$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: GjdjGLiynrOC5izdBQvU8JTN9TuYSzyI+sLSX8gETJc= Subject key identifier: 96:B0:71:0D:8F:3F:DC:CC:56:C3:AE:B6:1B:BD:7A:A8:E2:10:B5:57 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 01A185D1A249E8B7E9B834433153934845C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1AE4 Signing time: Thu 29 Oct 2026 04:01:10 +0000 Manifest this update: Thu 29 Oct 2026 04:01:10 +0000 Manifest next update: Fri 30 Oct 2026 04:01:10 +0000 Files and hashes: 1: 9cNKQWK3wk1irmE7oa8T4PR8mc0.roa (hash: u5fJLnWvAGQzCGewqpUpjr9+ttOL7JnpgPLBPCMOWKk=) 2: GAkPYv8UHYs_EoZPb4jWXtDDAC0.roa (hash: lnLCFUL9tM4n3iWBg5iwZCi3PtIQMScXWDpeh/kO248=) 3: QWA_uofXGCzsKuc_5MjZ-9Iqapo.roa (hash: Myntq/jB052ssuyNq1wrshjSxF8NHJKposHtJoioXmQ=) 4: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 5: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: +1V2YA7O39At8PrmmwxNWCQs1eNnZfMp2X5Jqj5XZ/E=) 6: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 7: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 8: ijbiJD7TGtArmmQdogwgJNz_Iss.roa (hash: pWVbgHKQTvi3IHOIcmkXTEU92wiUS9n0t7V8IM2/M4U=) 9: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 10: nlzsv5_4ztHk87YIpIDNp8kA-LY.roa (hash: I+evjHY278SDlMs7AgnRI/W35THgRR/EtPMQ/T244gg=) 11: s9mRiVbGsTF6wkMK69DtA5FXNaY.roa (hash: zDvAj5uvmLenqTBwKC8I/l27zfQzwbUsThxQH7ZGp1M=) 12: sZCbmYQyfGpH4iaOrLx2v2yCTAg.roa (hash: ZUhSIpiNJj1ft9rDQsYCHKV1UDkkyNZJvSyHieA9rEU=) 13: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 14: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 15: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 16: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Oct 2026 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:85:d1:a2:49:e8:b7:e9:b8:34:43:31:53:93:48:45:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Oct 29 04:01:10 2026 GMT Not After : Oct 30 04:01:10 2026 GMT Subject: CN=96b0710d8f3fdccc56c3aeb61bbd7aa8e210b557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:a9:ac:67:b5:57:87:49:02:ac:92:a6:4a: 89:a4:af:43:2e:3b:d7:7d:f5:17:b7:aa:1f:61:e4: 2d:21:24:75:ae:63:e4:0e:56:b2:97:78:46:fa:31: f0:ab:4b:75:fa:e7:b2:47:ac:74:2c:44:1d:d3:df: 98:48:5e:8e:f1:5b:a8:2e:a9:dd:a1:81:f0:fd:53: 76:ab:08:86:8f:d9:3b:57:8a:1d:4c:82:c7:08:3c: cf:b0:89:e4:d5:28:6b:f5:c2:2c:79:0c:6a:ea:bf: 81:ef:23:f6:68:8d:d3:c2:16:63:84:21:2b:31:4f: e9:e6:32:6e:e0:aa:8c:57:b7:6c:24:b6:8a:1a:68: e9:56:50:75:46:aa:3a:d3:58:f1:b5:7b:24:48:1b: aa:78:ac:d2:a1:6e:40:8b:42:0b:de:8f:3a:72:8b: 68:9f:b9:39:ad:e0:05:c5:2a:97:3e:61:3d:fe:1c: c5:fc:98:25:82:cf:2f:75:5d:44:64:43:ca:4f:23: e6:cb:ac:56:75:c3:f7:18:88:6d:c3:7c:60:b9:0e: fb:ca:e7:ee:82:79:01:25:5b:33:db:b3:e3:81:04: de:9c:3b:ac:81:f6:9c:d5:21:b6:1a:4f:39:10:48: bb:59:4d:d5:ef:31:79:8a:fe:be:f1:56:1e:35:89: ae:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B0:71:0D:8F:3F:DC:CC:56:C3:AE:B6:1B:BD:7A:A8:E2:10:B5:57 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:9f:35:94:00:55:1f:5a:a5:30:88:71:06:44:89:a1:98:f1: 10:6f:28:df:9e:45:67:02:de:e2:ed:20:64:6f:22:da:3f:09: 35:89:7e:16:07:c6:e2:2e:61:86:0e:5c:da:eb:b0:ff:dd:a5: 95:bd:76:a8:cb:f9:68:42:f1:a1:af:a5:e1:a9:d6:f2:db:89: 37:cb:1a:d5:1b:8b:c9:35:fe:7f:59:7f:fc:e8:08:f7:63:c7: 07:5c:42:a9:92:6e:de:e4:cf:f7:58:73:8f:20:ae:75:4d:2d: 5b:51:1f:46:80:36:08:a3:4b:c7:0d:0b:4f:cd:a1:27:05:85: 65:89:6e:33:0e:a5:56:53:2a:f7:ae:c9:f5:3c:20:f9:32:bb: 95:ce:14:06:b5:d1:1a:0b:dc:1d:12:0a:7d:15:ef:c1:a3:fb: 2c:ac:d4:ab:b0:0d:36:17:96:72:07:cb:f3:15:04:2e:37:96: f1:f4:29:0d:a9:2a:7c:a5:51:2e:05:ad:b9:66:02:31:1c:78: 22:4b:96:7b:05:ec:1d:14:04:97:be:9c:a7:1e:88:18:cc:de: 03:93:19:58:b0:32:ba:fe:39:6b:d8:2f:e0:e4:31:de:c6:e2: de:4c:05:50:33:e4:97:71:15:eb:1c:7a:0f:db:ce:0e:69:91: 7f:c9:84:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGF0aJJ6LfpuDRDMVOTSEXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYxMDI5MDQwMTEwWhcNMjYxMDMwMDQwMTEwWjAzMTEwLwYDVQQD Eyg5NmIwNzEwZDhmM2ZkY2NjNTZjM2FlYjYxYmJkN2FhOGUyMTBiNTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+yprGe1V4dJAqySpkqJpK9DLjvX ffUXt6ofYeQtISR1rmPkDlayl3hG+jHwq0t1+ueyR6x0LEQd09+YSF6O8VuoLqnd oYHw/VN2qwiGj9k7V4odTILHCDzPsInk1Shr9cIseQxq6r+B7yP2aI3TwhZjhCEr MU/p5jJu4KqMV7dsJLaKGmjpVlB1Rqo601jxtXskSBuqeKzSoW5Ai0IL3o86coto n7k5reAFxSqXPmE9/hzF/Jglgs8vdV1EZEPKTyPmy6xWdcP3GIhtw3xguQ77yufu gnkBJVsz27PjgQTenDusgfac1SG2Gk85EEi7WU3V7zF5iv6+8VYeNYmu8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJawcQ2PP9zMVsOuthu9eqjiELVXMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZ81lABV H1qlMIhxBkSJoZjxEG8o355FZwLe4u0gZG8i2j8JNYl+FgfG4i5hhg5c2uuw/92l lb12qMv5aELxoa+l4anW8tuJN8sa1RuLyTX+f1l//OgI92PHB1xCqZJu3uTP91hz jyCudU0tW1EfRoA2CKNLxw0LT82hJwWFZYluMw6lVlMq967J9Twg+TK7lc4UBrXR GgvcHRIKfRXvwaP7LKzUq7ANNheWcgfL8xUELjeW8fQpDakqfKVRLgWtuWYCMRx4 IkuWewXsHRQEl76cpx6IGMzeA5MZWLAyuv45a9gv4OQx3sbi3kwFUDPkl3EV6xx6 D9vODmmRf8mEiA== -----END CERTIFICATE-----Generated at Thu Oct 29 13:53:17 2026 by rpki-client