$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft File: 2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json) Hash identifier: pYBNfypiUcCqfXYqxlDOWkIYuLdxnvhmXuiCfKlWbNk= Subject key identifier: 5A:60:E7:86:D9:D9:90:F2:A5:B4:C4:EF:8B:85:5A:00:2C:15:62:AB Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Certificate serial: 01A1667DD9F9C485252818927CF6C637BF2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft Manifest number: 1AC2 Signing time: Fri 23 Oct 2026 02:01:26 +0000 Manifest this update: Fri 23 Oct 2026 02:01:26 +0000 Manifest next update: Sat 24 Oct 2026 02:01:26 +0000 Files and hashes: 1: 0EOOKZ73EuVKb6azhsikToGYTJ4.roa (hash: tOeqHdzaa5uQmGPeE+9GIo5atcoydPGRdU/daaN1H/s=) 2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: 65rRDLyovMX/a9cGf758pv0T64e06syGFlYmyhZvB/M=) 3: EUeWkU0aryB-YkR2M3TsErGD9Is.roa (hash: gK62/o9yO+OyvLt7cRE+ehw4Ouq7VrrbTSmr3DLojOI=) 4: SpICVub50OICM4yiQk6ulqnyBsU.roa (hash: 1SZAmfW+sJIqJsSkqCTN19QGqChFmDq0AZE9eacMzAI=) 5: W9lGuLlyK3oCTZXvmQuqTo4C2yg.roa (hash: G4w7b1CN5DpM/EZuMWQLQvxT+EVuYLv3nYfxDAbKhDk=) 6: jUElcf1JFP10uCVqAsvtMStO4o0.roa (hash: xrxSdpsBwKaZISPc2IK2Gw1lDuUsBX/PpqeA4Z3a8cs=) 7: o09lL4OudMDTh_jmHHeTIRn2L5s.roa (hash: ctwy00D7K53oO1gqUQQpnsVurkNSXddz4U1vX79+KpM=) 8: pn6Y3GCXjjHBqnK-2a8dWoJu9As.asa (hash: asd3kKFSLHLrOnSUbXKA6WurWf6oqSngwKQtRaOmKfY=) 9: yn6euPUsjq8bRXFpjTNGPdRM13Y.roa (hash: IGe548/q8hO5ei6AedK5a51FhkUkqFo8BXPppwB9Vlw=) 10: znNyesTwbEHb5GdVovxJsLLM9KQ.roa (hash: WbfDTvPg/i+BiVxKsZsH5gFpX+Sz+6FiIPk4KG/O+AA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 02:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:66:7d:d9:f9:c4:85:25:28:18:92:7c:f6:c6:37:bf:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Validity Not Before: Oct 23 02:01:26 2026 GMT Not After : Oct 24 02:01:26 2026 GMT Subject: CN=5a60e786d9d990f2a5b4c4ef8b855a002c1562ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:48:86:30:e6:c2:5e:a5:b2:56:8f:19:6c:8d: 51:6d:f0:0a:0a:c0:c2:f4:4d:2b:94:22:dd:07:37: c5:54:97:8c:82:d7:9f:74:27:02:86:64:f6:46:a4: b7:f0:02:10:ea:0f:c0:9a:fb:57:46:5a:76:8a:68: cf:6f:82:fc:c3:72:e4:94:99:a2:7c:8f:6f:7e:53: 25:8e:51:04:a0:6e:de:1c:7c:87:b1:48:73:8b:17: 20:ae:a2:c9:21:ec:65:ed:fb:e0:41:63:4c:bd:c9: 51:64:16:92:84:f2:1f:e2:3d:f8:79:53:58:27:f8: 2e:64:c4:f9:49:93:a7:f2:d6:ad:54:57:58:53:4e: 35:55:97:9b:8e:e9:af:b0:31:e9:e6:b8:2c:1d:f0: 7c:60:73:f2:eb:33:13:4e:dd:02:ae:0f:74:01:09: e7:21:b4:01:1c:64:41:35:4f:c6:42:76:f4:f5:ac: 60:78:e5:70:af:a5:41:85:6b:e9:4d:4d:72:75:a5: fc:76:9d:37:8d:c6:f3:5d:2b:a3:47:44:ff:6e:3d: 42:79:7f:d3:e8:10:79:b2:6d:f6:00:64:6b:62:bc: 1f:ff:23:a2:c4:27:78:19:d2:03:6e:9e:34:89:1d: 66:03:d8:c9:b5:ff:ad:43:57:da:36:26:20:ab:93: 07:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:60:E7:86:D9:D9:90:F2:A5:B4:C4:EF:8B:85:5A:00:2C:15:62:AB X509v3 Authority Key Identifier: keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:96:40:6d:15:c5:a0:57:90:b4:34:86:32:b0:a3:27:ea:ba: 85:00:1e:bc:df:7a:6b:69:6e:cd:de:0a:10:04:33:9c:65:53: 02:bd:2b:cb:d8:bb:52:e2:ec:95:c7:67:4c:be:04:74:f5:55: ec:7a:9e:84:7d:f2:50:ca:0d:30:84:30:18:ff:ec:a9:b8:29: dc:45:49:28:ed:d6:69:05:6f:dd:03:d8:ac:87:56:af:a3:75: 0c:a6:fa:3e:9c:8e:41:52:ff:bc:86:e1:d1:a2:b6:5e:47:ee: 5e:d3:fe:bb:b9:00:fb:7c:66:59:fc:4f:53:61:d0:40:e4:0c: d8:45:70:bf:dd:e4:38:cc:00:cd:89:b6:9b:78:de:66:30:89: b2:cc:02:4d:c5:71:b4:4a:82:0b:07:c4:f9:0c:e0:4c:ff:49: 94:2f:c8:f3:cf:f6:c7:c8:df:61:13:26:82:00:eb:11:8f:dc: b1:87:e3:80:ad:78:f3:68:77:c3:81:17:f5:ef:57:b3:64:20: 26:e7:2d:44:8f:65:9b:4c:f6:75:db:3c:81:86:26:17:4a:5b: ed:da:dc:63:f2:63:e0:4b:b9:39:80:c2:1c:31:87:b8:19:a5: e4:74:d6:32:0c:39:63:4e:87:aa:38:a3:bc:20:94:1c:aa:87: 86:81:55:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFmfdn5xIUlKBiSfPbGN78rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmMwYmVjNjBkMGJhY2UxODg5Njc3YmQ5YmI5MDE5MGNj NGZkMjIwHhcNMjYxMDIzMDIwMTI2WhcNMjYxMDI0MDIwMTI2WjAzMTEwLwYDVQQD Eyg1YTYwZTc4NmQ5ZDk5MGYyYTViNGM0ZWY4Yjg1NWEwMDJjMTU2MmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEiGMObCXqWyVo8ZbI1RbfAKCsDC 9E0rlCLdBzfFVJeMgtefdCcChmT2RqS38AIQ6g/AmvtXRlp2imjPb4L8w3LklJmi fI9vflMljlEEoG7eHHyHsUhzixcgrqLJIexl7fvgQWNMvclRZBaShPIf4j34eVNY J/guZMT5SZOn8tatVFdYU041VZebjumvsDHp5rgsHfB8YHPy6zMTTt0Crg90AQnn IbQBHGRBNU/GQnb09axgeOVwr6VBhWvpTU1ydaX8dp03jcbzXSujR0T/bj1CeX/T 6BB5sm32AGRrYrwf/yOixCd4GdIDbp40iR1mA9jJtf+tQ1faNiYgq5MHLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpg54bZ2ZDypbTE74uFWgAsFWKrMB8GA1UdIwQY MBaAFNn8C+xg0LrOGIlne9m7kBkMxP0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjkt MzQ2OTAzNGZhNDQxLzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjktMzQ2OTAzNGZhNDQx LzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZZAbRXF oFeQtDSGMrCjJ+q6hQAevN96a2luzd4KEAQznGVTAr0ry9i7UuLslcdnTL4EdPVV 7HqehH3yUMoNMIQwGP/sqbgp3EVJKO3WaQVv3QPYrIdWr6N1DKb6PpyOQVL/vIbh 0aK2XkfuXtP+u7kA+3xmWfxPU2HQQOQM2EVwv93kOMwAzYm2m3jeZjCJsswCTcVx tEqCCwfE+QzgTP9JlC/I88/2x8jfYRMmggDrEY/csYfjgK1482h3w4EX9e9Xs2Qg JuctRI9lm0z2dds8gYYmF0pb7drcY/Jj4Eu5OYDCHDGHuBml5HTWMgw5Y06Hqjij vCCUHKqHhoFVJw== -----END CERTIFICATE-----Generated at Fri Oct 23 11:27:24 2026 by rpki-client