$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft File: 6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json) Hash identifier: oe2sZFEe7vU0rAupbE9cN1F6U/4t1aW8e6Ixg7K23ns= Subject key identifier: 5C:89:E1:B7:03:2E:15:18:20:BA:19:CF:B5:A4:04:76:D8:E5:33:5B Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713 Certificate serial: 01A11AF5BDED5B8CCD3CF959FB05BF66E5CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft Manifest number: 1AAA Signing time: Thu 08 Oct 2026 10:01:14 +0000 Manifest this update: Thu 08 Oct 2026 10:01:14 +0000 Manifest next update: Fri 09 Oct 2026 10:01:14 +0000 Files and hashes: 1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: 6RrsID7XeHt6sFsBYwTHhYqT/Ke+yN5TtnMtmCJKYQM=) 2: JlHGBE70CjYUjMlPy-yN4dzG-cs.roa (hash: eJeCGZHCYQ5pmVVEGiFVOguyq7hsvoBtUeukZnmh3W4=) 3: W-l0n89w8F8aln2IRFkS3RxMi9M.asa (hash: WhQXi1TVBFxOsywX8tkd1k07/cqYBWwOya/6FzjAE+k=) 4: _GwYJ0PKXJK6fqA4cXd9zGiQJsk.roa (hash: TYTF9XrM81uGdSP5QXPvN15cnh9G39fwkeUY9WQ9Rbg=) 5: cxDAVDgNr82cHnIJJB4UwFs2cGU.roa (hash: sgT8v5E2LVdbt2FX0DJ7W7uBv5rW5PIhx+eS3wQDvSs=) 6: dwRGeRiPxu8Ert93hewpcLQlQPs.roa (hash: EAiXOznjLfpEqp6yCwCN/ahYsHXDQcQqsmXEqqAl9Vo=) 7: nSCF5qcvbkhkVZeNhESQPgQzsYw.roa (hash: Y9RP3rduyUtto1z3zNhzoo4HTEI6paw2VNckcRzLK4g=) 8: vSQI8aeWI14r_sJ8b9o2QgEO_BI.roa (hash: oiaQsMRtgp1rem+ZyltK5SLqiX97thYBgEBpvq3aaYc=) 9: vjMCbq9foMBWV-nsVZG7MAfCaSc.asa (hash: tGLojDZ+iCMIeeaPkZBNAIX8zoqdi2h+IoSoEW1tqJg=) 10: wyPR3DQqTcPeXSMxj_8q1QvGp98.roa (hash: gpZ7dcu9+au0qJAS/mbf494bt1LZl0k6YCG8tQBUn4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:1a:f5:bd:ed:5b:8c:cd:3c:f9:59:fb:05:bf:66:e5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713 Validity Not Before: Oct 8 10:01:14 2026 GMT Not After : Oct 9 10:01:14 2026 GMT Subject: CN=5c89e1b7032e151820ba19cfb5a40476d8e5335b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:12:24:8b:ce:b2:09:cb:a8:bf:b7:27:10:ea: 87:e3:0c:6b:d4:cd:a8:44:f6:33:b1:f3:b3:83:e4: 9d:ae:97:a8:47:e2:56:c8:cd:b2:fa:27:04:a7:09: ee:83:84:08:72:c6:a3:c1:6d:c9:31:da:80:1b:ca: 19:24:37:71:3f:74:95:b0:bc:ef:be:df:23:b8:4e: 43:56:60:e3:84:b5:43:fb:5d:c9:75:21:f1:06:e7: da:68:4d:47:6f:24:e5:f4:a6:56:44:95:2d:e4:c6: ac:06:d5:7f:2b:94:39:24:4e:e7:0d:87:e8:4a:01: ce:cd:43:46:40:87:93:f4:68:de:4c:4f:ce:fa:9b: f5:5f:5a:6e:82:f7:d9:b5:fa:63:80:9e:e3:d5:ee: 64:b4:28:a3:20:47:00:7f:98:ac:4c:42:a3:d3:cc: 49:d5:dd:bc:6d:ca:c1:e9:ea:b0:35:29:0c:2c:65: f5:02:aa:5c:87:87:87:33:8e:46:6b:55:e5:15:37: d8:66:dc:d9:1b:64:5e:d3:e6:3e:c1:91:6d:64:7e: 11:e6:9f:94:fe:31:fa:e7:e8:34:fd:8d:8a:8e:f8: 2d:0f:09:fb:3c:de:6e:ff:e8:14:87:ae:2b:2a:22: a4:57:15:d1:bf:c8:87:32:98:49:27:3a:bd:65:1d: ab:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:89:E1:B7:03:2E:15:18:20:BA:19:CF:B5:A4:04:76:D8:E5:33:5B X509v3 Authority Key Identifier: keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:22:d8:7a:fd:ee:4a:95:0c:0e:55:c6:20:ec:8c:0e:19:da: 64:31:b9:85:45:28:42:02:f4:78:a1:1e:e4:97:36:3b:c1:8e: 5e:dd:63:70:8e:af:0e:e9:1b:b6:07:d0:13:c8:02:17:d3:cf: 72:34:ef:e6:30:22:b7:8f:d7:4c:79:80:fc:ca:ce:87:77:db: 48:38:93:96:f4:b0:f1:e6:cb:40:57:0c:35:f0:c1:e8:6f:33: 3a:4c:d4:b9:7f:72:c0:cd:ba:fb:e0:e3:2d:63:32:38:a9:53: 42:7d:da:53:78:1f:48:aa:a8:ad:58:e4:2f:ac:45:ed:04:4f: 32:47:f6:d2:c2:b3:3c:69:78:d8:ae:18:b2:d5:af:cc:9d:85: 51:36:cd:ee:fa:22:6f:74:e0:0e:74:d7:cd:b4:77:af:1a:e1: 53:c6:76:11:39:49:98:4c:bd:84:aa:4f:af:1a:4f:9b:0f:d1: c6:d0:c3:3a:80:97:48:e4:24:bc:c5:dc:78:cc:01:14:2a:ed: 53:d2:ee:5e:5b:01:69:fa:35:2b:eb:e6:3d:45:e9:21:3f:87: 66:0d:98:83:28:d9:96:b1:d7:ed:e1:9d:ea:df:f1:51:58:25: 02:71:8e:44:82:bd:40:32:37:e3:9f:4a:af:14:1e:f1:a8:18: 98:78:54:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEa9b3tW4zNPPlZ+wW/ZuXOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl MjQ3MTMwHhcNMjYxMDA4MTAwMTE0WhcNMjYxMDA5MTAwMTE0WjAzMTEwLwYDVQQD Eyg1Yzg5ZTFiNzAzMmUxNTE4MjBiYTE5Y2ZiNWE0MDQ3NmQ4ZTUzMzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxIki86yCcuov7cnEOqH4wxr1M2o RPYzsfOzg+SdrpeoR+JWyM2y+icEpwnug4QIcsajwW3JMdqAG8oZJDdxP3SVsLzv vt8juE5DVmDjhLVD+13JdSHxBufaaE1HbyTl9KZWRJUt5MasBtV/K5Q5JE7nDYfo SgHOzUNGQIeT9GjeTE/O+pv1X1pugvfZtfpjgJ7j1e5ktCijIEcAf5isTEKj08xJ 1d28bcrB6eqwNSkMLGX1Aqpch4eHM45Ga1XlFTfYZtzZG2Re0+Y+wZFtZH4R5p+U /jH65+g0/Y2KjvgtDwn7PN5u/+gUh64rKiKkVxXRv8iHMphJJzq9ZR2rIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyJ4bcDLhUYILoZz7WkBHbY5TNbMB8GA1UdIwQY MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt YTBkYzM1NGY0Y2EzLzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliLYev3u SpUMDlXGIOyMDhnaZDG5hUUoQgL0eKEe5Jc2O8GOXt1jcI6vDukbtgfQE8gCF9PP cjTv5jAit4/XTHmA/MrOh3fbSDiTlvSw8ebLQFcMNfDB6G8zOkzUuX9ywM26++Dj LWMyOKlTQn3aU3gfSKqorVjkL6xF7QRPMkf20sKzPGl42K4YstWvzJ2FUTbN7voi b3TgDnTXzbR3rxrhU8Z2ETlJmEy9hKpPrxpPmw/RxtDDOoCXSOQkvMXceMwBFCrt U9LuXlsBafo1K+vmPUXpIT+HZg2YgyjZlrHX7eGd6t/xUVglAnGORIK9QDI3459K rxQe8agYmHhUdQ== -----END CERTIFICATE-----Generated at Thu Oct 8 12:25:25 2026 by rpki-client