$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft File: dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json) Hash identifier: 6s3gejyG/xXEdjb/oKKFMLNSOqt4kFT6O2UsBOfWy68= Subject key identifier: 35:14:47:86:39:EB:7A:FA:49:E5:71:8A:89:C7:CB:97:D3:C3:0A:2B Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 01A1DC4B52C6A434F2F8E64E434508684396 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft Manifest number: 1B78 Signing time: Sat 14 Nov 2026 23:01:26 +0000 Manifest this update: Sat 14 Nov 2026 23:01:26 +0000 Manifest next update: Sun 15 Nov 2026 23:01:26 +0000 Files and hashes: 1: 0i_tJFCQkW4BL4d6bXm4WAypJS8.roa (hash: 61MZ18IZL5EgLoB9w4TH7mfQX+7U0VC5x9A0388yn8A=) 2: 1-JP0PPtCDIK_UNysSaQZClIqsZk.roa (hash: sfCZXINYiH/YUUcCfwXIvxbn90PofsIEnjQBdiFjFFQ=) 3: 3uJwNTCNY55i-5jM3CaDGvETngw.roa (hash: eQzu9ZxiIAP/taHhjsse4i1771g6Ywd3F2q34YSnFrQ=) 4: 42j6rh74kZK8B4TK9TrxT-yy6qs.roa (hash: TpgZQPZnpYPaVp9fqt+Gp0r1j/N3bvdYSt8BYEQV4W8=) 5: 4rdTxE4U8SWi3axBDMycJ1e2dVc.roa (hash: Xdko31FAcZqa8CKzUmvaPLbn8FzZeXlJr3Mz2L3FEGY=) 6: 59Sth-R3BuV9Hjri6g95SVuIU_8.roa (hash: rE2f8KGpsTiN9qUjtXDjk/27rrXTQHhiM7ABCMeYpTI=) 7: 7ILu19nLTjxwFZwoZ2oomheQ5_k.roa (hash: b0mXxRqiKow30AyEMQDJaMJ+FxI8ukNvBg7G/ihSEHA=) 8: 9ONi4c-7XF6Vn2zgdYwKAE0upGE.roa (hash: GdwVnVj0Er6zQr8pOtzRgza7jVJzxa5V5nFDEZ8imc8=) 9: LKaOQokfTIgkWBs2UdoqCTA22vc.roa (hash: cUUhEOlVftW9+j+XpaAsAph0Rp9J2xVMMProgn5lBRE=) 10: LNX9e0qM1FUUPu7JPg66r69yK3k.roa (hash: 4hdxVQWJPFAuhVTEnkZxRAKzt32xutYmv7LRrS+WM4M=) 11: LXHUHSO9WQWL1yjZx_1oGkRxSgI.roa (hash: HOm4ChKdSMnn++SpgwP+q1pIqlQSDcmq1lnjp8gr6/k=) 12: O5gW9hOPRMxR11eVov12x6UzYHU.roa (hash: bkCHLibjEuyg8IqJTSvrDEUtIjNQgIWoyJGDY8GOdz0=) 13: P0EJh06dBX2Z_uKMMzzVb3_JpQI.roa (hash: 265lew4gp/M7KbfXgY3mqUSmqEnG/TJjkIcENzjUQ9M=) 14: P4odDKYu1lCKx-0-6xh-2d3gFVU.roa (hash: pJx8PCnMcEoTQpCvLj2jXwglNIUY3fH2OwKcEuhWXsg=) 15: QGcED9nMBFNEcLIYKfsWpbPgFeo.roa (hash: ZoZ5qhejcJ2eD+U6g8CGcswJ1q+2gIH8nSKoh9/Kbps=) 16: T0yNiTnMr7rQj6L4yFcQz5luZuc.roa (hash: qkIXR7MhpFqaBJh+vVhJ5yECXOO2wVNGqePTqIktFFM=) 17: VWM7lA-UncwK30_u4wZN9H8N1gk.roa (hash: UAC5m76d6Heuh1OxbGU6JpOHUBx0MhMtwx6y8Lbk9fg=) 18: WtbHisRdncnw4HB-C-Q2nOatpCk.roa (hash: 3wmWRlMXTcqOjL6bnR/KTtOAF4ruJh0llk95iowxjzE=) 19: Yu_uuzMGePwC0icaYNERVoH0Cfk.roa (hash: PATzSiQXd51zhFdnNpl0DeghvMrZihxoQe+PXsEdhqA=) 20: Z5QikMa7UwGfn8uO2JzMrRFXYnY.roa (hash: U7DHGYIkh2PVaJpwB3Rs6rnlNqHm+IBWFv5Y36W7frQ=) 21: _Z4F7M-QmFI0Z18UQdlG6FBfQ7o.roa (hash: qJW2rDHAQqCfDrhYBEnMSMAxF6KCHBOPVWkKVY8Nuv8=) 22: b9yPzny7g7NzZoMSg-I0-4xYJRQ.roa (hash: oex26xfzNOy0QvV3r0CTF5Po3sMUSsRDc+0RGORVsd4=) 23: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: ON7FvnoHbOnfmLaSsWb6Zqpsm1JcVTE02yodCXzwotc=) 24: doMjCvh-T_oVkJKD3Y7qOZoudQA.roa (hash: O0rnzXZPufM0mBq+veKdhSLIRnUWNnJekiSLuJW+WPg=) 25: f8cXMfB8GmIppgsZFcI-OCvQxNk.roa (hash: C/qkMAbaZbD1CDux6NhG+NBRCWcc4xbDi8mJQpA9u78=) 26: fW59nKWFAAcX3FkGdJCNC4LY0lU.roa (hash: QrZ99mG5ipIB8lihFmB86+BQ62v5THWSecfMtXAd/Vk=) 27: hQi_2v4PVaU2DxK_ubm6-NXJZ54.roa (hash: /DoibVc0zt1dXzmqKhW2/HUrHirpTFgRWlWufv4zCoY=) 28: iTv_taBhSWWSwucljCvdm_j4RW8.roa (hash: GE2aWALIL/q/9QPvVk6yJa+XbND+dNPP+iVv+vbA798=) 29: iqkz-oFIpTUAukJ-q0KYzZGnhbY.roa (hash: 4JwiIgby6A2ltqK6a4PhfhVkPMKWfaYDYeB6aMX/De4=) 30: kepdZXENoY0lFOiOd2VYC5Jt8PU.roa (hash: bBmIVbb4z4z4JQQlPc3j4zkDZyWk/Dmtse596NYk1Vs=) 31: mz3LKflSaCjzbLbt50UYZRI14QU.roa (hash: R+3MLAMskLr07qEIftdxyai6y/lFHGIWJS1jtU8VQFw=) 32: q4er2ti9h_W7MKRTNBtj0R5wg8I.roa (hash: Y7raLSBcr0F4VthCcXXBIhwj7MwB/MaClEuc9miqnEI=) 33: rTAcqrsLjdQzWLiPeTE0J8tFjHs.roa (hash: kpmFc9kxITW5Y/O6sK7eQ8xr12ovnarFA8jerArDTmw=) 34: sa0irmG5fTuP-s-e7ehVBplCJx4.roa (hash: 7SZESPqbjMHr+1YpDP1XwHSl42AkB6k/wkqvHyEDf5U=) 35: wA9ChWaX9aTjQjNN5mYeaC542Nc.roa (hash: uwS9DbntInTGgRyBcScvO12ZNTWYbWh0ii3LNRApI90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:4b:52:c6:a4:34:f2:f8:e6:4e:43:45:08:68:43:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Nov 14 23:01:26 2026 GMT Not After : Nov 15 23:01:26 2026 GMT Subject: CN=3514478639eb7afa49e5718a89c7cb97d3c30a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:30:9d:55:a9:54:1f:d1:10:13:0e:0e:c9:4e: 53:6d:da:7a:c2:07:5e:38:9e:bb:19:35:62:04:ce: bd:07:ce:3e:db:e1:4e:fa:03:94:7c:5e:0d:8b:f1: cc:32:a3:e6:09:49:76:72:7e:c1:20:4d:a4:2a:cb: a8:c1:6d:ee:97:b7:8e:33:ee:36:27:21:d4:ab:ea: aa:d0:46:3c:c9:b2:45:fd:c7:a4:70:fc:d9:07:36: 38:8a:39:41:75:69:31:4e:50:1e:be:ee:40:92:f8: 85:87:ed:11:bd:b8:fb:8b:84:f9:ca:4e:1d:f7:a1: 97:f3:1a:41:68:8a:62:f2:d8:87:1f:03:8b:47:12: cb:6d:7c:45:ab:d2:93:2b:6f:53:05:f2:54:4a:51: ee:8e:9c:89:cb:c9:23:6c:09:41:c0:7c:d2:b1:fc: 17:ce:78:c5:64:1e:ce:eb:78:52:14:bc:71:11:a3: c1:e8:aa:d8:3a:8e:15:42:1d:81:dc:bf:43:4d:1b: c3:cb:22:72:6e:cb:9e:ae:f1:43:1b:23:72:fd:aa: 4a:16:5e:19:f0:40:eb:f8:e9:89:19:84:ed:7d:9a: 41:b3:e1:1a:44:2b:e1:e6:57:a6:34:c1:0f:75:32: f8:57:08:f0:c7:c7:4a:bf:a8:6b:c3:83:12:53:5f: c6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:14:47:86:39:EB:7A:FA:49:E5:71:8A:89:C7:CB:97:D3:C3:0A:2B X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:0d:b5:90:f7:08:e3:40:1c:ef:10:39:60:dd:76:99:5a:32: 2f:99:4a:cc:44:c8:67:8b:69:da:b1:f7:5a:21:3f:3b:64:14: 6b:25:02:a7:16:31:fa:9a:f4:17:a4:60:1d:7a:5c:53:f8:cb: f9:03:f4:81:d2:bc:25:68:ce:91:ca:7e:55:c7:6c:27:0c:dc: 3c:5d:1f:dd:df:2c:95:e8:05:d0:8c:6c:8e:86:18:f9:2f:89: a2:a2:af:dc:5b:df:3f:0f:ab:22:05:10:92:c0:4e:db:ad:8e: 8f:8a:0e:e8:47:60:81:24:f5:bd:a1:e7:b8:69:bc:6f:5f:b1: 0a:c7:6d:ab:9f:2e:d7:d6:b1:3e:b6:fa:1d:f0:aa:a3:e3:61: 5b:22:d2:86:ac:8c:ca:70:f8:d3:1d:f2:72:17:95:61:c1:36: fb:34:e7:25:f2:5c:70:6e:72:c7:5b:af:08:9e:4b:fc:92:f9: 95:83:be:20:23:b1:b9:25:9c:34:61:31:d3:c9:e7:81:c7:40: 77:ae:5c:63:6d:4e:ba:0b:c5:c2:ac:d3:1f:45:a8:c3:eb:1e: 0b:cc:7d:a0:e3:ba:bc:6a:6f:87:5d:61:db:bb:ba:77:92:5a: f4:da:e4:b1:09:77:c6:6b:40:f5:85:32:3c:83:f5:76:d9:2e: ed:ec:29:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHcS1LGpDTy+OZOQ0UIaEOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYxMTE0MjMwMTI2WhcNMjYxMTE1MjMwMTI2WjAzMTEwLwYDVQQD EygzNTE0NDc4NjM5ZWI3YWZhNDllNTcxOGE4OWM3Y2I5N2QzYzMwYTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTCdValUH9EQEw4OyU5Tbdp6wgde OJ67GTViBM69B84+2+FO+gOUfF4Ni/HMMqPmCUl2cn7BIE2kKsuowW3ul7eOM+42 JyHUq+qq0EY8ybJF/cekcPzZBzY4ijlBdWkxTlAevu5AkviFh+0Rvbj7i4T5yk4d 96GX8xpBaIpi8tiHHwOLRxLLbXxFq9KTK29TBfJUSlHujpyJy8kjbAlBwHzSsfwX znjFZB7O63hSFLxxEaPB6KrYOo4VQh2B3L9DTRvDyyJybsuervFDGyNy/apKFl4Z 8EDr+OmJGYTtfZpBs+EaRCvh5lemNMEPdTL4Vwjwx8dKv6hrw4MSU1/GkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUUR4Y563r6SeVxionHy5fTwworMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqA21kPcI 40Ac7xA5YN12mVoyL5lKzETIZ4tp2rH3WiE/O2QUayUCpxYx+pr0F6RgHXpcU/jL +QP0gdK8JWjOkcp+VcdsJwzcPF0f3d8slegF0IxsjoYY+S+JoqKv3FvfPw+rIgUQ ksBO262Oj4oO6EdggST1vaHnuGm8b1+xCsdtq58u19axPrb6HfCqo+NhWyLShqyM ynD40x3ycheVYcE2+zTnJfJccG5yx1uvCJ5L/JL5lYO+ICOxuSWcNGEx08nngcdA d65cY21OugvFwqzTH0Wow+seC8x9oOO6vGpvh11h27u6d5Ja9NrksQl3xmtA9YUy PIP1dtku7ewpSA== -----END CERTIFICATE-----Generated at Sun Nov 15 01:21:25 2026 by rpki-client