$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft File: miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json) Hash identifier: 391GXSO2T/j+IiMBc/hCQ9FVN3R2TDCaJthL7C60xTI= Subject key identifier: B1:6A:7C:9F:C6:26:9F:CC:65:BF:2B:73:A8:C3:CC:49:37:6A:B4:E2 Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Certificate serial: 01A1A5CB17F00BB34314576C7C4638B6E7BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft Manifest number: 0CAB Signing time: Wed 04 Nov 2026 09:01:52 +0000 Manifest this update: Wed 04 Nov 2026 09:01:52 +0000 Manifest next update: Thu 05 Nov 2026 09:01:52 +0000 Files and hashes: 1: 4BtZ6ImulGiBNPfFEyIkenVvnSE.roa (hash: 6h+jPwLu4nddov8mWqAqvJNAzlSrWOgSVAeEWaQAHMQ=) 2: 9dGHInAQI-j4vyLy3UUNRAYsuCY.roa (hash: Q9ame2KwxdqQfHrlASmNDuZYejwWS5cB+ic/WNNh4SE=) 3: Gc-zxgRLIzAQa_iFPqWdSCs1AfA.roa (hash: knk2ar6caQbw//JlOcHZhkt4Z0WhcJB+DOpi0h0a7F4=) 4: HUdkOXLhBSaGi7zaB3tiAzHsu2w.roa (hash: SMC3snHw7F/Tr45ZUYM0iuFzgEgu3dYKECc195mdzRs=) 5: ZBdtDqtan4ryfsX_DPoSWN_nnIM.roa (hash: mMR9AMjlqz3mZdhz4HhiNub8llzDHhmNDp6KeOjkBNo=) 6: iMagr2JhNrn6UcBo9-V-8mQcTn4.roa (hash: mQklS7JkHJd3eY4Nb4US8i0zJjbD5uDxAwa3Ul/Mehk=) 7: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: F9gSzNsN0JYNeUj+WSix4viZOz+3127bKSmyVTDbvbk=) 8: pTIdOhwN38ILsZQYi8bIDMjeY4U.roa (hash: GtMRQsNo+pmOf3YedJ1j8ncQIy9S7xqsYIsqepUk4Dw=) 9: tkLKI36bEE_d9mFrnpG75Jz1duc.roa (hash: GQR5CqcIcifEV/UVBCebbmLSOnvxcbQORub4i3S8oOk=) 10: ycU_XNZEXN413MBQCsimYNHq3Uc.roa (hash: Nto1BYyts37ycUiG2XmvVx1RqM7RGKIW4OTTPggZvXE=) 11: zt6aVptNzEemFtVcszL1t-xA0vs.roa (hash: pSOP40u7PQPwSGBic+DInKoefhITjHCDk1ttR6rrtpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 09:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a5:cb:17:f0:0b:b3:43:14:57:6c:7c:46:38:b6:e7:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Validity Not Before: Nov 4 09:01:52 2026 GMT Not After : Nov 5 09:01:52 2026 GMT Subject: CN=b16a7c9fc6269fcc65bf2b73a8c3cc49376ab4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f4:9a:03:c0:e3:01:9c:07:c1:b0:2b:50:a6: 3b:47:24:98:c8:b9:9c:43:97:5a:2e:98:fa:20:56: 35:37:34:d0:40:c7:5b:41:b9:65:6b:0c:82:55:9e: 12:cf:36:db:79:55:9e:49:ac:50:a3:e2:49:75:34: 6c:8c:ea:ad:51:a2:a5:62:da:56:a2:f3:0f:91:0b: 02:45:f8:97:37:5d:70:2d:5d:72:20:ef:37:d5:86: a2:c9:1f:fc:da:6f:be:04:49:eb:a1:a5:fc:74:98: 0d:75:71:52:91:75:3a:eb:6f:0f:27:62:15:f4:d3: c2:77:70:53:cd:20:7a:cd:2e:f8:bd:5e:22:78:6f: 19:61:ae:e9:15:68:04:1b:74:d0:70:0d:6d:6d:67: 0c:9c:ad:e4:0e:bd:ad:f9:42:94:62:ee:42:8e:1c: 75:1c:3a:c2:f1:49:c0:c8:43:18:f0:50:34:11:74: 7f:9e:20:45:85:a5:2c:70:59:eb:f8:df:41:08:33: cc:45:f3:ec:00:21:ee:b8:44:62:b1:79:74:7a:ba: 62:b3:80:28:9b:be:1f:f7:63:ee:bf:b6:cd:52:ed: 3c:86:68:72:33:a9:f8:91:3b:9a:7b:25:72:b7:dd: e6:93:c8:77:73:e7:94:10:e1:65:f7:cd:6a:ae:1d: e2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6A:7C:9F:C6:26:9F:CC:65:BF:2B:73:A8:C3:CC:49:37:6A:B4:E2 X509v3 Authority Key Identifier: keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:07:a1:af:87:f5:46:57:2f:15:92:1b:d1:90:34:5a:be:de: 5e:93:02:52:ec:03:c5:fc:8d:19:b2:c2:30:1d:71:db:86:80: 22:fe:d8:8f:4d:2c:6b:51:1a:24:42:86:10:bd:38:f1:38:b9: 51:55:72:da:c3:0e:df:8a:e6:f1:60:a9:1a:9d:55:9e:ea:79: 3e:0b:18:22:53:a2:ce:58:65:43:75:25:6f:d3:5c:59:2e:0e: af:8e:ba:b4:71:a3:ab:4a:8c:48:73:8f:5a:4a:ec:f7:7d:aa: 71:60:f5:6c:a2:2c:31:94:56:9d:20:18:1c:f7:1f:ad:f6:e6: b5:61:dc:74:f2:44:cd:7a:ee:e1:a8:37:1d:4a:85:b0:c3:01: 5c:15:13:47:ba:49:d6:6b:1b:72:80:c6:79:3f:da:bd:ad:74: 55:f6:95:4f:cd:be:9b:94:fe:9d:32:b1:30:76:85:18:7a:ca: 61:69:8e:53:d6:37:c6:55:c6:43:ff:17:88:7d:2b:bd:98:77: 36:6a:39:d4:e4:df:66:e0:8d:26:e5:f1:96:44:d3:8c:36:a6: 65:67:91:93:96:ae:6c:b0:ae:e5:bc:0f:12:fd:62:04:ac:98: ac:11:4b:07:2f:23:1e:1d:fa:7a:e6:59:bf:31:7e:4c:cb:54: f5:ea:da:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGlyxfwC7NDFFdsfEY4tue8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0 YmY4MDAwHhcNMjYxMTA0MDkwMTUyWhcNMjYxMTA1MDkwMTUyWjAzMTEwLwYDVQQD EyhiMTZhN2M5ZmM2MjY5ZmNjNjViZjJiNzNhOGMzY2M0OTM3NmFiNGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPSaA8DjAZwHwbArUKY7RySYyLmc Q5daLpj6IFY1NzTQQMdbQbllawyCVZ4SzzbbeVWeSaxQo+JJdTRsjOqtUaKlYtpW ovMPkQsCRfiXN11wLV1yIO831YaiyR/82m++BEnroaX8dJgNdXFSkXU6628PJ2IV 9NPCd3BTzSB6zS74vV4ieG8ZYa7pFWgEG3TQcA1tbWcMnK3kDr2t+UKUYu5Cjhx1 HDrC8UnAyEMY8FA0EXR/niBFhaUscFnr+N9BCDPMRfPsACHuuERisXl0erpis4Ao m74f92Puv7bNUu08hmhyM6n4kTuaeyVyt93mk8h3c+eUEOFl981qrh3ibwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFqfJ/GJp/MZb8rc6jDzEk3arTiMB8GA1UdIwQY MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt NDhkNWZmNGJhMjU1LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1 LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQehr4f1 RlcvFZIb0ZA0Wr7eXpMCUuwDxfyNGbLCMB1x24aAIv7Yj00sa1EaJEKGEL048Ti5 UVVy2sMO34rm8WCpGp1Vnup5PgsYIlOizlhlQ3Ulb9NcWS4Or466tHGjq0qMSHOP Wkrs932qcWD1bKIsMZRWnSAYHPcfrfbmtWHcdPJEzXru4ag3HUqFsMMBXBUTR7pJ 1msbcoDGeT/ava10VfaVT82+m5T+nTKxMHaFGHrKYWmOU9Y3xlXGQ/8XiH0rvZh3 Nmo51OTfZuCNJuXxlkTTjDamZWeRk5aubLCu5bwPEv1iBKyYrBFLBy8jHh36euZZ vzF+TMtU9eracQ== -----END CERTIFICATE-----Generated at Wed Nov 4 16:45:46 2026 by rpki-client