$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json) Hash identifier: PQN5kHUgbEkqj4ruMP/fAfAhJuZjXcvBqfS1QqOyFLY= Subject key identifier: FB:B0:78:26:14:D7:81:B4:9C:A9:33:58:F5:00:48:15:A9:4D:14:C1 Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e Certificate serial: 01A178F0CE3262A7B83C1409217EF9519FFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft Manifest number: 1B21 Signing time: Mon 26 Oct 2026 16:00:09 +0000 Manifest this update: Mon 26 Oct 2026 16:00:09 +0000 Manifest next update: Tue 27 Oct 2026 16:00:09 +0000 Files and hashes: 1: 5ukW421oA_Y9rQVf2oYR9GaYWDE.roa (hash: rXygKOXEBMMmtpqtAplwaaNQkSmEjCas9o86oxnjOD0=) 2: 9KBqGjnL-5oJ5B6DzcxjqiI7EQM.roa (hash: LIvm7nAVKXaLM9rEsrAxwOlhblCh+te14HXeeWgrThQ=) 3: FLOFSwxmlp__IY_MNe6ozZnVxEU.roa (hash: iZ4J+KbrNX8I3OGQG4f62bLwcfaq5tzaPM0gjPVnnaw=) 4: LmM48ME-vV9knrJxSTQaxjQp3co.asa (hash: EudqvBBerqU77vXqzfKyktKs74IC9c1mzsls/2yJHmE=) 5: QWk9GiDzxcKmdKlPAqwLjmLDG3g.roa (hash: C/bVd8wMcMdGfEa1kfbfzLpajs56ejFQLgOU3mZpCHg=) 6: UMBADPmHHgDZKMzHfthGrwp5OI8.asa (hash: R3dkgSia4Z4c6J2EEiXrzXeUHBgOo67dEot1UkUA4t0=) 7: XWNNEFomn9bKgvzZUcc40UaOsbg.roa (hash: /H5U7m5xCacMvYYK2MppLjlzRXDKTMF2JjarWQi18pE=) 8: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: gZ+uPxcX6VojhjVBgAv/huDYniMvH649azAPV2TlOpY=) 9: chkkpC1wf4PBAO07r8AaazA2rnI.asa (hash: VlBFOTypBDda09dJ/OfOd69SgWHtcRGMPQP/H7cWGAw=) 10: htk5_Ys53NUFXCuBYB_z_0MPpw0.roa (hash: sjTe5PKqbaPLZKrvLHmJ12rc3TssTL2KpMPCebpyXjo=) 11: lKK9xWa7q_skVNZ69eWVdc4JN8U.roa (hash: K7gUyxEv2exQtWcF6yU/1uDDjS3sLjEMkBibQmi1krA=) 12: p5I2rBokj4nhJ_YUk_dcJCNwjNY.asa (hash: JePaqX8dDtt3ljOEbNRemCQgG9iiJBvpk8UC44tWVtA=) 13: y-MtqUQxYN7HeVnOQGAy52MjLe8.roa (hash: /bCO17JMK+2NzpP4wufXIXJcR0ZbA6NT7EQZcGDDLZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:78:f0:ce:32:62:a7:b8:3c:14:09:21:7e:f9:51:9f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e Validity Not Before: Oct 26 16:00:09 2026 GMT Not After : Oct 27 16:00:09 2026 GMT Subject: CN=fbb0782614d781b49ca93358f5004815a94d14c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:11:aa:5a:c2:71:0c:47:b3:e2:36:c9:01:81: 75:1c:30:02:a4:65:d2:df:22:37:81:21:d3:21:4a: 3d:de:50:15:5f:e4:47:74:05:9a:42:b2:da:db:e9: 76:5c:e7:c1:9d:27:bb:9b:b1:fb:a2:56:4f:cb:b9: da:0b:07:95:ce:51:8d:77:da:54:7d:64:0a:87:3b: 8b:62:00:6d:91:da:74:ba:fb:68:d5:33:b3:95:df: 6a:68:36:58:78:71:ef:75:99:ff:a4:e6:b8:55:b5: 80:a1:1b:45:f7:1c:68:92:80:db:b6:99:4e:c5:e0: 31:11:9b:a4:36:c4:a0:b8:58:4c:9a:c1:87:62:93: 1d:f6:71:fa:1e:ec:50:b5:26:4f:f0:b5:b2:4e:ad: 38:f3:ef:83:c9:cf:66:3d:d8:12:d6:4b:a5:72:96: 3b:f8:52:e0:79:c2:a1:90:14:94:f0:8f:44:2c:c9: 3b:64:c6:2d:ef:40:57:fc:a5:c4:84:ec:37:dd:a5: cf:f3:31:24:91:d1:72:b2:67:80:d9:0c:5b:ed:aa: 80:c6:ce:01:d8:74:95:63:76:45:77:1a:a7:b0:df: 1d:2d:e9:c0:a8:e5:6a:a3:7f:2f:0b:bc:17:96:2d: 9f:85:05:fe:81:e8:46:62:68:fa:89:eb:56:5b:c4: ae:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B0:78:26:14:D7:81:B4:9C:A9:33:58:F5:00:48:15:A9:4D:14:C1 X509v3 Authority Key Identifier: keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:be:f8:7e:26:8b:6d:b9:ff:f0:bc:da:da:71:ee:a4:96:9c: e2:25:8a:6f:a9:8c:c8:c6:2d:67:81:91:49:b0:3c:b4:4c:61: 3d:be:b8:b1:ac:5e:7b:da:d9:81:f4:c6:1d:c5:9e:b4:2b:5c: 79:0a:d0:49:37:43:56:f9:a5:96:58:82:f3:d6:9c:c6:cf:f1: 2e:13:40:ac:ca:f6:bc:8a:ec:80:be:1c:a6:f7:2f:d5:68:26: 64:07:71:f4:9c:d3:a7:24:19:f8:2e:12:af:af:7d:b6:56:b9: 41:77:fb:f8:5e:1d:d8:b4:d5:24:f8:e3:5f:ef:eb:57:38:d1: 28:22:7d:f0:6a:f0:1c:54:82:f4:27:0e:02:67:e5:f9:fd:0a: e9:00:1d:cc:e9:87:e8:fc:f0:2f:3a:1e:62:5c:d6:a6:e2:fa: 09:81:ce:96:43:b1:7f:30:02:d7:0a:cb:3e:90:bf:a1:de:73: 82:0b:e6:e6:41:83:fb:69:61:eb:5b:5b:30:25:09:d7:21:9d: 31:47:3a:d0:8f:ec:04:5f:6f:14:f8:31:66:a9:61:04:d9:b9: ab:b9:31:03:93:da:82:42:b1:89:13:eb:9f:47:ac:79:ad:1d: 6b:67:d9:9f:46:d6:2f:1d:b3:cd:1a:60:3c:82:73:ad:7f:3d: c0:0b:92:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF48M4yYqe4PBQJIX75UZ/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1 ZDAwN2UwHhcNMjYxMDI2MTYwMDA5WhcNMjYxMDI3MTYwMDA5WjAzMTEwLwYDVQQD EyhmYmIwNzgyNjE0ZDc4MWI0OWNhOTMzNThmNTAwNDgxNWE5NGQxNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hGqWsJxDEez4jbJAYF1HDACpGXS 3yI3gSHTIUo93lAVX+RHdAWaQrLa2+l2XOfBnSe7m7H7olZPy7naCweVzlGNd9pU fWQKhzuLYgBtkdp0uvto1TOzld9qaDZYeHHvdZn/pOa4VbWAoRtF9xxokoDbtplO xeAxEZukNsSguFhMmsGHYpMd9nH6HuxQtSZP8LWyTq048++Dyc9mPdgS1kulcpY7 +FLgecKhkBSU8I9ELMk7ZMYt70BX/KXEhOw33aXP8zEkkdFysmeA2Qxb7aqAxs4B 2HSVY3ZFdxqnsN8dLenAqOVqo38vC7wXli2fhQX+gehGYmj6ietWW8SuuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuweCYU14G0nKkzWPUASBWpTRTBMB8GA1UdIwQY MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt MWZiYzY0MWI1MGIxLzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXb74fiaL bbn/8Lza2nHupJac4iWKb6mMyMYtZ4GRSbA8tExhPb64saxee9rZgfTGHcWetCtc eQrQSTdDVvmllliC89acxs/xLhNArMr2vIrsgL4cpvcv1WgmZAdx9JzTpyQZ+C4S r699tla5QXf7+F4d2LTVJPjjX+/rVzjRKCJ98GrwHFSC9CcOAmfl+f0K6QAdzOmH 6PzwLzoeYlzWpuL6CYHOlkOxfzAC1wrLPpC/od5zggvm5kGD+2lh61tbMCUJ1yGd MUc60I/sBF9vFPgxZqlhBNm5q7kxA5PagkKxiRPrn0esea0da2fZn0bWLx2zzRpg PIJzrX89wAuSFw== -----END CERTIFICATE-----Generated at Mon Oct 26 22:57:40 2026 by rpki-client