$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json) Hash identifier: We1Dlqlp93x42cWCOXt/GDGdDS2dbHcdVxCpGZfAKI4= Subject key identifier: 15:BF:45:F6:46:38:34:CA:87:20:2D:3F:00:26:84:C2:3B:EF:8C:DA Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Certificate serial: 01A0E474E313D337542907176A6FE507764F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft Manifest number: 1A85 Signing time: Sun 27 Sep 2026 20:01:00 +0000 Manifest this update: Sun 27 Sep 2026 20:01:00 +0000 Manifest next update: Mon 28 Sep 2026 20:01:00 +0000 Files and hashes: 1: 0UXZLxmo0wM791OjAQvNwfm2flg.asa (hash: fckAHmyvVNaeQqmLb5z5kUo++7GABr5luLIf2iVlPj8=) 2: 44CA1k5d4Zw23GcP4lb4i4-vDPc.roa (hash: 6c/pnyjlYlDcfbUXGOzr645pKHpIFoe+rR3oaf4Be6g=) 3: 4OwitvkmkhKV2LtZpk1QLZTpl4E.asa (hash: aGnCO3oIRNu7nbl3yxascrT5ogI+38YhsT0IaT24+Ps=) 4: 5xi8bSy9c83Bg6qClBnmgJJbFA4.asa (hash: RSBuuu1KOgBq7xwPJfJizf07iznlWzC9UjX015Je8yk=) 5: 6IqI9gfABI1V0avL-WdqDQ9gNGk.asa (hash: x/3Qd9UB9tmsdebQBpFmyTkyhk8Goo0sm80nqeO+7ZQ=) 6: CvTWeK7xp9gyjdFy-y9UwtpH8uE.roa (hash: 733OwKswiweiXSLuyQj7UGTmZLfaZ6qRpmED62r0qvA=) 7: EutctDjYApRtXZCCgXc1_FMXFMI.roa (hash: +qc+pkUgzkZJUvQ7/ijItcJlPfU6GdEPJtEIGHeSZ+w=) 8: H5cJU-sxt-hZI6FMau1LEtyh614.asa (hash: NYeq2kG2iVJonZO0Jwu2qtybJFReQWpFb9Vj1/WLpQg=) 9: IIZ_mGH3X6355DF3JRICMRfOqTQ.asa (hash: TxemWnQodUkymHC8e+RcAhRi9Z78sNJiYQ7hSaXm0gs=) 10: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: JP/B8s6wsoVVVgZbJ4IG5gAPmlkIcmGMs3PUV+R/hUQ=) 11: N6KyBv5Xx5MGRmWO1SOVIpA2W_I.asa (hash: cD3zCeI88xWZ6CMz6J0M2Axze+U4XS2co5BuDwABalI=) 12: prkwm3Nwi4i7nBXudHI4KuKfmHI.asa (hash: krdyRxkzH8bZP80JYgy+3OWYOrwBKzT/IXHhrb1NwSs=) 13: vVF3pTqa2KJdx2p8PlUWcXPESX4.roa (hash: 8smQRNWHO8FZtO5kA7zQSvtufSO4Sm4HtWZBhh9ooug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e4:74:e3:13:d3:37:54:29:07:17:6a:6f:e5:07:76:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Validity Not Before: Sep 27 20:01:00 2026 GMT Not After : Sep 28 20:01:00 2026 GMT Subject: CN=15bf45f6463834ca87202d3f002684c23bef8cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:26:ca:69:1d:ce:96:f4:d7:14:91:8c:1a: 00:23:76:86:97:05:f7:56:ef:49:74:3d:da:73:68: 5e:4a:2e:48:0f:25:25:ed:1c:73:4e:b4:a0:99:1c: 73:44:69:03:dc:e7:ac:03:8d:f6:f2:44:e9:7a:1b: f4:94:49:fc:af:d0:79:a5:e1:34:fa:12:ee:99:1b: fe:a3:70:8e:3a:b5:a3:0f:59:ef:b8:a6:9b:e7:3c: 9a:12:ae:4c:8b:73:a3:79:6e:e3:c4:a6:05:b8:80: 04:00:26:55:7c:7e:69:24:a0:1b:9c:8d:58:aa:b9: 8d:57:f5:6d:39:4f:7c:3a:49:bf:52:a2:e7:42:40: a3:49:1b:54:2e:05:a2:06:f1:de:ac:80:16:33:f0: 9b:b2:dc:9c:c9:62:57:4c:1e:d2:ea:6a:e6:f0:7e: 37:1b:a5:b0:38:0f:03:e6:7b:17:17:04:f4:be:2c: 3a:e1:ee:4c:a3:1c:e1:82:e6:9a:92:3e:89:72:97: 90:38:2b:d2:16:13:98:d2:02:a1:2b:68:4e:ae:47: b5:b2:39:d7:96:2f:19:0b:9e:12:6c:7a:ad:53:31: 78:d1:8e:7b:42:13:11:4b:32:96:92:50:35:d0:42: 5e:10:87:3c:e6:d2:02:d7:b8:d9:4c:e1:02:39:1a: 72:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BF:45:F6:46:38:34:CA:87:20:2D:3F:00:26:84:C2:3B:EF:8C:DA X509v3 Authority Key Identifier: keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:ec:dd:6c:fc:da:70:01:2d:fd:07:bb:68:55:08:d9:ac:e1: a8:4f:50:e1:82:81:ae:85:d4:61:ea:db:d9:51:5c:de:5a:4a: fa:21:8b:dc:fe:44:b7:b2:fc:0f:ea:d6:88:84:9c:a0:1f:f6: b8:07:50:0b:d5:c4:6d:b7:07:a6:af:db:61:ac:a9:99:fe:0b: 63:ac:c4:df:9a:b4:c3:af:29:6c:99:1b:12:97:19:c3:9e:a2: 9a:53:81:85:bd:43:38:5d:c3:26:2c:5c:75:c0:3f:0b:0b:d0: 8f:92:28:05:50:f2:6b:80:16:28:ae:50:f5:33:88:53:7a:a4: e0:73:7b:4d:10:37:c3:5b:8c:0e:c0:6f:b5:7b:34:df:3f:09: f9:a5:4a:10:cf:89:07:f2:06:1e:3d:dc:04:f5:40:3d:04:bf: c0:75:f5:8c:9f:98:ff:d2:23:7c:cb:10:d2:4f:be:a2:62:d3: 52:c7:be:83:32:dc:dd:d7:85:2a:37:be:1a:4f:7d:e1:26:64: af:87:a2:d6:93:8f:5f:2f:e4:9e:2a:db:be:84:a3:b8:d1:09: 3a:7d:c2:b4:c1:56:72:41:d7:7d:1c:7e:e8:40:70:58:e6:3f: 6c:b4:13:eb:77:54:89:21:15:8a:0c:13:0c:4a:14:c7:de:ac: 88:4e:e0:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDkdOMT0zdUKQcXam/lB3ZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl MjFiYjkwHhcNMjYwOTI3MjAwMTAwWhcNMjYwOTI4MjAwMTAwWjAzMTEwLwYDVQQD EygxNWJmNDVmNjQ2MzgzNGNhODcyMDJkM2YwMDI2ODRjMjNiZWY4Y2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZsmymkdzpb01xSRjBoAI3aGlwX3 Vu9JdD3ac2heSi5IDyUl7RxzTrSgmRxzRGkD3OesA4328kTpehv0lEn8r9B5peE0 +hLumRv+o3COOrWjD1nvuKab5zyaEq5Mi3OjeW7jxKYFuIAEACZVfH5pJKAbnI1Y qrmNV/VtOU98Okm/UqLnQkCjSRtULgWiBvHerIAWM/CbstycyWJXTB7S6mrm8H43 G6WwOA8D5nsXFwT0viw64e5Moxzhguaakj6JcpeQOCvSFhOY0gKhK2hOrke1sjnX li8ZC54SbHqtUzF40Y57QhMRSzKWklA10EJeEIc85tIC17jZTOECORpyoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBW/RfZGODTKhyAtPwAmhMI774zaMB8GA1UdIwQY MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt ODUwZjM0OTA2MjI5LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5 LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy+zdbPza cAEt/Qe7aFUI2azhqE9Q4YKBroXUYerb2VFc3lpK+iGL3P5Et7L8D+rWiIScoB/2 uAdQC9XEbbcHpq/bYaypmf4LY6zE35q0w68pbJkbEpcZw56imlOBhb1DOF3DJixc dcA/CwvQj5IoBVDya4AWKK5Q9TOIU3qk4HN7TRA3w1uMDsBvtXs03z8J+aVKEM+J B/IGHj3cBPVAPQS/wHX1jJ+Y/9IjfMsQ0k++omLTUse+gzLc3deFKje+Gk994SZk r4ei1pOPXy/knirbvoSjuNEJOn3CtMFWckHXfRx+6EBwWOY/bLQT63dUiSEVigwT DEoUx96siE7gYw== -----END CERTIFICATE-----Generated at Mon Sep 28 02:22:49 2026 by rpki-client