$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: kuyHsy5e6H03rSd00Iyww5Zy7q71Z3fI4Ovyw3RepTo= Subject key identifier: F6:55:95:F0:0B:35:24:E8:EC:97:A0:BD:14:01:7C:FE:C7:C5:C5:38 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 01A0D727EBD4D63B3378BF18502F91454169 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 1A73 Signing time: Fri 25 Sep 2026 06:01:52 +0000 Manifest this update: Fri 25 Sep 2026 06:01:52 +0000 Manifest next update: Sat 26 Sep 2026 06:01:52 +0000 Files and hashes: 1: 0zd4nb5fhm2xTq0WOAi4Xp6bvJc.roa (hash: uMgyt3DoicP5DNjGaZ/5LrHhGzYKFxFylJxozZr11JQ=) 2: 15U-P8KVPY8JhMDqgw8L5oM6fO4.roa (hash: A8TF8Z+NTCSo1JvC6AkpIA17zqlpHZI++mBawEefOjM=) 3: DN1S1WAl_2K3M6Ai-2AoagxMibw.roa (hash: CSPU47hBScO03u7drTuu7JPSF8DLvvXRvBS1TUE4BwI=) 4: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: DFl7uOKbfa0Ua0PG0xhEPrH6vBWmsPRs52KyWgIPEjU=) 5: NA8tG2G3hFFALFYl7Venv99NrVc.roa (hash: bJB0cpk0QWUKw0RjswA5Ubr/IfiAoQmBJm3f3NwKfgQ=) 6: NC0UAgfuyICWUK07pGjses6Gmp4.roa (hash: srG5DwbOiKT6ED23Q54cQarx7hW7qMuLeBg5bvdOCes=) 7: OAN3WdNCBOx9GAH-afVSq5R89fo.roa (hash: /EI4b5flaVJsTGBAEIzkodT4ndbdEXX0V5sGa/1LzJE=) 8: OQ88iyxgykv-UuMoZwpp0BBgiSI.roa (hash: 8tW2X/On0vJs7AepnWjVBDXaTpJx0zYz1Hi+i0/YSxY=) 9: abnIXAgJEhW9VldO5YpGFgSVzcA.roa (hash: XCRB0tR9DLtvsf6qW2UBqKQDVi6//m3IqU34W2mRyLA=) 10: kyDGRd8zbEMUETtukg77Ui7V8qY.roa (hash: devk2rJm/x4h0LaLa8i6gGbkJIFyEo6sNK4CrBpAYrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 06:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d7:27:eb:d4:d6:3b:33:78:bf:18:50:2f:91:45:41:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Sep 25 06:01:52 2026 GMT Not After : Sep 26 06:01:52 2026 GMT Subject: CN=f65595f00b3524e8ec97a0bd14017cfec7c5c538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d3:64:d6:f5:3b:64:ed:b5:6e:e4:55:ba:74: 7a:b4:37:9d:51:7e:af:6c:99:9a:d8:4c:2d:c2:52: dc:a9:96:69:fb:82:fc:06:58:77:92:42:8b:89:7a: c7:d0:5d:3a:ed:94:21:d9:15:fb:8d:ca:4b:f4:38: 53:5d:b9:7a:da:e5:61:f7:e3:e2:52:e0:18:83:2a: 62:81:34:90:03:40:a1:6c:ca:61:29:f7:61:8c:a4: e5:ae:9d:a0:00:3b:80:5f:a0:7d:92:e5:01:e6:bf: 22:d4:62:fc:dd:36:b7:53:84:c2:2e:de:70:a2:e1: f8:36:1f:2a:99:0c:c8:32:11:b5:3c:8b:37:87:81: 89:9d:5b:a7:64:7e:24:cf:fc:20:18:2e:d0:b2:7d: af:88:f7:30:93:01:1f:3f:03:93:d5:ed:0b:db:16: b2:3c:2a:dd:2b:51:8b:59:ce:6d:4c:05:e2:62:b0: c2:81:f1:74:1d:6c:9f:68:73:e4:71:02:5f:e0:3f: 50:3f:f1:fe:3d:2f:d3:50:5b:8a:32:83:36:0f:65: 5c:79:2f:49:1b:65:5f:f3:9e:80:74:47:3c:c4:b3: 4c:4d:da:93:89:b5:a7:a0:fc:74:38:1f:34:3c:b7: 08:33:ac:ac:c4:b6:18:25:99:6c:6c:2c:9e:be:27: 23:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:55:95:F0:0B:35:24:E8:EC:97:A0:BD:14:01:7C:FE:C7:C5:C5:38 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:42:26:39:15:1a:c8:a9:ba:72:25:fc:7f:e3:52:d3:90:14: b3:92:b1:6e:4c:fe:ae:83:af:37:82:35:01:af:4d:df:da:be: cc:0e:6b:b8:f5:2e:86:90:88:41:50:9c:5b:b6:38:6f:5f:2b: fc:c5:08:2c:15:87:28:b3:62:01:c9:8e:ff:83:3c:92:1a:12: 9d:d8:7b:3d:99:16:e6:65:72:13:bf:14:75:d3:74:0c:56:e6: 67:11:0d:61:ad:e6:6b:70:62:0f:2f:13:18:50:48:e7:68:d5: 86:9e:f3:6c:1c:ee:13:19:3e:e9:7e:6f:1e:46:c8:cc:8a:ca: 62:ab:89:b7:b6:ad:96:6b:be:00:9f:3e:99:61:9d:31:1d:64: d5:a6:22:79:98:86:9a:3c:35:09:a1:0e:91:c1:eb:14:c9:27: 30:eb:16:57:ef:62:ec:66:c6:a1:f4:e6:99:1f:5e:55:5c:60: 52:ed:df:9e:8f:26:1b:49:82:65:ee:cd:79:d2:5c:bb:93:a9: b6:16:71:e9:53:0b:38:70:f2:98:52:57:2d:ef:e9:df:1f:22: a3:d8:6d:9f:12:4c:0f:87:b6:40:20:53:3b:f2:9d:e5:f7:9e: ba:0e:8e:18:dd:bf:fd:58:47:aa:f5:09:b4:ef:e6:da:f1:70: 4b:03:5b:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDXJ+vU1jszeL8YUC+RRUFpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwOTI1MDYwMTUyWhcNMjYwOTI2MDYwMTUyWjAzMTEwLwYDVQQD EyhmNjU1OTVmMDBiMzUyNGU4ZWM5N2EwYmQxNDAxN2NmZWM3YzVjNTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89Nk1vU7ZO21buRVunR6tDedUX6v bJma2EwtwlLcqZZp+4L8Blh3kkKLiXrH0F067ZQh2RX7jcpL9DhTXbl62uVh9+Pi UuAYgypigTSQA0ChbMphKfdhjKTlrp2gADuAX6B9kuUB5r8i1GL83Ta3U4TCLt5w ouH4Nh8qmQzIMhG1PIs3h4GJnVunZH4kz/wgGC7Qsn2viPcwkwEfPwOT1e0L2xay PCrdK1GLWc5tTAXiYrDCgfF0HWyfaHPkcQJf4D9QP/H+PS/TUFuKMoM2D2VceS9J G2Vf856AdEc8xLNMTdqTibWnoPx0OB80PLcIM6ysxLYYJZlsbCyevicjUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZVlfALNSTo7JegvRQBfP7HxcU4MB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0ImORUa yKm6ciX8f+NS05AUs5Kxbkz+roOvN4I1Aa9N39q+zA5ruPUuhpCIQVCcW7Y4b18r /MUILBWHKLNiAcmO/4M8khoSndh7PZkW5mVyE78UddN0DFbmZxENYa3ma3BiDy8T GFBI52jVhp7zbBzuExk+6X5vHkbIzIrKYquJt7atlmu+AJ8+mWGdMR1k1aYieZiG mjw1CaEOkcHrFMknMOsWV+9i7GbGofTmmR9eVVxgUu3fno8mG0mCZe7NedJcu5Op thZx6VMLOHDymFJXLe/p3x8io9htnxJMD4e2QCBTO/Kd5feeug6OGN2//VhHqvUJ tO/m2vFwSwNbLg== -----END CERTIFICATE-----Generated at Fri Sep 25 13:20:33 2026 by rpki-client