$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft File: 2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json) Hash identifier: M/e2l27WdRwpKgmvQoQhMDL9IJ3c+893muYX4eLm4E4= Subject key identifier: 35:24:C2:4F:BE:80:CD:F9:47:6A:5F:5D:C9:D6:8E:26:6A:76:FF:79 Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Certificate serial: 01A06D5DD307FCD08D7C12FD42F45928E085 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft Manifest number: 1A41 Signing time: Fri 04 Sep 2026 17:01:00 +0000 Manifest this update: Fri 04 Sep 2026 17:01:00 +0000 Manifest next update: Sat 05 Sep 2026 17:01:00 +0000 Files and hashes: 1: 0EOOKZ73EuVKb6azhsikToGYTJ4.roa (hash: tOeqHdzaa5uQmGPeE+9GIo5atcoydPGRdU/daaN1H/s=) 2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: SGg2uG6H4zhCd2WwzegZN3RnoNv4eU2A+OWSLon+Z3A=) 3: EUeWkU0aryB-YkR2M3TsErGD9Is.roa (hash: gK62/o9yO+OyvLt7cRE+ehw4Ouq7VrrbTSmr3DLojOI=) 4: SpICVub50OICM4yiQk6ulqnyBsU.roa (hash: 1SZAmfW+sJIqJsSkqCTN19QGqChFmDq0AZE9eacMzAI=) 5: W9lGuLlyK3oCTZXvmQuqTo4C2yg.roa (hash: G4w7b1CN5DpM/EZuMWQLQvxT+EVuYLv3nYfxDAbKhDk=) 6: jUElcf1JFP10uCVqAsvtMStO4o0.roa (hash: xrxSdpsBwKaZISPc2IK2Gw1lDuUsBX/PpqeA4Z3a8cs=) 7: o09lL4OudMDTh_jmHHeTIRn2L5s.roa (hash: ctwy00D7K53oO1gqUQQpnsVurkNSXddz4U1vX79+KpM=) 8: pn6Y3GCXjjHBqnK-2a8dWoJu9As.asa (hash: asd3kKFSLHLrOnSUbXKA6WurWf6oqSngwKQtRaOmKfY=) 9: yn6euPUsjq8bRXFpjTNGPdRM13Y.roa (hash: IGe548/q8hO5ei6AedK5a51FhkUkqFo8BXPppwB9Vlw=) 10: znNyesTwbEHb5GdVovxJsLLM9KQ.roa (hash: WbfDTvPg/i+BiVxKsZsH5gFpX+Sz+6FiIPk4KG/O+AA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6d:5d:d3:07:fc:d0:8d:7c:12:fd:42:f4:59:28:e0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Validity Not Before: Sep 4 17:01:00 2026 GMT Not After : Sep 5 17:01:00 2026 GMT Subject: CN=3524c24fbe80cdf9476a5f5dc9d68e266a76ff79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:65:8e:f6:f8:fd:72:22:bf:3c:ce:f3:bd: 5e:09:d9:63:b7:2e:37:8f:02:26:56:97:40:98:c2: 85:65:44:c1:ef:89:05:34:de:68:51:14:75:49:42: 01:4a:c9:a6:36:14:33:7f:0a:03:eb:86:2f:4a:fb: 3f:3e:23:9f:73:02:11:56:da:3a:68:19:f9:bc:e2: f1:4b:f0:9d:e4:5c:f1:cc:b3:b2:67:dc:69:bb:9c: c6:05:54:97:c5:a9:ad:38:6a:8b:ec:14:bb:a4:84: 6e:fd:ce:0b:d7:2c:f2:0e:8d:93:02:e5:c6:ac:db: 02:ba:5a:9b:0a:50:7e:3b:5f:22:80:5b:86:f0:b2: d6:1f:6c:4b:de:30:0e:78:28:20:d2:37:af:a8:6a: 5f:ef:f6:99:10:c4:2a:fc:ad:1a:b3:97:c8:b9:90: fd:c1:03:5c:6f:34:6c:f2:b5:88:8b:72:88:29:59: c7:6c:32:4b:83:31:ed:e9:19:c5:bb:55:76:8e:dd: 09:65:bb:e9:7f:a3:64:90:ad:eb:c1:a9:1c:e5:ce: a9:c5:1a:2c:01:be:e3:98:ae:44:64:67:03:66:55: 0f:70:8c:76:7e:47:6c:fd:eb:c5:20:c4:7e:88:ca: ea:48:a3:da:57:a9:00:5f:6e:35:73:33:ab:50:61: 46:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:24:C2:4F:BE:80:CD:F9:47:6A:5F:5D:C9:D6:8E:26:6A:76:FF:79 X509v3 Authority Key Identifier: keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b7:4f:7c:d4:66:1a:a2:f3:2d:c7:48:07:33:f7:99:d1:f0: 21:a4:ad:13:1c:77:65:bb:5d:97:e5:41:4f:0f:2c:7b:5e:29: 31:59:af:02:1c:1a:f5:8b:6a:c8:97:66:ab:d6:98:de:34:97: 5e:4c:ef:69:38:25:38:7f:5f:62:4b:ec:38:5f:ed:ee:a3:23: cc:36:a4:24:21:df:1c:a6:b8:bb:43:c3:87:61:4f:bd:73:f5: 6f:2b:4c:f1:2e:a3:dd:5b:e8:f9:b1:cb:e7:e0:9e:f0:44:26: fd:78:08:17:c5:74:55:28:1d:ac:5c:54:ae:54:50:6a:b6:ab: 99:b6:0d:50:c5:48:65:f2:d8:30:d8:ff:2f:34:b2:91:ff:8f: 05:d7:1f:a8:7e:e9:5b:ef:3a:cd:62:9b:0c:7a:a2:76:85:d7: 18:71:9b:21:08:ab:9d:18:9f:fa:35:0b:cf:3b:09:e1:12:a6: 64:4b:f3:fd:03:b3:6a:f0:e5:f2:f1:c8:3a:b5:19:d2:91:fb: 36:e4:4a:59:8d:de:85:d7:b3:8e:79:f5:eb:90:3d:ea:83:08: 85:c2:57:cf:e3:61:c6:d2:00:fe:42:44:c5:9d:2e:45:d2:d1: a5:e0:0d:78:6a:5f:5c:1c:2f:42:23:79:07:e2:79:6f:9b:b5: 3c:2f:e0:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBtXdMH/NCNfBL9QvRZKOCFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmMwYmVjNjBkMGJhY2UxODg5Njc3YmQ5YmI5MDE5MGNj NGZkMjIwHhcNMjYwOTA0MTcwMTAwWhcNMjYwOTA1MTcwMTAwWjAzMTEwLwYDVQQD EygzNTI0YzI0ZmJlODBjZGY5NDc2YTVmNWRjOWQ2OGUyNjZhNzZmZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeJljvb4/XIivzzO871eCdljty43 jwImVpdAmMKFZUTB74kFNN5oURR1SUIBSsmmNhQzfwoD64YvSvs/PiOfcwIRVto6 aBn5vOLxS/Cd5FzxzLOyZ9xpu5zGBVSXxamtOGqL7BS7pIRu/c4L1yzyDo2TAuXG rNsCulqbClB+O18igFuG8LLWH2xL3jAOeCgg0jevqGpf7/aZEMQq/K0as5fIuZD9 wQNcbzRs8rWIi3KIKVnHbDJLgzHt6RnFu1V2jt0JZbvpf6NkkK3rwakc5c6pxRos Ab7jmK5EZGcDZlUPcIx2fkds/evFIMR+iMrqSKPaV6kAX241czOrUGFG4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUkwk++gM35R2pfXcnWjiZqdv95MB8GA1UdIwQY MBaAFNn8C+xg0LrOGIlne9m7kBkMxP0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjkt MzQ2OTAzNGZhNDQxLzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjktMzQ2OTAzNGZhNDQx LzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrdPfNRm GqLzLcdIBzP3mdHwIaStExx3Zbtdl+VBTw8se14pMVmvAhwa9YtqyJdmq9aY3jSX XkzvaTglOH9fYkvsOF/t7qMjzDakJCHfHKa4u0PDh2FPvXP1bytM8S6j3Vvo+bHL 5+Ce8EQm/XgIF8V0VSgdrFxUrlRQararmbYNUMVIZfLYMNj/LzSykf+PBdcfqH7p W+86zWKbDHqidoXXGHGbIQirnRif+jULzzsJ4RKmZEvz/QOzavDl8vHIOrUZ0pH7 NuRKWY3ehdezjnn165A96oMIhcJXz+NhxtIA/kJExZ0uRdLRpeANeGpfXBwvQiN5 B+J5b5u1PC/gRw== -----END CERTIFICATE-----Generated at Sat Sep 5 01:45:07 2026 by rpki-client