$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json) Hash identifier: iIkxA7VA0bo0K1HQOVu7h9uDMZwduEGEIFejkwiuUCU= Subject key identifier: 2F:B3:F5:C1:14:62:46:87:CF:68:60:2C:CA:BD:45:4E:77:88:46:5A Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 01A08C7B6998A8562DD2400101D574228552 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft Manifest number: 0AAF Signing time: Thu 10 Sep 2026 18:01:33 +0000 Manifest this update: Thu 10 Sep 2026 18:01:33 +0000 Manifest next update: Fri 11 Sep 2026 18:01:33 +0000 Files and hashes: 1: 1-ctnzOu2AqRoTotuUyqfmWZ69Sw.roa (hash: Y9R2l24kBbqyGrhSPstaoeJ69KKtfxGMiYaBVipK5z8=) 2: 6PHN4EINg95zsWmwMqR_LCCbpc0.roa (hash: Qlikbs7ZBI8ctlfaw3/jTu/l9GkQAhjSgxybaaSAR64=) 3: 77SuR1o4iXHGKTkHKp8TMdrc4mU.roa (hash: yXpIqsMXM0uwteirlGQMGdO/JHFjQjCokd/1EM9213g=) 4: Mo9G1JhWigyZx8b4Z1ztpl3HoaU.roa (hash: 6/JX2hr5dQ72yy0qDOA4ItSaDR3CmA+Vunj3Be7K7Ww=) 5: NFzJJ4j6wzQfqxhnTBiY1Cn7rYg.roa (hash: 5tZaz3kVj+e7u27N68hInpBHHf3h5dZ15X//Kl1uR3A=) 6: SBvRByMqYGQLc42MhIv39wSrM14.roa (hash: +yuXK4U1plTB6Fi9dEb2HppH8vLHLdbotjVkOSomh4c=) 7: SYrllEJSlKvgkdw578ZRNVSFNWE.roa (hash: k4gJZrWaGXAakwoprVZK+70H4xXKeMYoqoBwpy13NQI=) 8: UUqnfAVDQa6lg6vG893HM0lVJYc.roa (hash: 36To8a4pjZ0Y2Qs8m/H0gopLfHuBJ5FyCcUXnUo0w+Q=) 9: fIODe0F2H7U5wAQ5uy_1kDKWqm8.roa (hash: ETRCfd6hwLM8wB2Vmt5McaUCtMtxHeKB1rybYkoCFk0=) 10: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: jY6IQWUx/5p9mrnRiMXBY561AGG4q7L6G2B3Y+a9g9Q=) 11: jB4bYdWFXZMhIAjQMhMfN8vZ55w.roa (hash: EkZSSIno7HUUjqBtEwf8U/N90NHBkP5MsOxUQJnJNBo=) 12: qI5GOetXdKYh8lrEqXZOEzNWNgs.roa (hash: gOg5TzYEps9BVyLryEBMecl6jyfHJAcCMKO+ZNmQ0RI=) 13: qbK-9RQWdGS_xJXOliPpGoY-V4w.roa (hash: iAYy+5hd5UtMJbweD8Z+MTcR9zIJ+2tv0Xj7Rh16GJY=) 14: tASmvZQ1KYaQWQIw4lmKhvWcByY.roa (hash: ri7thGK0s4tAbDIwaqArMt7wR29/4q7zyG3uwLTYanM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 14:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8c:7b:69:98:a8:56:2d:d2:40:01:01:d5:74:22:85:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Sep 10 18:01:33 2026 GMT Not After : Sep 11 18:01:33 2026 GMT Subject: CN=2fb3f5c114624687cf68602ccabd454e7788465a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:db:72:24:9c:f6:9a:66:f0:82:e4:cc:25:23: 15:e2:44:b6:b5:6e:de:35:2b:db:16:24:c0:7b:9d: f7:53:39:c9:44:b4:24:7e:54:1c:ca:d8:58:f5:4a: 80:12:70:ee:9c:6d:ab:9e:c7:55:72:e2:7e:68:bb: e3:67:11:76:d7:99:cf:82:fe:5c:c9:04:11:ee:b2: 82:bc:00:df:c3:8a:bf:44:31:5a:ae:68:49:b3:d8: e7:fe:c1:c3:60:96:55:6b:52:f3:04:3e:65:47:c2: 3d:b9:c9:39:c0:4e:e8:14:ac:44:18:ca:45:75:9f: 7c:9d:f1:95:3b:b4:8a:44:ea:6f:8b:2e:f7:f3:b5: 97:2b:2b:d7:b0:70:0a:b7:b5:27:5a:7c:f9:e0:e0: e1:02:92:85:ae:77:4f:39:fc:4e:d8:b0:9b:68:d0: e7:fb:c6:d2:08:2e:8e:04:68:3f:66:be:51:4d:5f: 64:57:5d:b3:e3:21:05:30:0f:bb:ec:41:44:7d:e9: 00:8e:c2:39:f0:4d:be:9f:0d:b8:96:da:48:82:bd: 02:72:fc:7c:b4:ac:fc:c3:d4:d3:af:da:ef:af:9e: ed:b3:8d:4e:2a:16:0b:e0:b6:8b:b8:90:24:3e:d1: 6b:a0:5b:9b:3c:45:81:64:54:1e:0d:74:a7:11:d9: af:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B3:F5:C1:14:62:46:87:CF:68:60:2C:CA:BD:45:4E:77:88:46:5A X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a7:a8:49:1d:95:22:77:cf:a1:e6:ce:db:a5:76:7b:cd:2d: ba:5c:a9:ca:3a:45:01:6e:ff:37:c2:12:88:c1:0d:99:e7:8e: 29:08:77:ea:bb:f0:cf:95:5f:59:38:1c:57:38:b7:fb:4b:77: 6e:2a:bd:3c:55:c2:45:0d:e9:42:6b:b6:63:8b:68:de:34:fc: 29:04:c7:ac:78:75:69:98:a6:98:5a:e7:2a:7e:91:af:f8:a7: 3d:6e:9f:4a:16:1b:c4:9f:5f:8c:ed:ff:5d:87:27:4a:c6:0a: a7:47:9e:53:54:44:60:95:3b:7c:1d:16:8d:c7:a5:e9:d0:ea: 33:6a:70:ce:2d:58:43:31:92:24:94:3d:06:5b:8a:8f:76:44: 81:c6:62:6f:d1:cf:63:4c:22:e3:9a:31:ab:07:4b:f2:7d:3f: 6a:92:a9:0a:4b:59:e5:d6:1f:e3:f0:d7:11:2a:22:41:fe:2d: 39:31:0d:9c:f8:04:4e:12:28:6c:4d:fc:49:73:31:c7:50:15: 76:72:b4:db:07:84:37:53:b3:78:4d:5f:b6:d1:c7:b4:38:6c: 54:c6:fa:00:94:3e:c3:73:c8:68:2c:62:a7:c8:4b:e3:06:d3: 4a:79:43:09:b0:57:01:0f:2b:24:c3:0d:e9:17:37:80:ad:83: f0:de:91:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCMe2mYqFYt0kABAdV0IoVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjYwOTEwMTgwMTMzWhcNMjYwOTExMTgwMTMzWjAzMTEwLwYDVQQD EygyZmIzZjVjMTE0NjI0Njg3Y2Y2ODYwMmNjYWJkNDU0ZTc3ODg0NjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NtyJJz2mmbwguTMJSMV4kS2tW7e NSvbFiTAe533UznJRLQkflQcythY9UqAEnDunG2rnsdVcuJ+aLvjZxF215nPgv5c yQQR7rKCvADfw4q/RDFarmhJs9jn/sHDYJZVa1LzBD5lR8I9uck5wE7oFKxEGMpF dZ98nfGVO7SKROpviy7387WXKyvXsHAKt7UnWnz54ODhApKFrndPOfxO2LCbaNDn +8bSCC6OBGg/Zr5RTV9kV12z4yEFMA+77EFEfekAjsI58E2+nw24ltpIgr0Ccvx8 tKz8w9TTr9rvr57ts41OKhYL4LaLuJAkPtFroFubPEWBZFQeDXSnEdmvTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+z9cEUYkaHz2hgLMq9RU53iEZaMB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaeoSR2V InfPoebO26V2e80tulypyjpFAW7/N8ISiMENmeeOKQh36rvwz5VfWTgcVzi3+0t3 biq9PFXCRQ3pQmu2Y4to3jT8KQTHrHh1aZimmFrnKn6Rr/inPW6fShYbxJ9fjO3/ XYcnSsYKp0eeU1REYJU7fB0Wjcel6dDqM2pwzi1YQzGSJJQ9BluKj3ZEgcZib9HP Y0wi45oxqwdL8n0/apKpCktZ5dYf4/DXESoiQf4tOTENnPgEThIobE38SXMxx1AV dnK02weEN1OzeE1fttHHtDhsVMb6AJQ+w3PIaCxip8hL4wbTSnlDCbBXAQ8rJMMN 6Rc3gK2D8N6RDg== -----END CERTIFICATE-----Generated at Fri Sep 11 01:14:39 2026 by rpki-client