$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft File: 6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json) Hash identifier: 09+ZuHcMdKr+CrjJ19ibkbDKnbSmi+UM6of1sp8CvWk= Subject key identifier: 72:40:23:87:D2:C1:3F:AB:62:DE:B5:24:0A:EA:03:6F:A0:3C:02:31 Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Certificate serial: 01A039719DE447A519AE6041FB9C2BFF01C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft Manifest number: 1A33 Signing time: Tue 25 Aug 2026 15:02:22 +0000 Manifest this update: Tue 25 Aug 2026 15:02:22 +0000 Manifest next update: Wed 26 Aug 2026 15:02:22 +0000 Files and hashes: 1: 1-0S5yqLaN3s-rfDorrxE4xmJkSY.roa (hash: xe08thfVWk/Q0PmRvIsVkTS/li36DVR1VhnOJhKWMg4=) 2: 1-LUBueVBqdwiFLK1gsB1AnGbiPQ.asa (hash: L6rsU1pcQ3cdDgJa7jGbs1XAAZhtjuh8eTrAlkKyq8Y=) 3: 3fCUHErbv2WtYx--n4nf1Q6-Ubw.roa (hash: VmDuAyLIouZrOeMJRlVFLUwqzbhKM9CHSnO4kIRdwDo=) 4: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: fxyRKopw4fnV9eLZrbBcBzNVZazw5/auS1eTIn/0iN4=) 5: BbRIR3kI21VUGCXjSDWllMbS-8k.roa (hash: EEgGaz+LiLIszuH7ULNxtMHJjtmHM3CUdnjiO3tprKI=) 6: O73kgAQ-kXlFxK4kvQOyEoxMTXA.roa (hash: ETBQDnDgpIBgdAIaW/tfoxKMAV0hJkP0bltM4DA6Q48=) 7: Ps8zJSRRSbDwX3XJR7eOmD7m2uE.roa (hash: 4gOrAZeHV5DljjLNX3EiWeFFJsFqa+d+OW/WO4pBac4=) 8: c7YCMDtvilpnAcHhUKUpazLH8YQ.roa (hash: p8eFTJPY5mhYNqyxOeRrt26FdTu0eyXi+YCF788HwNI=) 9: i22LYTAh0PcLuwu7sEyCzT-6xXM.asa (hash: DPM18lmzzP7eVh2MT51XAxQN2uj0C+J8vlqNWZv6bek=) 10: ox_RAZ62BnMtTtsni2E71dlvqdw.roa (hash: +gTLaHfV2T8wDVaZZ2TtzS3DP1Xu6/AIsWNOHGHf3mo=) 11: zbAORhJVXtMoGKcD9VvlKtXQvCM.roa (hash: Dme/MffDzRscTtpOm/eYuLZJmQW4bf9yIlFMyWJha0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 14:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:39:71:9d:e4:47:a5:19:ae:60:41:fb:9c:2b:ff:01:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Validity Not Before: Aug 25 15:02:22 2026 GMT Not After : Aug 26 15:02:22 2026 GMT Subject: CN=72402387d2c13fab62deb5240aea036fa03c0231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fc:f3:23:22:49:01:4c:df:d1:a3:67:0c:e1: af:01:0a:37:c1:ae:67:fa:4e:6a:a0:96:e2:cd:d1: 60:da:98:74:3f:0a:9b:e3:93:2e:bf:2c:83:9c:f9: b3:0a:98:51:3b:c5:43:f3:3b:92:f8:52:be:41:4b: e3:fe:0a:af:45:97:4c:e7:a7:0b:35:02:9e:d3:08: 58:72:c1:74:ad:54:bb:47:1c:1d:13:f6:f9:8a:e3: f0:e6:7f:21:5c:96:e8:7d:4a:a5:80:81:21:f3:ef: 9a:df:8b:8f:c4:74:19:f6:69:9f:0e:71:f6:75:32: 86:90:ea:75:8a:1a:9f:ab:0c:15:d0:6f:85:63:d2: 43:8f:f8:e6:53:08:63:79:ce:d5:11:84:0c:4c:c8: 1b:ea:91:f1:1a:88:53:eb:2f:8b:79:e9:b3:62:e4: d0:11:dd:40:a3:1d:2e:74:37:03:cc:49:e9:47:b1: e2:d2:7f:4b:96:82:d1:80:54:ba:8c:67:96:f6:bb: 89:f1:3f:8b:ba:41:49:5b:d7:02:32:57:78:8c:0c: 62:c0:fd:c3:b2:ec:50:dc:3b:4c:38:d4:1f:3c:a4: b6:6c:82:c5:c2:72:45:89:64:88:03:f4:af:96:40: 40:5c:4a:71:a4:c0:77:2f:cb:9b:35:b6:9c:ee:e4: af:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:40:23:87:D2:C1:3F:AB:62:DE:B5:24:0A:EA:03:6F:A0:3C:02:31 X509v3 Authority Key Identifier: keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:25:97:95:28:0f:18:65:af:05:22:cb:7c:77:3b:15:78:f2: 48:d3:aa:9d:8d:84:b9:c8:f7:52:55:59:ec:28:db:83:02:dd: 15:87:36:47:5b:59:2a:12:f9:7a:1a:db:7c:3e:46:be:4d:59: bf:3f:95:d9:33:59:78:14:f1:b1:13:10:ac:90:4b:bf:50:64: 97:70:a3:45:1a:ec:f6:61:5b:bb:02:ea:44:02:d7:15:af:d6: de:39:05:aa:1d:43:32:9b:f8:37:fb:61:51:7b:01:9d:0d:1e: 8a:8a:6b:21:94:e6:bc:08:d9:7b:04:92:47:a4:fc:7b:b8:f7: 99:19:cf:83:a7:c2:d3:49:bb:ec:76:d3:18:42:51:aa:5e:49: e4:7f:1f:28:ff:83:4a:7c:31:26:46:be:ee:5f:a6:46:1e:96: 93:67:55:fe:be:46:63:2c:a0:41:ab:5d:ec:06:ad:c4:cf:35: 14:52:e9:52:9f:ec:50:a4:40:1f:1c:77:70:a2:31:93:df:d3: 9f:d7:eb:eb:2f:05:9f:95:8d:ab:0b:3c:b0:ce:09:f7:67:9a: 47:df:f6:be:ab:46:17:fd:32:a0:20:b1:e5:dd:9f:09:c3:29: 4f:66:4b:36:81:63:c7:3d:01:d7:fa:16:c4:3d:bc:f4:b4:9a: 07:51:ba:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaA5cZ3kR6UZrmBB+5wr/wHDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy M2UzZGIwHhcNMjYwODI1MTUwMjIyWhcNMjYwODI2MTUwMjIyWjAzMTEwLwYDVQQD Eyg3MjQwMjM4N2QyYzEzZmFiNjJkZWI1MjQwYWVhMDM2ZmEwM2MwMjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fzzIyJJAUzf0aNnDOGvAQo3wa5n +k5qoJbizdFg2ph0Pwqb45MuvyyDnPmzCphRO8VD8zuS+FK+QUvj/gqvRZdM56cL NQKe0whYcsF0rVS7RxwdE/b5iuPw5n8hXJbofUqlgIEh8++a34uPxHQZ9mmfDnH2 dTKGkOp1ihqfqwwV0G+FY9JDj/jmUwhjec7VEYQMTMgb6pHxGohT6y+LeemzYuTQ Ed1Aox0udDcDzEnpR7Hi0n9LloLRgFS6jGeW9ruJ8T+LukFJW9cCMld4jAxiwP3D suxQ3DtMONQfPKS2bILFwnJFiWSIA/SvlkBAXEpxpMB3L8ubNbac7uSvMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJAI4fSwT+rYt61JArqA2+gPAIxMB8GA1UdIwQY MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt YTg3MWVjYzIxMmE2LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2 LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCWXlSgP GGWvBSLLfHc7FXjySNOqnY2Eucj3UlVZ7CjbgwLdFYc2R1tZKhL5ehrbfD5Gvk1Z vz+V2TNZeBTxsRMQrJBLv1Bkl3CjRRrs9mFbuwLqRALXFa/W3jkFqh1DMpv4N/th UXsBnQ0eioprIZTmvAjZewSSR6T8e7j3mRnPg6fC00m77HbTGEJRql5J5H8fKP+D SnwxJka+7l+mRh6Wk2dV/r5GYyygQatd7AatxM81FFLpUp/sUKRAHxx3cKIxk9/T n9fr6y8Fn5WNqws8sM4J92eaR9/2vqtGF/0yoCCx5d2fCcMpT2ZLNoFjxz0B1/oW xD289LSaB1G65A== -----END CERTIFICATE-----Generated at Tue Aug 25 23:42:19 2026 by rpki-client