$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json) Hash identifier: tz+JwBFyaW+tJOAZTCsTbX/bZzj6ZfwBD1E9Vj062Bc= Subject key identifier: BD:FB:D4:1C:C1:5F:7D:A2:F9:1D:AB:58:41:86:50:33:22:B9:43:D0 Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 01A17D3C4C58E99E9F85F633D72A8098A965 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft Manifest number: 0B2D Signing time: Tue 27 Oct 2026 12:01:05 +0000 Manifest this update: Tue 27 Oct 2026 12:01:05 +0000 Manifest next update: Wed 28 Oct 2026 12:01:05 +0000 Files and hashes: 1: 1-ctnzOu2AqRoTotuUyqfmWZ69Sw.roa (hash: Y9R2l24kBbqyGrhSPstaoeJ69KKtfxGMiYaBVipK5z8=) 2: 3wAusRVMVWV2o0rVLzmN9cB2ez4.roa (hash: m3rL064DcxUOchpIkVHNU4GTUQzVnt7XhnvSl6Sw76k=) 3: 6PHN4EINg95zsWmwMqR_LCCbpc0.roa (hash: Qlikbs7ZBI8ctlfaw3/jTu/l9GkQAhjSgxybaaSAR64=) 4: 77SuR1o4iXHGKTkHKp8TMdrc4mU.roa (hash: yXpIqsMXM0uwteirlGQMGdO/JHFjQjCokd/1EM9213g=) 5: Mo9G1JhWigyZx8b4Z1ztpl3HoaU.roa (hash: 6/JX2hr5dQ72yy0qDOA4ItSaDR3CmA+Vunj3Be7K7Ww=) 6: SBvRByMqYGQLc42MhIv39wSrM14.roa (hash: +yuXK4U1plTB6Fi9dEb2HppH8vLHLdbotjVkOSomh4c=) 7: SYrllEJSlKvgkdw578ZRNVSFNWE.roa (hash: k4gJZrWaGXAakwoprVZK+70H4xXKeMYoqoBwpy13NQI=) 8: UUqnfAVDQa6lg6vG893HM0lVJYc.roa (hash: 36To8a4pjZ0Y2Qs8m/H0gopLfHuBJ5FyCcUXnUo0w+Q=) 9: fIODe0F2H7U5wAQ5uy_1kDKWqm8.roa (hash: ETRCfd6hwLM8wB2Vmt5McaUCtMtxHeKB1rybYkoCFk0=) 10: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: wjgwDxZ5MQKPYSUTb4LNNGOmuZTfVC1rhP23a5kNpcc=) 11: jB4bYdWFXZMhIAjQMhMfN8vZ55w.roa (hash: EkZSSIno7HUUjqBtEwf8U/N90NHBkP5MsOxUQJnJNBo=) 12: qI5GOetXdKYh8lrEqXZOEzNWNgs.roa (hash: gOg5TzYEps9BVyLryEBMecl6jyfHJAcCMKO+ZNmQ0RI=) 13: tASmvZQ1KYaQWQIw4lmKhvWcByY.roa (hash: ri7thGK0s4tAbDIwaqArMt7wR29/4q7zyG3uwLTYanM=) 14: wNut4W0CI_94GPYF-EhqLdAWsJM.roa (hash: bA9EhkOyyRbeFxEzmWlsFXo4v9xKribtzLHT2Ybvrhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7d:3c:4c:58:e9:9e:9f:85:f6:33:d7:2a:80:98:a9:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Oct 27 12:01:05 2026 GMT Not After : Oct 28 12:01:05 2026 GMT Subject: CN=bdfbd41cc15f7da2f91dab584186503322b943d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4c:ad:63:b2:46:a5:71:c2:dc:82:ad:bc:c5: c3:c9:ed:00:3a:4d:2a:4e:b2:39:e4:86:46:07:1e: ff:8c:88:82:e7:f5:ed:bd:66:5e:3f:f9:89:2e:af: 31:86:9a:09:61:51:d3:23:fd:6e:30:8e:ae:c1:bc: 2f:ca:c4:11:87:55:d8:cb:01:87:18:23:4a:88:c9: 41:5b:e0:4a:2e:c6:29:eb:be:0e:1a:c4:e7:96:06: 9d:65:a1:f5:85:fe:ea:f8:3c:d5:1d:87:3f:36:5b: 33:7f:66:17:5b:ec:90:79:4a:87:a3:58:fe:b4:b4: ed:f8:68:70:fc:43:3d:19:39:64:13:84:4f:fc:67: cc:55:46:8d:25:31:62:2d:02:8f:77:53:38:8d:56: 37:fe:8e:3d:bb:29:4e:c4:eb:57:5c:18:ee:22:77: f9:c9:4a:0b:f9:30:6b:90:03:bf:17:97:50:30:82: 06:a8:ce:e0:ac:ff:4b:ca:cb:e8:55:17:be:fe:4b: e4:04:08:4e:a8:93:4e:98:33:b5:aa:4e:19:29:24: 81:51:55:e3:80:16:5f:02:1a:e5:c1:8c:3e:ec:d7: 7c:83:c9:98:e1:e4:41:1c:97:79:f1:16:87:8c:ab: 0e:71:bb:39:49:7b:7e:ae:7d:4c:b8:bf:24:63:3e: 31:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FB:D4:1C:C1:5F:7D:A2:F9:1D:AB:58:41:86:50:33:22:B9:43:D0 X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:83:b2:30:d3:63:df:08:1f:96:b5:0a:a0:af:ad:6f:7e:8e: 92:f0:57:d3:3c:52:8b:d4:cc:54:33:6c:83:36:f0:71:21:97: 3e:7c:9e:5c:a4:ca:57:8f:6e:f8:bb:37:d5:8b:64:0f:05:ac: 7f:cb:e3:2e:7b:22:d1:bf:83:1d:d9:43:00:1f:ea:dc:f3:6b: 1b:f4:a4:77:8d:3f:02:13:35:40:57:b7:a3:dd:3b:2b:f9:cf: b4:a3:a6:a9:8f:cd:21:93:5f:f3:1f:f8:8c:fd:cf:62:1f:ea: 6e:c1:73:2c:1b:d7:06:af:84:3a:bf:89:45:84:e5:b5:16:0a: c6:38:23:16:e1:b8:28:f7:9e:12:0a:87:1a:da:5c:a4:51:df: 6a:22:d8:fc:79:da:c3:75:1b:a7:8f:e4:99:97:4a:05:8b:6b: 22:e3:f3:b3:93:6a:dc:93:f4:e2:58:4f:18:a2:07:32:69:41: 73:0e:be:56:8b:7b:13:30:4a:55:d1:67:82:2e:b2:f1:ba:2e: db:20:21:e0:f5:8f:3d:bb:19:9a:f7:7d:8f:89:f8:37:b7:03: e1:fe:24:bc:70:cb:50:97:8c:c5:36:78:d2:c6:0f:17:9d:30: 3d:1e:cb:56:af:f7:99:12:b8:71:51:21:ad:10:56:3a:8f:43: a7:85:72:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF9PExY6Z6fhfYz1yqAmKllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjYxMDI3MTIwMTA1WhcNMjYxMDI4MTIwMTA1WjAzMTEwLwYDVQQD EyhiZGZiZDQxY2MxNWY3ZGEyZjkxZGFiNTg0MTg2NTAzMzIyYjk0M2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0ytY7JGpXHC3IKtvMXDye0AOk0q TrI55IZGBx7/jIiC5/XtvWZeP/mJLq8xhpoJYVHTI/1uMI6uwbwvysQRh1XYywGH GCNKiMlBW+BKLsYp674OGsTnlgadZaH1hf7q+DzVHYc/Nlszf2YXW+yQeUqHo1j+ tLTt+Ghw/EM9GTlkE4RP/GfMVUaNJTFiLQKPd1M4jVY3/o49uylOxOtXXBjuInf5 yUoL+TBrkAO/F5dQMIIGqM7grP9LysvoVRe+/kvkBAhOqJNOmDO1qk4ZKSSBUVXj gBZfAhrlwYw+7Nd8g8mY4eRBHJd58RaHjKsOcbs5SXt+rn1MuL8kYz4xRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL371BzBX32i+R2rWEGGUDMiuUPQMB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoOyMNNj 3wgflrUKoK+tb36OkvBX0zxSi9TMVDNsgzbwcSGXPnyeXKTKV49u+Ls31YtkDwWs f8vjLnsi0b+DHdlDAB/q3PNrG/Skd40/AhM1QFe3o907K/nPtKOmqY/NIZNf8x/4 jP3PYh/qbsFzLBvXBq+EOr+JRYTltRYKxjgjFuG4KPeeEgqHGtpcpFHfaiLY/Hna w3Ubp4/kmZdKBYtrIuPzs5Nq3JP04lhPGKIHMmlBcw6+Vot7EzBKVdFngi6y8bou 2yAh4PWPPbsZmvd9j4n4N7cD4f4kvHDLUJeMxTZ40sYPF50wPR7LVq/3mRK4cVEh rRBWOo9Dp4VyvQ== -----END CERTIFICATE-----Generated at Tue Oct 27 15:49:06 2026 by rpki-client