$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft File: Us2aZRLb8lpfGbgn16LH4iou6N0.mft (raw, json) Hash identifier: 2vv10J65lebb8upldeLCMPpfqyuvr5Z281emBwwJ4ng= Subject key identifier: 65:78:F0:FC:92:6F:13:59:2A:A2:B8:59:14:AE:C0:A5:36:30:FE:9E Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 01A08D572192F7350E682D27FE9D66FE4822 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft Manifest number: 0D1E Signing time: Thu 10 Sep 2026 22:01:32 +0000 Manifest this update: Thu 10 Sep 2026 22:01:32 +0000 Manifest next update: Fri 11 Sep 2026 22:01:32 +0000 Files and hashes: 1: 1-IlB2CphFhJ1Es2Auj6Y8Pv_wcE.roa (hash: dBSNrPPwvAMKy5o27/nj2blgxOw2PO1uOCPT4ejHFgg=) 2: 2GKmq9a4tbRnyy5v_dzbijUGgpo.roa (hash: 5lV0Dnj2JREu67qpiN4zC8MeQVoN3LVpjCKJ+YsJ3TU=) 3: 2rLUhnluwL6wnKGGvW337qHfa_A.roa (hash: vOmCdy4dcO0yKPbRSBS7H0+V0LqrEgZGLIPDsfuR8RI=) 4: 3JNAFPmuRusA7_P1cHUrpNc8ZWQ.roa (hash: zKy+aXsrA8Z978tqaQi0ynXqJW9mllBBtqQYt4mz8gc=) 5: 3eP-ZYKR74zQteZxg-jYK68KuKU.roa (hash: rI+Q6O08EYSoWZw7Ks588qVsTWbvSuHUC1dp2GQPsEg=) 6: 4_TTRfrA4hvyb8aeVnebRoG9aZ4.roa (hash: 3NbkuqOTF46pDYs4QB6pgruxYNEcPm4QNzecOj1ivnE=) 7: KnBckRYNpkrmgA2l68UnOSdG8M8.roa (hash: e9ryBHEjHKpJhCoyv4UnySH5Ms6mFlk1tA5pBRXFaKc=) 8: Px4XmExl2QONyqSP6s8-qLoIeoI.roa (hash: reA0XoIHBbZsGAjNzRWT9dW+9757Ms5dgcUGYfnrDi8=) 9: Us2aZRLb8lpfGbgn16LH4iou6N0.crl (hash: ztRBNBpiWe8eiPIllBp0dZHynhwIgtnq4R+tEhbdjiQ=) 10: VpoR4ytDHWEH5qJGhTngwFniYvk.roa (hash: x6eFh+FvocnjchDTOElJQmMu4KdVVQsAbUfVxqlk4YQ=) 11: b4bnSjrxkGqwlr0zkoxcOijmFkc.roa (hash: fQuLS072q+zjmBm2EgGlUmemoEePNKD15HIZM6Eyfw4=) 12: cwwhcNpzOg_pmBszouIx8h2CHRU.roa (hash: vBJrQQ0ItgE86n69h/fkj396ErwZyqxGCsEUUVNAzdI=) 13: hlAbpQnKYaIDHrjCT-1lNBwSXu0.roa (hash: BILz2oAMGgMF6vZP6W3jaxaaHIODVkHC+m/GaL33QlM=) 14: kPZtrooPlOyF8jQupuEU9Gy1bJQ.roa (hash: KtcI+6F6qPHzsOZYQ0EOD+pODuibLz2OAgS4M/a6Aq4=) 15: ldoq86JhWRtPnXQa0o4fAn7GOes.roa (hash: Zfo5/6efnP/N6jxUB47woZ54SIJcC/xEnjfHGBYnABk=) 16: oLlQgePRk9yvcOlL0Fl_a56u9H4.roa (hash: Wqock9cGRbZPQGtCkafIuYZm7FqajUuA17fJ83OGRks=) 17: xp9MuE3K7E-Sb2HgnwhKc3yErto.roa (hash: 9FJKEkYOHXVi/GiMh+ZQtwPZthuSJbC+u80wUEZ5uBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 14:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8d:57:21:92:f7:35:0e:68:2d:27:fe:9d:66:fe:48:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Sep 10 22:01:32 2026 GMT Not After : Sep 11 22:01:32 2026 GMT Subject: CN=6578f0fc926f13592aa2b85914aec0a53630fe9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8e:b1:f5:5b:1d:d3:c6:7c:63:bc:9d:03:63: 8f:14:17:61:ea:39:be:44:92:be:8d:ef:61:45:58: 50:a6:c9:4a:bc:52:99:5b:86:a7:00:be:17:f5:1d: fb:74:8f:c2:9f:cd:6a:8d:ac:ed:a2:fb:a3:79:4d: 3f:ae:15:d6:16:f5:17:76:a2:bb:a2:fb:9f:82:c7: c3:4f:ed:b5:2f:a1:42:08:92:c1:7f:75:f0:ea:8a: 56:b3:7e:d8:e2:83:1c:05:aa:7d:d7:60:1f:5a:c4: 60:0d:40:0a:62:c8:ca:2d:57:4e:d2:c1:6c:86:90: c9:55:ef:88:28:d1:bf:fe:db:fc:33:e7:ed:6f:a9: 95:b8:ad:27:26:08:75:6d:2d:50:b3:7f:36:59:dd: 85:64:f0:bb:da:36:e4:82:86:82:ae:8c:b5:1f:9d: 15:0e:6a:ea:0e:3c:0f:d1:a2:9a:64:72:6e:a9:82: b5:f8:1b:b2:18:86:9a:17:3f:4b:a6:cf:bf:d5:01: a2:de:83:a2:be:ee:46:a5:b6:23:7a:f7:46:d7:29: 45:44:c3:83:b4:ff:24:8b:40:2c:8f:38:7c:e7:00: 6e:ec:83:18:82:27:8c:1b:cd:05:8f:ed:45:1c:f3: a8:21:0d:f4:0b:a6:86:89:d6:bd:b0:0e:be:e9:23: 65:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:78:F0:FC:92:6F:13:59:2A:A2:B8:59:14:AE:C0:A5:36:30:FE:9E X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:24:01:b6:b5:f4:9f:3f:5c:8c:68:d9:49:c2:5e:de:70:51: 81:a8:30:97:df:d6:c7:e3:fe:17:a4:1d:7c:04:6a:dc:08:24: bd:28:29:9e:21:19:ad:f1:b9:8e:0a:10:dd:73:3c:ed:4e:56: 1e:2a:bc:09:6e:6d:8f:71:a9:1b:b3:9c:4a:bc:37:72:fa:b5: 0b:0e:05:e9:4f:65:e3:32:c4:84:02:0b:37:4d:eb:5f:b3:80: 3d:bd:02:a7:09:6a:68:b8:b4:8f:49:7a:56:c9:ab:f5:79:6c: 40:3f:69:4b:35:f8:b2:61:99:46:13:e2:5d:49:25:1b:6c:9a: 1c:13:0a:3e:a2:6b:96:a3:b2:a6:19:b5:17:e7:dc:16:7f:5f: ba:bb:1a:15:35:84:56:de:af:63:c9:da:c3:41:fc:fb:99:11: fe:d6:e6:1c:25:d3:7d:5c:ac:fe:9d:47:e9:31:a9:6a:cb:dc: a2:78:cb:61:0b:c9:4b:52:93:73:10:4e:d7:48:67:11:b3:ff: 17:3e:6d:a0:e9:4b:66:04:49:ba:ab:88:89:b1:a4:29:72:7f: 3a:a4:35:f5:49:e7:05:fd:8b:3f:2d:d4:4c:4e:1a:51:bf:5c: b0:98:3b:3a:80:e5:dc:1c:60:a5:50:ed:04:e8:92:ef:ce:6d: e0:c2:dc:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCNVyGS9zUOaC0n/p1m/kgiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjYwOTEwMjIwMTMyWhcNMjYwOTExMjIwMTMyWjAzMTEwLwYDVQQD Eyg2NTc4ZjBmYzkyNmYxMzU5MmFhMmI4NTkxNGFlYzBhNTM2MzBmZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY6x9Vsd08Z8Y7ydA2OPFBdh6jm+ RJK+je9hRVhQpslKvFKZW4anAL4X9R37dI/Cn81qjaztovujeU0/rhXWFvUXdqK7 ovufgsfDT+21L6FCCJLBf3Xw6opWs37Y4oMcBap912AfWsRgDUAKYsjKLVdO0sFs hpDJVe+IKNG//tv8M+ftb6mVuK0nJgh1bS1Qs382Wd2FZPC72jbkgoaCroy1H50V DmrqDjwP0aKaZHJuqYK1+BuyGIaaFz9Lps+/1QGi3oOivu5GpbYjevdG1ylFRMOD tP8ki0Asjzh85wBu7IMYgieMG80Fj+1FHPOoIQ30C6aGida9sA6+6SNl3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGV48PySbxNZKqK4WRSuwKU2MP6eMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyQBtrX0 nz9cjGjZScJe3nBRgagwl9/Wx+P+F6QdfARq3AgkvSgpniEZrfG5jgoQ3XM87U5W Hiq8CW5tj3GpG7OcSrw3cvq1Cw4F6U9l4zLEhAILN03rX7OAPb0CpwlqaLi0j0l6 Vsmr9XlsQD9pSzX4smGZRhPiXUklG2yaHBMKPqJrlqOyphm1F+fcFn9fursaFTWE Vt6vY8naw0H8+5kR/tbmHCXTfVys/p1H6TGpasvconjLYQvJS1KTcxBO10hnEbP/ Fz5toOlLZgRJuquIibGkKXJ/OqQ19UnnBf2LPy3UTE4aUb9csJg7OoDl3BxgpVDt BOiS785t4MLcGg== -----END CERTIFICATE-----Generated at Thu Sep 10 23:36:48 2026 by rpki-client