$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json) Hash identifier: zLqHW8aOuWtjoMQsAC74PqMAlS7aPCND28Dr5sBH+wU= Subject key identifier: A3:3A:A6:7A:B6:A9:44:94:A8:AF:D6:80:7B:29:12:83:F0:FB:04:C6 Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Certificate serial: 01A0E6634CB68480D21C46D4621EE3107562 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft Manifest number: 1A86 Signing time: Mon 28 Sep 2026 05:01:02 +0000 Manifest this update: Mon 28 Sep 2026 05:01:02 +0000 Manifest next update: Tue 29 Sep 2026 05:01:02 +0000 Files and hashes: 1: 0UXZLxmo0wM791OjAQvNwfm2flg.asa (hash: fckAHmyvVNaeQqmLb5z5kUo++7GABr5luLIf2iVlPj8=) 2: 44CA1k5d4Zw23GcP4lb4i4-vDPc.roa (hash: 6c/pnyjlYlDcfbUXGOzr645pKHpIFoe+rR3oaf4Be6g=) 3: 4OwitvkmkhKV2LtZpk1QLZTpl4E.asa (hash: aGnCO3oIRNu7nbl3yxascrT5ogI+38YhsT0IaT24+Ps=) 4: 5xi8bSy9c83Bg6qClBnmgJJbFA4.asa (hash: RSBuuu1KOgBq7xwPJfJizf07iznlWzC9UjX015Je8yk=) 5: 6IqI9gfABI1V0avL-WdqDQ9gNGk.asa (hash: x/3Qd9UB9tmsdebQBpFmyTkyhk8Goo0sm80nqeO+7ZQ=) 6: CvTWeK7xp9gyjdFy-y9UwtpH8uE.roa (hash: 733OwKswiweiXSLuyQj7UGTmZLfaZ6qRpmED62r0qvA=) 7: EutctDjYApRtXZCCgXc1_FMXFMI.roa (hash: +qc+pkUgzkZJUvQ7/ijItcJlPfU6GdEPJtEIGHeSZ+w=) 8: H5cJU-sxt-hZI6FMau1LEtyh614.asa (hash: NYeq2kG2iVJonZO0Jwu2qtybJFReQWpFb9Vj1/WLpQg=) 9: IIZ_mGH3X6355DF3JRICMRfOqTQ.asa (hash: TxemWnQodUkymHC8e+RcAhRi9Z78sNJiYQ7hSaXm0gs=) 10: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: HwTqHk0C+pgp2TkmnsEKItd6I8N1PfzCG7a1fwEuzNc=) 11: N6KyBv5Xx5MGRmWO1SOVIpA2W_I.asa (hash: cD3zCeI88xWZ6CMz6J0M2Axze+U4XS2co5BuDwABalI=) 12: prkwm3Nwi4i7nBXudHI4KuKfmHI.asa (hash: krdyRxkzH8bZP80JYgy+3OWYOrwBKzT/IXHhrb1NwSs=) 13: vVF3pTqa2KJdx2p8PlUWcXPESX4.roa (hash: 8smQRNWHO8FZtO5kA7zQSvtufSO4Sm4HtWZBhh9ooug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 05:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e6:63:4c:b6:84:80:d2:1c:46:d4:62:1e:e3:10:75:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Validity Not Before: Sep 28 05:01:02 2026 GMT Not After : Sep 29 05:01:02 2026 GMT Subject: CN=a33aa67ab6a94494a8afd6807b291283f0fb04c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:d1:4f:9a:15:22:e9:a1:8f:9c:d0:a4:b4: 3e:09:6f:2f:42:28:7d:3c:66:e7:38:b5:fb:86:82: 98:61:62:36:aa:bc:c4:5f:3f:df:6a:aa:c4:3a:4c: d4:f8:dd:a9:32:e6:8c:92:55:7b:0e:c4:35:6e:8f: d8:bc:9a:fb:eb:59:37:4b:33:95:17:67:3e:e4:ee: e2:d2:6d:5c:68:5b:fd:1b:57:a0:7f:26:77:6d:97: af:00:68:ac:78:29:7c:81:33:6f:88:27:6d:af:ec: fb:08:f2:1c:0d:76:96:7b:43:89:79:3f:cc:c8:d5: 50:7c:fd:5a:a3:fb:a0:8d:50:26:dd:5c:73:bb:66: a9:c6:f7:75:46:97:85:66:2e:cc:27:98:ba:3f:62: 72:0f:eb:39:06:0f:d3:71:cd:79:10:36:05:68:15: 7b:6e:63:64:2c:04:e0:cf:cb:7e:aa:48:b0:af:88: 0a:39:13:7e:73:49:72:22:14:69:1f:b8:df:64:49: a1:da:f3:07:8c:3c:ea:ee:9b:69:d8:99:81:5c:b8: 14:57:e0:31:51:a3:9e:e2:56:73:0d:90:fc:a8:b7: 88:73:b9:7d:4a:42:02:4b:42:69:af:8d:b3:5d:be: 05:ed:e0:04:b4:d6:1a:1a:53:5e:f4:6e:8e:df:ce: 09:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3A:A6:7A:B6:A9:44:94:A8:AF:D6:80:7B:29:12:83:F0:FB:04:C6 X509v3 Authority Key Identifier: keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:f3:d9:8c:61:e6:a1:5d:45:a5:5e:d0:86:f4:af:c8:06:ee: 0d:78:5d:4e:80:d8:d0:15:35:15:fe:f1:66:17:d1:29:eb:de: 01:f3:47:63:6a:bf:87:42:50:70:e1:77:17:c5:da:c0:05:37: 84:9c:a1:45:18:48:00:20:21:b4:b7:4a:87:5e:c9:65:0b:06: f0:34:86:ba:c7:1d:26:05:5d:95:f4:9f:3c:e5:5e:d0:20:e1: 1f:ab:49:5d:6d:54:2b:24:92:f3:fc:21:8a:71:78:89:b9:64: e8:b7:6b:d4:7b:14:60:64:75:70:91:b6:69:a9:6f:9e:ff:ed: 30:38:d2:0c:99:21:64:ac:87:98:31:28:d8:d9:ae:fa:0a:27: 8e:3b:04:e6:bd:a5:51:9b:c9:4f:3f:02:19:1b:53:8f:aa:10: 32:ea:42:92:1c:ab:ec:ec:27:1c:39:c7:e9:80:08:4c:9b:ff: f7:33:44:f5:72:d4:bd:6a:ba:9b:32:5e:38:69:92:ae:a3:1a: 28:51:99:d7:d5:a8:bc:d4:ad:40:8d:e1:04:f6:f9:c4:cf:55: e1:6f:7c:b8:47:5b:bf:b2:c6:da:62:30:5a:e6:b8:a2:bb:1b: 7e:79:a4:29:a3:bf:40:4b:93:c6:70:49:20:8c:86:c7:41:81: fa:a0:6d:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDmY0y2hIDSHEbUYh7jEHViMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl MjFiYjkwHhcNMjYwOTI4MDUwMTAyWhcNMjYwOTI5MDUwMTAyWjAzMTEwLwYDVQQD EyhhMzNhYTY3YWI2YTk0NDk0YThhZmQ2ODA3YjI5MTI4M2YwZmIwNGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJvRT5oVIumhj5zQpLQ+CW8vQih9 PGbnOLX7hoKYYWI2qrzEXz/faqrEOkzU+N2pMuaMklV7DsQ1bo/YvJr761k3SzOV F2c+5O7i0m1caFv9G1egfyZ3bZevAGiseCl8gTNviCdtr+z7CPIcDXaWe0OJeT/M yNVQfP1ao/ugjVAm3Vxzu2apxvd1RpeFZi7MJ5i6P2JyD+s5Bg/Tcc15EDYFaBV7 bmNkLATgz8t+qkiwr4gKORN+c0lyIhRpH7jfZEmh2vMHjDzq7ptp2JmBXLgUV+Ax UaOe4lZzDZD8qLeIc7l9SkICS0Jpr42zXb4F7eAEtNYaGlNe9G6O384J/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKM6pnq2qUSUqK/WgHspEoPw+wTGMB8GA1UdIwQY MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt ODUwZjM0OTA2MjI5LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5 LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfPZjGHm oV1FpV7QhvSvyAbuDXhdToDY0BU1Ff7xZhfRKeveAfNHY2q/h0JQcOF3F8XawAU3 hJyhRRhIACAhtLdKh17JZQsG8DSGuscdJgVdlfSfPOVe0CDhH6tJXW1UKySS8/wh inF4iblk6Ldr1HsUYGR1cJG2aalvnv/tMDjSDJkhZKyHmDEo2Nmu+gonjjsE5r2l UZvJTz8CGRtTj6oQMupCkhyr7OwnHDnH6YAITJv/9zNE9XLUvWq6mzJeOGmSrqMa KFGZ19WovNStQI3hBPb5xM9V4W98uEdbv7LG2mIwWua4orsbfnmkKaO/QEuTxnBJ IIyGx0GB+qBtZA== -----END CERTIFICATE-----Generated at Mon Sep 28 12:05:04 2026 by rpki-client