$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft File: 52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json) Hash identifier: hqM2g83mF3lWf/GQ1kRk88mAodxw5qD0aK/49wNCRoY= Subject key identifier: D9:8C:7C:79:C7:6B:22:C3:BC:00:87:B7:BE:1E:BF:E4:81:35:86:E1 Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af Certificate serial: 01A0C40DDE6856C8FCC971BA5D316CBD399A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft Manifest number: 1AB5 Signing time: Mon 21 Sep 2026 13:00:38 +0000 Manifest this update: Mon 21 Sep 2026 13:00:38 +0000 Manifest next update: Tue 22 Sep 2026 13:00:38 +0000 Files and hashes: 1: 0AHImsbMetIR9BMrmd3qpDL6OSc.roa (hash: DTeCz+/e8dz3wJQ9sOWTPFZL93bF/N1lUR+tm2DzoBc=) 2: 2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa (hash: CfFJBlNu8bngGenYW74kMkvKFLTo885Zt17Qhidzd/I=) 3: 4NasKMzTYIVVFp-ICFK_D4b8RHc.roa (hash: QS3B9ES6p11t5I186zFeNR/WrVazilsqPckCmSgVmek=) 4: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: QrJ5XPG9DmYe+9Ek0fEV7CvrEX1rtQKgeLWB65uGoWU=) 5: 53LrOjzoo4E_JjsRePn1B73fFtc.roa (hash: NrghBBUU3a/THjQg3AhmUAWYpxF5cPsuE6iPec4zb/o=) 6: BAXXlSV06uuaY8KhG2sNC8heH1s.roa (hash: ajZgoDJ8e9hLXYtp4Hn5DX0X8/kHLIPyvG3eppF2AQs=) 7: E6Wekcit-EQ3TZTNVUcjRu1lw6U.roa (hash: 2zO8BVKL4MFsWKURY5zzeGF0sEV2VJqOByilAEcD1Z0=) 8: SqJOIStSbkS_sk9tOgXlq4DG9kU.roa (hash: ewVntvl+465lh5V5DV4NxkandQKCa7/BAmKlR+Vmpqw=) 9: YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa (hash: 6EGPa2utleZno/C5hAqexr1JPSm93VrZZ+jL9Q+c4xU=) 10: aHOZHoVN5QFnBBDS6rpLN3diXhQ.roa (hash: ogzaNg6aZ7diJ0sN2cYk/78mRgYs+1QRi/kMrxIJaB8=) 11: lC16rIMMnqHHfbg9MNxvqn7mqxk.roa (hash: Mdn1l4dZ+NSM4dG4u4z56RyJO1WeprirQF3/FTo90cM=) 12: rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa (hash: YE/iZ6y3DFs2Aj9gfYd2A/ANh76BH41kT6FkdNGSzDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c4:0d:de:68:56:c8:fc:c9:71:ba:5d:31:6c:bd:39:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af Validity Not Before: Sep 21 13:00:38 2026 GMT Not After : Sep 22 13:00:38 2026 GMT Subject: CN=d98c7c79c76b22c3bc0087b7be1ebfe4813586e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:60:3d:72:ae:6f:dd:ce:b7:45:4f:c1:d5:88: 5b:8b:d9:05:7e:d6:bd:f4:23:04:1e:a0:be:84:71: 93:2a:94:56:8c:a4:ab:a3:ad:47:82:01:a0:2c:bc: f4:10:3c:46:42:cc:0c:c7:6b:93:63:37:b6:0a:2f: a7:98:a2:76:dc:36:d7:8b:03:90:69:11:35:78:a8: 9d:e4:5a:53:a4:5b:a7:73:f1:6a:fd:2e:d6:5a:44: 22:3b:d8:12:c0:b4:84:0f:30:cd:07:0b:85:15:8d: 82:e1:bc:3e:05:c7:67:65:64:0e:39:c4:a2:fc:c7: 23:6e:cd:70:51:93:3f:76:34:61:1a:2a:f8:d2:af: 65:90:4d:f9:8f:a6:03:21:40:3e:50:e7:71:82:c4: 90:e5:3d:fe:f8:c9:5e:56:67:af:29:ce:27:dc:b5: e9:37:90:6d:1e:05:d5:7a:9d:b1:1b:89:01:4b:47: 17:2f:ff:fd:00:1f:19:e9:8f:1d:27:3d:3d:ed:d3: 1f:c0:99:27:97:18:a9:24:65:92:26:62:ba:a9:c8: 8a:7e:4a:7e:ba:7d:19:80:ef:57:e4:23:1f:53:dc: 26:63:4b:1e:3e:8e:b6:b4:68:af:a1:e5:71:2e:84: 6d:7a:02:17:b1:c3:4b:cf:51:30:fe:53:46:32:08: 64:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8C:7C:79:C7:6B:22:C3:BC:00:87:B7:BE:1E:BF:E4:81:35:86:E1 X509v3 Authority Key Identifier: keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f6:c5:37:72:4e:6b:91:38:dc:8a:27:67:29:74:12:db:70: 22:5c:db:36:2e:a7:df:a1:91:17:b1:4c:be:e6:0d:61:d1:0c: 9e:ba:b9:90:64:af:0f:87:c6:31:43:c8:bc:dc:dd:70:23:a1: cf:36:de:2f:e4:46:91:71:8a:af:62:d7:43:dc:b4:26:bc:f1: 13:b5:03:bb:91:82:77:ef:61:65:5d:45:fd:b8:55:44:33:86: f6:c2:b4:bd:4f:b6:4e:ea:72:cf:6e:a0:5d:cd:3c:85:03:ad: b7:a6:77:5e:35:d0:52:0d:22:b0:76:34:bb:bf:2a:10:7b:bb: 2a:6f:a0:ab:aa:53:eb:67:5a:43:67:a5:82:7b:28:90:10:09: 4c:77:7a:88:76:e0:ff:da:a4:ce:b2:df:54:37:36:78:7d:81: 14:2e:d6:e9:81:2f:92:f1:e4:6d:26:ba:37:c7:fe:05:c7:8c: a5:8b:c9:ca:01:f4:bf:17:6b:db:a9:b1:ce:88:d2:82:b3:21: 0d:d2:98:45:00:59:29:21:b5:45:bc:00:7f:ba:70:87:04:d4: 38:7e:ae:c0:6d:16:ec:3b:8b:59:d1:24:8d:d6:43:78:40:01: 05:20:38:05:42:50:06:02:16:e3:ca:3a:ea:28:bf:d4:fe:c0: 03:44:e4:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDEDd5oVsj8yXG6XTFsvTmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2 ODQ2YWYwHhcNMjYwOTIxMTMwMDM4WhcNMjYwOTIyMTMwMDM4WjAzMTEwLwYDVQQD EyhkOThjN2M3OWM3NmIyMmMzYmMwMDg3YjdiZTFlYmZlNDgxMzU4NmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mA9cq5v3c63RU/B1Yhbi9kFfta9 9CMEHqC+hHGTKpRWjKSro61HggGgLLz0EDxGQswMx2uTYze2Ci+nmKJ23DbXiwOQ aRE1eKid5FpTpFunc/Fq/S7WWkQiO9gSwLSEDzDNBwuFFY2C4bw+BcdnZWQOOcSi /Mcjbs1wUZM/djRhGir40q9lkE35j6YDIUA+UOdxgsSQ5T3++MleVmevKc4n3LXp N5BtHgXVep2xG4kBS0cXL//9AB8Z6Y8dJz097dMfwJknlxipJGWSJmK6qciKfkp+ un0ZgO9X5CMfU9wmY0sePo62tGivoeVxLoRtegIXscNLz1Ew/lNGMghkpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmMfHnHayLDvACHt74ev+SBNYbhMB8GA1UdIwQY MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt ZDI0ZjU2MmRlZGQyLzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/bFN3JO a5E43IonZyl0EttwIlzbNi6n36GRF7FMvuYNYdEMnrq5kGSvD4fGMUPIvNzdcCOh zzbeL+RGkXGKr2LXQ9y0JrzxE7UDu5GCd+9hZV1F/bhVRDOG9sK0vU+2Tupyz26g Xc08hQOtt6Z3XjXQUg0isHY0u78qEHu7Km+gq6pT62daQ2elgnsokBAJTHd6iHbg /9qkzrLfVDc2eH2BFC7W6YEvkvHkbSa6N8f+BceMpYvJygH0vxdr26mxzojSgrMh DdKYRQBZKSG1RbwAf7pwhwTUOH6uwG0W7DuLWdEkjdZDeEABBSA4BUJQBgIW48o6 6ii/1P7AA0TkHg== -----END CERTIFICATE-----Generated at Mon Sep 21 20:54:23 2026 by rpki-client