$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft File: rrZuxejyQF9vjUhuc_uCuN4N7g8.mft (raw, json) Hash identifier: tUdOxYK9WNwS07rR5nWQHJu2P3oqeUsajGycv1Jnx7U= Subject key identifier: B4:4A:4A:CC:73:0B:E6:FD:27:3E:87:A4:08:D6:96:6A:DD:0D:31:A4 Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Certificate serial: 01A12CC5AAC9AC1AC29269A44DE822CF0133 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft Manifest number: 1A9F Signing time: Sun 11 Oct 2026 21:01:53 +0000 Manifest this update: Sun 11 Oct 2026 21:01:53 +0000 Manifest next update: Mon 12 Oct 2026 21:01:53 +0000 Files and hashes: 1: 1-Pe2TnywVmfaP-WemWu9F6D1uY.roa (hash: TO2cGriDwgxNlyLdj4bg8MbV1G1jK45ogoJF4793fSo=) 2: 1cuv-12cm2QhTHJFihj8rVlWS38.roa (hash: bcoEGOaQcgkLD12rX+LR5QgbfI3SBiV6QabZt9HzI0k=) 3: 2V5uX7zz8rLZM3EIe_aMe1EFHf4.roa (hash: L4MUyeDgRyRa1SAE3WijwMUBcPHzc9BZm/cEJ6tCJQ0=) 4: 60RghjJR7fbMZmTjDd1goDTxFO4.roa (hash: FTGk3AHz/GL0pHnXXED/nhsF8Ezap2Jkso8Zx9XbdsY=) 5: 7v01OOv6lsa5SDVTbq2sDUyqghU.roa (hash: 674pqR/ZC6RweHjRad+sALRIi4soda9NrCU2Y8CRUAk=) 6: VeUDemYMUkamvLNvu71jm8kXCWQ.roa (hash: sDlj2eIeTmzMHoHM8lIyD6YCl1o4NeFPnKRaymevkd8=) 7: ZMcpzSwF8sfXNSwmkOe8TDMBSJw.roa (hash: +y1O8tgMcUGxxeeg9mLZswZb6MR8jtPoqrvAjwcYJzU=) 8: bcQk1dNiHStablJSpfOMgKvzyB4.roa (hash: vRaLHdtxEoTI3K0Ud0h8BsRxBaZPY4lVipsFC/qsS/8=) 9: eEv6Dzp18N3mnwft_tpFzD3jA9s.roa (hash: Bu5vlAgH4Sy8ybAbPwvMy42MlBplqri0XGE/ouWApbI=) 10: exX8D204pUSMlQDRe6-0vKudRw8.roa (hash: hw0brhXYOTSxVJVmx1MBXDRVxmLR1RsTQRFAr9ka18U=) 11: jCzBcgQ2ecHLxm36fGHNj6MQZAY.roa (hash: pXkAi/m1GNEU9RCztBpU/RufugyhkhNnDbgVYNdhfJo=) 12: rrZuxejyQF9vjUhuc_uCuN4N7g8.crl (hash: aNxRdVzrcejduYbV4JOCDw7UBgHXHfYOg9le8wE/Q0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 21:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:2c:c5:aa:c9:ac:1a:c2:92:69:a4:4d:e8:22:cf:01:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Validity Not Before: Oct 11 21:01:53 2026 GMT Not After : Oct 12 21:01:53 2026 GMT Subject: CN=b44a4acc730be6fd273e87a408d6966add0d31a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6e:8e:b0:89:92:d5:09:6f:4f:ea:28:0f:de: 57:2b:bf:0a:bc:3e:41:b0:2c:91:83:87:82:84:4d: 57:23:a4:2e:ff:2c:22:7d:16:df:40:aa:23:2a:ac: 77:b3:7f:8a:87:58:aa:6d:ef:17:5c:10:09:33:93: 82:13:8f:9e:54:46:00:d5:6e:11:7e:1c:82:e5:fd: 18:1d:49:5a:80:17:4d:5c:48:83:a1:a5:25:5f:dd: bd:03:4c:45:6e:43:90:62:da:56:52:4c:11:16:6d: b8:bd:49:ac:03:c2:03:78:f5:07:48:af:9d:f2:93: 20:6e:00:93:ca:9c:93:bc:84:71:00:5d:d6:09:11: 58:c4:3b:d7:e4:e0:b0:92:9e:b5:44:cd:73:45:c8: d3:24:56:59:6a:54:da:2b:e3:bc:b7:dd:e4:31:8f: 3e:f8:2d:4a:06:4f:81:cc:53:9f:b7:be:91:88:cd: a0:0f:d3:60:2e:e6:a1:53:53:dd:60:b2:4a:69:cf: 91:70:eb:6b:64:ad:21:8f:5a:3b:1c:1b:e1:20:7d: 02:14:96:e6:13:85:c6:c9:cd:9c:e1:f2:a7:03:1d: 3d:5b:05:fc:62:9a:d7:ab:7b:9a:b1:5b:93:62:d2: f4:8c:a9:22:80:74:4b:64:f1:86:92:1f:69:45:d0: ae:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4A:4A:CC:73:0B:E6:FD:27:3E:87:A4:08:D6:96:6A:DD:0D:31:A4 X509v3 Authority Key Identifier: keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5c:4e:dc:b2:2d:5b:de:f2:e7:ff:5c:64:db:b5:fa:2d:43: dc:94:28:3a:e6:32:50:b4:2d:11:83:7f:0c:94:29:ac:d3:e4: 5d:b6:87:a1:04:5b:76:7d:bf:e0:04:1c:c1:ce:82:c8:78:00: d5:3c:ce:37:b0:b4:e6:40:67:72:31:ed:f9:37:68:a4:10:a2: 7c:7b:2d:4e:48:f8:08:47:dc:77:d6:7e:e2:f6:35:5a:95:77: 22:fc:7e:06:f1:91:ef:bf:7d:f4:49:e3:2a:56:10:6e:28:73: 1c:da:42:22:7c:2d:da:79:c4:42:07:d3:81:b4:6a:32:64:91: 7a:4b:c4:ac:e7:c7:24:f4:8c:16:ff:ae:42:4d:7e:53:a8:16: d8:ab:79:00:35:7a:7a:2b:87:e2:e3:30:a6:18:54:e5:53:0a: 28:c8:5f:e2:87:95:08:e1:2b:20:51:94:d8:22:c7:ea:da:10: dc:79:a8:03:41:9c:4c:21:03:39:b6:65:79:e4:d1:e7:18:c8: c1:00:36:18:5b:48:06:13:1a:a0:91:c4:45:05:bf:79:42:80: 73:78:f0:95:5b:f6:d2:10:0a:54:76:fe:05:cd:9c:e2:9a:52: 8f:b2:39:ab:80:a7:f3:fe:96:2b:26:3f:cb:cf:f4:7c:21:ff: 59:07:cc:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEsxarJrBrCkmmkTegizwEzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw ZGVlMGYwHhcNMjYxMDExMjEwMTUzWhcNMjYxMDEyMjEwMTUzWjAzMTEwLwYDVQQD EyhiNDRhNGFjYzczMGJlNmZkMjczZTg3YTQwOGQ2OTY2YWRkMGQzMWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3G6OsImS1QlvT+ooD95XK78KvD5B sCyRg4eChE1XI6Qu/ywifRbfQKojKqx3s3+Kh1iqbe8XXBAJM5OCE4+eVEYA1W4R fhyC5f0YHUlagBdNXEiDoaUlX929A0xFbkOQYtpWUkwRFm24vUmsA8IDePUHSK+d 8pMgbgCTypyTvIRxAF3WCRFYxDvX5OCwkp61RM1zRcjTJFZZalTaK+O8t93kMY8+ +C1KBk+BzFOft76RiM2gD9NgLuahU1PdYLJKac+RcOtrZK0hj1o7HBvhIH0CFJbm E4XGyc2c4fKnAx09WwX8YprXq3uasVuTYtL0jKkigHRLZPGGkh9pRdCuAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRKSsxzC+b9Jz6HpAjWlmrdDTGkMB8GA1UdIwQY MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt NmFlYTkwNTdjODAwLzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflxO3LIt W97y5/9cZNu1+i1D3JQoOuYyULQtEYN/DJQprNPkXbaHoQRbdn2/4AQcwc6CyHgA 1TzON7C05kBncjHt+TdopBCifHstTkj4CEfcd9Z+4vY1WpV3Ivx+BvGR77999Enj KlYQbihzHNpCInwt2nnEQgfTgbRqMmSRekvErOfHJPSMFv+uQk1+U6gW2Kt5ADV6 eiuH4uMwphhU5VMKKMhf4oeVCOErIFGU2CLH6toQ3HmoA0GcTCEDObZleeTR5xjI wQA2GFtIBhMaoJHERQW/eUKAc3jwlVv20hAKVHb+Bc2c4ppSj7I5q4Cn8/6WKyY/ y8/0fCH/WQfMfw== -----END CERTIFICATE-----Generated at Mon Oct 12 04:00:51 2026 by rpki-client