$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: LorOCtir4NqPii53bKL1q4ElCqljCFiWFms3VpbnS8Q= Subject key identifier: FF:38:93:98:41:17:0E:76:12:FA:F6:E3:D2:45:79:F4:31:8F:50:86 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 01A08A8C2D552D786BF100C842C946BA52EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 1AD0 Signing time: Thu 10 Sep 2026 09:00:37 +0000 Manifest this update: Thu 10 Sep 2026 09:00:37 +0000 Manifest next update: Fri 11 Sep 2026 09:00:37 +0000 Files and hashes: 1: TjYcJALyGbmW-x31ry7QsUvdQtQ.roa (hash: knhLPKVdJjwTBCuKiy0BNSL8TQGPgiu2tFYYWRO2204=) 2: baEkayAg80jmYDBU-ExaHSLpuaI.roa (hash: nAErtQy9uElHFQjfJS5ckQ4epiwL6hvpsQEYN9BEeqw=) 3: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: hRoqgHG+GhFzd/zhY2Nqznu6zVbyI774kZ40vU+OWWw=) 4: cGs3UaDvGLQ1Q_TQpZAPaINt4Es.roa (hash: W7uHnT9KoPvCIjHy/wyMQaAb03AUeFyxBB7Do1XvIvI=) 5: ebSZBecc7df92SgP59-y12trz8Y.roa (hash: eWLHCXv7jbIrxX4dZcu1pV/1wCL3MzIiRwN/vf2jitQ=) 6: hp4kjoTsfGIBSPnL3Ulvv5LRB_A.roa (hash: icmc8vcVjmZSj8X83I0R9LEtCGtKRf3+GDCj0xm9IVc=) 7: nmGtGkrhBfqxDaqozTHEU7woU_8.roa (hash: myNlScXFtUNhqDOYxLDED2mEeSRwem2M2mluAw2qbGU=) 8: oRALtbh2nuCRd23sDYqfy35X5z0.roa (hash: jC6NP1kM59PVY3etFPE/j9NV0XqouvnOb2E4RPSGrX4=) 9: pI2S2lg5Mevtnr1gNuhTMLXlTZk.roa (hash: 5cp4WqQX2Fq4/2gG8NNXNJQnzkTkhV+uz8kgPR8ik8M=) 10: pUi-gLSXqZ0JaQPDBRSSYpMiavg.roa (hash: BVbd5i0a2oHy3QrO+gV4ifjJEQxi06QcvV9UBgsyx9E=) 11: rWySjgHmxws3lM6jmie75S8CDBw.roa (hash: At0oBHsNt1VyqDJTW3hMzgCfUrv9SJ/hPxisShjHIa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:8c:2d:55:2d:78:6b:f1:00:c8:42:c9:46:ba:52:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Sep 10 09:00:37 2026 GMT Not After : Sep 11 09:00:37 2026 GMT Subject: CN=ff38939841170e7612faf6e3d24579f4318f5086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:eb:76:08:3f:0a:4c:b1:38:3d:9d:68:91:ad: 43:fe:a5:47:dc:fc:86:98:cb:9c:d4:7b:fd:4e:43: b5:ce:14:e3:37:f2:34:e1:a3:d7:33:0a:5d:11:4d: 61:ba:9b:dd:f0:3c:5b:de:49:5d:23:9c:ff:36:9a: c6:68:dd:45:bf:bd:80:7f:ed:05:94:68:bf:fb:af: e4:6e:1d:45:ae:d3:5a:ef:3f:39:0b:1a:18:5a:2e: 4b:20:65:f6:56:86:e1:fd:3b:50:9f:92:6a:c7:51: 2e:b4:b9:c3:02:9c:59:03:40:60:06:91:bd:70:ae: 33:6a:20:ab:be:c9:ec:4b:ff:54:4f:60:53:9a:34: a2:04:24:1d:be:b4:14:9e:5d:ef:c4:ad:10:89:4a: 25:3e:42:59:e7:f5:0d:77:fe:b6:e3:29:bf:c4:07: f5:c9:b8:10:b9:5f:a7:e9:47:d1:82:96:53:2c:b2: b1:8f:fb:d5:41:55:c9:b2:20:02:a6:52:47:bf:23: b0:42:87:f9:2d:2e:37:16:02:da:76:e0:d8:6f:36: e3:9c:e0:6a:5c:fb:81:3b:43:47:27:d0:06:92:5d: b3:41:67:39:dd:f9:88:dd:c3:a3:fa:cc:46:77:1d: 3d:ea:17:90:f6:3b:cf:e8:c3:d5:e4:a6:86:17:12: 6b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:38:93:98:41:17:0E:76:12:FA:F6:E3:D2:45:79:F4:31:8F:50:86 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:62:e6:36:36:81:90:9e:e2:a4:1a:70:56:91:fb:cf:e0:27: b6:28:ad:e2:bb:14:6d:d8:ab:bd:03:34:3a:9e:76:b6:c5:6a: a8:df:a4:a5:c6:2f:f1:56:73:52:6c:9d:1e:2a:a4:96:fc:fb: 48:0c:4d:ad:c7:77:8e:5d:2f:ba:ad:14:87:99:48:e9:1d:7f: da:12:36:00:b1:d2:3d:bc:b6:15:65:32:16:11:8f:ff:66:35: d6:ba:b1:80:c3:b7:a5:45:16:29:2e:38:36:47:83:c9:98:30: 8a:7f:14:0e:9a:f6:5b:e4:76:03:b4:31:9c:3c:8f:b3:8f:c3: 90:8b:c1:03:cf:ba:63:b3:b3:05:ad:71:84:bb:3b:6d:1c:0e: a3:7f:23:f7:a1:d9:ee:3b:df:e3:90:cd:79:64:30:60:02:e4: 99:97:d0:cc:e7:90:fc:dd:91:95:e0:c5:2d:12:94:98:46:b0: c6:90:6b:57:6f:aa:b2:5b:43:b3:fb:13:45:8f:db:90:b4:03: d6:75:bd:38:96:8b:17:f7:15:de:ae:49:73:1c:ba:a9:8d:e8: 22:6b:8a:d4:bb:ca:3f:19:02:f5:cd:ca:ec:94:89:8a:c2:fe: 02:ce:08:4c:d0:49:d7:2d:65:6a:6e:70:4a:c7:3e:44:a9:06: b2:37:fd:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKjC1VLXhr8QDIQslGulLsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYwOTEwMDkwMDM3WhcNMjYwOTExMDkwMDM3WjAzMTEwLwYDVQQD EyhmZjM4OTM5ODQxMTcwZTc2MTJmYWY2ZTNkMjQ1NzlmNDMxOGY1MDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxet2CD8KTLE4PZ1oka1D/qVH3PyG mMuc1Hv9TkO1zhTjN/I04aPXMwpdEU1hupvd8Dxb3kldI5z/NprGaN1Fv72Af+0F lGi/+6/kbh1FrtNa7z85CxoYWi5LIGX2Vobh/TtQn5Jqx1EutLnDApxZA0BgBpG9 cK4zaiCrvsnsS/9UT2BTmjSiBCQdvrQUnl3vxK0QiUolPkJZ5/UNd/624ym/xAf1 ybgQuV+n6UfRgpZTLLKxj/vVQVXJsiACplJHvyOwQof5LS43FgLaduDYbzbjnOBq XPuBO0NHJ9AGkl2zQWc53fmI3cOj+sxGdx096heQ9jvP6MPV5KaGFxJrtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP84k5hBFw52Evr249JFefQxj1CGMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2LmNjaB kJ7ipBpwVpH7z+Antiit4rsUbdirvQM0Op52tsVqqN+kpcYv8VZzUmydHiqklvz7 SAxNrcd3jl0vuq0Uh5lI6R1/2hI2ALHSPby2FWUyFhGP/2Y11rqxgMO3pUUWKS44 NkeDyZgwin8UDpr2W+R2A7QxnDyPs4/DkIvBA8+6Y7OzBa1xhLs7bRwOo38j96HZ 7jvf45DNeWQwYALkmZfQzOeQ/N2RleDFLRKUmEawxpBrV2+qsltDs/sTRY/bkLQD 1nW9OJaLF/cV3q5Jcxy6qY3oImuK1LvKPxkC9c3K7JSJisL+As4ITNBJ1y1lam5w Ssc+RKkGsjf9Bw== -----END CERTIFICATE-----Generated at Thu Sep 10 16:52:25 2026 by rpki-client