:d0:70: 19:18:c6:58:02:1e:c0:2a:99:c8:c2:ae:f1:d8:55:2b:40:c7: 4d:31:6b:a9:b0:55:77:ca:b9:56:e7:02:19:39:48:e9:9b:d3: fd:cc:3f:70:64:c7:9e:40:75:a4:00:f7:b5:d6:7c:5b:d4:63: 49:ad:48:12:0b:be:f6:3b:05:e1:a7:da:22:3f:4a:34:42:85: 49:f0:8c:9c:a3:22:43:80:f0:33:d0:ac:17:47:78:aa:8a:9b: 11:57:b5:89:43:52:42:94:43:c9:61:ee:04:28:4a:51:ec:56: fb:49:d6:1b:2c:67:5d:34:36:e1:eb:cc:db:10:ac:a5:73:88: 80:cf:1f:77:2f:61:e8:85:1f:53:8b:4d:5d:8b:ad:65:57:5c: 37:c5:43:68:8a:5b:ed:6f:99:c2:9e:17:57:99:fe:9b:e3:ee: db:69:2c:80:d1:3c:5e:14:e7:65:25:4f:13:98:3a:3c:0b:b9: 76:7e:13:06:40:af:05:fd:46:dc:d0:ae:a3:da:ff:24:b5:8c: 40:0b:39:54:93:71:53:3f:19:3d:07:0e:56:37:d5:11:7b:36: 8f:4c:f1:8c:34:23:d0:27:07:61:7e:9d:f0:5f:15:99:ec:0a: 7e:f0:a9:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDMa9b1d/Hx/mDZG+wAejYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwOTIzMDQwMDE0WhcNMjYwOTI0MDQwMDE0WjAzMTEwLwYDVQQD Eyg0NjU0NTFlNGM1YTZkODBjMTY4ZGFhNGY5OThmZGJkYWNlMzdkM2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKOEuW4JiNQd63+rSODHJQ4c2CIg eRDNMyXrQ45Xtsb8BRWEiiavw3zs3l7j587bHEpaNX32bOzwGQzcVyWUc8nSmIN7 lDaVOF08jMY9QuYEi3vukVel3Sb9T6IcC8pGSvPgotCDiPs02lQzk90Ih1W7eSEe hybPAYBxL6RjLYHwX1RnVRcXrQHyqOChOnbzkpr9jVjp/CrMvNP0zqTKgd6ApIMn BgyzlBhvGvvkGflQZNQ3M62a9UH6HCg8DtqYFzNQVVc1FRe/fB/RoK8ZkPOsFKtF iwPMPLxUEEtsP5fW+1944T4xVKVmy59s8mB3ULjqR1odtYvC/XQ34W+rjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZUUeTFptgMFo2qT5mP29rON9OlMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCslluvf uBPwSkXhzWsKvNBwGRjGWAIewCqZyMKu8dhVK0DHTTFrqbBVd8q5VucCGTlI6ZvT /cw/cGTHnkB1pAD3tdZ8W9RjSa1IEgu+9jsF4afaIj9KNEKFSfCMnKMiQ4DwM9Cs F0d4qoqbEVe1iUNSQpRDyWHuBChKUexW+0nWGyxnXTQ24evM2xCspXOIgM8fdy9h 6IUfU4tNXYutZVdcN8VDaIpb7W+Zwp4XV5n+m+Pu22ksgNE8XhTnZSVPE5g6PAu5 dn4TBkCvBf1G3NCuo9r/JLWMQAs5VJNxUz8ZPQcOVjfVEXs2j0zxjDQj0CcHYX6d 8F8VmewKfvCpMw== -----END CERTIFICATE-----Generated at Wed Sep 23 11:46:59 2026 by rpki-client