$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft File: QLl0BiRLQQcmJofbG5ZCw9no-EM.mft (raw, json) Hash identifier: ONK3GeTeGxvKz5A1v/oJ3DbZEePeG6SZQ1AgpA13yeE= Subject key identifier: B4:44:6D:A4:0C:BE:A3:4C:39:E9:ED:72:1E:91:80:22:2E:1C:2E:A0 Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843 Certificate serial: 01A03F72761B90B842E65DCA0EEDA48BA56F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft Manifest number: 020E Signing time: Wed 26 Aug 2026 19:01:00 +0000 Manifest this update: Wed 26 Aug 2026 19:01:00 +0000 Manifest next update: Thu 27 Aug 2026 19:01:00 +0000 Files and hashes: 1: 0HR7OlgVsN6el8WaHefZC1bVuuI.roa (hash: l1VbbEivm6yxThSTyk7Djf67KfprrRMIJL+aTYhbs+I=) 2: 8FJGaZ8MbZPDXJ8q8JZarY-F95A.roa (hash: tFsnUzuCOPHEkB4f570fqaA0O4nTZQAQw1SUPG3ufxw=) 3: 9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa (hash: gmUV0Z8p6eaW6u9bMSNNxq/xKFhizs7ktPd6mWRC4Rs=) 4: OF0KfYMGxGaz-SUOj7rB0oXATdM.roa (hash: CAo9UtR7JTj2SOelEiYNWlJF8pjNdWWHM3G2TfLb0p8=) 5: QLl0BiRLQQcmJofbG5ZCw9no-EM.crl (hash: dLsrYaNwR5KtiRh+QlXb0yG1KTQOnhRbtXatWggDhlY=) 6: YWfuggorcd1NM3cGc0ChXxoZNEw.roa (hash: VkuuURovRA8v+JjZIy/jQlWWecLETcf1ZXLwTZUlHvU=) 7: dXo62BJE8_TWzGjB924mtQGI6t0.roa (hash: ZKPOUpy2R7pDezGYw/+HyyJ3LtSfZmM+0w9aYkO7UaE=) 8: gvtwt4XkAQ7Z0R2_oweZhYn7SCE.roa (hash: awPr3bW3s/h+nd/17YaFTV6WgEVXFckOiQCqub9w4h0=) 9: hK51yH0MXa_3Zo5NqvHRwagkNZY.roa (hash: bKZkRKtCfxhAuH8t71x6a90QH8ee6WDJgiRFaE6k0Jo=) 10: ie67OR2yo5azvU54c3v4lv6RpSA.roa (hash: dLMrGnnfDPcjGqurVoVCUolQCVPAwVOwL/z3dpyr5Fk=) 11: u1KOR6Ev1eXNRu72T6geLVczjNY.roa (hash: Cdpt6dAlSWI61+bZpjlmoyuOjvDfy3KfoRUsH8wyb6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 19:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:3f:72:76:1b:90:b8:42:e6:5d:ca:0e:ed:a4:8b:a5:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843 Validity Not Before: Aug 26 19:01:00 2026 GMT Not After : Aug 27 19:01:00 2026 GMT Subject: CN=b4446da40cbea34c39e9ed721e9180222e1c2ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:53:8c:7b:a5:2d:fc:01:05:d7:7c:41:bf: bd:bd:7e:a0:c0:70:59:3b:54:4f:ea:21:8e:d0:a8: 50:b2:36:67:bf:ea:92:4b:e3:32:6d:13:b1:cf:b2: c2:0e:c8:fa:54:1b:2d:4f:6c:da:88:76:90:90:35: 7b:1f:91:9b:f0:b2:6e:e1:b4:7d:75:9a:14:ba:63: fb:c2:2c:7e:97:05:33:ab:57:65:e9:4f:8c:42:22: 12:34:4b:60:19:e2:67:ab:3a:a7:ae:55:5e:38:a3: 6b:63:90:a2:ab:af:e9:95:3a:24:a3:65:da:fe:2b: 8e:bb:68:a8:fa:a6:d0:f6:d5:da:bd:64:99:40:7f: d9:38:ef:d1:44:80:c1:be:c4:68:b7:33:e1:29:85: f5:07:a2:8e:de:f7:6b:ee:6e:fa:91:2e:3f:d9:63: f6:1b:71:bf:0e:a0:95:81:95:c6:a1:c0:96:29:2e: 82:a9:f5:80:02:4b:6e:a8:18:46:19:3c:10:59:e4: 50:63:f0:8b:d7:d9:64:58:c4:23:e5:23:d0:96:bf: b8:8f:d5:a3:7f:cc:fd:e0:5b:e4:99:04:66:29:21: 27:b7:a3:76:07:fe:87:fb:fd:66:2a:5c:ce:15:7a: 40:e9:20:74:3d:0c:0e:a2:59:53:f6:a2:7f:1f:b0: 9f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:44:6D:A4:0C:BE:A3:4C:39:E9:ED:72:1E:91:80:22:2E:1C:2E:A0 X509v3 Authority Key Identifier: keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b3:aa:62:0c:49:fa:fe:b6:3d:13:7b:4b:11:5e:e4:bd:fd: 32:05:58:bd:94:1d:2a:0b:35:aa:7d:75:45:e7:cb:b9:19:6e: 43:30:f5:c2:ab:40:1a:68:40:91:88:61:cb:a5:0a:3b:c1:9c: d2:ae:3b:d4:b7:99:74:68:ba:ef:21:7d:ad:34:ee:1d:18:10: 18:fa:09:2e:b2:6e:ec:ea:ce:f1:cc:5f:1b:62:7f:04:90:6a: c3:f3:be:f6:ad:93:5a:12:49:84:ee:67:dd:ff:6b:96:98:e1: ca:92:61:e2:c1:19:86:2f:78:df:c8:c3:81:fe:41:f2:98:30: 68:40:64:5d:b8:fb:8b:b5:f1:8c:8d:1b:2b:bb:bf:c0:dc:75: f4:45:4e:0a:46:f8:87:84:5f:ba:c6:9d:4c:90:c3:d2:e5:fc: 42:a0:22:d5:14:ee:43:73:2c:ca:1e:00:1f:73:95:95:0c:e4: d8:7e:92:b8:d7:4f:01:d4:10:5f:14:cb:49:68:8e:86:5e:4a: f3:8f:cd:12:2a:81:12:78:be:62:63:fa:79:48:94:41:d4:44: 1e:80:53:8c:fb:c1:5e:ae:b3:16:c2:ed:a4:8d:ec:06:82:0d: 7d:79:30:e2:e2:05:0b:db:34:d7:8e:1a:0a:cd:21:58:af:b0: e1:8d:02:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaA/cnYbkLhC5l3KDu2ki6VvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYjk3NDA2MjQ0YjQxMDcyNjI2ODdkYjFiOTY0MmMzZDll OGY4NDMwHhcNMjYwODI2MTkwMTAwWhcNMjYwODI3MTkwMTAwWjAzMTEwLwYDVQQD EyhiNDQ0NmRhNDBjYmVhMzRjMzllOWVkNzIxZTkxODAyMjJlMWMyZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6FTjHulLfwBBdd8Qb+9vX6gwHBZ O1RP6iGO0KhQsjZnv+qSS+MybROxz7LCDsj6VBstT2zaiHaQkDV7H5Gb8LJu4bR9 dZoUumP7wix+lwUzq1dl6U+MQiISNEtgGeJnqzqnrlVeOKNrY5Ciq6/plToko2Xa /iuOu2io+qbQ9tXavWSZQH/ZOO/RRIDBvsRotzPhKYX1B6KO3vdr7m76kS4/2WP2 G3G/DqCVgZXGocCWKS6CqfWAAktuqBhGGTwQWeRQY/CL19lkWMQj5SPQlr+4j9Wj f8z94FvkmQRmKSEnt6N2B/6H+/1mKlzOFXpA6SB0PQwOollT9qJ/H7Cf+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLREbaQMvqNMOentch6RgCIuHC6gMB8GA1UdIwQY MBaAFEC5dAYkS0EHJiaH2xuWQsPZ6PhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTct YjE4ZDY3NTgzOTk0LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTctYjE4ZDY3NTgzOTk0 LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbOqYgxJ +v62PRN7SxFe5L39MgVYvZQdKgs1qn11RefLuRluQzD1wqtAGmhAkYhhy6UKO8Gc 0q471LeZdGi67yF9rTTuHRgQGPoJLrJu7OrO8cxfG2J/BJBqw/O+9q2TWhJJhO5n 3f9rlpjhypJh4sEZhi9438jDgf5B8pgwaEBkXbj7i7XxjI0bK7u/wNx19EVOCkb4 h4RfusadTJDD0uX8QqAi1RTuQ3Msyh4AH3OVlQzk2H6SuNdPAdQQXxTLSWiOhl5K 84/NEiqBEni+YmP6eUiUQdREHoBTjPvBXq6zFsLtpI3sBoINfXkw4uIFC9s0144a Cs0hWK+w4Y0CNg== -----END CERTIFICATE-----Generated at Thu Aug 27 03:59:12 2026 by rpki-client