$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json) Hash identifier: kgxm6+xik69dafJOS9nYUdnUvfd/z9h9Ht5SXMxnloo= Subject key identifier: 28:5E:F1:17:21:09:2D:4B:AB:24:F5:16:43:FB:0A:66:95:65:92:DA Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 01A08A8D1BC500AE42DDBA0EE02D679117CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft Manifest number: 0AAE Signing time: Thu 10 Sep 2026 09:01:38 +0000 Manifest this update: Thu 10 Sep 2026 09:01:38 +0000 Manifest next update: Fri 11 Sep 2026 09:01:38 +0000 Files and hashes: 1: 1-ctnzOu2AqRoTotuUyqfmWZ69Sw.roa (hash: Y9R2l24kBbqyGrhSPstaoeJ69KKtfxGMiYaBVipK5z8=) 2: 6PHN4EINg95zsWmwMqR_LCCbpc0.roa (hash: Qlikbs7ZBI8ctlfaw3/jTu/l9GkQAhjSgxybaaSAR64=) 3: 77SuR1o4iXHGKTkHKp8TMdrc4mU.roa (hash: yXpIqsMXM0uwteirlGQMGdO/JHFjQjCokd/1EM9213g=) 4: Mo9G1JhWigyZx8b4Z1ztpl3HoaU.roa (hash: 6/JX2hr5dQ72yy0qDOA4ItSaDR3CmA+Vunj3Be7K7Ww=) 5: NFzJJ4j6wzQfqxhnTBiY1Cn7rYg.roa (hash: 5tZaz3kVj+e7u27N68hInpBHHf3h5dZ15X//Kl1uR3A=) 6: SBvRByMqYGQLc42MhIv39wSrM14.roa (hash: +yuXK4U1plTB6Fi9dEb2HppH8vLHLdbotjVkOSomh4c=) 7: SYrllEJSlKvgkdw578ZRNVSFNWE.roa (hash: k4gJZrWaGXAakwoprVZK+70H4xXKeMYoqoBwpy13NQI=) 8: UUqnfAVDQa6lg6vG893HM0lVJYc.roa (hash: 36To8a4pjZ0Y2Qs8m/H0gopLfHuBJ5FyCcUXnUo0w+Q=) 9: fIODe0F2H7U5wAQ5uy_1kDKWqm8.roa (hash: ETRCfd6hwLM8wB2Vmt5McaUCtMtxHeKB1rybYkoCFk0=) 10: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: iYhLNjDaFuOzs7qAk2dedGCT+832LOVHEtAzHw74+dw=) 11: jB4bYdWFXZMhIAjQMhMfN8vZ55w.roa (hash: EkZSSIno7HUUjqBtEwf8U/N90NHBkP5MsOxUQJnJNBo=) 12: qI5GOetXdKYh8lrEqXZOEzNWNgs.roa (hash: gOg5TzYEps9BVyLryEBMecl6jyfHJAcCMKO+ZNmQ0RI=) 13: qbK-9RQWdGS_xJXOliPpGoY-V4w.roa (hash: iAYy+5hd5UtMJbweD8Z+MTcR9zIJ+2tv0Xj7Rh16GJY=) 14: tASmvZQ1KYaQWQIw4lmKhvWcByY.roa (hash: ri7thGK0s4tAbDIwaqArMt7wR29/4q7zyG3uwLTYanM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 09:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:8d:1b:c5:00:ae:42:dd:ba:0e:e0:2d:67:91:17:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Sep 10 09:01:38 2026 GMT Not After : Sep 11 09:01:38 2026 GMT Subject: CN=285ef11721092d4bab24f51643fb0a66956592da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:51:eb:6a:54:ae:13:80:a1:14:1e:60:ec:d2: 77:5c:31:e0:63:76:f5:4e:fd:13:d9:8a:6a:2d:b2: 21:0a:8e:dd:c8:35:f1:ad:14:28:03:66:c0:67:9b: 48:c9:08:b6:4b:df:89:0a:40:50:fc:a4:86:f7:58: 71:62:ae:f9:b1:73:4b:ea:d8:79:50:89:e3:75:95: 3a:2d:9c:ff:aa:ed:64:e8:c8:9b:fe:c1:c0:f2:f6: 3f:09:6e:87:ce:ed:ac:08:60:4f:f8:f6:b4:3b:e6: 90:58:2e:28:fc:98:8f:69:af:29:a4:07:69:45:60: d2:62:5d:5e:da:17:e6:03:95:05:60:53:d6:2a:99: b4:a5:24:e9:b1:fc:35:d7:5f:9c:1f:03:b6:e1:e1: 70:33:f8:20:e8:a5:61:b0:d6:26:a2:8c:c2:43:6a: d6:ea:b5:7a:82:bd:3a:20:8d:e7:eb:c5:0d:97:de: 1b:51:0a:cf:ba:39:1b:8b:0e:b8:d9:e3:9e:0b:23: 5b:5e:d2:d1:74:07:f7:5b:f8:68:a8:6e:2a:13:3d: 30:18:5e:d8:76:48:fe:d8:e4:c3:45:ac:c4:b6:6c: 0f:bc:ba:37:b4:3e:03:bf:bf:0b:25:13:d4:c0:6f: a6:7c:23:3a:ac:a2:e5:b2:57:0f:2c:86:9b:75:d7: df:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5E:F1:17:21:09:2D:4B:AB:24:F5:16:43:FB:0A:66:95:65:92:DA X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:b1:4f:23:e8:73:fb:82:fc:67:3f:20:e6:ac:ed:33:72:aa: 34:50:4b:4e:a1:16:34:3d:f0:9e:0d:41:d5:f7:a6:56:b6:7b: 23:65:1e:0d:13:4d:46:cd:3c:f2:ac:d5:cd:85:e0:14:e7:37: ac:ea:7a:d4:b4:a4:de:2e:64:59:72:40:65:49:37:c1:da:78: c6:cb:54:f6:b3:14:73:5c:ec:76:e5:89:86:44:67:20:96:04: 63:d7:85:8a:0a:bf:5a:31:c5:f4:de:0b:f3:03:35:f6:aa:3e: 07:79:fe:24:83:f7:fb:28:ca:cf:3d:29:b1:a0:07:5e:8a:57: 2b:8a:8f:b5:b8:f8:cc:b0:e9:79:7b:52:6f:5f:8f:8a:05:11: 6a:13:33:52:db:d7:a4:41:ca:b3:a7:0a:36:50:b7:62:a3:bb: 31:fa:3f:f8:ea:12:70:38:0b:63:50:dd:8e:7a:84:61:26:f4: 26:be:0b:e0:ef:84:1b:01:61:dc:5a:8f:26:85:51:57:6a:ba: e6:02:b1:3c:4f:5e:2b:ce:e2:00:d0:9c:f2:c0:2a:aa:4d:87: 9c:16:27:c1:aa:66:e8:62:f3:de:ac:36:16:1e:f4:41:56:76: 85:2a:e0:80:a4:32:7a:52:34:bb:0d:74:08:6a:3f:41:c1:7d: 0f:21:5d:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKjRvFAK5C3boO4C1nkRfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjYwOTEwMDkwMTM4WhcNMjYwOTExMDkwMTM4WjAzMTEwLwYDVQQD EygyODVlZjExNzIxMDkyZDRiYWIyNGY1MTY0M2ZiMGE2Njk1NjU5MmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVHralSuE4ChFB5g7NJ3XDHgY3b1 Tv0T2YpqLbIhCo7dyDXxrRQoA2bAZ5tIyQi2S9+JCkBQ/KSG91hxYq75sXNL6th5 UInjdZU6LZz/qu1k6Mib/sHA8vY/CW6Hzu2sCGBP+Pa0O+aQWC4o/JiPaa8ppAdp RWDSYl1e2hfmA5UFYFPWKpm0pSTpsfw111+cHwO24eFwM/gg6KVhsNYmoozCQ2rW 6rV6gr06II3n68UNl94bUQrPujkbiw642eOeCyNbXtLRdAf3W/hoqG4qEz0wGF7Y dkj+2OTDRazEtmwPvLo3tD4Dv78LJRPUwG+mfCM6rKLlslcPLIabddffrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChe8RchCS1LqyT1FkP7CmaVZZLaMB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrFPI+hz +4L8Zz8g5qztM3KqNFBLTqEWND3wng1B1femVrZ7I2UeDRNNRs088qzVzYXgFOc3 rOp61LSk3i5kWXJAZUk3wdp4xstU9rMUc1zsduWJhkRnIJYEY9eFigq/WjHF9N4L 8wM19qo+B3n+JIP3+yjKzz0psaAHXopXK4qPtbj4zLDpeXtSb1+PigURahMzUtvX pEHKs6cKNlC3YqO7Mfo/+OoScDgLY1DdjnqEYSb0Jr4L4O+EGwFh3FqPJoVRV2q6 5gKxPE9eK87iANCc8sAqqk2HnBYnwapm6GLz3qw2Fh70QVZ2hSrggKQyelI0uw10 CGo/QcF9DyFdFQ== -----END CERTIFICATE-----Generated at Thu Sep 10 20:35:15 2026 by rpki-client