$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: r5cHg6wGdXC2PUWhPTuh+K1bnLg3caQHkHCe9yXDJGI= Subject key identifier: DB:C2:50:41:0F:B2:CD:5E:8A:C9:DC:0D:9E:CB:6B:25:DA:A0:1B:C7 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 01A17BF31DF48FDD8E66D6857A94769DEBA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 1B4D Signing time: Tue 27 Oct 2026 06:01:32 +0000 Manifest this update: Tue 27 Oct 2026 06:01:32 +0000 Manifest next update: Wed 28 Oct 2026 06:01:32 +0000 Files and hashes: 1: TjYcJALyGbmW-x31ry7QsUvdQtQ.roa (hash: knhLPKVdJjwTBCuKiy0BNSL8TQGPgiu2tFYYWRO2204=) 2: baEkayAg80jmYDBU-ExaHSLpuaI.roa (hash: nAErtQy9uElHFQjfJS5ckQ4epiwL6hvpsQEYN9BEeqw=) 3: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: 61cf1+unQM/VkhikgEypwmBdsoX/14B7vdySqQjy4PE=) 4: cGs3UaDvGLQ1Q_TQpZAPaINt4Es.roa (hash: W7uHnT9KoPvCIjHy/wyMQaAb03AUeFyxBB7Do1XvIvI=) 5: ebSZBecc7df92SgP59-y12trz8Y.roa (hash: eWLHCXv7jbIrxX4dZcu1pV/1wCL3MzIiRwN/vf2jitQ=) 6: hp4kjoTsfGIBSPnL3Ulvv5LRB_A.roa (hash: icmc8vcVjmZSj8X83I0R9LEtCGtKRf3+GDCj0xm9IVc=) 7: nmGtGkrhBfqxDaqozTHEU7woU_8.roa (hash: myNlScXFtUNhqDOYxLDED2mEeSRwem2M2mluAw2qbGU=) 8: oRALtbh2nuCRd23sDYqfy35X5z0.roa (hash: jC6NP1kM59PVY3etFPE/j9NV0XqouvnOb2E4RPSGrX4=) 9: pI2S2lg5Mevtnr1gNuhTMLXlTZk.roa (hash: 5cp4WqQX2Fq4/2gG8NNXNJQnzkTkhV+uz8kgPR8ik8M=) 10: pUi-gLSXqZ0JaQPDBRSSYpMiavg.roa (hash: BVbd5i0a2oHy3QrO+gV4ifjJEQxi06QcvV9UBgsyx9E=) 11: rWySjgHmxws3lM6jmie75S8CDBw.roa (hash: At0oBHsNt1VyqDJTW3hMzgCfUrv9SJ/hPxisShjHIa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7b:f3:1d:f4:8f:dd:8e:66:d6:85:7a:94:76:9d:eb:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Oct 27 06:01:32 2026 GMT Not After : Oct 28 06:01:32 2026 GMT Subject: CN=dbc250410fb2cd5e8ac9dc0d9ecb6b25daa01bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1e:d2:8f:a6:c2:93:8a:42:37:8f:f1:56:74: 41:5b:91:0e:9c:bf:5f:30:59:e5:a7:ef:d5:18:4c: d1:dd:b6:f6:94:b1:33:44:a4:01:3f:ee:1f:f9:4b: a5:d0:35:02:94:4d:62:a5:2c:1b:03:11:b7:e4:77: de:de:83:4d:26:42:8e:ff:5a:d8:6f:33:d0:7c:04: 68:e9:a6:47:0b:b5:0a:4d:4f:55:1a:d6:bc:70:5f: 58:23:6a:a7:7c:4b:0a:0c:1d:10:12:9f:0d:49:c3: e2:c8:f8:2b:50:bf:b5:36:95:f0:46:ba:2e:0c:1f: b5:69:01:bd:57:fe:22:7d:8d:39:68:b2:cb:dc:45: 44:7e:c1:48:d8:3a:89:2b:57:a3:46:a8:ba:53:b4: de:87:93:cf:22:6c:66:ed:2c:ee:80:d5:00:bb:f8: 59:f5:c6:42:ed:6e:3e:84:c8:80:aa:ac:78:ac:be: cc:42:22:b2:21:3f:d7:56:bf:fa:7f:18:37:83:cb: e6:e0:b9:e4:ce:9f:18:8a:24:30:df:32:70:02:78: 14:e9:1d:ca:09:43:0a:50:c2:71:55:7d:fd:4c:6c: 88:e5:3e:17:cc:2a:85:8d:aa:0d:06:20:a7:63:c5: 96:27:8d:15:58:b3:61:e0:ab:b9:03:91:d7:de:c6: 13:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C2:50:41:0F:B2:CD:5E:8A:C9:DC:0D:9E:CB:6B:25:DA:A0:1B:C7 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:27:5f:02:62:ba:f0:ce:f4:85:97:a5:62:26:db:94:80:a2: 75:34:7c:f5:32:ed:d6:70:16:b7:19:c0:8d:c2:c2:16:09:16: 94:9a:61:df:c3:cd:a4:37:3b:5e:b3:86:54:06:aa:7d:e4:6e: fb:b4:90:2b:e9:5f:44:30:4a:ea:9a:97:27:fd:fc:28:2a:f1: 18:ea:8e:89:c5:b3:ed:39:9b:b5:f8:0e:a2:79:6a:7c:94:eb: fa:16:50:5b:c6:76:49:eb:d9:83:b1:4c:ff:77:0e:7f:b6:92: 83:b5:48:b9:42:d9:96:26:cf:08:a7:c0:17:0d:fb:54:a6:58: 98:ac:6a:ec:2c:9c:de:e1:5e:aa:32:54:c3:64:1c:c6:f1:41: f2:86:aa:81:0e:03:a0:45:8f:5e:f0:bd:0e:09:b9:84:c4:b4: f8:16:f9:ea:25:de:58:40:f4:41:54:d0:ac:a2:d5:ec:6a:cc: 37:99:89:da:44:99:c9:89:70:ea:12:36:9b:4a:bb:71:af:75: da:ee:38:ef:3d:8d:68:bb:19:65:8c:c5:f8:78:32:c9:a8:df: 47:10:8a:1d:32:a7:52:84:a7:d5:92:2b:65:cd:21:79:78:20: 35:fd:63:ac:5c:90:64:52:37:d1:b2:9c:6e:f0:88:de:94:8f: b5:4c:33:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF78x30j92OZtaFepR2neuhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYxMDI3MDYwMTMyWhcNMjYxMDI4MDYwMTMyWjAzMTEwLwYDVQQD EyhkYmMyNTA0MTBmYjJjZDVlOGFjOWRjMGQ5ZWNiNmIyNWRhYTAxYmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx7Sj6bCk4pCN4/xVnRBW5EOnL9f MFnlp+/VGEzR3bb2lLEzRKQBP+4f+Uul0DUClE1ipSwbAxG35Hfe3oNNJkKO/1rY bzPQfARo6aZHC7UKTU9VGta8cF9YI2qnfEsKDB0QEp8NScPiyPgrUL+1NpXwRrou DB+1aQG9V/4ifY05aLLL3EVEfsFI2DqJK1ejRqi6U7Teh5PPImxm7SzugNUAu/hZ 9cZC7W4+hMiAqqx4rL7MQiKyIT/XVr/6fxg3g8vm4Lnkzp8YiiQw3zJwAngU6R3K CUMKUMJxVX39TGyI5T4XzCqFjaoNBiCnY8WWJ40VWLNh4Ku5A5HX3sYTGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvCUEEPss1eisncDZ7LayXaoBvHMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKidfAmK6 8M70hZelYibblICidTR89TLt1nAWtxnAjcLCFgkWlJph38PNpDc7XrOGVAaqfeRu +7SQK+lfRDBK6pqXJ/38KCrxGOqOicWz7TmbtfgOonlqfJTr+hZQW8Z2SevZg7FM /3cOf7aSg7VIuULZlibPCKfAFw37VKZYmKxq7Cyc3uFeqjJUw2QcxvFB8oaqgQ4D oEWPXvC9Dgm5hMS0+Bb56iXeWED0QVTQrKLV7GrMN5mJ2kSZyYlw6hI2m0q7ca91 2u447z2NaLsZZYzF+HgyyajfRxCKHTKnUoSn1ZIrZc0heXggNf1jrFyQZFI30bKc bvCI3pSPtUwzNQ== -----END CERTIFICATE-----Generated at Tue Oct 27 12:43:50 2026 by rpki-client