$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json) Hash identifier: sDljhh0LNSWmy0E/SJlOsCWDa1z7Iy1RhPquX8kyAUM= Subject key identifier: 46:BB:95:56:0B:7E:2D:E7:C9:C5:07:D4:0E:72:ED:B5:52:31:74:31 Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 01A0C39FA9EC20CF7871C5F6CFC249C097F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft Manifest number: 0D35 Signing time: Mon 21 Sep 2026 11:00:15 +0000 Manifest this update: Mon 21 Sep 2026 11:00:15 +0000 Manifest next update: Tue 22 Sep 2026 11:00:15 +0000 Files and hashes: 1: 6Qo_0tvV-nF1V3290tyCPcyJh_o.roa (hash: miQhI+W7erQXF0Elh5+jiDUej+PQhWgEiCLyU5iCciM=) 2: 9ookbD4ZU4VY6TDRIjyZKBvmQXI.roa (hash: M/Bs/iLa6unZww6rfQbsSA6jP0n4wnfBywF5HPWrEvA=) 3: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: JcZQl08p+8dFvh21XeqJYkIOYd41vyXOryG3qqAQTxk=) 4: IFrY2kkAzLqt5nU6H0jjg7fOnfs.roa (hash: 3jLeNihZ7jH0KElGLvHndCBcoZfJ8baWrI/MSc9FDOM=) 5: PgdFhXr4B5CibOVMVSzG8VZJbJI.roa (hash: ZVEiyh33egqUEszPE12gddvboVKjJ6wjLhbhT2yy81g=) 6: VwfnUo7iWGrwpmjYLkStkdsJWgc.roa (hash: 0vyTKG4s8Sxb6Vvga9d9VBfQgDaf6QryBCp9P8NqVAk=) 7: Wb0JFSc4Yv8IZMCTo-g4uUkinx4.roa (hash: QbARyoCiF4BxJCcobyg9rCwtMBorp1r1V7vAEHyauzY=) 8: ZdscDi7k3s-l8tQbTqMWAWHs5II.roa (hash: eeoRhg3sdIGOUoadbwJoyONU4sTmK4Oedx1/lFBfwT8=) 9: czKDro5NX_B7iWJU3teZpH_MFjc.roa (hash: IaANvC54ocsGYfpcLfku3gzas0/nThyZNXREyxhjK4Q=) 10: sCTR8cDIH84F0OMO06djeXs_-PQ.roa (hash: ugj+brY/Z7Vee3VbgiQKLfHy9VAROXKxM5IhUTLTOGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:9f:a9:ec:20:cf:78:71:c5:f6:cf:c2:49:c0:97:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Sep 21 11:00:15 2026 GMT Not After : Sep 22 11:00:15 2026 GMT Subject: CN=46bb95560b7e2de7c9c507d40e72edb552317431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bd:07:e8:13:76:8e:0e:43:41:65:49:da:97: eb:43:11:47:96:8c:58:dd:17:30:05:61:fa:13:5e: 0b:14:cb:07:17:91:f4:ab:ee:24:65:9e:03:5d:8f: e4:1d:00:76:2a:e9:cc:88:23:b4:e2:04:3d:ab:8c: ba:80:4d:06:6a:cc:7c:0a:2a:9d:9e:5e:48:23:03: 3a:2e:0f:99:e4:b3:d8:c8:f4:f6:61:dd:96:ad:78: cc:5e:16:23:4e:c4:93:88:0b:86:fa:2e:6c:cf:5c: ab:ac:3c:dc:06:fc:a0:5e:c2:c5:48:1e:b6:e5:1f: 10:c5:08:c2:91:6d:95:bc:43:2f:f4:05:44:f1:d5: 51:50:47:e3:1b:48:d8:8d:a6:a4:fe:19:df:3c:ba: a1:8a:f9:62:20:dc:0d:04:7a:bd:fe:d0:7c:1d:ef: fe:f4:66:b0:fc:b4:9d:86:8e:bc:22:e2:55:58:94: ce:fd:42:2e:eb:c2:29:a3:4b:c4:ac:08:dc:83:85: 0c:3c:6b:b7:3b:91:e3:4f:a6:b7:3d:10:b0:e3:c4: 4c:95:92:cb:d0:e0:a3:c5:50:39:7f:b7:e6:4f:db: 86:ff:16:f3:ae:47:24:48:4b:c8:b2:bf:cf:63:d0: c9:af:a5:f3:7b:3c:10:a2:a4:fd:5e:5e:2b:97:5d: 54:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BB:95:56:0B:7E:2D:E7:C9:C5:07:D4:0E:72:ED:B5:52:31:74:31 X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:22:06:e7:87:e7:81:4b:d5:d2:5e:d8:ce:b7:7d:c6:7b:7f: 79:92:4c:12:23:02:62:d2:da:4d:b0:b3:60:a5:ab:9b:ad:90: c2:fa:27:2e:6c:11:20:9e:5d:0e:78:90:ee:a1:04:42:63:53: 1a:99:dd:61:9b:fb:1e:95:fc:83:07:d0:58:a9:53:19:fd:b8: 7c:58:98:e2:7e:a1:f2:01:96:22:3a:16:0c:69:36:9b:78:ee: 14:74:00:1a:24:0e:ff:95:f8:3d:1a:84:98:d3:e5:4c:85:69: 3f:d5:5c:15:fc:6a:f2:9d:b5:b8:3b:07:98:a4:fc:96:51:57: 84:62:29:f5:6e:95:7b:3a:f7:7b:3e:22:98:e9:89:e7:17:0f: cd:f7:67:6c:57:c2:7c:a7:59:f6:02:05:3c:bd:66:eb:0c:50: 6d:8a:7e:10:65:e0:ea:eb:44:64:eb:29:cf:84:34:54:bd:35: 8e:5d:f0:76:87:c9:08:f2:4f:ec:78:88:81:c6:0b:63:8f:be: 4a:39:5d:0b:7b:27:a4:61:e8:51:2e:b3:9e:fa:9f:41:9d:0c: 07:ed:c1:c4:db:c6:e5:b1:52:82:12:5c:b2:36:ed:fa:73:08: b7:95:98:4a:c6:d5:7f:b1:b0:0b:41:d5:9f:a1:9c:04:c7:32: d3:08:42:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDDn6nsIM94ccX2z8JJwJfxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjYwOTIxMTEwMDE1WhcNMjYwOTIyMTEwMDE1WjAzMTEwLwYDVQQD Eyg0NmJiOTU1NjBiN2UyZGU3YzljNTA3ZDQwZTcyZWRiNTUyMzE3NDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L0H6BN2jg5DQWVJ2pfrQxFHloxY 3RcwBWH6E14LFMsHF5H0q+4kZZ4DXY/kHQB2KunMiCO04gQ9q4y6gE0Gasx8Ciqd nl5IIwM6Lg+Z5LPYyPT2Yd2WrXjMXhYjTsSTiAuG+i5sz1yrrDzcBvygXsLFSB62 5R8QxQjCkW2VvEMv9AVE8dVRUEfjG0jYjaak/hnfPLqhivliINwNBHq9/tB8He/+ 9Gaw/LSdho68IuJVWJTO/UIu68Ipo0vErAjcg4UMPGu3O5HjT6a3PRCw48RMlZLL 0OCjxVA5f7fmT9uG/xbzrkckSEvIsr/PY9DJr6XzezwQoqT9Xl4rl11UKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEa7lVYLfi3nycUH1A5y7bVSMXQxMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSIG54fn gUvV0l7Yzrd9xnt/eZJMEiMCYtLaTbCzYKWrm62QwvonLmwRIJ5dDniQ7qEEQmNT GpndYZv7HpX8gwfQWKlTGf24fFiY4n6h8gGWIjoWDGk2m3juFHQAGiQO/5X4PRqE mNPlTIVpP9VcFfxq8p21uDsHmKT8llFXhGIp9W6Vezr3ez4imOmJ5xcPzfdnbFfC fKdZ9gIFPL1m6wxQbYp+EGXg6utEZOspz4Q0VL01jl3wdofJCPJP7HiIgcYLY4++ SjldC3snpGHoUS6znvqfQZ0MB+3BxNvG5bFSghJcsjbt+nMIt5WYSsbVf7GwC0HV n6GcBMcy0whCcw== -----END CERTIFICATE-----Generated at Mon Sep 21 14:27:41 2026 by rpki-client