$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft File: 6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json) Hash identifier: ISGGsxqb5D7gHd9OsQKkDVMHSzl9pFPtwV4AC/38Sio= Subject key identifier: A8:0B:D3:03:9C:B0:F5:94:7A:8C:61:95:D7:1B:9D:A5:4E:A1:81:1F Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713 Certificate serial: 01A17D7374DF55CBC177F04D696E1B25674A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft Manifest number: 1ADD Signing time: Tue 27 Oct 2026 13:01:20 +0000 Manifest this update: Tue 27 Oct 2026 13:01:20 +0000 Manifest next update: Wed 28 Oct 2026 13:01:20 +0000 Files and hashes: 1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: eDBe67hvl+LYAjVCGI3favV8LuEye2zHHi5wOhpldOk=) 2: JlHGBE70CjYUjMlPy-yN4dzG-cs.roa (hash: eJeCGZHCYQ5pmVVEGiFVOguyq7hsvoBtUeukZnmh3W4=) 3: W-l0n89w8F8aln2IRFkS3RxMi9M.asa (hash: WhQXi1TVBFxOsywX8tkd1k07/cqYBWwOya/6FzjAE+k=) 4: _GwYJ0PKXJK6fqA4cXd9zGiQJsk.roa (hash: TYTF9XrM81uGdSP5QXPvN15cnh9G39fwkeUY9WQ9Rbg=) 5: cxDAVDgNr82cHnIJJB4UwFs2cGU.roa (hash: sgT8v5E2LVdbt2FX0DJ7W7uBv5rW5PIhx+eS3wQDvSs=) 6: dwRGeRiPxu8Ert93hewpcLQlQPs.roa (hash: EAiXOznjLfpEqp6yCwCN/ahYsHXDQcQqsmXEqqAl9Vo=) 7: nSCF5qcvbkhkVZeNhESQPgQzsYw.roa (hash: Y9RP3rduyUtto1z3zNhzoo4HTEI6paw2VNckcRzLK4g=) 8: vSQI8aeWI14r_sJ8b9o2QgEO_BI.roa (hash: oiaQsMRtgp1rem+ZyltK5SLqiX97thYBgEBpvq3aaYc=) 9: vjMCbq9foMBWV-nsVZG7MAfCaSc.asa (hash: tGLojDZ+iCMIeeaPkZBNAIX8zoqdi2h+IoSoEW1tqJg=) 10: wyPR3DQqTcPeXSMxj_8q1QvGp98.roa (hash: gpZ7dcu9+au0qJAS/mbf494bt1LZl0k6YCG8tQBUn4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7d:73:74:df:55:cb:c1:77:f0:4d:69:6e:1b:25:67:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713 Validity Not Before: Oct 27 13:01:20 2026 GMT Not After : Oct 28 13:01:20 2026 GMT Subject: CN=a80bd3039cb0f5947a8c6195d71b9da54ea1811f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:98:6a:48:36:f9:a5:2a:59:b9:88:79:47:e9: 21:07:57:a6:d3:a3:6f:a4:70:29:ba:f6:9c:36:8b: 43:cc:63:54:df:e8:d6:64:c2:ea:9b:1c:09:34:df: fb:b3:55:78:4e:17:dc:b2:56:6f:8d:b7:fc:92:33: 2a:59:81:e3:c3:fa:6f:7b:9f:19:8a:39:77:cd:08: c6:a8:ac:75:bd:5b:88:9d:4c:55:8f:f1:4f:11:03: 75:68:57:5e:45:fc:bb:52:f7:82:6f:d3:a0:ae:fa: 65:6f:02:8e:be:3c:26:c9:be:2a:15:91:da:20:64: ee:7a:ca:b8:12:f8:4b:df:8e:e6:e3:45:4d:4a:a3: f3:52:74:6a:03:8d:7c:b0:2e:bc:19:ef:a5:9c:f7: 5a:18:c7:62:17:2f:82:69:c9:55:f4:8c:be:e7:5e: 4f:5e:69:6e:6a:72:fa:6f:10:47:b4:a1:0c:5d:50: 71:c1:f8:e1:84:c9:cc:59:df:82:25:e1:5f:c6:35: ca:c5:b6:c1:91:ea:2b:6c:22:13:60:79:33:f5:b5: fb:5f:f7:d8:0d:d0:27:5a:06:f7:84:b9:b3:df:46: d7:fb:e5:34:06:e8:34:0c:ef:4e:5f:44:2e:6e:2d: 9d:9e:16:96:15:44:da:2a:0e:cb:5b:c2:13:e6:41: 93:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0B:D3:03:9C:B0:F5:94:7A:8C:61:95:D7:1B:9D:A5:4E:A1:81:1F X509v3 Authority Key Identifier: keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:49:66:06:8e:dd:b7:7f:af:b7:bd:60:ff:c8:2f:01:d7:c5: 82:69:a5:95:6b:eb:d6:cb:f9:26:56:92:54:7b:2e:2b:b6:ed: 66:41:96:ff:ef:cd:69:a8:16:54:12:f9:76:12:80:44:56:0e: 41:89:6a:45:36:72:83:67:6b:70:76:8b:6d:6f:9e:02:c3:53: ef:8d:eb:d4:b7:91:8b:8f:2d:e4:dd:cd:ae:a8:64:9d:31:df: c1:9a:2d:13:de:e9:b8:3e:69:1d:e1:43:f5:8f:d1:b5:c4:f9: df:2c:ca:99:ce:2c:93:cf:62:92:ad:ac:ae:fa:b4:05:c3:83: 56:29:d9:62:eb:aa:c4:da:e6:be:bd:f1:9a:8b:9f:ec:6b:57: d1:12:11:04:9d:1f:72:2f:bf:d6:85:8e:5a:42:ca:04:85:2b: b9:14:ac:2d:aa:c2:b1:cf:fe:0d:93:b3:aa:9f:b0:38:fe:9d: d5:97:89:12:0c:e9:1c:40:38:11:20:95:6a:9b:4f:53:0f:45: ce:30:9d:5f:f3:96:e1:6a:43:8a:4f:16:73:15:ad:59:45:75: b6:74:78:5c:ef:7c:60:d2:45:d2:f5:93:ba:eb:41:ac:c7:0a: c9:e8:78:3a:9f:10:07:46:76:cc:4e:5a:1b:9d:17:4d:ed:50: e1:99:01:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF9c3TfVcvBd/BNaW4bJWdKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl MjQ3MTMwHhcNMjYxMDI3MTMwMTIwWhcNMjYxMDI4MTMwMTIwWjAzMTEwLwYDVQQD EyhhODBiZDMwMzljYjBmNTk0N2E4YzYxOTVkNzFiOWRhNTRlYTE4MTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxphqSDb5pSpZuYh5R+khB1em06Nv pHApuvacNotDzGNU3+jWZMLqmxwJNN/7s1V4ThfcslZvjbf8kjMqWYHjw/pve58Z ijl3zQjGqKx1vVuInUxVj/FPEQN1aFdeRfy7UveCb9OgrvplbwKOvjwmyb4qFZHa IGTuesq4EvhL347m40VNSqPzUnRqA418sC68Ge+lnPdaGMdiFy+CaclV9Iy+515P XmluanL6bxBHtKEMXVBxwfjhhMnMWd+CJeFfxjXKxbbBkeorbCITYHkz9bX7X/fY DdAnWgb3hLmz30bX++U0Bug0DO9OX0Qubi2dnhaWFUTaKg7LW8IT5kGTnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgL0wOcsPWUeoxhldcbnaVOoYEfMB8GA1UdIwQY MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt YTBkYzM1NGY0Y2EzLzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATklmBo7d t3+vt71g/8gvAdfFgmmllWvr1sv5JlaSVHsuK7btZkGW/+/NaagWVBL5dhKARFYO QYlqRTZyg2drcHaLbW+eAsNT743r1LeRi48t5N3NrqhknTHfwZotE97puD5pHeFD 9Y/RtcT53yzKmc4sk89ikq2srvq0BcODVinZYuuqxNrmvr3xmouf7GtX0RIRBJ0f ci+/1oWOWkLKBIUruRSsLarCsc/+DZOzqp+wOP6d1ZeJEgzpHEA4ESCVaptPUw9F zjCdX/OW4WpDik8WcxWtWUV1tnR4XO98YNJF0vWTuutBrMcKyeh4Op8QB0Z2zE5a G50XTe1Q4ZkBIQ== -----END CERTIFICATE-----Generated at Tue Oct 27 22:21:18 2026 by rpki-client