$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json) Hash identifier: +ZJgTOYk8hQ2WaRf+BhKz3orLZDq1PNJedjdUEflpt8= Subject key identifier: 58:CF:25:5C:F6:E9:5B:8D:F9:28:EC:6A:7E:6C:6A:CB:83:93:F6:C0 Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e Certificate serial: 01A0CBC78988E05D15E9BB63F518C3B84C3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft Manifest number: 1AC4 Signing time: Wed 23 Sep 2026 01:00:46 +0000 Manifest this update: Wed 23 Sep 2026 01:00:46 +0000 Manifest next update: Thu 24 Sep 2026 01:00:46 +0000 Files and hashes: 1: 9KBqGjnL-5oJ5B6DzcxjqiI7EQM.roa (hash: LIvm7nAVKXaLM9rEsrAxwOlhblCh+te14HXeeWgrThQ=) 2: LmM48ME-vV9knrJxSTQaxjQp3co.asa (hash: EudqvBBerqU77vXqzfKyktKs74IC9c1mzsls/2yJHmE=) 3: Pug44zlPI02ycyK9Q_88Xy9Y-Hg.roa (hash: FnYDgGWIFWVGuhKvHnMrJ7Cya4d1b5GKWMt1Csm8Zgs=) 4: TuuV3R_pLiwXMlOjTuF_uOOQUKQ.roa (hash: x74/PQH6T0L5thYcJT0BIF/7nXPoUee65OsSO1RpsSI=) 5: UR40d6Nv7wtY6847-nmAoOG-Ggc.asa (hash: 15joOaBQ5tuqyW+sD1j3/l5gQvX/528w2uliH7SqR1M=) 6: XWNNEFomn9bKgvzZUcc40UaOsbg.roa (hash: /H5U7m5xCacMvYYK2MppLjlzRXDKTMF2JjarWQi18pE=) 7: Z791839m53XNRuRerPXFnx_mGZ0.roa (hash: 8q0wPQ9bEvLfi3oi1ten4qb/6lS1ZqrefxTS++baSZM=) 8: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: NOohsCeIweaf2Wg1GOzrPfaoY1YUp8oHM0DEOwO13Zs=) 9: chkkpC1wf4PBAO07r8AaazA2rnI.asa (hash: VlBFOTypBDda09dJ/OfOd69SgWHtcRGMPQP/H7cWGAw=) 10: gpGsmzdGl23LNL8X2Aq-5iXeAzA.roa (hash: iLtj4+Bdb3J8UxkSZ4/mHgKq1j4CU4BIOVKfADMle94=) 11: p5I2rBokj4nhJ_YUk_dcJCNwjNY.asa (hash: JePaqX8dDtt3ljOEbNRemCQgG9iiJBvpk8UC44tWVtA=) 12: wMThe2cBB531pXzWqFpjonQuHQ8.roa (hash: Y8v6UOfwMmgJZQNzDFQ/23Nn2NW5kKuc76L2jWsCysM=) 13: y-MtqUQxYN7HeVnOQGAy52MjLe8.roa (hash: /bCO17JMK+2NzpP4wufXIXJcR0ZbA6NT7EQZcGDDLZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 22:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cb:c7:89:88:e0:5d:15:e9:bb:63:f5:18:c3:b8:4c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e Validity Not Before: Sep 23 01:00:46 2026 GMT Not After : Sep 24 01:00:46 2026 GMT Subject: CN=58cf255cf6e95b8df928ec6a7e6c6acb8393f6c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:01:50:57:0e:3c:52:81:21:eb:36:5e:19:c4: 79:6a:90:f0:df:ef:e6:32:d9:9c:b4:17:a3:bb:73: 41:2e:a1:e5:5e:fa:88:6f:15:8f:23:2f:59:f3:6a: 61:3c:49:dd:0c:e0:25:5b:77:5e:37:1f:26:31:cb: 72:30:8e:60:29:d6:e5:2f:c7:7f:32:7e:4e:68:a4: 65:5d:b3:91:c3:06:42:d3:2f:7a:6f:5b:96:93:4f: d9:c0:0c:20:21:53:d3:20:69:ca:d1:55:ff:0b:9d: e0:ac:21:3f:e7:69:f7:aa:1c:9c:55:50:ba:8d:e2: c5:c1:e6:14:c6:e0:ca:82:62:23:ad:00:8f:71:f1: c9:b8:5e:dd:9a:b2:db:7a:5f:c1:34:d9:a6:d7:fc: 3b:7f:39:d6:e5:b8:57:c6:9c:d0:e6:44:a8:4e:e5: af:5d:ab:9b:be:55:b8:1a:8b:1c:f4:e9:9a:1b:6d: 62:0f:90:af:19:a7:6b:05:97:97:29:7f:a4:4e:1f: 70:68:92:ab:9b:12:33:f4:51:e2:56:70:90:2e:1f: 1b:e0:fe:a1:e3:cb:7b:92:fc:77:c5:f7:ff:4e:db: f7:37:65:31:69:34:78:67:b1:ed:5e:f3:c2:50:ce: 9d:0c:a0:58:0f:f7:31:de:ca:df:c9:ee:99:f9:72: fc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CF:25:5C:F6:E9:5B:8D:F9:28:EC:6A:7E:6C:6A:CB:83:93:F6:C0 X509v3 Authority Key Identifier: keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:57:42:19:c5:6c:47:64:ba:77:ab:8b:2a:0f:da:82:93:a6: ed:b8:91:37:6f:6c:96:bd:d5:64:57:a5:e2:52:91:59:2f:7d: e9:8e:a7:73:ad:3d:91:2e:67:71:c5:a6:7e:d8:88:99:70:fe: 13:cd:0b:e1:b4:53:59:d5:65:f8:5e:11:ea:06:fb:cc:8d:86: 17:13:de:e7:8a:18:88:6e:4f:4c:b2:b0:75:a4:41:96:7b:bd: 8d:0e:b1:c6:6c:ff:6e:1f:af:bd:4e:b2:2b:24:2b:4c:66:e6: 1f:32:93:cd:63:a0:c7:68:2d:ac:84:3b:2b:0a:ce:2e:2a:c6: fe:45:c9:b7:27:67:2d:5c:c3:12:48:dc:a7:89:bf:28:53:7d: b7:fd:98:db:1c:c3:4f:7d:72:91:08:4e:f3:7b:fb:4d:a4:d6: 59:eb:b8:ca:a8:ba:10:a0:d6:77:d9:cd:05:f3:22:46:b2:ab: 3a:cf:a7:32:46:32:2a:e7:34:88:2a:1f:82:b9:83:34:fe:d5: 30:14:85:7e:ef:9a:c9:40:ca:d1:4d:2e:13:61:b2:f4:0c:d1: 00:e1:33:9f:9f:f5:57:c3:b8:90:e0:8d:45:b1:cd:db:96:7d: 61:38:f8:14:64:78:de:b5:0f:ed:3b:aa:ba:df:d4:e6:a7:5f: b3:92:2b:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDLx4mI4F0V6btj9RjDuEw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1 ZDAwN2UwHhcNMjYwOTIzMDEwMDQ2WhcNMjYwOTI0MDEwMDQ2WjAzMTEwLwYDVQQD Eyg1OGNmMjU1Y2Y2ZTk1YjhkZjkyOGVjNmE3ZTZjNmFjYjgzOTNmNmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AFQVw48UoEh6zZeGcR5apDw3+/m MtmctBeju3NBLqHlXvqIbxWPIy9Z82phPEndDOAlW3deNx8mMctyMI5gKdblL8d/ Mn5OaKRlXbORwwZC0y96b1uWk0/ZwAwgIVPTIGnK0VX/C53grCE/52n3qhycVVC6 jeLFweYUxuDKgmIjrQCPcfHJuF7dmrLbel/BNNmm1/w7fznW5bhXxpzQ5kSoTuWv XaubvlW4Gosc9OmaG21iD5CvGadrBZeXKX+kTh9waJKrmxIz9FHiVnCQLh8b4P6h 48t7kvx3xff/Ttv3N2UxaTR4Z7HtXvPCUM6dDKBYD/cx3srfye6Z+XL8uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjPJVz26VuN+Sjsan5sasuDk/bAMB8GA1UdIwQY MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt MWZiYzY0MWI1MGIxLzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVldCGcVs R2S6d6uLKg/agpOm7biRN29slr3VZFel4lKRWS996Y6nc609kS5nccWmftiImXD+ E80L4bRTWdVl+F4R6gb7zI2GFxPe54oYiG5PTLKwdaRBlnu9jQ6xxmz/bh+vvU6y KyQrTGbmHzKTzWOgx2gtrIQ7KwrOLirG/kXJtydnLVzDEkjcp4m/KFN9t/2Y2xzD T31ykQhO83v7TaTWWeu4yqi6EKDWd9nNBfMiRrKrOs+nMkYyKuc0iCofgrmDNP7V MBSFfu+ayUDK0U0uE2Gy9AzRAOEzn5/1V8O4kOCNRbHN25Z9YTj4FGR43rUP7Tuq ut/U5qdfs5Ir4Q== -----END CERTIFICATE-----Generated at Wed Sep 23 07:42:18 2026 by rpki-client