$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft File: I2nPaT78ECyTf6ynugnMyuxXSUg.mft (raw, json) Hash identifier: oKsjlchvg+gExS/Cc3bJCo3CgGbemKKI0Lb9sa+opog= Subject key identifier: 97:2D:BF:38:1A:72:71:2B:48:61:99:27:D4:6E:9F:22:A6:41:2A:20 Authority key identifier: 23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48 Certificate issuer: /CN=2369cf693efc102c937faca7ba09cccaec574948 Certificate serial: 01A1DBA6122766D60D05D9EBAA9044F1311D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft Manifest number: 6F Signing time: Sat 14 Nov 2026 20:00:56 +0000 Manifest this update: Sat 14 Nov 2026 20:00:56 +0000 Manifest next update: Sun 15 Nov 2026 20:00:56 +0000 Files and hashes: 1: 1AzEpxlToHia7ywPgnnpmJzFraA.roa (hash: qYOvqOXpzVPmF6Jbc9HoDoRx2gEtj+0UY6m/irYtqjA=) 2: 71A9h0Xmpi9H52LTcEIaviKs9qA.roa (hash: hiTxLBdx3OiHGzipGK6KlUAdrKMkkhwZHuyfGdY9hFk=) 3: AnVQ5rvJ8Nv9B31xSEE5izjZF_k.roa (hash: K+8ZqReJUOtpCYUcc9njjUqF92rWYJDNcRpRRYLUMTQ=) 4: F6WbVBM2ed6CzHVsiaM6JSfLBmY.roa (hash: yy7erE1kQeH7YBSSxYURdeY4nnnAmeTCU2lvcl2vTrc=) 5: I2nPaT78ECyTf6ynugnMyuxXSUg.crl (hash: v+meBl6LFZKEGXWq01glRY1GB6DKt+B+LFn+hL2kNdQ=) 6: Ky30bgCFAJiWkVqMq906lb5RTj4.roa (hash: n8TlDhgLBlnlOh2uvWKa+LVsP820Oh1C+WMR73t3uaY=) 7: PxnTuznRRPnTtD95MBnkEkGIaX4.roa (hash: X1si/MvNuRKn6WYCzUjbbp5bWEtLkuTOj59peP9essI=) 8: SxOEsOKlkwPwAhVhNZh162Id9xg.roa (hash: uimk6BQMFkeKcaZNFOZ6TrJ3Zj/3+kB/cftG69V6CiE=) 9: W8mPTIEzdqCr6CuimSI2xIlN6nc.roa (hash: niQYqrbB2YO+wZq7ONL7Jzh0l1/LdWEIbWmmurGVAL4=) 10: _yaKaBJToAURUuy5J_2ZX4emX3Q.roa (hash: vHbpbkcmG93GMQUubXccTbTZeqYaiq3hArr0LKitXxY=) 11: mboKspA8G9FkmFfcx8mA67v6opo.roa (hash: jBxkwjHZ4qEnzPoLX8zSdegfCvzp0ZrVo8U68KcaOoQ=) 12: t2eWHO6r_kmQaoKvKqbpMacuacE.roa (hash: FvpEwjPcGwIB6Jh0TDr3BNv2jGu+NiTIDWMXLmMwpi0=) 13: vMczrGi6ORE-yZOgy2L6w0bjkXo.roa (hash: UyMf8i98c5uUzf93NivYGmFTli1Mo2kNliLFP7sjKr0=) 14: vzeKzOkY-DTtAOj_7QBNyv6Yx8g.roa (hash: fudVMhp+cSBY7q1Syleky8IDgMK8QLdzt4Ad5bcZsDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:a6:12:27:66:d6:0d:05:d9:eb:aa:90:44:f1:31:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2369cf693efc102c937faca7ba09cccaec574948 Validity Not Before: Nov 14 20:00:56 2026 GMT Not After : Nov 15 20:00:56 2026 GMT Subject: CN=972dbf381a72712b48619927d46e9f22a6412a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:65:8b:fd:fc:2e:f6:58:ca:1a:8b:95:a5: ae:45:b2:45:5c:5c:50:4c:2b:fc:b5:d4:d5:44:04: e5:a1:9f:be:d5:77:04:02:cb:21:33:f7:d9:4d:14: 69:c0:66:72:0d:22:0e:fc:d3:48:b5:60:c2:d9:63: 0b:bd:a0:78:c3:82:f0:1a:8c:66:b2:a3:3f:52:8c: ab:e0:de:17:10:d3:33:d2:c5:99:df:dc:15:72:3f: 29:66:21:e7:fe:81:e3:3a:d2:b4:a0:95:23:e5:be: 31:34:2b:70:90:7c:93:07:66:27:a8:ee:f5:ef:68: 54:ee:c5:89:19:41:9f:ff:16:7d:3f:9a:b4:0e:bd: 02:d2:f4:2e:7a:7c:4b:09:dc:f3:f7:7f:c7:d2:f1: 58:30:d5:cb:ff:e0:e1:92:68:39:a3:1b:1f:96:ed: 54:a3:3c:98:ee:1d:0f:0e:1b:76:89:65:6b:88:4e: e1:ee:8f:af:b7:84:27:54:46:14:07:0e:f9:8a:b6: 7b:cb:7c:fd:29:14:d1:4a:4a:c8:89:2f:df:6b:55: 71:4b:1f:2d:7f:06:c9:83:d7:ee:30:41:b2:a6:c9: a5:2c:01:bd:8a:e2:9b:89:54:bb:3e:61:72:1c:54: 9a:34:97:55:9b:bd:98:b9:f3:e1:bd:e2:8f:fa:0e: 2e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2D:BF:38:1A:72:71:2B:48:61:99:27:D4:6E:9F:22:A6:41:2A:20 X509v3 Authority Key Identifier: keyid:23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b7:22:39:c1:a7:76:66:b5:c1:b1:59:6f:12:d1:88:37:24: a6:55:47:67:60:3d:8a:d1:9a:67:05:ea:a1:1d:3d:8e:0b:a8: 87:f4:7f:a2:98:e6:30:b5:15:49:86:e0:1e:15:ae:d6:9e:6e: 52:5a:b1:16:c6:1d:a0:6e:46:0b:a0:23:18:a8:66:9c:2f:13: e1:99:3d:2e:c5:30:29:98:f4:c0:80:23:00:9a:77:5e:f0:5b: 45:8b:2d:37:ca:7c:7f:39:07:21:62:7f:92:99:8b:53:cf:c3: ad:c4:8b:94:24:13:e6:8f:c0:b0:cd:65:05:e0:59:80:37:d4: cf:67:0d:09:4d:2e:2d:96:91:10:8a:e1:98:dc:28:54:df:9c: a0:30:be:b2:4a:92:db:4d:67:e2:a6:c2:24:8e:de:60:39:5c: a1:d4:46:00:82:d3:5f:68:e9:a7:ac:08:c8:3e:4c:3c:2c:4a: 22:e8:f8:45:5e:8e:2c:66:53:23:b3:62:91:9b:08:a1:69:ba: 89:56:b6:43:6d:3a:68:5c:4d:24:eb:ea:8e:ac:7f:5c:96:f7: 60:ea:07:c1:8b:b5:fd:ae:a4:67:9e:7d:98:17:90:e2:b4:e5: ca:6e:bd:c7:c0:8f:32:d1:54:84:56:2d:80:5c:6d:0c:5e:75: 1b:cf:64:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbphInZtYNBdnrqpBE8TEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNjljZjY5M2VmYzEwMmM5MzdmYWNhN2JhMDljY2NhZWM1 NzQ5NDgwHhcNMjYxMTE0MjAwMDU2WhcNMjYxMTE1MjAwMDU2WjAzMTEwLwYDVQQD Eyg5NzJkYmYzODFhNzI3MTJiNDg2MTk5MjdkNDZlOWYyMmE2NDEyYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM1li/38LvZYyhqLlaWuRbJFXFxQ TCv8tdTVRATloZ++1XcEAsshM/fZTRRpwGZyDSIO/NNItWDC2WMLvaB4w4LwGoxm sqM/Uoyr4N4XENMz0sWZ39wVcj8pZiHn/oHjOtK0oJUj5b4xNCtwkHyTB2YnqO71 72hU7sWJGUGf/xZ9P5q0Dr0C0vQuenxLCdzz93/H0vFYMNXL/+Dhkmg5oxsflu1U ozyY7h0PDht2iWVriE7h7o+vt4QnVEYUBw75irZ7y3z9KRTRSkrIiS/fa1VxSx8t fwbJg9fuMEGypsmlLAG9iuKbiVS7PmFyHFSaNJdVm72YufPhveKP+g4uJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJctvzgacnErSGGZJ9RunyKmQSogMB8GA1UdIwQY MBaAFCNpz2k+/BAsk3+sp7oJzMrsV0lIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTJuUGFUNzhFQ3lUZjZ5bnVnbk15dXhYU1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82MGViMTktOTVmYy00ZDcxLWJjOTEt MWRmZDVkOTc3YWRiLzEvSTJuUGFUNzhFQ3lUZjZ5bnVnbk15dXhYU1VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82MGViMTktOTVmYy00ZDcxLWJjOTEtMWRmZDVkOTc3YWRi LzEvSTJuUGFUNzhFQ3lUZjZ5bnVnbk15dXhYU1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7ciOcGn dma1wbFZbxLRiDckplVHZ2A9itGaZwXqoR09jguoh/R/opjmMLUVSYbgHhWu1p5u UlqxFsYdoG5GC6AjGKhmnC8T4Zk9LsUwKZj0wIAjAJp3XvBbRYstN8p8fzkHIWJ/ kpmLU8/DrcSLlCQT5o/AsM1lBeBZgDfUz2cNCU0uLZaREIrhmNwoVN+coDC+skqS 201n4qbCJI7eYDlcodRGAILTX2jpp6wIyD5MPCxKIuj4RV6OLGZTI7NikZsIoWm6 iVa2Q206aFxNJOvqjqx/XJb3YOoHwYu1/a6kZ559mBeQ4rTlym69x8CPMtFUhFYt gFxtDF51G89k9w== -----END CERTIFICATE-----Generated at Sat Nov 14 22:19:50 2026 by rpki-client