$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json) Hash identifier: gHtIGSM7O9QlNv2mkeq60Q6GYtj+CwZeAzEmsyyUrbA= Subject key identifier: 71:38:5D:76:D5:C1:9B:66:D3:AF:40:BB:1F:E4:34:6B:85:EC:38:A7 Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 01A0E7AF078A0B7E0B3D0405290934D7FF94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft Manifest number: 0ADF Signing time: Mon 28 Sep 2026 11:03:22 +0000 Manifest this update: Mon 28 Sep 2026 11:03:22 +0000 Manifest next update: Tue 29 Sep 2026 11:03:22 +0000 Files and hashes: 1: 1-ctnzOu2AqRoTotuUyqfmWZ69Sw.roa (hash: Y9R2l24kBbqyGrhSPstaoeJ69KKtfxGMiYaBVipK5z8=) 2: 6PHN4EINg95zsWmwMqR_LCCbpc0.roa (hash: Qlikbs7ZBI8ctlfaw3/jTu/l9GkQAhjSgxybaaSAR64=) 3: 77SuR1o4iXHGKTkHKp8TMdrc4mU.roa (hash: yXpIqsMXM0uwteirlGQMGdO/JHFjQjCokd/1EM9213g=) 4: Mo9G1JhWigyZx8b4Z1ztpl3HoaU.roa (hash: 6/JX2hr5dQ72yy0qDOA4ItSaDR3CmA+Vunj3Be7K7Ww=) 5: NFzJJ4j6wzQfqxhnTBiY1Cn7rYg.roa (hash: 5tZaz3kVj+e7u27N68hInpBHHf3h5dZ15X//Kl1uR3A=) 6: SBvRByMqYGQLc42MhIv39wSrM14.roa (hash: +yuXK4U1plTB6Fi9dEb2HppH8vLHLdbotjVkOSomh4c=) 7: SYrllEJSlKvgkdw578ZRNVSFNWE.roa (hash: k4gJZrWaGXAakwoprVZK+70H4xXKeMYoqoBwpy13NQI=) 8: UUqnfAVDQa6lg6vG893HM0lVJYc.roa (hash: 36To8a4pjZ0Y2Qs8m/H0gopLfHuBJ5FyCcUXnUo0w+Q=) 9: fIODe0F2H7U5wAQ5uy_1kDKWqm8.roa (hash: ETRCfd6hwLM8wB2Vmt5McaUCtMtxHeKB1rybYkoCFk0=) 10: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: mTiPbTbirYpH9zAgWdZBh6Ddui6/3F87ULN6xfmXxmQ=) 11: jB4bYdWFXZMhIAjQMhMfN8vZ55w.roa (hash: EkZSSIno7HUUjqBtEwf8U/N90NHBkP5MsOxUQJnJNBo=) 12: qI5GOetXdKYh8lrEqXZOEzNWNgs.roa (hash: gOg5TzYEps9BVyLryEBMecl6jyfHJAcCMKO+ZNmQ0RI=) 13: qbK-9RQWdGS_xJXOliPpGoY-V4w.roa (hash: iAYy+5hd5UtMJbweD8Z+MTcR9zIJ+2tv0Xj7Rh16GJY=) 14: tASmvZQ1KYaQWQIw4lmKhvWcByY.roa (hash: ri7thGK0s4tAbDIwaqArMt7wR29/4q7zyG3uwLTYanM=) 15: wNut4W0CI_94GPYF-EhqLdAWsJM.roa (hash: bA9EhkOyyRbeFxEzmWlsFXo4v9xKribtzLHT2Ybvrhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 11:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e7:af:07:8a:0b:7e:0b:3d:04:05:29:09:34:d7:ff:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Sep 28 11:03:22 2026 GMT Not After : Sep 29 11:03:22 2026 GMT Subject: CN=71385d76d5c19b66d3af40bb1fe4346b85ec38a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:85:1a:4f:d0:a6:d6:cd:a0:11:23:ec:f0:81: ab:b4:f8:60:bf:5b:9c:8d:7a:43:29:2b:7d:67:54: 98:ec:9e:88:cd:a4:7a:a1:57:b0:0f:c5:8f:84:1a: fa:95:08:97:5f:63:e6:05:5a:c5:0a:30:d0:3d:66: 29:25:22:a1:d1:1a:b0:e3:fd:1b:4b:be:c3:f5:28: ef:6f:cc:8f:13:b5:17:b9:c8:12:84:91:62:50:0f: dc:6e:83:1f:98:3a:cc:0a:43:e4:dc:0c:be:07:03: 9f:6b:a0:0a:2c:bd:cb:0a:6b:e5:99:dd:66:9f:f2: 22:ef:8f:cd:5e:c9:46:52:29:3f:5d:91:05:36:d9: 00:7a:33:c8:de:6c:50:9b:5a:37:4e:2b:4a:30:1b: b9:24:be:f7:8a:cc:f0:c3:42:2c:80:52:9f:9a:fa: 37:80:c3:3e:bc:4a:1b:cb:c8:8c:22:af:cf:de:07: aa:bd:04:9e:a8:ba:ec:b0:b2:16:44:76:a5:c3:64: fd:bc:3b:c7:14:73:71:f7:29:54:18:0f:9c:6b:cc: 60:1c:c3:2f:01:d3:77:d1:9e:e4:53:26:09:c3:61: 6d:e7:64:39:28:1f:96:32:25:87:c4:5c:94:97:5b: e8:6f:e9:98:1b:5e:7b:08:26:e3:2b:d1:3b:b0:0c: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:38:5D:76:D5:C1:9B:66:D3:AF:40:BB:1F:E4:34:6B:85:EC:38:A7 X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:99:0c:f7:be:2b:b8:9f:14:27:a6:ea:13:61:6f:f0:37:b5: 5c:36:48:fd:70:7b:ac:05:c3:d3:cb:db:74:9b:60:5e:ba:fa: 97:f2:23:39:87:69:63:83:6c:96:e0:e5:4d:3a:fa:3b:8a:c7: 8b:46:02:a3:86:b9:5e:23:ca:0f:67:84:c9:3a:b4:94:87:29: 9f:c2:1b:92:a6:0a:ed:92:93:c1:1f:cc:10:fd:b9:e8:5b:54: 60:52:70:f5:39:e5:c9:3a:1c:eb:86:70:28:e5:4b:7f:3b:43: 86:d8:49:8b:14:9c:db:b9:46:d4:60:be:7f:2a:41:1e:50:d9: 90:38:b0:10:9a:fd:ef:94:d5:d2:b9:6b:d1:7d:3b:2d:52:ba: 0c:ab:e8:01:d3:e5:fc:00:9b:49:38:0f:41:23:d6:1a:f4:b7: 9f:c0:48:c8:de:96:da:1d:fe:bf:37:de:b1:29:4c:a9:e9:81: 6c:3f:27:6c:91:d1:b5:dd:80:b7:f4:08:f6:22:bd:72:b8:7e: a3:14:75:df:cc:a6:a9:b0:01:a9:2c:3f:bf:4a:51:a5:df:7f: 7a:f0:a3:b3:1a:43:93:6e:25:54:12:44:fa:45:1a:5b:1a:9b: dd:78:15:b3:14:24:93:f0:47:18:08:dc:10:48:41:52:2d:e5: 18:9e:a1:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDnrweKC34LPQQFKQk01/+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjYwOTI4MTEwMzIyWhcNMjYwOTI5MTEwMzIyWjAzMTEwLwYDVQQD Eyg3MTM4NWQ3NmQ1YzE5YjY2ZDNhZjQwYmIxZmU0MzQ2Yjg1ZWMzOGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oUaT9Cm1s2gESPs8IGrtPhgv1uc jXpDKSt9Z1SY7J6IzaR6oVewD8WPhBr6lQiXX2PmBVrFCjDQPWYpJSKh0Rqw4/0b S77D9Sjvb8yPE7UXucgShJFiUA/cboMfmDrMCkPk3Ay+BwOfa6AKLL3LCmvlmd1m n/Ii74/NXslGUik/XZEFNtkAejPI3mxQm1o3TitKMBu5JL73iszww0IsgFKfmvo3 gMM+vEoby8iMIq/P3geqvQSeqLrssLIWRHalw2T9vDvHFHNx9ylUGA+ca8xgHMMv AdN30Z7kUyYJw2Ft52Q5KB+WMiWHxFyUl1vob+mYG157CCbjK9E7sAwOGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHE4XXbVwZtm069Aux/kNGuF7DinMB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5kM974r uJ8UJ6bqE2Fv8De1XDZI/XB7rAXD08vbdJtgXrr6l/IjOYdpY4NsluDlTTr6O4rH i0YCo4a5XiPKD2eEyTq0lIcpn8IbkqYK7ZKTwR/MEP256FtUYFJw9TnlyToc64Zw KOVLfztDhthJixSc27lG1GC+fypBHlDZkDiwEJr975TV0rlr0X07LVK6DKvoAdPl /ACbSTgPQSPWGvS3n8BIyN6W2h3+vzfesSlMqemBbD8nbJHRtd2At/QI9iK9crh+ oxR138ymqbABqSw/v0pRpd9/evCjsxpDk24lVBJE+kUaWxqb3XgVsxQkk/BHGAjc EEhBUi3lGJ6hZw== -----END CERTIFICATE-----Generated at Mon Sep 28 16:44:41 2026 by rpki-client