$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft File: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft (raw, json) Hash identifier: vN+f/WYYrFrs/lGFndWEmQj/WRLuFQjb5e7kffItH+4= Subject key identifier: F8:69:6B:85:65:64:CD:47:92:F0:F7:4F:34:03:8A:EF:D1:67:54:DB Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68 Certificate issuer: /CN=7db10757cfa3917dbfa5b9be68e978653d414368 Certificate serial: 01A0DD29ADFA63C32CC94AB264DC4EBAC1DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft Manifest number: 02B1 Signing time: Sat 26 Sep 2026 10:01:31 +0000 Manifest this update: Sat 26 Sep 2026 10:01:31 +0000 Manifest next update: Sun 27 Sep 2026 10:01:31 +0000 Files and hashes: 1: 11GxtSy7oVessoMzmqoa6-GVaFM.roa (hash: dEcJU2H7eMFkWZ5hiqB+aM7WjgMaOQg3rLiI2kSrzMA=) 2: 4mAC2e2naxP6ju3b8JY5KHGq5NQ.roa (hash: EtytVm/6AHxWfObsQVWGolI13NzE3vnrzO+hEwitye4=) 3: 67JDNfAtP9yEkJbfUjQ3vr0JanQ.roa (hash: TMkj0G/KqGW0hoDAPTbK60VfZv79MVnxbAmNA4wAIxY=) 4: B_7QNLEyOLRHkGziKQcoP3jS9N8.roa (hash: wt94oNA2beZskoVPKNrRXzQfjQMHidYZl0oibApgTyU=) 5: Ed26D8U4hy9Q3LQu5_4P5xQ88Fs.roa (hash: kLzLVcajWbXNwZhhTO7Kf1y0Py6ohIR9eaLpz+kos+s=) 6: Ha4FUbT-C5cfgzREP_qKmJdZdNU.roa (hash: OWm/SoXebYfD0ymYVnkD6nJ1M+OinzGR+vHe5dJGhIk=) 7: JoonRKwDkzGDADAYbWqY6h6w-K8.roa (hash: cPQ1mkuIkwhP6i3plXOgbNc6BnD5TBFu2q0RZqT67s8=) 8: ObEFLA71GS6PBSPXvLN1tQxOPjg.roa (hash: CQurRH2QtNh+H5vZ26uy12WpU20lxprNhR0FVldn9Ok=) 9: R0lbPN66JhHTAlizwtgpkO4cz3Y.roa (hash: X9vNqzFtl+nRCTrfZFlpEmLshxNhNE7U0YtwgkXsL6o=) 10: _n6jeEvw1fkyJDmhWTUIcmdEloQ.roa (hash: aygh9B/H+i/ULx64UfP113xepSH3dG8pMCGeRmM4JJ4=) 11: bAiv0w09X4HnDoPXtry_uVbCG9A.roa (hash: 0EeSizCgG9dwzt3jvwALQHRTpOevtke5hHF/nPETtCw=) 12: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl (hash: fj+fHet6xGmjjh6bhsGVe65zj7eNkPpzOFDPttRhCEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 09:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:dd:29:ad:fa:63:c3:2c:c9:4a:b2:64:dc:4e:ba:c1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368 Validity Not Before: Sep 26 10:01:31 2026 GMT Not After : Sep 27 10:01:31 2026 GMT Subject: CN=f8696b856564cd4792f0f74f34038aefd16754db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:77:64:2a:dc:7e:9f:4c:f4:47:51:de:79:6d: 16:a7:68:e7:1b:65:bb:23:1a:72:c8:71:60:3b:28: ed:2a:2a:15:ff:93:e1:30:37:31:1c:58:3b:78:65: 03:02:9f:0f:4c:fe:52:f4:78:e9:49:43:7d:e8:a1: 1c:ca:85:ec:e8:fa:cb:47:3e:ec:5c:0b:31:f9:fc: 9e:59:80:ff:fa:9a:87:a6:17:97:d9:76:36:64:2a: 8c:6e:6a:46:d6:b9:cf:d7:21:13:40:e0:1a:03:06: 6d:96:9f:ad:29:e3:24:e6:c3:f7:df:fe:b5:f9:18: 7e:3b:53:00:32:aa:c8:6e:66:7e:e3:a7:0c:5f:c4: 56:e1:90:8a:5b:8c:88:ee:1c:20:54:21:66:ec:7d: 0f:b8:05:1e:43:07:bf:22:3a:0a:02:41:7d:31:8a: 57:34:10:b2:42:b8:79:e4:9f:40:28:57:bc:a0:59: 44:34:a9:72:06:2d:9d:a9:4d:22:3a:05:80:fc:92: aa:42:44:40:46:44:3f:1d:47:82:1d:2c:29:1c:fd: f0:38:9a:ef:23:13:46:74:d3:51:d9:a4:80:17:2b: a2:47:5a:4d:12:5e:55:34:48:39:0d:40:d5:b1:a7: 7b:60:69:da:11:ed:b0:2b:fc:c4:65:22:ee:05:a5: c7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:69:6B:85:65:64:CD:47:92:F0:F7:4F:34:03:8A:EF:D1:67:54:DB X509v3 Authority Key Identifier: keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:67:e8:5a:f2:73:dd:55:94:ff:fa:c1:06:9b:29:87:2b:14: ae:e8:b6:c9:de:94:51:6e:da:d0:00:2c:ac:5b:fc:e4:b7:9e: 9b:bf:5e:c6:c7:d1:18:88:b8:7b:17:f9:4c:da:c8:70:54:bb: dc:06:3c:c3:41:c4:53:17:0a:5e:61:ff:d0:e6:b0:01:40:f2: cc:83:ed:d2:86:ce:9c:a1:1c:b4:8a:81:71:19:81:1d:ad:bb: ac:4b:50:38:e2:b8:9b:ad:c7:86:b2:78:f1:22:09:1c:94:87: f8:ec:61:06:00:9d:c4:55:59:20:95:1d:37:16:75:3c:31:d9: 31:cd:6d:67:5f:59:85:bb:fe:76:79:c6:86:a9:5d:05:66:df: be:85:33:4e:5e:4f:5f:63:24:a6:69:be:a0:b2:a1:03:af:93: 59:b8:94:8c:41:1e:47:16:09:cb:51:9f:42:89:96:f1:de:72: 37:a8:28:98:c8:28:6f:d8:73:9a:a8:37:34:63:13:41:0f:38: a0:34:6d:ed:4c:25:7d:07:72:74:b8:b1:05:47:d6:83:37:d3: d8:42:0a:41:51:10:0c:c2:6c:28:ff:ac:53:b2:0f:1b:28:9e: eb:a1:8a:2f:23:d8:3f:54:b3:bd:da:b5:e9:35:61:64:74:fd: 34:a1:9c:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDdKa36Y8MsyUqyZNxOusHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYjEwNzU3Y2ZhMzkxN2RiZmE1YjliZTY4ZTk3ODY1M2Q0 MTQzNjgwHhcNMjYwOTI2MTAwMTMxWhcNMjYwOTI3MTAwMTMxWjAzMTEwLwYDVQQD EyhmODY5NmI4NTY1NjRjZDQ3OTJmMGY3NGYzNDAzOGFlZmQxNjc1NGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HdkKtx+n0z0R1HeeW0Wp2jnG2W7 IxpyyHFgOyjtKioV/5PhMDcxHFg7eGUDAp8PTP5S9HjpSUN96KEcyoXs6PrLRz7s XAsx+fyeWYD/+pqHpheX2XY2ZCqMbmpG1rnP1yETQOAaAwZtlp+tKeMk5sP33/61 +Rh+O1MAMqrIbmZ+46cMX8RW4ZCKW4yI7hwgVCFm7H0PuAUeQwe/IjoKAkF9MYpX NBCyQrh55J9AKFe8oFlENKlyBi2dqU0iOgWA/JKqQkRARkQ/HUeCHSwpHP3wOJrv IxNGdNNR2aSAFyuiR1pNEl5VNEg5DUDVsad7YGnaEe2wK/zEZSLuBaXHhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhpa4VlZM1HkvD3TzQDiu/RZ1TbMB8GA1UdIwQY MBaAFH2xB1fPo5F9v6W5vmjpeGU9QUNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yYjc4YTktNDExZC00Yzg4LThjY2Qt ZmM0MWQxYzQxNGFiLzEvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yYjc4YTktNDExZC00Yzg4LThjY2QtZmM0MWQxYzQxNGFi LzEvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGfoWvJz 3VWU//rBBpsphysUrui2yd6UUW7a0AAsrFv85Leem79exsfRGIi4exf5TNrIcFS7 3AY8w0HEUxcKXmH/0OawAUDyzIPt0obOnKEctIqBcRmBHa27rEtQOOK4m63HhrJ4 8SIJHJSH+OxhBgCdxFVZIJUdNxZ1PDHZMc1tZ19Zhbv+dnnGhqldBWbfvoUzTl5P X2Mkpmm+oLKhA6+TWbiUjEEeRxYJy1GfQomW8d5yN6gomMgob9hzmqg3NGMTQQ84 oDRt7UwlfQdydLixBUfWgzfT2EIKQVEQDMJsKP+sU7IPGyie66GKLyPYP1Szvdq1 6TVhZHT9NKGcMw== -----END CERTIFICATE-----Generated at Sat Sep 26 17:34:20 2026 by rpki-client