$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft File: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json) Hash identifier: 92gabEOuEeDzjpekCn8IB+1wuziUmyTGUNA8xqCxkdk= Subject key identifier: 36:24:E1:6A:73:42:A0:01:06:20:AE:47:94:09:32:C6:CB:63:0E:AA Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Certificate serial: 01A17A71CDE010D357CBB7F916BDE0AA4B79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft Manifest number: 16B2 Signing time: Mon 26 Oct 2026 23:00:40 +0000 Manifest this update: Mon 26 Oct 2026 23:00:40 +0000 Manifest next update: Tue 27 Oct 2026 23:00:40 +0000 Files and hashes: 1: 0E76KXZ9iHkQo5cuwSmpBWCgAGY.roa (hash: dF9xWEdJ4yslQZrm/UOaV1qAa6lP8Z3elmi3oqjU0TY=) 2: A3dfbS-b6385QXbD4gqPyZDygnI.roa (hash: eMk+m8VzfNpB4AhSwjxnwTq5SWYabewWTjTtFBj+jG4=) 3: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: OHpRGC0bnq+uscamwMuEd/VTWf+JIkyPSgWRrYkRk+4=) 4: KLhPBL2V1p6eH8MFMD4KISIZMPw.roa (hash: i3XrWoh37U4fK2ppSLoxAjBzRfTAeH85VC2nk0unVUA=) 5: M3X3dm-8It7aMXQj1y54UfL58OM.roa (hash: 7bUApRHysWlBDgJo+0traB3WXa7dB6bicxRUCK/I0eI=) 6: URKvTjDp4aRxdSZ3jqDjwv8D8go.roa (hash: 0rxLDrLwqqP9CnkuagDXnUpxuRr/vAmcV/9SQj91sog=) 7: VIoe5vtniIMNu_oPEWff-lwSqrw.roa (hash: 3k0VjZdIDMeiSnCUwM6+f+LSTU02mg7Bx1Owb60WuIE=) 8: _eOaEicMkKKbiwUmCfYmS46987o.roa (hash: BD38gTS64MApM1VCH/ZNlIeeCLbbXCbnCN+Xqd56/3o=) 9: bSb1vKlFqm6Lgoy9mUt1MbjszKU.roa (hash: 8Rm1aKWGejiopvOQal7M9IGwEZUMfEE7E/dgp4snH3E=) 10: dfU9-qhAOPIpRHtI7pg9049xOfE.roa (hash: ckxo+NWohdUNYjvvt6rTVaOl1HC1z5u5A4J3Qvv8VqY=) 11: ecI9WwfCcCzWrmDmHhs2EyFDQJM.roa (hash: F5YXv2pp9vRYKIztKcSv4xzwJ07F66Zhmicw5zjO8J8=) 12: iED_owvyFgGGF-972O4f2El6eKQ.roa (hash: BYCrJULwUZkF9QngMTxWf2MojtIdVmYbHlwVSSyqby4=) 13: ktxPtq6QBIdiSOZ68pA9GADZGkA.roa (hash: nKwrZvWFwYhUKsU2Xr6N7bIKsHUx8g94vR6U6JSn7Rw=) 14: oDF8isOJjyEJhYEJCgEsnjBbHWk.roa (hash: 6eDaCiZYBtD9bJDiBCS6z1HiWa8aHX6Yc2oe3UfDymI=) 15: pUWzol-7IsEVFwivJCsdeNOLoCA.roa (hash: ihBXzOrxaX+3ULCeQHTxwVVAR46TXRnS+YBxBrTsMIg=) 16: uFmKQIOM22Gf0n9NsjnDx0c77jY.roa (hash: fUJaWhjz/0nSENjm+Jnurdoq9gCX5ybznrqsrDoG2QQ=) 17: wdbxHLFVBNdWh2qGHilCZZD7-g0.roa (hash: 90fXHeqU2neAZl01CJ/fB5l+GTvQAN5HQEWOMc2pyGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7a:71:cd:e0:10:d3:57:cb:b7:f9:16:bd:e0:aa:4b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Validity Not Before: Oct 26 23:00:40 2026 GMT Not After : Oct 27 23:00:40 2026 GMT Subject: CN=3624e16a7342a0010620ae47940932c6cb630eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:83:4e:5b:f5:37:0c:f5:17:23:cf:78:c8:50: ce:44:8f:f5:6c:76:be:7f:01:6b:96:1d:0a:d8:92: 96:e0:6a:a6:2f:e1:31:ed:48:e8:b2:8a:b1:60:ef: e5:3d:3b:0c:30:61:77:c9:c3:61:d1:e7:e4:71:e4: d3:c5:83:51:ef:bd:b3:7a:5b:8b:36:13:03:fb:51: 81:50:16:8e:33:ef:a6:af:bd:93:5d:48:dc:db:ea: 09:c7:53:c1:ab:7c:40:63:98:4f:3b:d3:c5:1e:c1: a9:d1:80:86:a3:43:80:0b:00:96:df:19:8b:ff:6a: 1a:10:db:4a:54:11:07:4d:92:04:b9:3b:3a:22:ad: 14:b8:36:a1:4c:d1:f4:98:31:6b:80:d6:ee:ac:3c: 95:42:84:d4:25:3d:9c:55:cc:e1:19:1a:e5:f0:b8: 5e:4c:65:16:08:44:d2:e4:2e:ee:68:aa:75:1a:6d: 97:d1:22:99:0d:60:36:c1:b2:3c:69:61:10:46:02: 6b:70:b9:bd:19:17:f9:15:d1:0c:32:94:e7:89:af: 9f:71:e2:6e:2f:67:77:d3:b0:21:c5:2a:f2:35:26: 01:ab:e2:58:9b:ae:74:21:be:89:ac:95:4d:bf:f6: 6b:0c:0e:9e:85:70:bd:6a:3a:64:d0:e5:fd:96:34: a8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:24:E1:6A:73:42:A0:01:06:20:AE:47:94:09:32:C6:CB:63:0E:AA X509v3 Authority Key Identifier: keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ba:65:cd:a0:25:24:21:9d:2a:7d:19:9c:4b:aa:65:45:e3: 16:4e:49:0c:6c:de:6c:78:0e:e7:f6:36:9d:9f:16:37:45:a1: 88:bf:bb:96:97:73:82:54:df:e2:40:4b:73:a0:da:d8:14:10: d8:d9:c7:8d:bf:03:cb:93:10:93:7d:b3:71:be:92:f4:bc:54: 91:55:01:1f:dc:ea:2b:0b:cb:aa:9a:0f:b8:64:ca:26:4e:6e: 85:bb:55:72:7b:7f:f9:78:cb:30:75:e8:f1:4a:07:d1:c0:ef: 73:06:7c:09:1a:59:6d:a4:dc:b5:09:35:f7:a4:6d:21:c2:3c: 4a:9f:1b:82:9a:93:f8:1e:23:fd:5a:b4:f8:d5:ba:0e:67:6e: 34:f3:07:9b:00:b9:22:a6:2a:60:65:f4:4d:54:41:f0:31:f7: f1:ca:47:2a:07:9d:07:0d:37:25:ac:cc:66:c1:55:79:8e:3b: 82:37:c0:48:be:1c:06:7b:91:bb:0d:f9:48:48:c1:f3:b8:cb: 5b:f4:ed:d1:55:7a:88:6a:0e:32:ab:0b:ec:38:d9:3d:30:8a: 13:c9:06:c8:60:78:11:40:dd:44:c9:5d:15:6d:33:47:bc:05: 77:04:2e:44:68:19:15:65:83:dd:22:d0:5f:1c:a9:c6:de:e6: ee:6b:65:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF6cc3gENNXy7f5Fr3gqkt5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1 MjM1MmQwHhcNMjYxMDI2MjMwMDQwWhcNMjYxMDI3MjMwMDQwWjAzMTEwLwYDVQQD EygzNjI0ZTE2YTczNDJhMDAxMDYyMGFlNDc5NDA5MzJjNmNiNjMwZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2INOW/U3DPUXI894yFDORI/1bHa+ fwFrlh0K2JKW4GqmL+Ex7UjosoqxYO/lPTsMMGF3ycNh0efkceTTxYNR772zeluL NhMD+1GBUBaOM++mr72TXUjc2+oJx1PBq3xAY5hPO9PFHsGp0YCGo0OACwCW3xmL /2oaENtKVBEHTZIEuTs6Iq0UuDahTNH0mDFrgNburDyVQoTUJT2cVczhGRrl8Lhe TGUWCETS5C7uaKp1Gm2X0SKZDWA2wbI8aWEQRgJrcLm9GRf5FdEMMpTnia+fceJu L2d307AhxSryNSYBq+JYm650Ib6JrJVNv/ZrDA6ehXC9ajpk0OX9ljSoBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYk4WpzQqABBiCuR5QJMsbLYw6qMB8GA1UdIwQY MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt ODcxZjllZDcwOGUwLzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbplzaAl JCGdKn0ZnEuqZUXjFk5JDGzebHgO5/Y2nZ8WN0WhiL+7lpdzglTf4kBLc6Da2BQQ 2NnHjb8Dy5MQk32zcb6S9LxUkVUBH9zqKwvLqpoPuGTKJk5uhbtVcnt/+XjLMHXo 8UoH0cDvcwZ8CRpZbaTctQk196RtIcI8Sp8bgpqT+B4j/Vq0+NW6DmduNPMHmwC5 IqYqYGX0TVRB8DH38cpHKgedBw03JazMZsFVeY47gjfASL4cBnuRuw35SEjB87jL W/Tt0VV6iGoOMqsL7DjZPTCKE8kGyGB4EUDdRMldFW0zR7wFdwQuRGgZFWWD3SLQ Xxypxt7m7mtl1Q== -----END CERTIFICATE-----Generated at Tue Oct 27 06:05:25 2026 by rpki-client