$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: V8Gd5OhCNCK0EousgS+IkShV9E6L0LWUmbOtzvIJfxA= Subject key identifier: D1:17:E6:ED:46:0E:9B:92:2A:04:59:4E:C0:F8:95:49:DA:C0:1D:8F Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 01A10E156E139369E149FBF55A1EB0961A25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 1A9C Signing time: Mon 05 Oct 2026 22:00:47 +0000 Manifest this update: Mon 05 Oct 2026 22:00:47 +0000 Manifest next update: Tue 06 Oct 2026 22:00:47 +0000 Files and hashes: 1: 4Y6MQ3p-LB6KrtJDo2AEO8Db164.roa (hash: 5atEicVhW+L7Xp6D+LeVcw6nuJeehWHQba6IJiOM6Ms=) 2: As_pVbbnYy_pmBMm0RcX49iX6nY.roa (hash: qzus9UnBcueHhtxBHMySF8j/gf9sbzuNZT387lhMVtE=) 3: IauAxs74tysYNqUuPq3mwgGVBQY.roa (hash: I4y1ed39yJsl3DkGtY/KgIMLvKWqfNhrhjl/qeS45rw=) 4: Q7kjVEhiYHEz_AIBuFCX2o6kXpQ.roa (hash: MuV9xof7zxa6mZSUu9k4zgmUqNgq/+xzFvRw2ejciSU=) 5: UhbmNbA2hwd3CclD7uA5e7VB30s.roa (hash: juSkCYLLU3kVaC1Dq0hdQw2DrlMO0olfzSo1w3Y2IAk=) 6: VmKAAjA4J61Er2pV6nmm2We8eeg.roa (hash: H91QyBvG1I/wj9YFT3ovdtrMrR5xBG3HkuYFKTPkUdk=) 7: Z2JoyRveJcrOS84W6TpEPChd0u8.roa (hash: aEKu2ZE0v6kUC0OnwN6L0HbgZBJi/Gu9YSjx1j8FGfg=) 8: aC9Q_3qjddY1l6-wNmHh31rhiv4.roa (hash: uKO8uok9xpbvJA3MGYKk7ndaYzKJUW2pxyQNGvBjSDU=) 9: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: iheUu7opGfM7la+kt9GiF0zkA6WMR5spEGnbVAhH7Os=) 10: ozLeruCkBhC4yZCUw5lMFfl-TtM.roa (hash: ygWG9N1PXEIgHYpH9dLMI7Qu5ggvIeMB+/+Dm4Mbbz4=) 11: q47qpt1p1Wj02CxPXYgOsikq_GY.roa (hash: RR0Z4b1X2W/yjPPcvR1hUKYG5qy0mYBUJ7YN4lZTqrk=) 12: s0Slj9yVMX7lCq79bqSGCqW6KPg.roa (hash: RaEewhp7TYWAZZHFh2A3/CMtjGLdyIT76c5b57zkYYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Oct 2026 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:0e:15:6e:13:93:69:e1:49:fb:f5:5a:1e:b0:96:1a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Oct 5 22:00:47 2026 GMT Not After : Oct 6 22:00:47 2026 GMT Subject: CN=d117e6ed460e9b922a04594ec0f89549dac01d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:b8:b3:31:70:7c:f6:9b:c1:35:ac:ea:ba: 56:26:4c:a2:f9:01:75:da:46:26:1d:35:14:13:67: 8a:6d:18:6e:aa:f9:a0:22:f9:99:d6:b4:2d:dc:56: c8:0e:54:8a:02:95:b7:6b:b2:5d:2b:cf:60:08:83: c6:2e:6c:25:46:00:7a:cb:6e:86:f3:ad:04:fe:76: e0:54:0a:fe:92:53:97:08:cc:72:0a:a2:06:ca:b6: a3:fe:b2:d8:7d:36:f3:93:74:61:b8:c8:a9:d6:4b: 0b:d2:ad:a4:3c:14:a2:f3:47:91:ea:f9:0f:ab:60: bb:ee:43:7e:a6:3a:cf:8b:d4:fe:ff:5b:c7:9b:3e: 54:6b:5a:1b:b6:71:90:e7:d4:c7:0c:57:6d:b9:68: 72:9f:cb:85:53:95:be:77:0f:ac:39:5c:ed:83:a8: 46:8f:30:a8:37:65:cb:1f:24:ef:d8:08:83:9a:f5: 34:83:a1:a6:48:4f:3b:5b:47:ba:11:24:ff:f3:3d: 8f:af:76:aa:58:39:50:d6:bd:ce:d6:84:c5:09:d2: cf:5d:36:7b:96:3d:28:8f:6b:62:d4:64:bb:ee:70: a2:f3:d6:3e:fc:d9:99:9f:f6:f1:91:33:08:9d:67: e8:74:1f:ba:59:1d:7c:ad:f4:95:b3:3f:97:82:b8: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:17:E6:ED:46:0E:9B:92:2A:04:59:4E:C0:F8:95:49:DA:C0:1D:8F X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:23:b3:b7:7f:71:e1:be:8a:bf:ae:6c:c5:fc:d9:40:cd:72: 81:aa:aa:6d:f8:ff:e8:56:4b:24:b7:36:85:36:e3:8e:c7:a2: b3:bf:ad:8e:ef:8a:a4:da:41:93:f2:19:f7:61:62:a1:74:a1: 7f:c7:d6:90:d6:72:2d:c4:6d:d7:4f:81:01:70:58:7b:f2:c9: 08:8b:d7:80:9b:0e:da:a9:d6:d5:b1:29:63:c7:7f:39:d3:61: 69:2c:97:42:b5:23:bf:7d:5a:f7:fd:eb:ca:b2:98:91:60:9f: d8:ef:22:c3:43:8d:f5:b8:fb:e8:ed:4e:3a:bc:c3:22:07:e7: ea:c6:39:d0:3d:06:d6:12:cc:c6:24:7b:9c:9c:78:13:ae:ea: 06:55:56:0a:75:4f:47:46:99:06:69:b3:0f:cb:9b:79:f5:9c: be:65:78:19:c9:de:8c:12:7b:5a:bb:9c:91:d9:6e:64:a9:82: 55:63:3b:62:24:d7:36:c2:a0:2c:95:47:09:d6:bd:38:10:80: 12:bf:20:eb:0b:ae:ac:22:f6:14:61:b4:a5:4c:cb:78:02:ea: 57:6c:d2:95:66:8e:4a:0c:b2:0b:78:0c:d6:a1:2b:18:9c:8f: ae:a3:b4:ef:43:8e:10:00:70:fb:01:a6:f3:6a:50:f2:66:25: 8b:45:fd:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEOFW4Tk2nhSfv1Wh6wlholMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYxMDA1MjIwMDQ3WhcNMjYxMDA2MjIwMDQ3WjAzMTEwLwYDVQQD EyhkMTE3ZTZlZDQ2MGU5YjkyMmEwNDU5NGVjMGY4OTU0OWRhYzAxZDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudO4szFwfPabwTWs6rpWJkyi+QF1 2kYmHTUUE2eKbRhuqvmgIvmZ1rQt3FbIDlSKApW3a7JdK89gCIPGLmwlRgB6y26G 860E/nbgVAr+klOXCMxyCqIGyraj/rLYfTbzk3RhuMip1ksL0q2kPBSi80eR6vkP q2C77kN+pjrPi9T+/1vHmz5Ua1obtnGQ59THDFdtuWhyn8uFU5W+dw+sOVztg6hG jzCoN2XLHyTv2AiDmvU0g6GmSE87W0e6EST/8z2Pr3aqWDlQ1r3O1oTFCdLPXTZ7 lj0oj2ti1GS77nCi89Y+/NmZn/bxkTMInWfodB+6WR18rfSVsz+XgrhGAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEX5u1GDpuSKgRZTsD4lUnawB2PMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXiOzt39x 4b6Kv65sxfzZQM1ygaqqbfj/6FZLJLc2hTbjjseis7+tju+KpNpBk/IZ92FioXSh f8fWkNZyLcRt10+BAXBYe/LJCIvXgJsO2qnW1bEpY8d/OdNhaSyXQrUjv31a9/3r yrKYkWCf2O8iw0ON9bj76O1OOrzDIgfn6sY50D0G1hLMxiR7nJx4E67qBlVWCnVP R0aZBmmzD8ubefWcvmV4GcnejBJ7WruckdluZKmCVWM7YiTXNsKgLJVHCda9OBCA Er8g6wuurCL2FGG0pUzLeALqV2zSlWaOSgyyC3gM1qErGJyPrqO070OOEABw+wGm 82pQ8mYli0X9/Q== -----END CERTIFICATE-----Generated at Tue Oct 6 07:26:26 2026 by rpki-client