$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json) Hash identifier: AmPbFV1CwYTLhwYqpRyTCHxxo6RCZjQybUxnurFtiWc= Subject key identifier: 33:AB:86:7E:32:A4:76:D1:77:D3:24:2A:94:18:DA:B6:F6:4B:92:11 Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701 Certificate serial: 01A1189891B739DF23533EDA275D11AFF9A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft Manifest number: 1AAF Signing time: Wed 07 Oct 2026 23:00:14 +0000 Manifest this update: Wed 07 Oct 2026 23:00:14 +0000 Manifest next update: Thu 08 Oct 2026 23:00:14 +0000 Files and hashes: 1: 2rYrAzNGLRy2kebzewAymxyAgFI.roa (hash: 7lRGKU9DPcDtXv+u0hXbpyy4aMqg0Uw+oprnJUe2LzA=) 2: 4oMfwBT0VCqApq0Mz9B5u8oEdgY.asa (hash: B40/yiGXsK8OX28pGDLWCXmBEnfMWxpGQtWVYUoy2PU=) 3: GmKW5_EHkoH0GvuRNXDDZJBTr9w.asa (hash: WTnAG5IBd9zYOkgfV7EwghTiMnsdkoRczSviULKHvJk=) 4: O0zW5TfYvBKPM_06y39fr20GlgU.roa (hash: o9IJqdu4tvBH89+q/ixOEY64sxONXtm+OJZs9bCwOus=) 5: PY4zk8ZdTV8J6IiAD0rRER8XcM4.asa (hash: ds1r0Q17VFau1bpjzlPurN1iqObqDOJcn+qwvKgVZdM=) 6: Y19P_g-vBYYPjku8AAu-CeAzWW0.roa (hash: 0p9ZYZuTWuetqmVFdCZJU25sYbQjPpo04+Hro2GGGZA=) 7: fL71-L22cKxM7CZQLZouesgJu3U.roa (hash: sUDVv41sxROa/YEaIzj5YrqXpRn04S1uEQsUbtMaqsM=) 8: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: T5c7sFmplQf2MpRfE8nbbsHMzhJrA6BIYkSaTpqsVPg=) 9: kWoDnbDfKRrdPEqboPrzUYeYutU.asa (hash: KIa+NGQ3X/m6SyP7wk2j8x0CtEKUsyJ76G3KolFP4Sw=) 10: nWTiWDUsZBq6y-Llds3TNYkdAzA.roa (hash: lu7dgyssWpWTBNpOq8brqIrMrxMRYIWthZEExVfrpEk=) 11: psPWwnT647exV4ggiJz8vloBaHU.roa (hash: P5hGKQcqsDsWZRv7ouHrUVvJ+SAHh8mal8JYlkQ7E8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 22:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:18:98:91:b7:39:df:23:53:3e:da:27:5d:11:af:f9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f25e6a6893f466d2695e90670c047443643701 Validity Not Before: Oct 7 23:00:14 2026 GMT Not After : Oct 8 23:00:14 2026 GMT Subject: CN=33ab867e32a476d177d3242a9418dab6f64b9211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a4:65:1b:58:ad:5a:75:37:69:18:ed:65:31: 9b:05:4e:b7:fc:5a:c3:50:a1:b7:ae:82:da:95:3a: fd:20:07:a6:e2:2f:3f:fa:98:32:ed:03:22:9c:8c: f1:d4:2e:ec:c2:6c:f8:12:c0:f3:bf:7c:52:62:c1: fc:7a:b5:31:71:84:b9:ca:41:05:5f:b7:24:76:8e: bd:48:f3:da:33:6c:9b:4b:ed:cd:12:2a:36:19:ea: 51:77:f7:e0:4e:04:92:65:63:f8:a3:5a:fd:d6:fb: af:f1:61:6b:8a:5c:28:dd:42:4f:eb:be:70:d9:a4: 0a:20:67:ea:f7:6e:21:53:e5:ef:18:f5:96:d5:b5: 3b:15:62:c5:26:da:87:18:1c:b3:2e:13:0f:39:c5: b1:38:40:41:0f:65:0a:f8:c5:ea:d2:d4:c0:b4:c4: 75:41:86:b1:25:e1:1c:a0:e1:80:9e:60:58:c8:a6: 2f:7a:d3:a5:f0:3f:f8:b2:ec:61:26:cd:88:40:76: 40:60:aa:44:31:6c:72:4a:13:f0:9b:14:90:be:1a: ee:cb:60:6f:23:eb:2d:03:90:bf:f9:c0:58:6c:1d: 2d:5b:4e:77:6b:13:d7:f9:50:18:61:66:37:bf:9a: 9f:14:9a:eb:a0:4e:94:0d:3c:66:c7:f5:e0:35:a0: ce:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AB:86:7E:32:A4:76:D1:77:D3:24:2A:94:18:DA:B6:F6:4B:92:11 X509v3 Authority Key Identifier: keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:76:97:eb:23:b5:78:13:f5:20:0c:6c:51:79:b6:4e:ea:96: 8e:94:75:71:2c:0d:75:f2:c5:1e:d1:40:c9:45:7e:ad:05:87: 00:dc:bc:e1:f4:fa:d3:9b:0a:18:0d:83:dd:31:e3:1b:4f:be: 9d:2a:dc:20:c0:33:6c:65:1f:5c:1e:b9:8b:3d:66:72:0a:b5: 5e:c7:08:e4:21:3c:30:1b:7f:39:2d:ea:21:a1:8d:28:a1:2c: c2:22:3f:de:c9:48:ed:5e:98:d0:72:38:71:3a:e7:ce:5f:44: 3d:a7:20:77:65:5c:21:52:e8:55:2e:59:67:32:05:ef:68:08: 77:0d:1e:d0:52:a2:36:e2:48:d8:2e:23:cd:ee:7b:76:03:82: 4b:79:8a:d5:91:9e:fb:7c:5c:79:53:7f:7b:83:68:8e:bb:36: 46:60:df:bc:c2:21:8c:c6:28:5d:3c:c7:cd:d1:a5:b0:1e:d7: c9:0f:d7:79:f6:c8:13:31:e5:76:34:98:2f:ef:ed:81:b1:2e: 96:46:40:ca:62:0f:75:1f:31:d9:50:5b:81:77:d1:38:f2:7f: 33:51:40:99:a2:9d:b5:4c:0c:eb:2c:5b:65:57:cf:6a:b5:2f: 19:26:72:e7:c5:65:1e:86:e3:f3:fb:fb:e6:41:76:af:23:da: 90:a8:73:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEYmJG3Od8jUz7aJ10Rr/mgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2 NDM3MDEwHhcNMjYxMDA3MjMwMDE0WhcNMjYxMDA4MjMwMDE0WjAzMTEwLwYDVQQD EygzM2FiODY3ZTMyYTQ3NmQxNzdkMzI0MmE5NDE4ZGFiNmY2NGI5MjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KRlG1itWnU3aRjtZTGbBU63/FrD UKG3roLalTr9IAem4i8/+pgy7QMinIzx1C7swmz4EsDzv3xSYsH8erUxcYS5ykEF X7ckdo69SPPaM2ybS+3NEio2GepRd/fgTgSSZWP4o1r91vuv8WFrilwo3UJP675w 2aQKIGfq924hU+XvGPWW1bU7FWLFJtqHGByzLhMPOcWxOEBBD2UK+MXq0tTAtMR1 QYaxJeEcoOGAnmBYyKYvetOl8D/4suxhJs2IQHZAYKpEMWxyShPwmxSQvhruy2Bv I+stA5C/+cBYbB0tW053axPX+VAYYWY3v5qfFJrroE6UDTxmx/XgNaDO+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOrhn4ypHbRd9MkKpQY2rb2S5IRMB8GA1UdIwQY MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXaX6yO1 eBP1IAxsUXm2TuqWjpR1cSwNdfLFHtFAyUV+rQWHANy84fT605sKGA2D3THjG0++ nSrcIMAzbGUfXB65iz1mcgq1XscI5CE8MBt/OS3qIaGNKKEswiI/3slI7V6Y0HI4 cTrnzl9EPacgd2VcIVLoVS5ZZzIF72gIdw0e0FKiNuJI2C4jze57dgOCS3mK1ZGe +3xceVN/e4Nojrs2RmDfvMIhjMYoXTzHzdGlsB7XyQ/XefbIEzHldjSYL+/tgbEu lkZAymIPdR8x2VBbgXfROPJ/M1FAmaKdtUwM6yxbZVfParUvGSZy58VlHobj8/v7 5kF2ryPakKhzoA== -----END CERTIFICATE-----Generated at Thu Oct 8 09:23:28 2026 by rpki-client