$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft File: EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json) Hash identifier: siEGSDmZu0A8I5AnlVCiPKnVkHHKIWOw0+jCMBGXU1w= Subject key identifier: B2:98:BA:D3:D2:62:50:44:28:A5:6A:F0:AF:E2:EA:09:FC:26:32:EC Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b Certificate serial: 01A0457520EDEA7A063F634412F54FECB772 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft Manifest number: 1A71 Signing time: Thu 27 Aug 2026 23:01:38 +0000 Manifest this update: Thu 27 Aug 2026 23:01:38 +0000 Manifest next update: Fri 28 Aug 2026 23:01:38 +0000 Files and hashes: 1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=) 2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=) 3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: zSAwmksAU/S9ndLgYLfjN6vf9hcMXtj53kargIT/UUw=) 4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=) 5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=) 6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=) 7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=) 8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=) 9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=) 10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=) 11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=) 12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=) 13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=) 14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=) 15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=) 16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=) 17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=) 18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Aug 2026 19:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:45:75:20:ed:ea:7a:06:3f:63:44:12:f5:4f:ec:b7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b Validity Not Before: Aug 27 23:01:38 2026 GMT Not After : Aug 28 23:01:38 2026 GMT Subject: CN=b298bad3d262504428a56af0afe2ea09fc2632ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:06:0e:a7:1c:dc:07:df:66:f6:9e:b4:bf:99: 62:f6:66:e6:10:7e:68:14:22:26:77:10:93:64:b8: 5a:d6:d4:5b:32:01:b8:7d:ba:86:16:c5:ed:5b:c2: ec:a1:91:f7:01:a7:0a:7a:c3:b6:57:aa:bb:14:b7: 4b:26:38:a5:6c:cb:8c:91:99:e8:86:9a:60:80:ad: 6d:94:4c:f9:06:71:e0:52:db:a8:ad:7b:4f:5f:fa: 85:6b:c0:d1:98:42:38:3e:c1:b4:ce:d0:41:7a:0d: dd:9b:e9:a2:99:65:4f:de:9f:75:f7:d9:c2:5f:3c: 35:80:df:7f:66:ee:97:c1:c4:16:8f:36:36:6a:82: e3:de:3f:41:b6:08:d6:6c:55:1d:9c:81:c3:87:a8: 42:26:f6:3f:85:f1:51:93:7e:f0:6e:52:03:e5:a4: f0:b5:ec:fb:e9:98:59:8f:c5:03:55:ca:68:af:83: de:30:56:ec:33:68:d8:db:0c:0e:68:3e:c5:3b:c5: f3:00:53:e0:23:84:9e:f6:6a:4f:0e:04:93:9a:0f: 8a:44:3a:7e:1f:e6:fc:bd:9f:f8:01:42:bf:e7:9a: 0e:11:7a:ef:3b:48:8f:cc:fb:72:82:dd:bc:4b:75: e3:3a:c7:0e:cb:9b:24:c8:f3:85:ee:75:76:68:cd: 40:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:98:BA:D3:D2:62:50:44:28:A5:6A:F0:AF:E2:EA:09:FC:26:32:EC X509v3 Authority Key Identifier: keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:1e:46:15:3b:a8:42:2f:df:1a:e6:85:08:3a:1d:50:cf:84: 9e:e3:61:08:6a:8d:c2:a3:71:e5:3d:1e:5f:a6:46:db:37:31: 82:c8:2c:fb:28:5e:ea:cb:29:8f:9d:ad:55:7c:bc:a2:0f:65: a1:fe:7a:8a:dd:f1:e8:9c:5d:14:3e:51:92:10:dd:90:15:db: 7a:4a:e0:16:7f:d7:78:aa:7f:58:4a:93:7f:86:c9:3f:2e:01: 0f:09:ef:ae:3f:39:13:36:75:56:b0:83:a8:24:de:81:0d:26: f0:ad:17:90:7e:7d:17:34:2c:22:60:de:74:a6:a2:be:6d:6a: 5d:f9:5e:7b:f2:60:63:97:c0:5e:da:87:c0:ef:79:e6:c7:c2: 16:50:43:e7:e4:7a:4e:a4:3c:fc:b3:99:5e:74:0d:85:b3:41: ff:c7:2c:9c:27:dd:b4:d4:92:ee:1b:08:84:52:11:9a:f5:4a: c2:64:ac:73:3c:87:4f:4d:f1:24:ad:88:89:ba:2e:5a:7e:84: ae:d5:84:27:e5:f9:cc:19:ca:24:11:3e:4e:c4:39:3e:38:b4: 92:b1:a8:8c:c1:78:b8:e3:c1:4f:dc:c4:06:1c:c3:0f:6e:f3: 0e:38:19:9a:31:11:b3:9a:c5:cb:79:6e:06:0f:31:44:5d:be: 66:66:7b:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBFdSDt6noGP2NEEvVP7LdyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy YjE4MWIwHhcNMjYwODI3MjMwMTM4WhcNMjYwODI4MjMwMTM4WjAzMTEwLwYDVQQD EyhiMjk4YmFkM2QyNjI1MDQ0MjhhNTZhZjBhZmUyZWEwOWZjMjYzMmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAYOpxzcB99m9p60v5li9mbmEH5o FCImdxCTZLha1tRbMgG4fbqGFsXtW8LsoZH3AacKesO2V6q7FLdLJjilbMuMkZno hppggK1tlEz5BnHgUtuorXtPX/qFa8DRmEI4PsG0ztBBeg3dm+mimWVP3p9199nC Xzw1gN9/Zu6XwcQWjzY2aoLj3j9BtgjWbFUdnIHDh6hCJvY/hfFRk37wblID5aTw tez76ZhZj8UDVcpor4PeMFbsM2jY2wwOaD7FO8XzAFPgI4Se9mpPDgSTmg+KRDp+ H+b8vZ/4AUK/55oOEXrvO0iPzPtygt28S3XjOscOy5skyPOF7nV2aM1A7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKYutPSYlBEKKVq8K/i6gn8JjLsMB8GA1UdIwQY MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct YWE4NTllMTkyYjE2LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2 LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhB5GFTuo Qi/fGuaFCDodUM+EnuNhCGqNwqNx5T0eX6ZG2zcxgsgs+yhe6sspj52tVXy8og9l of56it3x6JxdFD5RkhDdkBXbekrgFn/XeKp/WEqTf4bJPy4BDwnvrj85EzZ1VrCD qCTegQ0m8K0XkH59FzQsImDedKaivm1qXflee/JgY5fAXtqHwO955sfCFlBD5+R6 TqQ8/LOZXnQNhbNB/8csnCfdtNSS7hsIhFIRmvVKwmSsczyHT03xJK2IibouWn6E rtWEJ+X5zBnKJBE+TsQ5Pji0krGojMF4uOPBT9zEBhzDD27zDjgZmjERs5rFy3lu Bg8xRF2+ZmZ73g== -----END CERTIFICATE-----Generated at Fri Aug 28 04:11:56 2026 by rpki-client