$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft File: bOl89NjQvBezrx1ixNcUiGYb0hI.mft (raw, json) Hash identifier: zw5f8kgEUlnSQr3RnZr5f9YxTKEVyV1Hrppd1JZAMX0= Subject key identifier: 56:5A:FC:C3:8B:E8:38:30:EA:DE:4F:72:30:2B:DC:43:18:62:D9:20 Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 01A17BBB84D4846DDC75B8A7353062AFB036 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft Manifest number: 1AD1 Signing time: Tue 27 Oct 2026 05:00:48 +0000 Manifest this update: Tue 27 Oct 2026 05:00:48 +0000 Manifest next update: Wed 28 Oct 2026 05:00:48 +0000 Files and hashes: 1: 3VQqtiom1KN9zcDFbHb_HNwz1EI.roa (hash: n7BuRmEffiATFiumwmipm2pKN3sbI8aRpEp3yWS0w6c=) 2: 53Y6HNT6PybZ5fv0RIq3VzI1Ero.roa (hash: gfRH81Dg27dQ3kodzezmL1Q0yfGmr/Pdqe1spxmMPZE=) 3: 7fjKgyx9Yaxh1FmHZYJUH95301c.roa (hash: T1XxvO4P4dkHl+WGoPHzZBE5VBrM/N30kEx3n7zSiDA=) 4: 8rGqH77YTfgMLRPyoN61N8RnEq0.roa (hash: ZNQ10Ukgjrp4rH/Ovez3kQihf1PS+l23PddvrRzZauI=) 5: BXn_bVoFgxHmHunAkFZSuzgFSwk.roa (hash: jxJIsK3YcEKMp25t1FYnjxefcJAQeAeiUCQ6rxD9bpw=) 6: BoaVLgPlhn4qr_fU3lgNc_DP-CI.roa (hash: 8gys4r5Jrh79V6ospkWBTCV9aubZPTwmXqR+dBSZNIM=) 7: E1du0wCDYd0qkbzycOzoURh4BYI.roa (hash: KvrqxA058Oc1sNN2BjNJzwOLTtzAgr6gDrllwRypkQM=) 8: ID3uGpE-dcekqFUA9CaskNQTHgw.roa (hash: +8FnPQxela/00fZdYSydOiN682t6g2gq5E5EtP0QcC8=) 9: LfmeRYcfUiEj399TDpOym_UlFRA.roa (hash: BkStJv/EZ8z0hAQkEE3CqcK8hG9A1BieEUEqY6z0bK8=) 10: NEyQG9kyLEW4Um4QAvO7DA9LZsE.roa (hash: v1Y4jsLwKJqAeGZpT4JA4xV86AlZtwzcF7xc4splz3Q=) 11: TY35IYclW4VPKdwgjzeN1-eRV5w.roa (hash: NrbtXiKXpUhJK+M5wfVFLQO6KPLEcpep0fo9uaa4vxY=) 12: UPWe1Wug7fNHuCoRI5LkUE4bICs.roa (hash: RDVH/BCV293ZQWWctDV3PRotDWVexWOj6PnUwJgAPTM=) 13: ayDmsI9qPMkxJ9NCKjnvD4ewlH0.roa (hash: D0WB+C7bGTZZc6yEWTFDivFil9okzEXHOU5scGXoB+Q=) 14: bOl89NjQvBezrx1ixNcUiGYb0hI.crl (hash: wC7SrT/sl/uB2/8Md47zTTkx36ioiPTqqXdeKBOdbJo=) 15: h-Wv51tawGDDmzKTTiZygQFK1dI.roa (hash: gqUuhqm1O9kzFr7mzHK7ZrQWJPre8M3ei4+B6j2pDcQ=) 16: kDFa5fuToySOCU5vcGqCPDIk2Pc.roa (hash: I1BI9NSvaTv9rq7lHhxdUbN5f5WvqbSLYeczo8o1iF8=) 17: kehR6DRCeFwK5vsEVm60Bz8cG6c.roa (hash: L7sYa6xHC69xAZ7O1gkCc5slSgVN1A33m9IE9XvzF3U=) 18: mpGPMzUEL2GiaFu_ro-uoSMpDSM.roa (hash: De6x6yshStzd8qqnnIj6N4UKaPqhjyF/TsaAnqUmWqQ=) 19: oBqkwnj05lVwlwGOkOtelMXi290.roa (hash: KWxt3/pFpWp3KL1iplFsqb9jfnpqg64kOikp0uiyOdM=) 20: sBAGBCoZpRTh-6po9Toi-VKMV10.roa (hash: XU348a2UokXBEiecPQsK1jFxCMx0Gc+NuqKhJQxgwZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 03:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7b:bb:84:d4:84:6d:dc:75:b8:a7:35:30:62:af:b0:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Oct 27 05:00:48 2026 GMT Not After : Oct 28 05:00:48 2026 GMT Subject: CN=565afcc38be83830eade4f72302bdc431862d920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:80:b6:37:b9:13:77:6f:3b:14:d2:09:e6:49: 21:01:ce:c3:c0:49:04:a0:21:70:62:8d:72:e8:80: 91:b8:3c:fa:54:d8:f8:5b:75:96:8f:94:a4:bc:11: 3e:c5:0e:60:c5:22:ce:c2:9d:67:f0:8d:21:10:f9: 81:df:23:4b:cd:8a:cb:0c:3f:58:0a:74:ee:c0:9c: 96:36:a3:eb:76:03:65:65:f5:f2:13:8c:82:91:ab: 7d:96:9d:ef:e3:83:1d:4f:61:63:e5:5e:7d:9b:45: 8b:c4:40:e6:fe:bd:f2:6f:d6:49:69:51:ab:6e:76: f1:31:5d:5e:aa:d7:5d:a9:0a:81:45:fc:e7:64:05: 3f:c0:5b:f6:f4:56:9d:a5:70:2f:73:df:d7:63:08: f8:0a:3d:62:96:29:cd:ba:a9:a4:c1:d7:e9:41:cd: 10:66:c5:2c:2f:a1:fd:86:d2:ca:bc:04:c5:91:e3: e5:ab:d4:2f:50:05:7d:71:dd:32:dd:9f:05:03:3a: 94:94:e2:e6:a9:5a:9a:1b:c3:d6:d2:03:48:c0:e5: 4d:d6:da:0c:d2:dd:bc:0c:84:b9:45:57:c4:f4:f1: 2b:6d:e0:15:94:32:b8:bb:a9:02:d2:28:95:64:f4: a5:f3:76:a9:ab:e5:40:3e:33:68:e0:5e:61:3f:1f: fe:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5A:FC:C3:8B:E8:38:30:EA:DE:4F:72:30:2B:DC:43:18:62:D9:20 X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:fa:1f:bd:2d:59:32:0e:71:87:0b:ed:b5:32:9b:39:12:f5: 0a:89:72:3f:df:e0:c9:45:f7:f0:77:76:72:30:c0:2e:5e:0f: a8:2b:3f:30:e5:e9:44:ed:63:36:61:19:4f:a1:b0:5b:ca:b2: e1:0c:74:7e:63:74:2e:da:01:47:ed:c5:f9:66:8f:c5:ba:6d: 9d:36:97:33:d2:43:5e:be:26:dc:0b:9d:84:6a:c8:fd:cc:b2: 06:da:03:11:c2:1c:3b:ec:ab:0c:4e:1a:6e:f9:58:14:15:71: c8:e5:a5:a8:a5:57:8d:d4:0e:ec:bb:d0:6f:72:8b:44:f8:ae: e0:6b:43:3c:9f:31:99:2a:dc:6f:39:62:45:3d:81:99:11:63: 55:7a:cc:09:e2:4c:f0:f0:13:c1:7b:1b:92:e5:4a:8f:3f:e5: d5:02:82:9c:e5:61:8d:31:c7:eb:ba:a1:d5:88:87:92:86:ce: 97:ba:d2:3f:64:12:7f:fa:7d:79:c9:2f:91:b3:f5:ac:08:a8: 01:5b:2e:37:a5:f5:cd:5e:c8:5e:d3:14:2c:5a:45:08:d3:09: fe:37:b1:56:1b:a1:f3:81:e6:20:0c:7a:ff:74:98:ff:61:16: 09:e1:52:bf:6c:71:50:e2:1f:47:5b:00:ed:9b:08:9b:46:0f: 90:19:f7:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF7u4TUhG3cdbinNTBir7A2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjYxMDI3MDUwMDQ4WhcNMjYxMDI4MDUwMDQ4WjAzMTEwLwYDVQQD Eyg1NjVhZmNjMzhiZTgzODMwZWFkZTRmNzIzMDJiZGM0MzE4NjJkOTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYC2N7kTd287FNIJ5kkhAc7DwEkE oCFwYo1y6ICRuDz6VNj4W3WWj5SkvBE+xQ5gxSLOwp1n8I0hEPmB3yNLzYrLDD9Y CnTuwJyWNqPrdgNlZfXyE4yCkat9lp3v44MdT2Fj5V59m0WLxEDm/r3yb9ZJaVGr bnbxMV1eqtddqQqBRfznZAU/wFv29FadpXAvc9/XYwj4Cj1ilinNuqmkwdfpQc0Q ZsUsL6H9htLKvATFkePlq9QvUAV9cd0y3Z8FAzqUlOLmqVqaG8PW0gNIwOVN1toM 0t28DIS5RVfE9PErbeAVlDK4u6kC0iiVZPSl83apq+VAPjNo4F5hPx/+TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZa/MOL6Dgw6t5PcjAr3EMYYtkgMB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfofvS1Z Mg5xhwvttTKbORL1ColyP9/gyUX38Hd2cjDALl4PqCs/MOXpRO1jNmEZT6GwW8qy 4Qx0fmN0LtoBR+3F+WaPxbptnTaXM9JDXr4m3AudhGrI/cyyBtoDEcIcO+yrDE4a bvlYFBVxyOWlqKVXjdQO7LvQb3KLRPiu4GtDPJ8xmSrcbzliRT2BmRFjVXrMCeJM 8PATwXsbkuVKjz/l1QKCnOVhjTHH67qh1YiHkobOl7rSP2QSf/p9eckvkbP1rAio AVsuN6X1zV7IXtMULFpFCNMJ/jexVhuh84HmIAx6/3SY/2EWCeFSv2xxUOIfR1sA 7ZsIm0YPkBn39g== -----END CERTIFICATE-----Generated at Tue Oct 27 07:22:49 2026 by rpki-client