$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: uJPsSeSjiiRRbsH+D/8jWNDHfKjtKZhkGrMWVaiEOV8= Subject key identifier: 68:12:AD:67:95:62:16:27:68:6D:E2:98:7D:B2:40:36:B9:1D:39:A9 Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 01A0C8583B7E6C2A15C4CEC81F15830290D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 1A86 Signing time: Tue 22 Sep 2026 09:00:20 +0000 Manifest this update: Tue 22 Sep 2026 09:00:20 +0000 Manifest next update: Wed 23 Sep 2026 09:00:20 +0000 Files and hashes: 1: A0jJG1saLwhFpwXvphN5KLkIp7E.roa (hash: zfUzOQxZDjIQpzcBLbTZxhWmdADgguB1bEK9a5hzld0=) 2: BHJrH90HA7e2j36fHZGtluntvoI.roa (hash: Y13mf0+6dWn2wsiZuzG7gygvh4nWO0T3oCMxSoXnKls=) 3: I3Qz77k2oYxzlmKadcI15VK2Xho.roa (hash: rl1+7VSSJCLWAX7YF+ZUOE9VZc/4GpcEkb9o7QBoLJw=) 4: IUNo-G5ABIhSuSWdeiVCc3h9D4A.roa (hash: LzcrEnLFMAnlZ+5zqbHv6+pvv/Iv59lNp1OzlwME3F8=) 5: Pwm-W2XqZjbGSCW1vqwh0IMaZZc.roa (hash: MOGwB7iZKu1QkN/hiCIWIk9cs+bF15Y23HgeypcVdhw=) 6: _4I_-jCH3XR23JxHVWzlSOPi3_M.roa (hash: tqFTpY9AJoIMPhinhdWGv8n5l6XDT7XH/JbG8DY2pa4=) 7: kz88XGl4i-o90qHpgWaNT6qB9F4.roa (hash: iFw0bXeL0s+Rwtq0iRLlZLd1+3x1hxhmoVT6WC3MudE=) 8: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: kF+yuWHM9At1zVSOeRhKdqQGIXnLAGKiv3R2qrMWi0s=) 9: sqmM075pYoIhRN4MwnW9o487rF8.roa (hash: I1CZglIvCm1ewemqOSJLikUmJGVYj4wQzxEvNc+9woA=) 10: vCq8VVeEIofiFQLrkv4khGyN3iM.roa (hash: +sZQ4wGcyHE3djaR6nEoYJEVQLBZat/sIPQiTRwtVBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 05:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:58:3b:7e:6c:2a:15:c4:ce:c8:1f:15:83:02:90:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Sep 22 09:00:20 2026 GMT Not After : Sep 23 09:00:20 2026 GMT Subject: CN=6812ad6795621627686de2987db24036b91d39a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:08:03:11:ce:80:b0:7b:93:e3:3a:dc:b9:9f: 0a:17:b5:01:c4:de:35:ad:39:40:64:39:56:db:50: 31:79:62:c0:51:3a:d3:02:7a:f1:5d:e7:ee:44:6f: 7d:8e:08:82:91:6a:94:2c:8c:e1:65:72:e0:fd:4e: 37:02:a9:c2:13:04:0d:32:6a:6c:38:43:35:1f:dc: 13:f8:7f:a8:c0:a1:89:2f:1b:c6:14:9e:46:03:3c: 45:be:af:7e:93:60:d7:e0:14:f3:c2:be:16:05:8d: e6:23:af:76:b8:85:8c:dc:2c:d7:3b:03:38:f6:1b: c3:ed:4b:1a:b9:e0:55:10:e6:2e:03:b9:b9:1c:df: 67:c5:94:a3:64:ac:30:5e:f1:60:ef:8c:20:5b:54: 58:15:02:1a:17:cf:d7:0c:f6:06:dd:ed:6c:26:9c: 68:9c:4f:49:3c:30:4c:80:19:d2:17:d5:84:bf:6c: 97:e3:e1:31:c0:39:53:3e:83:7e:d9:e5:5e:59:b6: cf:d5:78:30:ac:2a:cc:59:fd:94:fd:3c:53:ea:ea: e2:01:aa:fe:f2:f8:4e:8e:7f:4f:d5:2c:51:c3:25: db:42:00:d0:b1:d5:02:0e:00:16:c4:d4:19:3e:9d: c5:8f:39:4c:07:52:02:bc:04:cc:18:78:fe:10:e6: a4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:12:AD:67:95:62:16:27:68:6D:E2:98:7D:B2:40:36:B9:1D:39:A9 X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:4a:d6:29:82:0d:5e:aa:c3:0b:6d:fb:f7:8b:fd:ff:88:4c: 85:ad:78:67:de:db:8d:dc:2a:bc:6b:5d:fd:b5:9e:f7:fd:de: f9:ca:62:72:f5:2c:a4:c0:55:2b:6a:74:36:ca:61:41:2f:80: ab:7f:c2:f3:00:7a:38:0c:03:e3:24:6c:de:5f:3a:3c:a8:5c: d2:ac:f2:e1:7c:f8:16:fa:06:8b:89:d2:58:9a:4d:07:87:19: c6:14:f1:4d:aa:16:63:97:94:4c:94:bd:fd:82:f5:c1:ed:95: 6b:5a:c0:65:0d:7b:25:95:a7:36:ed:d8:c4:ca:99:4f:fa:da: 62:8f:42:01:61:26:6e:38:04:87:67:6e:07:9b:da:8e:0c:b4: d0:b3:54:9b:03:78:74:10:14:5e:8b:08:32:8a:da:59:34:2b: 38:63:d2:7b:46:a8:ba:7b:a0:2b:b2:e8:8a:b4:42:d2:97:ba: 68:dc:11:f6:83:f7:c2:02:e5:ce:5d:1e:fb:fd:1f:d3:ab:2f: fb:8d:aa:f4:2d:5c:01:0e:c3:1d:54:eb:a2:0d:ad:6d:e1:f2: 58:cc:5a:49:33:9a:27:03:46:a8:32:02:41:ba:92:c5:cd:9f: c9:c3:4d:cc:36:a6:95:d4:d4:53:6a:93:25:b9:d0:1b:cd:53: 21:35:ce:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDIWDt+bCoVxM7IHxWDApDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjYwOTIyMDkwMDIwWhcNMjYwOTIzMDkwMDIwWjAzMTEwLwYDVQQD Eyg2ODEyYWQ2Nzk1NjIxNjI3Njg2ZGUyOTg3ZGIyNDAzNmI5MWQzOWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAgDEc6AsHuT4zrcuZ8KF7UBxN41 rTlAZDlW21AxeWLAUTrTAnrxXefuRG99jgiCkWqULIzhZXLg/U43AqnCEwQNMmps OEM1H9wT+H+owKGJLxvGFJ5GAzxFvq9+k2DX4BTzwr4WBY3mI692uIWM3CzXOwM4 9hvD7UsaueBVEOYuA7m5HN9nxZSjZKwwXvFg74wgW1RYFQIaF8/XDPYG3e1sJpxo nE9JPDBMgBnSF9WEv2yX4+ExwDlTPoN+2eVeWbbP1XgwrCrMWf2U/TxT6uriAar+ 8vhOjn9P1SxRwyXbQgDQsdUCDgAWxNQZPp3FjzlMB1ICvATMGHj+EOakAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgSrWeVYhYnaG3imH2yQDa5HTmpMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkrWKYIN XqrDC23794v9/4hMha14Z97bjdwqvGtd/bWe9/3e+cpicvUspMBVK2p0NsphQS+A q3/C8wB6OAwD4yRs3l86PKhc0qzy4Xz4FvoGi4nSWJpNB4cZxhTxTaoWY5eUTJS9 /YL1we2Va1rAZQ17JZWnNu3YxMqZT/raYo9CAWEmbjgEh2duB5vajgy00LNUmwN4 dBAUXosIMoraWTQrOGPSe0aounugK7LoirRC0pe6aNwR9oP3wgLlzl0e+/0f06sv +42q9C1cAQ7DHVTrog2tbeHyWMxaSTOaJwNGqDICQbqSxc2fycNNzDamldTUU2qT JbnQG81TITXOiw== -----END CERTIFICATE-----Generated at Tue Sep 22 13:36:53 2026 by rpki-client