$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: 9fJBfHWlzAdBfyJTNtDqp+sb+8/wmI7/VJ9wpF1FHE8= Subject key identifier: CB:AA:94:8B:63:D8:1C:28:11:C5:5D:43:11:B5:FB:7A:C9:B1:0B:5B Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 01A0EB5338364D8614AFE513AC654A29E0CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 1A8A Signing time: Tue 29 Sep 2026 04:01:34 +0000 Manifest this update: Tue 29 Sep 2026 04:01:34 +0000 Manifest next update: Wed 30 Sep 2026 04:01:34 +0000 Files and hashes: 1: 4Y6MQ3p-LB6KrtJDo2AEO8Db164.roa (hash: 5atEicVhW+L7Xp6D+LeVcw6nuJeehWHQba6IJiOM6Ms=) 2: As_pVbbnYy_pmBMm0RcX49iX6nY.roa (hash: qzus9UnBcueHhtxBHMySF8j/gf9sbzuNZT387lhMVtE=) 3: IauAxs74tysYNqUuPq3mwgGVBQY.roa (hash: I4y1ed39yJsl3DkGtY/KgIMLvKWqfNhrhjl/qeS45rw=) 4: Q7kjVEhiYHEz_AIBuFCX2o6kXpQ.roa (hash: MuV9xof7zxa6mZSUu9k4zgmUqNgq/+xzFvRw2ejciSU=) 5: UhbmNbA2hwd3CclD7uA5e7VB30s.roa (hash: juSkCYLLU3kVaC1Dq0hdQw2DrlMO0olfzSo1w3Y2IAk=) 6: VmKAAjA4J61Er2pV6nmm2We8eeg.roa (hash: H91QyBvG1I/wj9YFT3ovdtrMrR5xBG3HkuYFKTPkUdk=) 7: Z2JoyRveJcrOS84W6TpEPChd0u8.roa (hash: aEKu2ZE0v6kUC0OnwN6L0HbgZBJi/Gu9YSjx1j8FGfg=) 8: aC9Q_3qjddY1l6-wNmHh31rhiv4.roa (hash: uKO8uok9xpbvJA3MGYKk7ndaYzKJUW2pxyQNGvBjSDU=) 9: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: Rh1m1Z6Ruv0rOyVXcuQtDdkdPwv0on50sTUwK4B6ES0=) 10: ozLeruCkBhC4yZCUw5lMFfl-TtM.roa (hash: ygWG9N1PXEIgHYpH9dLMI7Qu5ggvIeMB+/+Dm4Mbbz4=) 11: q47qpt1p1Wj02CxPXYgOsikq_GY.roa (hash: RR0Z4b1X2W/yjPPcvR1hUKYG5qy0mYBUJ7YN4lZTqrk=) 12: s0Slj9yVMX7lCq79bqSGCqW6KPg.roa (hash: RaEewhp7TYWAZZHFh2A3/CMtjGLdyIT76c5b57zkYYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 04:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:eb:53:38:36:4d:86:14:af:e5:13:ac:65:4a:29:e0:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Sep 29 04:01:34 2026 GMT Not After : Sep 30 04:01:34 2026 GMT Subject: CN=cbaa948b63d81c2811c55d4311b5fb7ac9b10b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:55:7d:b1:95:d7:33:c7:7a:43:63:f8:5e:7c: eb:ea:97:ed:c7:df:0d:5f:0c:26:ac:1b:4e:d2:d7: f8:6e:8b:33:25:ad:2c:4f:cd:93:b0:23:99:52:49: 0d:61:82:b5:ac:d4:e5:41:dc:d9:91:31:62:1d:b2: 6f:e0:54:8b:13:3e:35:ea:59:88:45:75:55:f6:13: a1:2a:17:b4:6f:2a:a6:e0:fa:e5:d7:79:d0:a4:db: 45:c9:74:91:41:d8:c3:4c:9b:33:97:24:d8:1e:53: b7:ba:bd:02:1f:06:a8:61:f8:a1:0e:e3:db:cd:39: 5c:0c:f0:78:8e:22:3d:ed:2d:ef:7a:e1:88:c8:16: b4:fb:ed:e6:b5:90:fc:51:60:68:7d:65:4c:33:d0: 2a:80:c9:a5:1a:38:c1:7c:bd:0f:ee:6c:5d:78:e7: 06:f0:9a:9e:2e:d4:02:52:fd:ad:b2:f0:d5:c2:3a: bf:8b:7e:2f:84:0e:86:fd:06:82:05:d7:fd:e3:e1: df:a2:d8:52:7a:37:60:49:9f:98:4b:1b:21:39:a0: a0:1f:3f:ff:6b:a0:47:8f:36:cb:08:6e:e7:38:a4: da:4c:b4:dc:ec:80:9b:94:01:98:99:ea:f6:65:5a: 57:85:de:41:1d:af:5a:33:d2:76:cc:e4:78:26:7c: e9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AA:94:8B:63:D8:1C:28:11:C5:5D:43:11:B5:FB:7A:C9:B1:0B:5B X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:32:bd:99:0e:fd:67:5e:c0:c2:25:01:1d:20:95:2b:91:dc: a6:ce:ce:3a:90:bd:08:c4:64:90:5e:02:be:39:c9:d8:9f:3a: 9d:e6:96:d1:87:c6:67:4a:f5:8b:38:fa:8e:10:37:6f:3a:30: 77:a2:21:4f:63:03:f2:b9:d0:2b:a7:c8:7b:e8:54:a5:ac:d0: b7:81:bb:d2:e1:96:4b:f0:00:83:88:15:9f:a9:fe:3a:27:af: 08:86:0d:54:9d:80:6c:2b:c1:50:ad:54:8e:24:ea:fc:10:ac: cd:5b:7d:3a:90:33:9f:94:17:32:05:a9:44:1a:b6:7c:b9:39: e9:fe:a3:42:ab:8f:4f:e1:11:8b:80:4b:dc:d5:94:e7:de:87: cf:a0:60:7e:84:c6:ff:1e:04:56:75:cc:79:c7:73:e4:58:e8: 67:e4:7c:54:23:41:64:0e:98:f1:f7:83:33:d9:d8:d6:f8:e9: a3:3e:10:fa:cf:fe:3f:53:75:75:a0:4e:33:fd:39:9b:72:50: 17:c5:5f:aa:13:68:8d:49:08:ac:02:5b:e8:81:c7:77:57:23: 8f:ef:60:a8:15:cc:af:de:e2:f7:8a:3e:cc:3d:4a:4c:e7:1a: 30:ce:35:8e:71:9b:84:6b:af:d4:68:9d:24:bf:84:50:51:c0: b7:f1:f5:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDrUzg2TYYUr+UTrGVKKeDOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYwOTI5MDQwMTM0WhcNMjYwOTMwMDQwMTM0WjAzMTEwLwYDVQQD EyhjYmFhOTQ4YjYzZDgxYzI4MTFjNTVkNDMxMWI1ZmI3YWM5YjEwYjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolV9sZXXM8d6Q2P4Xnzr6pftx98N XwwmrBtO0tf4boszJa0sT82TsCOZUkkNYYK1rNTlQdzZkTFiHbJv4FSLEz416lmI RXVV9hOhKhe0byqm4Prl13nQpNtFyXSRQdjDTJszlyTYHlO3ur0CHwaoYfihDuPb zTlcDPB4jiI97S3veuGIyBa0++3mtZD8UWBofWVMM9AqgMmlGjjBfL0P7mxdeOcG 8JqeLtQCUv2tsvDVwjq/i34vhA6G/QaCBdf94+HfothSejdgSZ+YSxshOaCgHz// a6BHjzbLCG7nOKTaTLTc7ICblAGYmer2ZVpXhd5BHa9aM9J2zOR4JnzpjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuqlItj2BwoEcVdQxG1+3rJsQtbMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjK9mQ79 Z17AwiUBHSCVK5Hcps7OOpC9CMRkkF4CvjnJ2J86neaW0YfGZ0r1izj6jhA3bzow d6IhT2MD8rnQK6fIe+hUpazQt4G70uGWS/AAg4gVn6n+OievCIYNVJ2AbCvBUK1U jiTq/BCszVt9OpAzn5QXMgWpRBq2fLk56f6jQquPT+ERi4BL3NWU596Hz6BgfoTG /x4EVnXMecdz5FjoZ+R8VCNBZA6Y8feDM9nY1vjpoz4Q+s/+P1N1daBOM/05m3JQ F8VfqhNojUkIrAJb6IHHd1cjj+9gqBXMr97i94o+zD1KTOcaMM41jnGbhGuv1Gid JL+EUFHAt/H1Bw== -----END CERTIFICATE-----Generated at Tue Sep 29 13:50:43 2026 by rpki-client