$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json) Hash identifier: mYQJbsL4ANoaZWPTzYOp/eimO4nvJqk+EofoGFLic5s= Subject key identifier: 6B:70:D9:6D:2F:B2:83:37:0D:61:07:0F:84:F6:99:69:D3:3C:94:14 Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71 Certificate serial: 01A085D411AEC22C0B123BCE7FF9AAC3670F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft Manifest number: 1A4D Signing time: Wed 09 Sep 2026 11:01:02 +0000 Manifest this update: Wed 09 Sep 2026 11:01:02 +0000 Manifest next update: Thu 10 Sep 2026 11:01:02 +0000 Files and hashes: 1: 2uP2P6fTf1qo4PWRRqgeE7TTacE.roa (hash: 9eSLYCb2FWzNsHTSZC1SEnCMNPegGVcyv6j21qK1mw8=) 2: 5rakYdNxKMjh5JNPex8iKzp_gtA.roa (hash: 6LspddKmtQtuac9ZuOl1VnhHP0Iq5oFWoFzvEG8ERXE=) 3: 814WTzXBXOIciV517t_FSJpheFU.roa (hash: 3rVBxA84Q0GQ5WcUB0js4QFJ7jGwBh1Rh823C6IzdeE=) 4: AogunF2vY6jwFQqloSaO1hbzpk8.roa (hash: it2LBzN2gPXG+ZsVF9U3YkMRcRGbDQsz+oO4JZZUzeg=) 5: JNtEUjv1u2nrR2kJY3xTk9eLdQU.roa (hash: y7e9qF3W4oZOepFOJNd5APdu3FIuFqB+iMZzLRxwKEo=) 6: PQhkPKvFMO7XAZJCK0yg6JOYn-Q.roa (hash: GclksRKdEgrXLLR1LhQTLSvorV7LCPoO0w2Ir6KfZ4M=) 7: Qi3PbQnrdw7q8NtmLcDOyzuEuok.roa (hash: Ene2M6hdbbKNY0YIKXvUxR9PygRHkyqGW28j+nRBH9E=) 8: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: ADIW4IPRuZpzo8AHNmWrXPUpBTtCnreXc7bkdJ2aSUM=) 9: UKQMI_1tAdL7QkXpECyLkKgiFXw.roa (hash: xCvizHfY/xMnYQ9a7uuh91R0ms1D7ktEV/mIEaRjfJ8=) 10: iB6K871-MTgrHCKR-pl3wKEY8VE.roa (hash: evrLdA7V1aTPB0+S9RwUtMXPCQscLGRKXxGpKmpY5Z4=) 11: of6LgZjZn377OWe4qW9VxsrXlzU.roa (hash: mzM/Cns9/j03lTiA+9ZfDQNcGWtBmHN0WQWYMBfi0eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:85:d4:11:ae:c2:2c:0b:12:3b:ce:7f:f9:aa:c3:67:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Validity Not Before: Sep 9 11:01:02 2026 GMT Not After : Sep 10 11:01:02 2026 GMT Subject: CN=6b70d96d2fb283370d61070f84f69969d33c9414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:f6:b4:77:6b:30:d7:4a:7d:0e:83:85:f5: b3:2a:cc:fd:86:d7:76:a6:70:54:16:f3:c6:8e:db: b8:6d:64:61:12:c9:ff:14:a1:80:c9:47:d2:32:0d: 16:06:5a:35:28:63:e6:a7:87:5b:77:62:9f:98:05: 9a:86:b6:e8:bc:37:16:fd:48:f0:4f:af:f8:f6:3a: 26:99:62:1a:5d:0a:cb:d4:39:6d:6c:94:62:1e:16: 35:20:f2:22:a0:cc:e1:5c:11:db:9c:3a:1f:09:f6: 93:6e:57:65:e4:2d:41:c8:e8:82:35:e9:02:ab:54: 62:92:66:29:9e:27:c0:1e:3f:2b:a0:74:63:d5:d9: 22:9b:c1:78:32:b1:51:2d:96:2f:32:41:55:08:f4: 9f:d6:d1:7c:cb:d9:41:39:a0:1e:df:66:e0:60:8a: 6d:77:84:37:9d:3a:1a:95:24:5f:41:5c:33:b3:81: 14:ce:5b:dc:ee:56:06:25:9d:e5:df:12:8a:77:ad: 6c:83:c8:9a:42:19:cf:5f:f8:d6:5e:b2:ab:c9:03: 04:d6:d7:ee:d5:50:c3:bf:c9:19:33:e0:67:d8:3b: c6:6b:78:b6:3c:ae:12:1c:1f:d0:b4:f5:23:24:da: 0a:61:78:e5:6e:e8:3f:ff:57:a2:8f:21:21:55:53: b8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:70:D9:6D:2F:B2:83:37:0D:61:07:0F:84:F6:99:69:D3:3C:94:14 X509v3 Authority Key Identifier: keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8d:ec:bc:c2:3b:70:a6:4e:2a:96:9c:59:7e:1d:93:d3:48: f9:77:d4:67:32:7d:50:f0:ba:d4:0e:d9:89:6d:5a:fd:4f:81: 42:ff:78:55:93:c7:95:38:cd:ee:2f:6f:7f:e0:41:a8:5e:49: 84:d6:81:61:86:52:b6:1b:c6:42:e8:28:ee:16:a6:33:d4:a2: 82:02:b1:75:e6:0d:98:41:8f:a3:de:da:1b:e0:03:08:bc:38: 4f:56:bf:88:1e:30:9f:a0:6b:77:cb:3c:c4:55:8a:06:32:5e: e5:e9:86:a2:85:71:2c:67:aa:60:9d:b4:13:e0:1d:9d:20:52: 38:bf:9c:d7:52:a3:d0:5e:6d:a9:20:ca:50:42:f9:50:a6:2d: 0f:5d:d0:38:9e:48:ea:37:fb:9a:19:4b:85:74:8a:62:a8:04: 05:2d:68:2f:9d:0d:a8:ac:ce:75:ec:46:d8:94:e8:2f:cb:b1: 3b:91:87:36:81:a4:9b:cc:e2:2b:9f:2e:36:52:48:5a:c5:8c: 43:2b:27:60:e8:29:6d:cf:5b:b0:78:88:3b:0c:5c:18:31:6c: 7d:9e:cf:1c:10:63:69:b7:d6:f1:4d:58:9b:f9:97:0a:9f:4b: 37:be:68:c0:8b:62:f6:7f:c4:41:a4:06:85:2b:84:ac:e4:76: e1:88:c8:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCF1BGuwiwLEjvOf/mqw2cPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk ZWZlNzEwHhcNMjYwOTA5MTEwMTAyWhcNMjYwOTEwMTEwMTAyWjAzMTEwLwYDVQQD Eyg2YjcwZDk2ZDJmYjI4MzM3MGQ2MTA3MGY4NGY2OTk2OWQzM2M5NDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkD2tHdrMNdKfQ6DhfWzKsz9htd2 pnBUFvPGjtu4bWRhEsn/FKGAyUfSMg0WBlo1KGPmp4dbd2KfmAWahrbovDcW/Ujw T6/49jommWIaXQrL1DltbJRiHhY1IPIioMzhXBHbnDofCfaTbldl5C1ByOiCNekC q1RikmYpnifAHj8roHRj1dkim8F4MrFRLZYvMkFVCPSf1tF8y9lBOaAe32bgYIpt d4Q3nToalSRfQVwzs4EUzlvc7lYGJZ3l3xKKd61sg8iaQhnPX/jWXrKryQME1tfu 1VDDv8kZM+Bn2DvGa3i2PK4SHB/QtPUjJNoKYXjlbug//1eijyEhVVO4zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtw2W0vsoM3DWEHD4T2mWnTPJQUMB8GA1UdIwQY MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt Zjg4OWNhMTYxYzAxLzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAio3svMI7 cKZOKpacWX4dk9NI+XfUZzJ9UPC61A7ZiW1a/U+BQv94VZPHlTjN7i9vf+BBqF5J hNaBYYZSthvGQugo7hamM9SiggKxdeYNmEGPo97aG+ADCLw4T1a/iB4wn6Brd8s8 xFWKBjJe5emGooVxLGeqYJ20E+AdnSBSOL+c11Kj0F5tqSDKUEL5UKYtD13QOJ5I 6jf7mhlLhXSKYqgEBS1oL50NqKzOdexG2JToL8uxO5GHNoGkm8ziK58uNlJIWsWM QysnYOgpbc9bsHiIOwxcGDFsfZ7PHBBjabfW8U1Ym/mXCp9LN75owIti9n/EQaQG hSuErOR24YjIrA== -----END CERTIFICATE-----Generated at Wed Sep 9 16:40:47 2026 by rpki-client