$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json) Hash identifier: 2sVkrGMwY6QaJ5KD4BFaT0AJnfwvkPbiQBiGaNP6LVA= Subject key identifier: 1C:75:0A:0D:28:B1:F1:F0:28:E9:1B:EE:DF:39:7D:61:3A:12:6A:41 Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Certificate serial: 01A11C754CCB436A9954C9AADE364E163B90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft Manifest number: 1AA2 Signing time: Thu 08 Oct 2026 17:00:11 +0000 Manifest this update: Thu 08 Oct 2026 17:00:11 +0000 Manifest next update: Fri 09 Oct 2026 17:00:11 +0000 Files and hashes: 1: 0UXZLxmo0wM791OjAQvNwfm2flg.asa (hash: fckAHmyvVNaeQqmLb5z5kUo++7GABr5luLIf2iVlPj8=) 2: 44CA1k5d4Zw23GcP4lb4i4-vDPc.roa (hash: 6c/pnyjlYlDcfbUXGOzr645pKHpIFoe+rR3oaf4Be6g=) 3: 4OwitvkmkhKV2LtZpk1QLZTpl4E.asa (hash: aGnCO3oIRNu7nbl3yxascrT5ogI+38YhsT0IaT24+Ps=) 4: 5xi8bSy9c83Bg6qClBnmgJJbFA4.asa (hash: RSBuuu1KOgBq7xwPJfJizf07iznlWzC9UjX015Je8yk=) 5: 6IqI9gfABI1V0avL-WdqDQ9gNGk.asa (hash: x/3Qd9UB9tmsdebQBpFmyTkyhk8Goo0sm80nqeO+7ZQ=) 6: CvTWeK7xp9gyjdFy-y9UwtpH8uE.roa (hash: 733OwKswiweiXSLuyQj7UGTmZLfaZ6qRpmED62r0qvA=) 7: EutctDjYApRtXZCCgXc1_FMXFMI.roa (hash: +qc+pkUgzkZJUvQ7/ijItcJlPfU6GdEPJtEIGHeSZ+w=) 8: H5cJU-sxt-hZI6FMau1LEtyh614.asa (hash: NYeq2kG2iVJonZO0Jwu2qtybJFReQWpFb9Vj1/WLpQg=) 9: IIZ_mGH3X6355DF3JRICMRfOqTQ.asa (hash: TxemWnQodUkymHC8e+RcAhRi9Z78sNJiYQ7hSaXm0gs=) 10: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: cF30OZF24kqZFPi5zMclDt4Z1hqfjveSkMfrAUKPGq0=) 11: N6KyBv5Xx5MGRmWO1SOVIpA2W_I.asa (hash: cD3zCeI88xWZ6CMz6J0M2Axze+U4XS2co5BuDwABalI=) 12: prkwm3Nwi4i7nBXudHI4KuKfmHI.asa (hash: krdyRxkzH8bZP80JYgy+3OWYOrwBKzT/IXHhrb1NwSs=) 13: vVF3pTqa2KJdx2p8PlUWcXPESX4.roa (hash: 8smQRNWHO8FZtO5kA7zQSvtufSO4Sm4HtWZBhh9ooug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 14:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:1c:75:4c:cb:43:6a:99:54:c9:aa:de:36:4e:16:3b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Validity Not Before: Oct 8 17:00:11 2026 GMT Not After : Oct 9 17:00:11 2026 GMT Subject: CN=1c750a0d28b1f1f028e91beedf397d613a126a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e3:70:9c:aa:9c:1a:70:74:fa:d7:1f:42:c2: 93:33:6c:19:e2:11:f4:53:a0:ef:af:70:19:04:b4: e9:c6:13:e4:20:2d:0e:d7:86:b8:9e:b8:40:df:76: 84:16:bb:51:65:e7:02:70:40:1c:e6:7c:03:d1:23: 6a:cc:18:69:a9:09:86:96:19:41:45:fd:df:5c:b0: 7a:de:03:b3:02:45:26:0f:58:e2:0e:c2:c1:ca:77: a8:72:4e:b0:d8:51:e2:de:67:65:a2:c4:3e:c7:c4: d0:8c:8c:2a:7d:97:eb:c8:83:40:d2:d9:17:e0:1d: df:e5:2b:e5:9e:81:f9:a9:1f:ce:c8:d5:fa:ae:d8: d2:ef:1b:02:a6:22:e1:2a:ec:84:28:e0:e2:d4:e8: 82:6b:db:a7:7e:4f:63:e9:e2:42:69:ca:a9:19:d3: 90:86:45:c0:a2:1e:49:a3:e7:5b:db:d0:72:b2:d7: 2d:fe:71:40:9e:ea:3b:05:bf:b6:f2:23:b2:57:48: 79:ee:93:c3:de:6c:b9:58:c2:ce:ac:5e:6e:99:e0: 56:4c:5f:d1:93:4f:4f:04:08:2b:ee:94:eb:ab:04: 1f:d6:7d:89:0d:2f:49:e9:30:c9:24:a6:4d:db:da: de:c2:6e:8a:6b:6a:8c:c7:0a:6a:9a:a3:8b:f4:a2: 0e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:75:0A:0D:28:B1:F1:F0:28:E9:1B:EE:DF:39:7D:61:3A:12:6A:41 X509v3 Authority Key Identifier: keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:4e:79:72:47:52:38:bd:5c:e3:95:34:af:df:1f:2e:39:43: 55:19:60:cf:1e:14:72:f7:d0:b2:8c:75:4a:fc:c7:73:96:82: 72:6a:a8:19:0b:6e:19:14:08:ce:0c:cf:2e:87:cb:47:6b:69: ae:5d:09:37:3e:05:77:0b:cf:ba:66:12:2f:f5:20:ce:c8:d8: c3:b8:f3:0a:9a:df:ba:d7:68:72:19:2e:59:a0:6e:f3:7f:8b: dd:4f:21:87:e7:db:ea:73:5f:a4:d1:11:a0:dd:e9:8a:8b:6c: 27:70:85:73:ea:66:b4:26:3f:f5:61:17:12:9c:47:aa:fb:23: 2d:b9:a7:d8:8f:2e:4d:dd:50:82:c2:62:ff:54:26:db:02:6b: 28:15:d3:c2:3a:b4:8e:61:1c:93:bd:2b:e7:0b:aa:da:1c:f6: a9:ab:4e:e7:b3:a3:84:86:c9:32:bf:5e:b0:f5:2f:af:3a:32: 1b:58:f3:01:f0:3e:c3:06:87:04:49:b2:d5:b2:8b:02:58:a1: cf:2a:f0:db:6f:7c:db:41:f3:0d:49:30:3c:86:39:ab:84:13: 1b:23:45:1e:87:28:49:97:63:e0:0b:0e:53:bb:fa:a2:b1:b9: f8:a7:8c:35:37:e2:e4:a5:f1:3b:bd:05:d0:2a:b5:aa:30:60: f5:76:30:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEcdUzLQ2qZVMmq3jZOFjuQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl MjFiYjkwHhcNMjYxMDA4MTcwMDExWhcNMjYxMDA5MTcwMDExWjAzMTEwLwYDVQQD EygxYzc1MGEwZDI4YjFmMWYwMjhlOTFiZWVkZjM5N2Q2MTNhMTI2YTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeNwnKqcGnB0+tcfQsKTM2wZ4hH0 U6Dvr3AZBLTpxhPkIC0O14a4nrhA33aEFrtRZecCcEAc5nwD0SNqzBhpqQmGlhlB Rf3fXLB63gOzAkUmD1jiDsLByneock6w2FHi3mdlosQ+x8TQjIwqfZfryINA0tkX 4B3f5SvlnoH5qR/OyNX6rtjS7xsCpiLhKuyEKODi1OiCa9unfk9j6eJCacqpGdOQ hkXAoh5Jo+db29Bystct/nFAnuo7Bb+28iOyV0h57pPD3my5WMLOrF5umeBWTF/R k09PBAgr7pTrqwQf1n2JDS9J6TDJJKZN29rewm6Ka2qMxwpqmqOL9KIOuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBx1Cg0osfHwKOkb7t85fWE6EmpBMB8GA1UdIwQY MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt ODUwZjM0OTA2MjI5LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5 LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoE55ckdS OL1c45U0r98fLjlDVRlgzx4UcvfQsox1SvzHc5aCcmqoGQtuGRQIzgzPLofLR2tp rl0JNz4FdwvPumYSL/UgzsjYw7jzCprfutdochkuWaBu83+L3U8hh+fb6nNfpNER oN3piotsJ3CFc+pmtCY/9WEXEpxHqvsjLbmn2I8uTd1QgsJi/1Qm2wJrKBXTwjq0 jmEck70r5wuq2hz2qatO57OjhIbJMr9esPUvrzoyG1jzAfA+wwaHBEmy1bKLAlih zyrw229820HzDUkwPIY5q4QTGyNFHocoSZdj4AsOU7v6orG5+KeMNTfi5KXxO70F 0Cq1qjBg9XYwMQ== -----END CERTIFICATE-----Generated at Thu Oct 8 23:20:48 2026 by rpki-client