$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: Mp0mEecwzDu9uv/z2k2w62jR7IBL0LdNReL5DXof8Pc= Subject key identifier: 29:C8:81:A0:31:B7:8E:50:96:46:78:AD:36:A6:BA:8E:AA:37:E2:38 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 01A0EA7777151FBF63383A7C96F6700F3D01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 1A7D Signing time: Tue 29 Sep 2026 00:01:32 +0000 Manifest this update: Tue 29 Sep 2026 00:01:32 +0000 Manifest next update: Wed 30 Sep 2026 00:01:32 +0000 Files and hashes: 1: 0zd4nb5fhm2xTq0WOAi4Xp6bvJc.roa (hash: uMgyt3DoicP5DNjGaZ/5LrHhGzYKFxFylJxozZr11JQ=) 2: 15U-P8KVPY8JhMDqgw8L5oM6fO4.roa (hash: A8TF8Z+NTCSo1JvC6AkpIA17zqlpHZI++mBawEefOjM=) 3: DN1S1WAl_2K3M6Ai-2AoagxMibw.roa (hash: CSPU47hBScO03u7drTuu7JPSF8DLvvXRvBS1TUE4BwI=) 4: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: tjkpajsVMVnkE/dYUv0WXxQumTi/DsNApliq4YmGGDs=) 5: NA8tG2G3hFFALFYl7Venv99NrVc.roa (hash: bJB0cpk0QWUKw0RjswA5Ubr/IfiAoQmBJm3f3NwKfgQ=) 6: NC0UAgfuyICWUK07pGjses6Gmp4.roa (hash: srG5DwbOiKT6ED23Q54cQarx7hW7qMuLeBg5bvdOCes=) 7: OAN3WdNCBOx9GAH-afVSq5R89fo.roa (hash: /EI4b5flaVJsTGBAEIzkodT4ndbdEXX0V5sGa/1LzJE=) 8: OQ88iyxgykv-UuMoZwpp0BBgiSI.roa (hash: 8tW2X/On0vJs7AepnWjVBDXaTpJx0zYz1Hi+i0/YSxY=) 9: abnIXAgJEhW9VldO5YpGFgSVzcA.roa (hash: XCRB0tR9DLtvsf6qW2UBqKQDVi6//m3IqU34W2mRyLA=) 10: kyDGRd8zbEMUETtukg77Ui7V8qY.roa (hash: devk2rJm/x4h0LaLa8i6gGbkJIFyEo6sNK4CrBpAYrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ea:77:77:15:1f:bf:63:38:3a:7c:96:f6:70:0f:3d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Sep 29 00:01:32 2026 GMT Not After : Sep 30 00:01:32 2026 GMT Subject: CN=29c881a031b78e50964678ad36a6ba8eaa37e238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9c:26:95:59:bd:62:dc:98:6c:1b:27:61:45: dc:03:4f:3a:5c:75:eb:ca:e1:1d:29:8c:db:57:ea: 20:8b:48:aa:f0:0a:60:d4:90:50:ab:2c:9d:4f:ff: d0:cc:12:93:ef:9e:7d:f2:e8:20:ee:ca:5b:17:63: be:ca:9d:53:66:00:7f:b5:d1:20:c7:76:8d:bd:fa: 10:be:6e:d9:e1:bd:35:a1:fb:92:74:63:6c:9d:09: 42:c3:f6:cf:88:56:a6:81:0c:30:60:64:c9:2f:2c: 36:6f:3e:48:52:bd:14:b4:1f:26:95:44:56:89:c9: d7:85:17:be:7a:25:2e:70:a5:8a:08:91:a9:ec:f3: 5c:d0:86:0c:45:47:bb:03:f9:b5:e8:dd:fb:92:52: 90:34:1f:a1:93:86:3d:cf:66:43:b3:eb:6a:b6:e8: 9b:e1:c8:fa:ce:69:30:7d:65:df:b8:e4:b2:df:97: f0:e1:76:8e:78:f3:03:80:5f:d3:91:f5:ca:38:2e: c5:04:15:ee:56:6f:99:59:a2:83:e2:a4:24:27:8a: 8c:04:69:eb:b3:f1:f1:5c:17:ad:30:cc:cd:d6:f1: 7f:c8:88:e5:17:63:6f:70:54:3c:8e:11:bd:4e:40: 98:cf:5d:d6:f0:f6:ed:c2:9e:60:b2:40:71:20:11: 3a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C8:81:A0:31:B7:8E:50:96:46:78:AD:36:A6:BA:8E:AA:37:E2:38 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:de:bf:4b:1f:bd:6e:06:a7:86:ad:32:86:7a:0f:02:25:d5: 56:4e:d2:39:36:17:e9:1a:d6:ee:0e:bc:fd:3c:9c:69:3e:40: 88:e8:52:19:dc:37:b2:c9:02:90:b9:b3:d7:81:64:04:21:e5: 3e:cf:c2:ac:75:2d:07:fb:93:fd:f6:06:f4:3c:ed:6f:92:e8: 34:04:05:82:86:14:f1:1e:52:9d:22:12:51:01:99:72:58:eb: 28:a6:2a:86:a4:fb:ed:ce:6a:47:f2:df:30:06:05:81:a6:b9: 8c:10:0b:3a:c8:05:e7:dd:57:f9:ad:b6:c3:0d:ca:a1:bc:6f: 18:50:fe:04:69:d0:5d:7f:4c:73:ef:b5:ab:94:0f:dd:60:52: d0:82:5d:da:3b:04:7d:da:ff:62:20:99:2d:da:72:6f:cc:ea: e8:b6:4f:62:62:c6:97:4c:90:a2:5b:38:40:be:74:b4:1c:dc: 03:94:b7:8f:44:60:b4:51:38:03:e0:60:3a:02:f5:ea:2d:81: d2:e5:d1:f6:44:99:80:7f:56:f0:87:15:06:c4:5d:ed:de:e8: f2:e0:e6:50:ea:e4:c6:d2:cd:30:f4:94:27:d6:6f:6a:4d:52: 74:8d:70:25:db:60:b6:4b:0e:56:8c:32:20:14:88:3e:6b:84: 03:63:50:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDqd3cVH79jODp8lvZwDz0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwOTI5MDAwMTMyWhcNMjYwOTMwMDAwMTMyWjAzMTEwLwYDVQQD EygyOWM4ODFhMDMxYjc4ZTUwOTY0Njc4YWQzNmE2YmE4ZWFhMzdlMjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pwmlVm9YtyYbBsnYUXcA086XHXr yuEdKYzbV+ogi0iq8Apg1JBQqyydT//QzBKT75598ugg7spbF2O+yp1TZgB/tdEg x3aNvfoQvm7Z4b01ofuSdGNsnQlCw/bPiFamgQwwYGTJLyw2bz5IUr0UtB8mlURW icnXhRe+eiUucKWKCJGp7PNc0IYMRUe7A/m16N37klKQNB+hk4Y9z2ZDs+tqtuib 4cj6zmkwfWXfuOSy35fw4XaOePMDgF/TkfXKOC7FBBXuVm+ZWaKD4qQkJ4qMBGnr s/HxXBetMMzN1vF/yIjlF2NvcFQ8jhG9TkCYz13W8Pbtwp5gskBxIBE62wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnIgaAxt45QlkZ4rTamuo6qN+I4MB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAst6/Sx+9 bganhq0yhnoPAiXVVk7SOTYX6RrW7g68/TycaT5AiOhSGdw3sskCkLmz14FkBCHl Ps/CrHUtB/uT/fYG9Dztb5LoNAQFgoYU8R5SnSISUQGZcljrKKYqhqT77c5qR/Lf MAYFgaa5jBALOsgF591X+a22ww3KobxvGFD+BGnQXX9Mc++1q5QP3WBS0IJd2jsE fdr/YiCZLdpyb8zq6LZPYmLGl0yQols4QL50tBzcA5S3j0RgtFE4A+BgOgL16i2B 0uXR9kSZgH9W8IcVBsRd7d7o8uDmUOrkxtLNMPSUJ9Zvak1SdI1wJdtgtksOVowy IBSIPmuEA2NQHw== -----END CERTIFICATE-----Generated at Tue Sep 29 09:22:13 2026 by rpki-client