$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: wf+1C4BUKedZC0YmbHlee7yoMd5BKjl+yyI1Op+X2g0= Subject key identifier: 30:A7:3C:79:4D:FA:37:7A:AA:5B:46:E3:EC:BD:71:4A:9B:7E:D5:47 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 01A1DF4CBBA54996EFEFAC4A8C550414BE1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 113D Signing time: Sun 15 Nov 2026 13:01:50 +0000 Manifest this update: Sun 15 Nov 2026 13:01:50 +0000 Manifest next update: Mon 16 Nov 2026 13:01:50 +0000 Files and hashes: 1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=) 2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=) 3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=) 4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=) 5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=) 6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=) 7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: J9RQH0N3u4folEePsv6bPzoabXqF3Ht/N8+h62u27DM=) 8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=) 9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=) 10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=) 11: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=) 12: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=) 13: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:4c:bb:a5:49:96:ef:ef:ac:4a:8c:55:04:14:be:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Nov 15 13:01:50 2026 GMT Not After : Nov 16 13:01:50 2026 GMT Subject: CN=30a73c794dfa377aaa5b46e3ecbd714a9b7ed547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:01:b6:96:39:cc:03:cc:4a:1d:ad:e9:27:5f: ef:b0:0d:0b:e1:56:ca:2f:78:62:54:4f:fc:e1:4e: f4:5f:58:9b:38:61:52:1f:3b:f3:5b:26:fa:2d:f6: 76:c2:30:19:50:c5:6d:a4:fd:b5:52:07:14:6b:f1: 42:5e:bd:cd:1c:bc:2f:cf:45:1b:58:23:ff:52:92: 64:56:7f:05:63:7c:fb:ec:84:92:fe:73:12:be:fa: 26:79:0d:36:11:12:90:a5:e6:7f:6b:2a:99:be:95: ce:aa:fe:25:b2:b6:1e:fd:c0:af:8b:7c:bc:4c:6e: 79:1a:04:8f:96:5f:97:f9:ce:f2:62:92:eb:cc:d7: fd:36:21:1f:fe:3f:40:a5:3c:36:21:75:27:e5:0e: 1a:56:e8:21:88:92:3f:14:04:df:64:56:af:e4:76: b7:e6:d5:d6:ae:59:c3:b0:99:ff:27:5f:fc:3f:b1: c4:7f:60:4e:39:de:8d:7d:9b:8d:16:3f:15:df:68: 53:96:9e:fb:be:30:7c:96:3e:0d:55:b7:8d:02:d4: 1d:85:31:28:89:37:dd:10:37:b5:93:8a:2f:60:21: a2:33:c0:8e:93:3b:85:bb:6f:ff:5f:91:9f:c2:df: 64:5b:de:cf:0e:4b:3a:c0:3d:44:f7:9b:af:41:e9: 13:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A7:3C:79:4D:FA:37:7A:AA:5B:46:E3:EC:BD:71:4A:9B:7E:D5:47 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b3:cc:01:59:20:a4:9c:b3:8e:0e:f3:9a:07:fb:59:39:38: ba:06:93:16:ad:6b:72:ad:d7:c0:62:50:9e:f0:37:69:b3:ab: 43:ee:20:fe:53:47:b6:c0:9b:33:62:5d:ec:9e:82:67:5c:bd: a7:a1:e1:75:0c:55:48:43:ae:86:95:60:44:d0:4d:60:00:c1: 4b:a6:ea:f2:c8:80:2d:e1:c2:e1:00:df:a5:3f:47:9e:4a:4e: 5c:f8:02:35:de:6c:14:8c:cc:cb:0f:82:bc:0e:89:35:43:8f: b1:49:15:ca:03:28:85:46:61:0b:f3:9c:83:99:97:2b:28:1f: 93:a3:49:8d:97:8c:f5:15:10:13:e8:70:11:d9:90:16:aa:dd: 73:75:82:13:45:75:0b:9a:e4:cb:96:3f:83:f8:0b:03:48:1d: cf:4f:33:58:0a:55:2e:e7:6d:3f:13:18:13:9e:c6:08:40:ea: 2e:89:24:c1:48:69:82:37:fd:51:24:ce:8c:f4:ad:6e:f5:50: d2:7c:f9:03:3a:21:f4:0e:99:8b:3f:1a:07:57:ce:7c:1f:80: f5:6f:5c:cb:89:20:84:93:e7:59:0a:9f:33:d9:99:ab:e4:fe: 55:71:44:97:b4:c0:3f:b4:34:d4:36:1b:75:70:a1:22:cb:24: 1b:7b:bd:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHfTLulSZbv76xKjFUEFL4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYxMTE1MTMwMTUwWhcNMjYxMTE2MTMwMTUwWjAzMTEwLwYDVQQD EygzMGE3M2M3OTRkZmEzNzdhYWE1YjQ2ZTNlY2JkNzE0YTliN2VkNTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgG2ljnMA8xKHa3pJ1/vsA0L4VbK L3hiVE/84U70X1ibOGFSHzvzWyb6LfZ2wjAZUMVtpP21UgcUa/FCXr3NHLwvz0Ub WCP/UpJkVn8FY3z77ISS/nMSvvomeQ02ERKQpeZ/ayqZvpXOqv4lsrYe/cCvi3y8 TG55GgSPll+X+c7yYpLrzNf9NiEf/j9ApTw2IXUn5Q4aVughiJI/FATfZFav5Ha3 5tXWrlnDsJn/J1/8P7HEf2BOOd6NfZuNFj8V32hTlp77vjB8lj4NVbeNAtQdhTEo iTfdEDe1k4ovYCGiM8COkzuFu2//X5Gfwt9kW97PDks6wD1E95uvQekTTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCnPHlN+jd6qltG4+y9cUqbftVHMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbPMAVkg pJyzjg7zmgf7WTk4ugaTFq1rcq3XwGJQnvA3abOrQ+4g/lNHtsCbM2Jd7J6CZ1y9 p6HhdQxVSEOuhpVgRNBNYADBS6bq8siALeHC4QDfpT9HnkpOXPgCNd5sFIzMyw+C vA6JNUOPsUkVygMohUZhC/Ocg5mXKygfk6NJjZeM9RUQE+hwEdmQFqrdc3WCE0V1 C5rky5Y/g/gLA0gdz08zWApVLudtPxMYE57GCEDqLokkwUhpgjf9USTOjPStbvVQ 0nz5Azoh9A6Ziz8aB1fOfB+A9W9cy4kghJPnWQqfM9mZq+T+VXFEl7TAP7Q01DYb dXChIsskG3u9hA== -----END CERTIFICATE-----Generated at Sun Nov 15 16:39:39 2026 by rpki-client