$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: 3a2rd+Oji+Yh4WwHxcjtJD43qyrPQtAUdJccLbSEkl4= Subject key identifier: 05:2F:BB:0A:93:74:72:0F:FC:10:C3:32:F4:D8:30:49:31:AD:70:83 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 01A0BDD4624A2925B42A1422001630C2D278 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 1658 Signing time: Sun 20 Sep 2026 08:00:07 +0000 Manifest this update: Sun 20 Sep 2026 08:00:07 +0000 Manifest next update: Mon 21 Sep 2026 08:00:07 +0000 Files and hashes: 1: 1_FG2YBqdRhKKIdbfUoaXRIcZtY.roa (hash: DZwW0dAX0l87sLjk9z+qjZR2gAmIuChfWqvnjdJSHpE=) 2: ExLhkVGO_IcP9FKIq81f0oI-oCg.roa (hash: 5HCccmMIa3ZS3Rm7UZ7dWL9/99iZ3k4KgXviDu7U84Y=) 3: H6mXElUtGqkaAjyOWeq60UIxFTg.roa (hash: w/TMQtz3h82vi+GWHVA7q+rO8Depf0bjlxba/vl6eeg=) 4: OwOin32AoXhBJ_iuSSZtdUpdHEA.roa (hash: r6AonYcdKDjFrDRqsif54MlJGphnOtEytVNCx0qvCio=) 5: SCLX0yMUDK_0tO4v6NxcoovzWj8.roa (hash: 9dBLmpKDLrwgh9sSkk5HAo/xRWDF0x1027A7nhDZK08=) 6: U2zR2wxNZR-C_elTQ_PCnfByBwY.roa (hash: OLi955MoAoQc7KvGiHIZSl5vpca4xWCeVTWNOe8m2YI=) 7: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: NYB8aHdHTLC5vmbSD5D2Cb0VmHPSVFy8LHhPbQTyOmQ=) 8: c-5WHUGe7Cokv7tp6uqgS70r8Ic.roa (hash: DoQj2C6sdy5dVILWLV9HA8ZssSHksnBbLRNoxs++EvU=) 9: eHu3rtcXjdq31CwIQ4nx7nvhB2A.roa (hash: eqAtKP8l84cvF2pEaSF30rGhGOuNYfoTW/MjLLS2XHU=) 10: jI-hqwxak8Tg6ancnuy3V90l4fQ.roa (hash: SFQVGGwwzufvH2Q6e3Xanl+xEEo+gFMHtCdjrjGcZV4=) 11: k5tcy3X-bfkTgY-KuojhW38Hb84.roa (hash: /njehwBJ3hy+S6rVtCdBk1btpc3S6jZQpXCGPHURc0Y=) 12: nqJ6Q3D61md2LC4-yJPH7bUWU4A.roa (hash: sLTLPurFLTwE8YAq+DTkGVZv2q4SAYzP5ZK8/ib+u2M=) 13: omuRSlN3uxDC5Q-fxRiwTPk66HM.roa (hash: GxwNrXChKZTEhS9UT+A6aKihcuWe4QoSUJOCbKFbnmw=) 14: ova4DZPGmvsGGPiVCauJt7d6bFk.roa (hash: FJLqImsR5CthuAk7jPWHhT6Jl73gBfGj24WDFfNiWgI=) 15: woLmD7M3XCh8hzd96HJkdchNmr0.roa (hash: IO6F5iDxJpzGWBZGaFRUP1UT9NVbjAY85NrP45yAAgA=) 16: zEU1dCR-4rlXlEW4u-atk395zhk.roa (hash: Kfvh6mjf8zMx7Jx8eSoWtHWYqopwifCIKWlHo0qGGIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bd:d4:62:4a:29:25:b4:2a:14:22:00:16:30:c2:d2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Sep 20 08:00:07 2026 GMT Not After : Sep 21 08:00:07 2026 GMT Subject: CN=052fbb0a9374720ffc10c332f4d8304931ad7083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:31:ca:de:a0:71:a6:e6:41:97:ad:72:16:eb: ee:12:c5:04:5d:ac:82:1e:7e:e7:78:00:1a:80:de: cd:8c:5e:bd:fd:ea:a1:dd:04:6b:12:b6:37:b3:7d: ca:d0:55:f0:74:a1:3e:b4:e2:7b:1d:4f:1a:70:d1: f9:f9:46:3e:78:c1:b9:3b:a1:8a:3e:3f:81:e2:21: 21:90:03:db:71:57:46:8e:0b:1f:ae:9d:a0:59:be: b2:37:a7:09:a0:3e:39:b1:ac:80:ca:22:00:cb:1f: 9e:47:47:a7:d9:75:ac:db:40:21:8a:a9:15:32:df: 8f:f1:9b:5d:d5:eb:ba:1a:9f:3a:45:c9:b3:09:28: 8c:2f:2e:b4:a4:30:37:da:29:75:95:cb:e3:39:06: 7f:e6:28:85:ee:0d:05:0f:c3:63:89:a4:d7:2f:10: 1c:0e:c0:ec:e9:69:28:b4:df:17:cb:60:f8:7c:a1: 49:d7:24:07:c1:de:66:f3:a2:90:49:76:8b:df:d9: dd:7a:ff:45:5f:59:cb:19:95:a8:da:5c:c8:76:6e: c2:69:07:28:64:67:f7:c5:bd:7a:83:da:23:2c:4f: de:5f:e8:be:f7:40:30:5b:65:cc:d0:c0:72:67:20: ef:4c:c2:f4:d9:35:10:8b:dd:be:7a:fa:e1:41:51: 70:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2F:BB:0A:93:74:72:0F:FC:10:C3:32:F4:D8:30:49:31:AD:70:83 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f0:34:39:17:1b:e0:97:f5:a6:86:8a:98:1f:37:59:93:da: 55:ef:4f:26:6e:62:4f:c4:1f:26:6b:03:fe:ab:3d:86:db:d4: 8c:a3:2d:c9:83:1d:44:00:ca:7e:45:21:51:34:20:c2:b5:c9: ba:c0:ac:9f:71:70:4d:88:16:96:87:06:d4:16:1e:8b:46:4b: d8:6f:85:d7:f2:0d:e6:4e:3c:a7:cf:c7:c1:08:5e:61:28:0b: 7b:26:9a:92:e1:90:4c:b5:d8:96:01:d3:47:dc:47:15:cf:17: 6b:23:2e:04:b0:1f:81:75:a4:2d:0c:3a:72:99:ee:ab:ba:da: c7:61:79:e8:4f:28:db:a0:5f:e4:12:bb:d3:b7:a4:43:25:74: ef:81:e4:80:e4:f9:e9:b7:36:41:a4:49:b8:00:e7:25:d9:41: 69:6e:35:17:34:78:66:25:9f:f8:33:cf:66:fb:cd:07:74:22: 9b:51:e5:6f:eb:69:7d:d0:04:59:27:98:e7:b7:ec:26:0f:f7: cb:83:ec:2a:36:85:09:5e:ed:11:f3:a0:97:f3:bf:54:a9:79: 6e:52:03:bc:f8:8a:0a:7c:d3:a6:ef:8c:75:ae:21:74:b1:b5: a7:ea:da:52:df:9f:42:79:13:db:a9:bd:2e:19:f4:73:cc:0d: e2:3f:02:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC91GJKKSW0KhQiABYwwtJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjYwOTIwMDgwMDA3WhcNMjYwOTIxMDgwMDA3WjAzMTEwLwYDVQQD EygwNTJmYmIwYTkzNzQ3MjBmZmMxMGMzMzJmNGQ4MzA0OTMxYWQ3MDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjHK3qBxpuZBl61yFuvuEsUEXayC Hn7neAAagN7NjF69/eqh3QRrErY3s33K0FXwdKE+tOJ7HU8acNH5+UY+eMG5O6GK Pj+B4iEhkAPbcVdGjgsfrp2gWb6yN6cJoD45sayAyiIAyx+eR0en2XWs20AhiqkV Mt+P8Ztd1eu6Gp86RcmzCSiMLy60pDA32il1lcvjOQZ/5iiF7g0FD8NjiaTXLxAc DsDs6WkotN8Xy2D4fKFJ1yQHwd5m86KQSXaL39ndev9FX1nLGZWo2lzIdm7CaQco ZGf3xb16g9ojLE/eX+i+90AwW2XM0MByZyDvTML02TUQi92+evrhQVFwxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUvuwqTdHIP/BDDMvTYMEkxrXCDMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnPA0ORcb 4Jf1poaKmB83WZPaVe9PJm5iT8QfJmsD/qs9htvUjKMtyYMdRADKfkUhUTQgwrXJ usCsn3FwTYgWlocG1BYei0ZL2G+F1/IN5k48p8/HwQheYSgLeyaakuGQTLXYlgHT R9xHFc8XayMuBLAfgXWkLQw6cpnuq7rax2F56E8o26Bf5BK707ekQyV074HkgOT5 6bc2QaRJuADnJdlBaW41FzR4ZiWf+DPPZvvNB3Qim1Hlb+tpfdAEWSeY57fsJg/3 y4PsKjaFCV7tEfOgl/O/VKl5blIDvPiKCnzTpu+Mda4hdLG1p+raUt+fQnkT26m9 Lhn0c8wN4j8CNw== -----END CERTIFICATE-----Generated at Sun Sep 20 14:22:14 2026 by rpki-client