$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft File: sSZ6Uay2bymRvqUkP-OIBolxofE.mft (raw, json) Hash identifier: a6yhQM7voMBEHSHKnyFND8mLxL439YbxymJfYnExmfY= Subject key identifier: 86:93:58:60:08:26:25:B1:CF:D9:EF:E2:E0:BA:7E:D9:8C:90:DD:AD Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1 Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1 Certificate serial: 01A172EF568A18556863AD9400025C158964 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft Manifest number: 1AE1 Signing time: Sun 25 Oct 2026 12:00:50 +0000 Manifest this update: Sun 25 Oct 2026 12:00:50 +0000 Manifest next update: Mon 26 Oct 2026 12:00:50 +0000 Files and hashes: 1: C5cvkpLgAxRPbmRR1Xnr9IgOBOg.roa (hash: DRe8BBuY3trDvHyhgz8zYPvPROY3WavC5+JbPLkC71M=) 2: NYhe77qPXkT9jbK_mCglwgN0KSc.roa (hash: N4o7e7+pzteHCfjjrZrmPQBHgxHiEFPs60jPruiVUkQ=) 3: QqWf4NRKHWRSKd4qA58hy0_YXaU.roa (hash: X3rPDn63FW/ELQigDzF2/hZR2l0F8yWCfS81F5WR3pw=) 4: S3fnE2JC0jHbyCxq9xex6D4bocU.roa (hash: mu1p6qiKaLOmkIYHWTkNeWxIRnBG6HgnHbJaFPZY098=) 5: Sed5TXawx-pe7deLRsaBjMpQUrU.roa (hash: 3CIh4AtSxM72o2T6G5WEq9evxe16ZJq4vShxSr/X5GY=) 6: gTjkmsxToYN0AtLwcjRCH2zWi0o.roa (hash: 4ZK61blIRdEFKBG4G94VCjN5FRAy3ckAv14+S+d+iMM=) 7: kORyH1zk4kpVVZcN-RFEOaPpCYQ.roa (hash: eM3a4CHDiPxCoPRiTlT4LzKEhGGZUAXh/d8bAjKFKxA=) 8: m9_6isbkb6H6BoKt-kxFz2bD8VU.roa (hash: obUMU8m/5BhkvCfU1JnYsWCx9lgEOWh/BAZCKcBTH4U=) 9: sSZ6Uay2bymRvqUkP-OIBolxofE.crl (hash: glZvMEAh5lvCguIvbFlqrUVWcwcyJlu8x4wT2h6IQkc=) 10: tiNCgDK7O_a6zBhxuIZW_VUPW-I.roa (hash: vZgCBfItkUqHjy0E7kRGc/kDjB0NFrUb1rqezkZb7rI=) 11: vfsLQ40tt1u38U0WZHji9u7g47o.roa (hash: nxc6h9C4GbjCwYhSlO4Rmt1mT0f1Ks/V0yvcEZ1nYOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:72:ef:56:8a:18:55:68:63:ad:94:00:02:5c:15:89:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1 Validity Not Before: Oct 25 12:00:50 2026 GMT Not After : Oct 26 12:00:50 2026 GMT Subject: CN=86935860082625b1cfd9efe2e0ba7ed98c90ddad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d0:29:07:4c:58:7c:e7:7b:a0:ac:3e:f8:45: 5e:a7:4a:6b:e0:cb:54:bb:6b:92:72:4a:10:f7:f7: c8:10:36:be:d8:e9:1c:29:92:73:fd:c6:26:ed:44: f3:ca:b6:1b:1b:75:c2:23:91:0d:ec:6f:65:ab:23: 63:1e:b1:b9:77:f3:e4:83:bc:8b:8a:1b:54:d5:cf: 48:6e:83:8c:bb:75:ce:1a:2b:a4:36:f0:51:51:8f: 3b:7d:91:65:e9:77:12:cc:45:b0:6a:9a:2b:20:9a: 1d:20:2f:9f:0c:ca:72:f8:11:40:4d:86:71:3c:7b: d0:95:8b:84:74:39:2c:b3:95:ef:58:c3:97:fc:f7: 9b:d9:9a:29:74:1b:7b:8f:6b:e7:04:49:47:77:9e: 25:eb:3a:bc:39:fd:7f:f3:9e:2c:d4:79:c5:1a:cd: 41:74:2a:45:03:e3:e7:75:17:80:2c:70:46:42:ab: fe:55:d2:df:b1:c6:7f:d9:99:28:28:de:b3:a7:e9: 0d:c7:44:77:a1:b3:34:71:f7:3a:07:2a:0e:32:3b: 29:c6:67:78:11:43:2f:21:fb:af:b7:85:a8:27:2c: 8d:1a:c0:ab:e8:c9:9b:cd:5b:96:98:9d:c4:e1:96: 2f:dd:bc:04:9a:bc:f8:da:22:ba:e6:68:04:a3:07: 4b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:93:58:60:08:26:25:B1:CF:D9:EF:E2:E0:BA:7E:D9:8C:90:DD:AD X509v3 Authority Key Identifier: keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:72:21:d9:4d:74:5d:0b:cf:19:34:79:a4:90:b9:b8:cb:8e: 99:72:03:bf:56:e4:4d:27:21:01:05:b2:6e:af:85:f2:85:a8: 9b:71:8d:bc:ff:8a:6d:2b:3c:7a:96:6d:bb:a5:19:29:74:d1: 10:d8:3a:a0:56:bd:81:8b:1a:66:78:ed:5a:26:e2:29:cb:c7: 0a:4a:cf:74:3d:c5:35:90:40:7d:fb:ec:c8:5b:d3:b0:5b:34: 8f:ca:3f:bc:47:c4:b3:20:84:91:08:14:33:f3:57:3d:97:35: 70:e6:4d:29:6f:ce:17:5e:21:1d:e2:b1:8a:bd:99:34:9d:03: 4e:3b:9f:b8:3f:8c:ea:a1:55:3d:2a:df:bb:a8:aa:9f:4d:d9: b4:47:9d:b8:e7:0d:f8:61:eb:31:e8:ff:68:33:cc:73:3e:b8: bc:64:0e:1e:03:7c:c0:34:2c:3b:0f:d3:c2:ba:a1:02:19:45: 03:8b:46:70:06:96:c6:45:85:0b:4d:36:52:8b:af:bb:20:82: 1a:79:ed:05:bf:45:61:dc:22:c2:92:da:5a:e7:83:fe:c8:0d: 35:a3:1a:77:ff:1e:56:52:28:61:44:66:2e:eb:3a:f1:48:ed: f0:1f:f9:64:88:46:e5:21:c1:66:1b:36:8a:e1:fb:81:1f:c1: a0:c2:7a:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFy71aKGFVoY62UAAJcFYlkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMjY3YTUxYWNiNjZmMjk5MWJlYTUyNDNmZTM4ODA2ODk3 MWExZjEwHhcNMjYxMDI1MTIwMDUwWhcNMjYxMDI2MTIwMDUwWjAzMTEwLwYDVQQD Eyg4NjkzNTg2MDA4MjYyNWIxY2ZkOWVmZTJlMGJhN2VkOThjOTBkZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9ApB0xYfOd7oKw++EVep0pr4MtU u2uSckoQ9/fIEDa+2OkcKZJz/cYm7UTzyrYbG3XCI5EN7G9lqyNjHrG5d/Pkg7yL ihtU1c9IboOMu3XOGiukNvBRUY87fZFl6XcSzEWwaporIJodIC+fDMpy+BFATYZx PHvQlYuEdDkss5XvWMOX/Peb2ZopdBt7j2vnBElHd54l6zq8Of1/854s1HnFGs1B dCpFA+PndReALHBGQqv+VdLfscZ/2ZkoKN6zp+kNx0R3obM0cfc6ByoOMjspxmd4 EUMvIfuvt4WoJyyNGsCr6MmbzVuWmJ3E4ZYv3bwEmrz42iK65mgEowdLvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaTWGAIJiWxz9nv4uC6ftmMkN2tMB8GA1UdIwQY MBaAFLEmelGstm8pkb6lJD/jiAaJcaHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNzRjYTItM2RlNi00YjY5LWEwMDAt OTRkMWI4OWY4Y2IyLzEvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9kNzRjYTItM2RlNi00YjY5LWEwMDAtOTRkMWI4OWY4Y2Iy LzEvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3Ih2U10 XQvPGTR5pJC5uMuOmXIDv1bkTSchAQWybq+F8oWom3GNvP+KbSs8epZtu6UZKXTR ENg6oFa9gYsaZnjtWibiKcvHCkrPdD3FNZBAffvsyFvTsFs0j8o/vEfEsyCEkQgU M/NXPZc1cOZNKW/OF14hHeKxir2ZNJ0DTjufuD+M6qFVPSrfu6iqn03ZtEeduOcN +GHrMej/aDPMcz64vGQOHgN8wDQsOw/TwrqhAhlFA4tGcAaWxkWFC002UouvuyCC GnntBb9FYdwiwpLaWueD/sgNNaMad/8eVlIoYURmLus68Ujt8B/5ZIhG5SHBZhs2 iuH7gR/BoMJ6zA== -----END CERTIFICATE-----Generated at Sun Oct 25 20:53:15 2026 by rpki-client