$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json) Hash identifier: 3nr0Ec+PPauhy92bhP819GG6L10Yvmpqv3gS/taUJro= Subject key identifier: 43:AF:D3:EE:D4:FF:D7:21:91:3F:9B:22:D9:84:26:45:20:7D:4E:16 Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 01A193563A59E7DEA8BB54B4EFD6475464E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft Manifest number: 1AED Signing time: Sat 31 Oct 2026 19:01:04 +0000 Manifest this update: Sat 31 Oct 2026 19:01:04 +0000 Manifest next update: Sun 01 Nov 2026 19:01:04 +0000 Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=) 2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=) 3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=) 4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=) 5: UssRL_azfcBW0-ZAXO28l_WRTQ8.roa (hash: Q1CPH56Bt7FCDBhQza5YAQW6lKSo+XxyyUkTKJFqTBQ=) 6: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=) 7: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=) 8: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=) 9: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: TzyBjvArCF0I01HBUEcm4SI6VqiUh1hpGUeeDkbFk1Y=) 10: wa9zMyfDDEuwe9jHEEf5XR0rY1U.roa (hash: w6cKFExTNVukVfdOoaJCYRMUgY7AI2mb+j8X2JfaAr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Nov 2026 19:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:93:56:3a:59:e7:de:a8:bb:54:b4:ef:d6:47:54:64:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Oct 31 19:01:04 2026 GMT Not After : Nov 1 19:01:04 2026 GMT Subject: CN=43afd3eed4ffd721913f9b22d9842645207d4e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:bd:9f:de:7f:61:d6:bb:9b:93:87:c3:71: 32:e1:b9:5b:42:80:c7:a6:31:f7:fc:c3:ab:00:32: 3b:8f:66:95:93:85:5a:f5:68:1f:d2:90:67:04:5f: ff:d0:84:67:cd:e8:d7:d6:e8:a5:12:d8:9e:22:64: 55:bb:53:ce:cf:11:33:9f:0d:df:04:c7:6d:00:c0: 81:54:6b:0e:b3:16:72:b6:64:9f:96:97:d9:c5:c6: 60:86:45:de:ff:47:7a:4d:0d:68:88:e8:ff:6b:29: 77:f0:97:4b:0b:12:e8:6c:a0:cb:3b:9e:17:b0:f8: fd:6a:1c:ac:62:8c:e4:a0:cd:e4:55:3a:40:dd:9a: db:e0:2e:0b:ce:cf:65:d2:9e:8f:c9:39:11:a8:47: 5e:4e:55:86:b1:bd:18:75:63:a3:b8:6f:aa:01:a0: b4:60:5d:15:6f:cb:57:4e:93:35:a8:dd:4d:52:46: aa:92:e6:1f:19:84:4d:64:d2:70:a3:b6:84:ed:b8: f1:8a:04:96:3f:5d:18:9f:fa:9e:93:4e:72:cf:f6: d4:cf:a3:9c:fa:61:de:d0:ae:89:87:07:0f:08:96: 3f:81:c1:95:6b:9f:62:27:47:da:32:c2:8b:5e:d7: 57:33:4c:47:19:85:2b:4a:c4:60:94:ee:a9:84:5e: 69:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AF:D3:EE:D4:FF:D7:21:91:3F:9B:22:D9:84:26:45:20:7D:4E:16 X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:8e:91:dd:99:7b:48:1b:81:aa:d6:47:a0:98:82:76:6d:51: 70:ff:9b:43:24:9e:a4:1d:2b:d2:dd:2b:6a:d4:f0:45:2b:f2: da:41:11:03:86:67:e8:7a:a0:c5:c4:6a:c1:c2:9d:b7:de:5c: b4:c1:14:29:9e:89:d8:41:4f:0d:af:18:57:3a:2c:c7:98:a4: a2:27:57:30:47:76:7a:bb:d3:aa:7b:10:10:bd:78:34:d1:da: d6:96:da:99:1e:bb:8a:e8:db:74:b8:8e:f7:b0:70:65:ae:92: 1b:4b:25:49:14:1f:5f:1f:df:12:5c:69:96:b1:e3:47:0c:83: 91:44:d8:5a:df:89:10:ac:b6:90:2e:f8:7a:b9:5d:83:bb:e7: 80:7d:b3:76:d8:78:32:f6:7c:f4:30:b5:71:06:67:fa:6a:0f: 78:49:96:89:7f:b4:49:df:c1:15:24:ec:df:2a:c7:b2:13:5f: 73:2e:26:61:bf:c5:14:de:c7:49:a6:18:27:12:37:be:4f:df: 9c:ac:3f:7e:28:13:12:22:c6:db:75:6a:28:d4:39:b5:37:8f: e5:8f:91:df:9b:0e:75:db:cb:4d:f7:89:b3:35:77:e0:75:c0: ee:f2:e4:50:eb:04:d1:fd:13:69:86:f5:12:c9:58:37:4b:35: 46:d5:aa:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGTVjpZ596ou1S079ZHVGTmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjYxMDMxMTkwMTA0WhcNMjYxMTAxMTkwMTA0WjAzMTEwLwYDVQQD Eyg0M2FmZDNlZWQ0ZmZkNzIxOTEzZjliMjJkOTg0MjY0NTIwN2Q0ZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4K9n95/Yda7m5OHw3Ey4blbQoDH pjH3/MOrADI7j2aVk4Va9Wgf0pBnBF//0IRnzejX1uilEtieImRVu1POzxEznw3f BMdtAMCBVGsOsxZytmSflpfZxcZghkXe/0d6TQ1oiOj/ayl38JdLCxLobKDLO54X sPj9ahysYozkoM3kVTpA3Zrb4C4Lzs9l0p6PyTkRqEdeTlWGsb0YdWOjuG+qAaC0 YF0Vb8tXTpM1qN1NUkaqkuYfGYRNZNJwo7aE7bjxigSWP10Yn/qek05yz/bUz6Oc +mHe0K6JhwcPCJY/gcGVa59iJ0faMsKLXtdXM0xHGYUrSsRglO6phF5pzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOv0+7U/9chkT+bItmEJkUgfU4WMB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlI6R3Zl7 SBuBqtZHoJiCdm1RcP+bQySepB0r0t0ratTwRSvy2kERA4Zn6HqgxcRqwcKdt95c tMEUKZ6J2EFPDa8YVzosx5ikoidXMEd2ervTqnsQEL14NNHa1pbamR67iujbdLiO 97BwZa6SG0slSRQfXx/fElxplrHjRwyDkUTYWt+JEKy2kC74erldg7vngH2zdth4 MvZ89DC1cQZn+moPeEmWiX+0Sd/BFSTs3yrHshNfcy4mYb/FFN7HSaYYJxI3vk/f nKw/figTEiLG23VqKNQ5tTeP5Y+R35sOddvLTfeJszV34HXA7vLkUOsE0f0TaYb1 EslYN0s1RtWqcQ== -----END CERTIFICATE-----Generated at Sun Nov 1 03:24:34 2026 by rpki-client