$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft File: 76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json) Hash identifier: j17eg/IQ6YeJPZKbTrEmZwBu4vcltBvKJJo5I7d1S1M= Subject key identifier: 70:E4:79:DE:8E:66:51:E7:BC:FA:FA:31:33:69:76:2A:61:14:F3:20 Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Certificate serial: 01A1BDD1FED9C2AFD6FE39FF15AB210F76A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft Manifest number: 0534 Signing time: Mon 09 Nov 2026 01:00:18 +0000 Manifest this update: Mon 09 Nov 2026 01:00:18 +0000 Manifest next update: Tue 10 Nov 2026 01:00:18 +0000 Files and hashes: 1: 30rSP67H4gX5RMgOxT5dBfg20_g.roa (hash: pLbD0z+swzOFRKhR78b058ocPOqvyBgBR9Tg94u9QPE=) 2: 68EZrauB0qv4UqFcrYI1HWiTafA.roa (hash: bosTecBYxP1S8RTUkYY+Q2j0KSr6GAn+ipiGx0hncVw=) 3: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: kbo/xP0V7gqA/o6s6Fn09kBsYPgo+BnvjjLb77TgFoc=) 4: C3ruCzQFpObijbg6nKyWeHWjy4U.roa (hash: Y2PICPggtqJuBNrLg9GLriE7TFiGRSa8ctzypTp0k5Q=) 5: CB1XIlnWTc14SauCzXUS_UmOJC4.roa (hash: byg5QgaOPMhnjlQf7GrI3dWBQ3YWuvGS0ozt2rOo0p8=) 6: FoL3qyEY48cw05gLQhNBtfACHmc.roa (hash: yngu0V2+UyneI185UKcvs0YYxoSzgQOcyO77l7Bzxy4=) 7: M3YvO3dRBUI3j6GH6zoCRrsgabE.roa (hash: P69ndgMJ0iBMDkBYuqCtuk6h1y6LBH+odfA2qJ6I8BI=) 8: V9bz-LIlrLlNcy_JnZK_x-nhl2s.roa (hash: EweRvUyQqzzdZsQlbOmurMzzeItcgxBnOe1Rf0PMP7c=) 9: WOK1iT_PCPPQV6sHVEx5Px_Y9fE.roa (hash: 94hNqjQI8cFTU6a6Kw0AEcP1Xdns+Wtf+3N07hYhGa0=) 10: dHw4rPlMC2U5iHNzv7zjbgAJJwk.roa (hash: 0z4lDE+C+UzkWpRynJP0CfBaHq+gZP2uj73dNP7qIYQ=) 11: fzWlLGEPBxz1DR-_ybKSosveito.roa (hash: PMju7hqmYk5olTtNec80dTLKx9r70k1T9axrJxxCFmQ=) 12: iuSpcrmsV4f1Ysb1cVg-3onOaZA.roa (hash: c9q3XFMjCEy0sE0Ce3zydIbkqouf4LIzsM2RvAlYwio=) 13: rTcFJVQVYRab3fxgbWGRyb98u5w.roa (hash: coxAASG1hea1ZUdhCVv3rBI+/OljW+DPXNN97EGwIbU=) 14: sDq5U53kui-SouGQwvgx88wuoqc.roa (hash: cLZsm7xp+yinJ4qALYPDYjVVs4ZwSgrcr5htqd8PthY=) 15: tQKn_VI0YnpwrQ0R1vIqZI1px_Y.roa (hash: JhnC9IrBzNCxrXzpsnE1IqPc96jfm3PPISvb4Vu6lFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Nov 2026 01:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:bd:d1:fe:d9:c2:af:d6:fe:39:ff:15:ab:21:0f:76:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Validity Not Before: Nov 9 01:00:18 2026 GMT Not After : Nov 10 01:00:18 2026 GMT Subject: CN=70e479de8e6651e7bcfafa313369762a6114f320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a7:6b:2b:1c:af:20:ec:ba:97:4a:68:7a:c9: ad:d9:5c:f6:a3:d8:20:eb:10:dc:20:ed:04:f8:cc: f9:06:32:07:9f:93:87:04:3e:d9:be:5b:a7:7a:d1: 8a:9b:b6:ee:2f:52:62:a9:94:d6:a3:dd:8d:6d:09: 22:96:d0:8d:15:05:ee:ef:ef:38:d7:aa:84:25:3d: 9d:5b:60:74:5c:21:8a:46:da:4a:14:93:2f:1b:ad: 0b:a6:58:0c:13:ca:ad:b1:4d:19:b9:d4:df:90:45: 2c:2e:96:6f:6a:e3:f4:c4:76:23:34:a9:46:e1:9d: c8:36:b6:27:ab:c6:70:ad:fc:c1:b0:97:01:9b:24: 6d:82:41:bd:8a:87:10:d1:ea:20:6e:05:c7:de:b3: bf:7a:53:b4:82:bb:be:b6:40:5e:1c:c6:a7:ec:29: 81:de:ee:67:4d:d1:a1:f8:bd:4d:e9:c9:d6:fa:5b: 71:d8:6f:d5:da:a9:99:e4:94:a4:81:49:06:3c:f5: 35:5e:f0:6b:e6:3b:ca:6e:d1:82:8d:db:c4:88:fb: 38:49:bb:f2:ee:4d:f6:2c:d4:9f:2d:22:29:06:63: 00:9e:19:76:83:05:29:7f:52:9e:5e:aa:00:ae:ba: 49:9c:04:b2:38:3d:b6:21:f4:6c:a7:7e:d0:7e:ec: 81:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E4:79:DE:8E:66:51:E7:BC:FA:FA:31:33:69:76:2A:61:14:F3:20 X509v3 Authority Key Identifier: keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:70:bf:4b:31:cd:63:09:d0:58:ab:79:69:89:39:31:3b:1e: a8:4c:0f:82:8c:53:2b:f9:83:44:d2:b5:e6:a3:a8:5b:b3:17: 14:83:0d:9d:09:7e:8e:b5:2c:95:ac:09:5e:04:90:6d:6b:99: 9e:fa:ed:9b:0f:90:09:f7:fa:ec:f9:4d:70:cb:27:8b:c7:4a: 2e:f6:ed:66:82:1c:9e:3c:a5:29:11:0b:ec:16:65:86:b7:d6: e8:a3:28:34:f0:b0:ba:99:7b:13:5e:6c:f4:05:fd:d5:c4:14: 83:07:c1:f5:87:20:61:4c:8a:4f:c6:af:ec:e4:ef:e3:ef:01: 8e:13:84:5f:f9:65:45:16:2a:dc:f7:23:10:82:23:b7:91:ab: fa:3a:6f:24:42:ad:95:28:13:af:87:4d:51:1d:78:4d:60:62: a6:80:17:88:71:f3:0a:19:82:c2:92:4d:cd:6c:94:a3:3e:c2: cd:ee:37:9a:46:ba:2e:e5:6a:e3:7b:07:b9:6d:de:8d:69:42: c9:86:c0:f5:b4:b3:a7:87:21:f8:3b:fa:93:e0:38:fc:80:d3: ba:d0:c9:d1:e5:26:62:e3:9d:b2:5d:6e:7a:bc:e7:32:49:48: 01:6a:b7:34:d4:34:c3:01:37:8b:2d:1d:33:0e:56:95:e5:37: fe:f2:63:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaG90f7Zwq/W/jn/FashD3apMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4 NjFmYjIwHhcNMjYxMTA5MDEwMDE4WhcNMjYxMTEwMDEwMDE4WjAzMTEwLwYDVQQD Eyg3MGU0NzlkZThlNjY1MWU3YmNmYWZhMzEzMzY5NzYyYTYxMTRmMzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qdrKxyvIOy6l0poesmt2Vz2o9gg 6xDcIO0E+Mz5BjIHn5OHBD7ZvlunetGKm7buL1JiqZTWo92NbQkiltCNFQXu7+84 16qEJT2dW2B0XCGKRtpKFJMvG60LplgME8qtsU0ZudTfkEUsLpZvauP0xHYjNKlG 4Z3INrYnq8ZwrfzBsJcBmyRtgkG9iocQ0eogbgXH3rO/elO0gru+tkBeHMan7CmB 3u5nTdGh+L1N6cnW+ltx2G/V2qmZ5JSkgUkGPPU1XvBr5jvKbtGCjdvEiPs4Sbvy 7k32LNSfLSIpBmMAnhl2gwUpf1KeXqoArrpJnASyOD22IfRsp37QfuyBJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDked6OZlHnvPr6MTNpdiphFPMgMB8GA1UdIwQY MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt MDEzZDJhMTFjMGE1LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1 LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnC/SzHN YwnQWKt5aYk5MTseqEwPgoxTK/mDRNK15qOoW7MXFIMNnQl+jrUslawJXgSQbWuZ nvrtmw+QCff67PlNcMsni8dKLvbtZoIcnjylKREL7BZlhrfW6KMoNPCwupl7E15s 9AX91cQUgwfB9YcgYUyKT8av7OTv4+8BjhOEX/llRRYq3PcjEIIjt5Gr+jpvJEKt lSgTr4dNUR14TWBipoAXiHHzChmCwpJNzWyUoz7Cze43mka6LuVq43sHuW3ejWlC yYbA9bSzp4ch+Dv6k+A4/IDTutDJ0eUmYuOdsl1uerznMklIAWq3NNQ0wwE3iy0d Mw5WleU3/vJjWQ== -----END CERTIFICATE-----Generated at Mon Nov 9 12:23:46 2026 by rpki-client