$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json) Hash identifier: 36y/dYJ1Tumw2MEQbnRx5qcfEY0fKcUBT3nvr7nh+y8= Subject key identifier: 53:55:E6:C5:D8:DC:E9:69:A0:51:21:08:80:A4:99:F2:88:C8:7B:C1 Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 01A174DDB8FB51B65DF9285BC20F3F6B7ADB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft Manifest number: 1AD9 Signing time: Sun 25 Oct 2026 21:00:50 +0000 Manifest this update: Sun 25 Oct 2026 21:00:50 +0000 Manifest next update: Mon 26 Oct 2026 21:00:50 +0000 Files and hashes: 1: 1-ZsRWNvdt3D8wn8sI2L1WODnkqM.roa (hash: 6Eum4e6s1YywQEdj8irMXAzstfAffIT89qs3aZzQIj0=) 2: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (hash: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0=) 3: 7238-yc1zsJP5-yGaMOBc9f0LR4.roa (hash: URHGrmmmyevt5Yc3E+g4gLi9Y6wbhMdw/A5AP3gBz1Q=) 4: 8JXNaaQmDQHdM4yP_RNeiswPEDI.roa (hash: UUO1y8o89Fboq48v1C/MZYuzKEwlodMmFc6P3ytbtj4=) 5: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (hash: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0=) 6: GIKziXI0ze0FwPya3PhgfF3f_tA.roa (hash: Q4/p9Bv6o+xxhdGbCok8TG1MXiBudXjraYt9L2zzurs=) 7: Ho8BmWtRsGIfoh9TadeITydo350.roa (hash: jhic1+8GxEt2CK46n93QnO3HxEVdv0LVkgGPn/QSDf0=) 8: NDEJ4OPh2jQQg5h1HdKinOuNm1g.roa (hash: 6YV/mvu0IZaB1NRM8e6QdrWu4qWaOce8H7G5lo4LpOc=) 9: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: EdPfW1KqGvetopedZwH/g9kxkHe+IAJwAkmz/BlnthQ=) 10: THkP_WMs844JJ4UTW2iusEvO7og.roa (hash: q+i+yw1ZT8GT9Tqd+7XX30HpCs4PHYhN3cI+hYf+RFc=) 11: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (hash: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E=) 12: VlCsH-gKeuLV89RCvfubppUzoBM.roa (hash: E6tZ0jd2kOODThTzIfCZg56DVUHPrBwKWicp2pqqUq8=) 13: WLquCazhAB0ScMP5a1mkOMpQjSk.roa (hash: X6EOl+E5HOgYEVAmBJUO3eMgT+pMlGAkOYSNqnB4rac=) 14: _Sp9nWnMGENvs_5RlKIg522yEo0.roa (hash: 5BiB2YKH8y+FxStt90RRFoc5lwCZkm5vmcOChmEykmI=) 15: lrLT0MTm0sVXoP_chnt_YcYvk94.roa (hash: bRz5jjXaw5R9jnyeOoeN7YsZBbwWfb9gDd+EwEhENhU=) 16: mYkOBOIW6O0A_6f02CFpHtKOt7g.roa (hash: 0X1xM3PVCNQFuvE7pmgCYP4TDDJw4nRptQ2zO5w8sJA=) 17: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (hash: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE=) 18: zLW84Gsa8lyQLXbWcT3Qg3ZGSrQ.roa (hash: UXTZQOitHqTP9IRhCn98pWCBLuimV0o0vCpqkwYBveU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 21:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:74:dd:b8:fb:51:b6:5d:f9:28:5b:c2:0f:3f:6b:7a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Oct 25 21:00:50 2026 GMT Not After : Oct 26 21:00:50 2026 GMT Subject: CN=5355e6c5d8dce969a051210880a499f288c87bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:97:52:83:7c:c0:90:00:15:da:35:b1:3d: 15:5c:89:8d:b0:45:d3:5e:0a:6e:62:33:83:ab:85: 75:66:0e:6b:8d:27:04:bb:12:b6:80:6a:a4:b5:f3: 6d:cd:d9:42:c0:fd:f2:b3:03:10:ec:fa:5c:b8:e0: d7:9d:e1:c7:ef:54:d5:84:be:3f:57:84:de:fd:c1: a8:50:d1:0b:de:fd:24:61:7a:8b:09:4f:90:ad:bf: 60:59:74:8e:13:12:f4:39:c8:68:fe:9d:69:08:a5: 43:8c:43:6b:30:7d:68:a3:2d:af:6f:1d:4d:c1:f9: 8a:d5:6f:67:8b:a7:f0:1a:a8:46:40:c8:95:1a:50: b4:52:7f:11:6a:91:8f:fc:58:6d:9e:1f:bd:e2:f5: e3:45:e0:e2:fe:01:9f:e9:8a:f1:a5:57:1e:1d:ac: d5:6e:ff:ad:76:36:a5:30:e4:ca:e3:e0:bf:19:db: 2a:41:ce:00:a6:66:e7:80:a3:cb:8c:da:6b:0a:44: 0b:03:22:82:e8:ef:19:ff:4d:f2:8c:f0:77:ba:b6: 18:86:1c:db:62:45:c4:1e:b3:94:75:c7:26:b0:e4: e4:68:81:12:70:50:b5:5a:f9:55:b5:df:b9:8f:27: 72:d4:fb:05:f9:c4:76:2c:be:91:ac:38:fc:73:d4: 9b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:55:E6:C5:D8:DC:E9:69:A0:51:21:08:80:A4:99:F2:88:C8:7B:C1 X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:53:f6:16:a5:98:95:97:a3:1c:eb:93:cb:1e:83:fe:8a:68: 23:a2:f5:17:c7:f7:a6:c8:99:18:91:71:2d:88:ee:ed:bf:a6: 02:d2:81:62:19:e2:c0:69:ad:7a:f9:57:fe:2b:d3:0a:45:39: 94:26:67:6e:ef:1c:5e:fb:6a:7e:0e:57:3a:aa:f6:40:33:c0: b4:32:aa:1d:2b:75:82:8e:80:01:e5:e2:a1:c0:92:d8:0d:b7: 9e:04:d8:b7:63:41:b6:26:43:2d:0b:65:2b:44:b7:3c:43:f2: 7a:07:9e:60:2c:8d:c6:a6:0a:39:03:dd:54:c6:39:a1:7e:2d: f3:94:91:d0:e4:5a:0e:ba:89:06:5f:26:9b:74:38:8c:ce:3b: b3:ca:b9:43:da:f2:49:34:dd:78:6a:9b:71:7b:f0:e0:91:6a: 7e:19:3a:17:02:74:a7:d4:01:96:14:e8:ea:4a:0e:b1:d9:05: 9c:13:bc:17:a1:60:1f:49:6d:6b:37:43:84:c8:ef:b9:1a:e2: e8:99:57:2c:49:ba:79:2d:8e:a4:4a:38:bd:cc:4b:7a:6f:d0: 98:02:2c:f9:e0:84:7b:99:74:01:de:6e:b4:44:18:24:e6:74: 86:f2:ef:98:60:4a:ac:80:b0:b9:e3:c1:5e:dc:96:ac:0a:48: 22:6f:05:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF03bj7UbZd+Shbwg8/a3rbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYxMDI1MjEwMDUwWhcNMjYxMDI2MjEwMDUwWjAzMTEwLwYDVQQD Eyg1MzU1ZTZjNWQ4ZGNlOTY5YTA1MTIxMDg4MGE0OTlmMjg4Yzg3YmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYKXUoN8wJAAFdo1sT0VXImNsEXT XgpuYjODq4V1Zg5rjScEuxK2gGqktfNtzdlCwP3yswMQ7PpcuODXneHH71TVhL4/ V4Te/cGoUNEL3v0kYXqLCU+Qrb9gWXSOExL0Ocho/p1pCKVDjENrMH1ooy2vbx1N wfmK1W9ni6fwGqhGQMiVGlC0Un8RapGP/Fhtnh+94vXjReDi/gGf6YrxpVceHazV bv+tdjalMOTK4+C/GdsqQc4ApmbngKPLjNprCkQLAyKC6O8Z/03yjPB3urYYhhzb YkXEHrOUdccmsOTkaIEScFC1WvlVtd+5jydy1PsF+cR2LL6RrDj8c9SbfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNV5sXY3OlpoFEhCICkmfKIyHvBMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFP2FqWY lZejHOuTyx6D/opoI6L1F8f3psiZGJFxLYju7b+mAtKBYhniwGmtevlX/ivTCkU5 lCZnbu8cXvtqfg5XOqr2QDPAtDKqHSt1go6AAeXiocCS2A23ngTYt2NBtiZDLQtl K0S3PEPyegeeYCyNxqYKOQPdVMY5oX4t85SR0ORaDrqJBl8mm3Q4jM47s8q5Q9ry STTdeGqbcXvw4JFqfhk6FwJ0p9QBlhTo6koOsdkFnBO8F6FgH0ltazdDhMjvuRri 6JlXLEm6eS2OpEo4vcxLem/QmAIs+eCEe5l0Ad5utEQYJOZ0hvLvmGBKrICwuePB XtyWrApIIm8FaQ== -----END CERTIFICATE-----Generated at Mon Oct 26 08:48:20 2026 by rpki-client