$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft File: J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft (raw, json) Hash identifier: OFvJbFSXQHlqS7fZqm5OOBqTLF0Yr9yKdyVSV/A5/mY= Subject key identifier: AE:E8:71:16:8C:31:EF:9D:99:55:B6:18:FF:CC:82:A8:49:5F:86:DB Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 01A1841A86E04DE2B04E92DC935A545830FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft Manifest number: 1BFC Signing time: Wed 28 Oct 2026 20:01:33 +0000 Manifest this update: Wed 28 Oct 2026 20:01:33 +0000 Manifest next update: Thu 29 Oct 2026 20:01:33 +0000 Files and hashes: 1: 08eXN8WwRJNKx9Xqnt7tJbHGPj0.roa (hash: pK7tP7sadzreWKKqkCMjpwi84pfqSCeFGCLpjjwozFQ=) 2: 0EAd0NIVQFpYF8Sfry0-sg27DIU.roa (hash: AM+vkkVy+PRlTYsSrmQEunL3834jj/6I3kNZmcTiVSQ=) 3: 1AlxxMUZolJLdZHPVyV2UoSe358.roa (hash: 9ehijIeVwQp7RL+YUW6sio1uU2Yn7VaTLU6Oe4mOvfE=) 4: 3WBdory9XqQbfC4TyXJx63N3UFw.roa (hash: nahNFLPGEU3gQRtFtbIkO4bhI0n9GpvfWrrSsEPAAWY=) 5: D7n5z-X4QhT0cqePH5_ymEPmodc.roa (hash: o8sKCnE2zp0a9Xj0y7an5x9MEDGoNlR5ZqyI5pidfw0=) 6: EugaGmrAg66bJHbDR050z2x8ppM.roa (hash: l112VfNQG03RqXUG4DN5iFKyE8XjBnUNtDrz/Dolok0=) 7: F5NbQDwuDql8YpH3L-ZJg9ShqS0.roa (hash: mjnepbUc5lCxSNEcHUqBuIxj9G2yoTLDmwdW50NPFrU=) 8: FFLikyFmH-Abpg8kwz_BXxHfNCU.roa (hash: cMgG0SrLZjSK1IoPjyUitd4xe4z4i4cE22ZF/9OmiC0=) 9: H3GT4590I-wlLcRehIEn90WLp0w.roa (hash: 9Fh6QD3KXc86AyaAkfv2S/ORqPuK9LKKtkaebRdEzQ0=) 10: HzNF72M-JUjvY2auMIhPMaZbcu4.roa (hash: jIE8nOAj+oK6NNaSyEYskPrjUE0ya5pmThUjASHeDg0=) 11: J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl (hash: gVN6SETdOYw2TrcmzBS+Nzp7nj2kdoQmBfzITBb8lJA=) 12: Jt5kJ6zglKuHSt2O9KyF4xbzBHg.roa (hash: f53J/UsPl50nlO0PDJi0nDqUWowY7qlvBpfHPm2wNVo=) 13: KAwmeFKkJNecLC_dhlCgmutRBdg.roa (hash: 4iHI08OHJ2NSksCBP3bSg9muJPVbkbXbMCBVzC/LIqU=) 14: LPhThbsTW9RteYTnU5fllHszvgw.roa (hash: Lr7N0csN9qpepByS3CiyJwbJBLIH11PFa4xdBV/iINk=) 15: Q1vTPTsAyiBhd4B6ICPubVT5RAA.roa (hash: QYiqA7g6apA/hS3xz4OT+/HBNbSOo0h0b476zf/bHvU=) 16: R91CcPNkUtu6XE-ZUwryAs6c8dA.roa (hash: lK0bjp1+iJCnWnbzkCHfNgNGHNMPkAnpfr0Ad8hVlWw=) 17: Tc5xm-6wNZTyj1dJnc4HQrGeS-o.roa (hash: vIzC9sIZH6YUu+Ppt3sLWqdbfBwlSwyCWej1tNmuxcU=) 18: U-qi4IuWNyY_2ScOGuO5wDkIP5g.roa (hash: vLUhnxRWvdCmmMvb1mJXW0MVOezf9HqsIWcCip83cUs=) 19: U8RgryHUq2JAAsgHSpUUEEa9flU.roa (hash: e5+nqmhm/ol/qrImk3F60PKlgocSXFLw4tFumPg6bGE=) 20: XkCpQ4xWLE9dlV83IDE1saD3b2k.roa (hash: bDYpXnq431ghla3lAMtwBrRxAdHF9JaPOSyXTvPRRR4=) 21: aHs-rF7InSlshvWZMPlqLeGf8BQ.roa (hash: cnpHyXi6Xup8rUbntENTMIwHeI0OtwJDt5zJW7zxTYM=) 22: dorf3vXiF8po1xw2yVEc19fH3qg.roa (hash: aKIMUfFNrtICIbFoumkp4rd3G4RSV0nPoRkpF++bDVw=) 23: dt_sesUw1jCIshOtSv8VduDtfqM.roa (hash: +LfBzD6Ek6GfCiZXW1OnTJegtkF9IIfufLlAfANB8ls=) 24: eQteGe3dUsvEvumdMFEyVqvLcUI.roa (hash: i/PVqNV8H6klhROm0PX4mdNPbEa+iKND/8anAmOUj6s=) 25: lQ-pHpjRMZhyd1Y9T0154pmTd_A.roa (hash: 36dtU5Co+4Osmz8MPPCQzI62McYBILqhF760HloYOJc=) 26: m7gY7tgEZEhnmCq-HkAcQ1-8HbE.roa (hash: xODHFAEs2OHYrHZKfEYMuN4r2rdZ9JfZ6XFxFdIMEYo=) 27: mVq-RheS9loKkvNE-HJP6Bl44Xs.roa (hash: FXO6rXJTO+B39ttTEvJ84SLgGjNXsixgoobfbc73mKg=) 28: oDrrwj_J2YbGDvH96R1q32wibOg.roa (hash: enzCHScTPelD74ea898lsenkjGHLvXoRBcBQQihmhlo=) 29: qMkLAoNAUe9q8gfWdZ7a_wzUGvg.roa (hash: qos4wdFa7iSz40bF0wQ8pxahdxfqI9hUbUKo1P2JNYQ=) 30: sWfqkNHPcPkhA5a8aSQtoMjSk1g.roa (hash: g17baIMwzbfRDSr/hcX2JdloXizpSVyiXSiXvc7mu2Y=) 31: uOXZ7dA37LwX_dUk0h3whE8VroM.roa (hash: B5yZFJxO+rFT+r2NOBvcuBV08rBXM7MSzo2Ev2Or/YI=) 32: uQvF6Da23C6ZAMX7vvtkwb0AKRc.roa (hash: KOaRnulvsn4uqLEE01teqwWw1p8vrt95QXZqBSWyvLE=) 33: uhwMHBy0T1Zz_2CZbx4pD5TsJB4.roa (hash: QGGnLHX611kdCZRgFJS0ABfsrwzGsKy+hT++rsHa4HM=) 34: vkLy7286dxrhKN8_vNXJRiO43tI.roa (hash: zEYD3rV5MA0KRfFUZNuyB8fBP2X5IdnwsvbIbCutsO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 20:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:84:1a:86:e0:4d:e2:b0:4e:92:dc:93:5a:54:58:30:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Oct 28 20:01:33 2026 GMT Not After : Oct 29 20:01:33 2026 GMT Subject: CN=aee871168c31ef9d9955b618ffcc82a8495f86db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0e:e1:5f:7c:2f:84:34:b9:ac:63:af:d5:e2: b0:cd:10:72:88:16:b2:23:84:98:b6:0a:04:cf:00: 89:af:b1:ac:b8:ef:ab:8d:15:21:d9:a0:c1:2c:41: 85:a4:27:36:6a:52:78:a5:25:da:85:c3:d5:3a:46: e3:a3:a6:19:da:de:04:ef:f8:ec:c1:09:e6:96:ba: 7c:5c:a1:ff:c3:2e:80:02:52:a1:97:96:db:6f:73: cd:b5:ed:df:c4:c1:9a:43:24:00:87:c8:49:f1:04: 59:43:b4:4e:e0:d9:21:17:44:b5:78:13:25:67:a3: 3d:e5:ba:2e:df:c7:1d:8b:36:98:55:03:91:35:c0: 70:c9:ee:10:c7:c7:d8:92:b1:48:bf:ea:dc:55:f2: e8:8a:3f:da:6d:dc:e3:18:95:f6:ae:d4:9f:a5:d5: 13:26:e1:8e:82:6e:c2:ff:54:06:e2:ff:33:ce:ca: f7:15:a7:22:88:99:f0:06:d8:98:2e:74:78:70:47: 27:90:c0:54:63:18:bf:af:ed:0d:fc:d8:59:05:d7: 3b:83:df:6f:b0:81:c9:9f:98:6c:65:d2:f9:6b:8b: f4:f1:2c:7c:40:bc:cc:71:c9:db:f7:16:e9:17:b6: 12:0f:b9:40:1e:ba:90:c0:e7:f1:da:0c:b0:53:90: e3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E8:71:16:8C:31:EF:9D:99:55:B6:18:FF:CC:82:A8:49:5F:86:DB X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d6:3a:72:ba:47:60:bf:87:d3:3e:45:32:0c:73:df:89:0a: 5a:92:ab:b4:4d:26:b9:ac:cc:0e:27:79:fd:c4:19:69:45:8a: f7:9c:6c:43:bc:54:e7:31:2e:09:62:13:3f:49:0e:c9:38:69: 73:09:2d:b3:1e:d4:96:00:dd:bc:5a:ff:32:7c:a1:40:28:e7: c6:db:27:e0:a8:af:14:6a:95:69:e4:af:55:de:eb:a1:c4:19: 98:8f:66:ee:31:01:a4:86:27:ee:ba:7a:16:d6:f3:58:2e:19: 85:0b:6d:b9:d3:6e:7b:0e:9f:16:e2:1f:5d:ca:cb:64:e1:c1: 09:c5:8a:f4:38:09:7d:e3:7c:b0:57:38:7c:d6:dd:e6:ec:2e: d9:fd:3b:c0:66:28:27:49:a4:f4:4e:83:73:0e:91:7d:ab:78: f4:1a:b6:bf:75:3e:dd:6d:d1:83:3c:59:19:b3:b4:b8:d6:1e: ed:7a:82:49:59:b4:30:c6:3f:1c:86:b6:95:d7:54:28:28:7a: 31:36:1d:e5:cd:b5:6a:bf:9f:5b:aa:00:16:72:d3:25:44:6b: 95:95:31:b3:f6:27:3d:c5:33:5e:08:9a:6d:8e:bf:e1:14:fc: c9:17:fa:25:e3:3f:df:34:15:22:1c:74:b1:bb:5a:a2:c5:95: e0:27:14:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGEGobgTeKwTpLck1pUWDD7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYxMDI4MjAwMTMzWhcNMjYxMDI5MjAwMTMzWjAzMTEwLwYDVQQD EyhhZWU4NzExNjhjMzFlZjlkOTk1NWI2MThmZmNjODJhODQ5NWY4NmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA7hX3wvhDS5rGOv1eKwzRByiBay I4SYtgoEzwCJr7GsuO+rjRUh2aDBLEGFpCc2alJ4pSXahcPVOkbjo6YZ2t4E7/js wQnmlrp8XKH/wy6AAlKhl5bbb3PNte3fxMGaQyQAh8hJ8QRZQ7RO4NkhF0S1eBMl Z6M95bou38cdizaYVQORNcBwye4Qx8fYkrFIv+rcVfLoij/abdzjGJX2rtSfpdUT JuGOgm7C/1QG4v8zzsr3FaciiJnwBtiYLnR4cEcnkMBUYxi/r+0N/NhZBdc7g99v sIHJn5hsZdL5a4v08Sx8QLzMccnb9xbpF7YSD7lAHrqQwOfx2gywU5DjjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7ocRaMMe+dmVW2GP/MgqhJX4bbMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9Y6crpH YL+H0z5FMgxz34kKWpKrtE0muazMDid5/cQZaUWK95xsQ7xU5zEuCWITP0kOyThp cwktsx7UlgDdvFr/MnyhQCjnxtsn4KivFGqVaeSvVd7rocQZmI9m7jEBpIYn7rp6 FtbzWC4ZhQttudNuew6fFuIfXcrLZOHBCcWK9DgJfeN8sFc4fNbd5uwu2f07wGYo J0mk9E6Dcw6Rfat49Bq2v3U+3W3RgzxZGbO0uNYe7XqCSVm0MMY/HIa2lddUKCh6 MTYd5c21ar+fW6oAFnLTJURrlZUxs/YnPcUzXgiabY6/4RT8yRf6JeM/3zQVIhx0 sbtaosWV4CcUQA== -----END CERTIFICATE-----Generated at Thu Oct 29 05:55:23 2026 by rpki-client