$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft File: e71RJyBktjssZjwClroR216iOMA.mft (raw, json) Hash identifier: lq5u3LCwC2+FWSpw1xliwD5Hpc1zVSPLYuIjfmJUTAA= Subject key identifier: 5A:A9:06:E7:21:7F:F1:C1:76:22:BB:20:A1:CB:C8:6B:AE:06:AA:06 Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0 Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0 Certificate serial: 01A1784C09E34E7CC8264DEE32538768553A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft Manifest number: 1ACD Signing time: Mon 26 Oct 2026 13:00:11 +0000 Manifest this update: Mon 26 Oct 2026 13:00:11 +0000 Manifest next update: Tue 27 Oct 2026 13:00:11 +0000 Files and hashes: 1: I2q3ifUktwdWLFVk814q3GS4fWI.roa (hash: IGOlAHTyV8D50YrVyxyBur7sPUQLiEB5K2gkPY8V5KM=) 2: OxGf8ePayJwU09gGZnySyoA8iyo.roa (hash: yf38tU7zRVwzX10bjvQIj5OiLgW6pM5L8OevnEJQOXA=) 3: RVARB5gmjTf2RYyiXEPOpOXxCDs.roa (hash: K6dew7DJ4uzjFiJigW12hfzcSGSynvBz3c731CNk5sM=) 4: Tn1byzDG3LC_-4W5cdtymqE-7H8.roa (hash: Lg0SZJ99rab4Y0en6j2xpoNxdMlIboyOteh0f0kPzyU=) 5: YueSZbKV98CmzxsiRfWA83jDNEs.roa (hash: pu97V45FIqBvOF8XHHzv+H1DedOkRlyDXAiuHDoYLCw=) 6: cGSyEqlaNLY1LymfACjH5x7qwiY.roa (hash: PPsjXk3d3JTucJBSEkB9JMB6kS1QWHypumoBDsX0uds=) 7: e71RJyBktjssZjwClroR216iOMA.crl (hash: iM4ZFwMDDf7aERx9jWLPe68yyRFBvjMdNcuSv/GQQnI=) 8: gne3kq1o-I5H5isdKeVnYHfgRM8.roa (hash: OHMcztr6MiSOs8pzNesHKIFuwuf6t31tDx5kJSWgBCw=) 9: oeuzQUYyPkW-V2UkOlxP_jVk-4w.roa (hash: c4HWnVLhY5gwzEC9ub/fPbXgeg83cue7m376DrPhXoA=) 10: w2zX0OlEApQBeN-eJRqrMs7-KhQ.roa (hash: VAl4aNgTKdrb4Wh3EXu5ag7LbozTNcCxOnMz/M31Mvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 13:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:78:4c:09:e3:4e:7c:c8:26:4d:ee:32:53:87:68:55:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0 Validity Not Before: Oct 26 13:00:11 2026 GMT Not After : Oct 27 13:00:11 2026 GMT Subject: CN=5aa906e7217ff1c17622bb20a1cbc86bae06aa06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6a:d4:29:42:a1:38:77:f0:46:81:89:6e:9b: 2c:28:d8:88:3d:70:ce:bd:4c:a4:00:e3:8b:f4:62: 5c:74:67:a1:29:ba:99:f3:76:e0:9d:c2:31:54:d6: f5:7e:92:0c:ef:09:fa:46:71:4d:6b:c5:96:df:80: c0:14:46:eb:42:6f:54:79:eb:aa:11:29:ee:30:ba: 2a:14:d8:3f:97:68:8c:42:b4:1d:69:45:41:27:b1: 4c:e2:0f:ff:94:fa:9a:91:a9:ff:76:c5:d5:80:ee: 0b:da:62:20:d9:ef:8c:00:dc:de:27:92:93:cf:a9: 16:67:f8:a1:a2:d3:8d:8b:e6:aa:0d:16:99:60:4c: f0:c3:0c:45:80:fa:00:37:c3:3c:a2:12:83:dc:cf: 63:81:2f:34:65:7e:b1:2c:69:3c:1f:69:de:28:85: 1b:73:bc:5b:8d:63:06:67:d8:df:b3:ed:8b:a0:d2: 2a:5b:d4:ca:07:ad:ab:ee:1b:ab:37:4f:0d:9e:b0: 6d:a5:ad:3e:7b:cb:55:a8:35:93:47:c4:b1:d5:92: b6:83:dc:3f:af:ae:48:23:91:7c:a2:e8:b8:e7:7a: ad:8a:3d:15:31:32:4a:11:83:d4:77:21:e4:9f:65: 26:81:c9:44:14:de:ea:a3:8d:f0:00:d6:a8:ef:dc: 1d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A9:06:E7:21:7F:F1:C1:76:22:BB:20:A1:CB:C8:6B:AE:06:AA:06 X509v3 Authority Key Identifier: keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:5f:a7:1d:0c:98:7a:51:f8:5b:73:73:dd:34:08:21:b7:2f: 38:03:cb:31:d6:68:a5:a3:9f:47:ba:ae:d0:b3:8b:84:b2:4d: c0:6c:4f:94:85:78:e9:7b:5f:37:28:55:da:ba:bb:2e:64:98: 9a:a2:d0:a2:8b:d0:40:5f:60:dd:0b:7d:aa:91:1f:3b:25:17: 70:9f:a0:1f:eb:f7:3a:ee:3b:fc:79:9f:5a:02:18:1d:6d:3a: 41:5b:4f:41:3d:1b:78:86:6c:41:bc:09:42:51:3a:5f:49:d1: a7:d6:b3:32:24:74:6e:fe:3b:e2:6c:e4:62:71:e3:16:ee:3d: 99:63:b9:31:ea:47:b5:80:4f:af:46:1d:9b:3d:73:5b:d0:f6: 5b:fa:80:c3:98:50:58:fc:9f:8d:a1:f7:a2:1f:49:e6:32:a4: 1c:da:5e:ea:59:98:46:5c:42:42:ee:6f:ca:38:0a:84:9e:87: 6a:ec:2b:e4:c7:a4:b3:d2:95:57:a3:d6:6a:d7:79:67:0a:92: 9e:21:3a:7a:e8:a1:f7:27:1d:6b:e4:91:a9:9f:2a:a2:85:21: ce:32:1a:42:d4:c3:80:f1:5e:4b:25:9c:0f:c4:fe:58:82:83: 87:a2:14:88:34:d6:0f:11:b6:4a:24:8d:b0:ea:83:27:25:e5: 06:93:3e:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF4TAnjTnzIJk3uMlOHaFU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYmQ1MTI3MjA2NGI2M2IyYzY2M2MwMjk2YmExMWRiNWVh MjM4YzAwHhcNMjYxMDI2MTMwMDExWhcNMjYxMDI3MTMwMDExWjAzMTEwLwYDVQQD Eyg1YWE5MDZlNzIxN2ZmMWMxNzYyMmJiMjBhMWNiYzg2YmFlMDZhYTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2rUKUKhOHfwRoGJbpssKNiIPXDO vUykAOOL9GJcdGehKbqZ83bgncIxVNb1fpIM7wn6RnFNa8WW34DAFEbrQm9Ueeuq ESnuMLoqFNg/l2iMQrQdaUVBJ7FM4g//lPqakan/dsXVgO4L2mIg2e+MANzeJ5KT z6kWZ/ihotONi+aqDRaZYEzwwwxFgPoAN8M8ohKD3M9jgS80ZX6xLGk8H2neKIUb c7xbjWMGZ9jfs+2LoNIqW9TKB62r7hurN08NnrBtpa0+e8tVqDWTR8Sx1ZK2g9w/ r65II5F8oui453qtij0VMTJKEYPUdyHkn2UmgclEFN7qo43wANao79wdPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqpBuchf/HBdiK7IKHLyGuuBqoGMB8GA1UdIwQY MBaAFHu9UScgZLY7LGY8Apa6EdteojjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUt OTdjOWFhYjgyOGYyLzEvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUtOTdjOWFhYjgyOGYy LzEvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAul+nHQyY elH4W3Nz3TQIIbcvOAPLMdZopaOfR7qu0LOLhLJNwGxPlIV46XtfNyhV2rq7LmSY mqLQoovQQF9g3Qt9qpEfOyUXcJ+gH+v3Ou47/HmfWgIYHW06QVtPQT0beIZsQbwJ QlE6X0nRp9azMiR0bv474mzkYnHjFu49mWO5MepHtYBPr0Ydmz1zW9D2W/qAw5hQ WPyfjaH3oh9J5jKkHNpe6lmYRlxCQu5vyjgKhJ6Hauwr5Meks9KVV6PWatd5ZwqS niE6euih9ycda+SRqZ8qooUhzjIaQtTDgPFeSyWcD8T+WIKDh6IUiDTWDxG2SiSN sOqDJyXlBpM+/Q== -----END CERTIFICATE-----Generated at Mon Oct 26 22:57:51 2026 by rpki-client