$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft File: C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json) Hash identifier: A9B3HYP187/o5fArt1K/ZiI5CmV9IywB7gjVl3T1Fj8= Subject key identifier: B4:94:C0:83:3F:37:CF:D5:3D:4A:32:4C:CC:C4:BF:B1:57:74:55:AB Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 01A0D04871F196DCE1C179FAC473B3BD19A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft Manifest number: 1AC2 Signing time: Wed 23 Sep 2026 22:00:03 +0000 Manifest this update: Wed 23 Sep 2026 22:00:03 +0000 Manifest next update: Thu 24 Sep 2026 22:00:03 +0000 Files and hashes: 1: 7drmdAJ15T6i4kYe-A_swxHC8nI.roa (hash: C5PISbRvWJUbWPnFcmcDWqyhXX2b1jPQLRXD9uyapnM=) 2: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: HJRRCDF+ofGAA2aRTa0wJuWN+Rty2gNSyFzAj0iwb1o=) 3: Ot4Snb7Zi4C3emPyzdbqir7P8wg.roa (hash: 5vVU8CpinnMNDApjLeGdIl2Z5WpD2a99HQpSOKcpVyA=) 4: _qBNAwK4OK7Gc8Mq1Ci80h09-HY.roa (hash: t56c+2Ht/FaNSMyC1mKhu0HZAUXfDcSUi9DNTN8F9N8=) 5: anqzHj_RBxYK0oKafgD2zP99QsI.roa (hash: ERFHbW67bqTT3uEBCgeFptdUh/X+KRt4341hnCHBYhg=) 6: k2VMFVozqPnYzXV1s0yW14brgu0.roa (hash: iUK8Oo0pMp3EC1NmFi93MB7dSsN9F4/PHcovJ6wIZ64=) 7: kQ0io2PNAP5BY8r7GxffYcQFx9o.roa (hash: 3jWAN8RtvcrXSZtLqgReLIQU9lIS3iNu48aFnlNqCkE=) 8: mkpUVZc-vUGm02tucPpx4ITb8yc.roa (hash: 7oJEAu9SY+cshxiGPE3FgFiCATL9zFHbwSfgmHPiX+8=) 9: n8t_q3ldutHBa0_a23qWau6GJNo.roa (hash: GdNo1IC/sCy6tUXdUa/SUF/nLxc231ClZF6UXGBynLY=) 10: qEghLoN1iiF0goU1gVxwFrySfFg.roa (hash: 3jYy81C5LnlKfMQ1I0vpC9e8jd+RkWb8kU2Np75bx8o=) 11: v4-hkrmpo-sqeCMeJ_vYE4rWpjo.roa (hash: 0SUNe2XwpLFI11Ihhq2d2WPppOz2Dt6w1G3PnhDPFVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:48:71:f1:96:dc:e1:c1:79:fa:c4:73:b3:bd:19:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Sep 23 22:00:03 2026 GMT Not After : Sep 24 22:00:03 2026 GMT Subject: CN=b494c0833f37cfd53d4a324cccc4bfb1577455ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e4:03:40:88:18:32:92:fb:39:1b:cc:89:4c: d8:00:c0:de:75:7f:1b:21:05:4e:32:7d:8c:aa:72: 74:c9:bd:4c:bc:42:5b:75:9a:bf:58:7d:32:b5:c9: 67:63:dd:7c:0a:86:b2:91:9d:e1:9e:3e:ad:77:32: 4a:62:f4:18:17:2f:53:4c:fd:1a:d2:92:9b:85:f4: d2:66:b7:f3:b9:dc:c2:53:b3:c4:14:42:4f:f7:57: 41:ca:64:2c:0c:8c:b1:da:5b:51:5d:1e:0e:37:d6: e9:68:62:80:f3:16:e3:32:2f:57:a6:5d:cd:e4:83: e7:a3:89:e4:b9:ea:b7:0a:4c:95:33:8d:7e:ab:59: 4d:5b:ec:42:49:46:2f:52:29:d3:32:d9:80:d6:11: 7e:a5:7d:f0:0d:05:14:7d:9b:35:97:a6:b5:ff:82: 5f:2b:ae:62:8b:2f:25:7b:36:73:c4:8b:32:23:56: c2:ce:e4:da:f6:c3:a8:c9:6c:fa:cd:6b:4a:5f:f4: 1c:6d:01:c8:81:70:15:98:a9:ac:13:9f:f0:dd:9c: cf:a1:99:33:b5:2d:15:88:99:68:fc:8f:67:09:40: e5:48:b4:a7:d3:50:6b:2c:b4:2e:63:73:de:bb:dc: 57:9d:0d:a4:8a:6b:6f:30:ec:ce:61:ad:83:3a:4a: d7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:94:C0:83:3F:37:CF:D5:3D:4A:32:4C:CC:C4:BF:B1:57:74:55:AB X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:22:33:ae:5c:0b:4a:e4:07:97:50:a9:6f:70:39:c6:92:2d: e8:94:37:ee:4e:7a:20:c6:53:c4:c0:a1:0e:40:f4:b4:d5:6d: e0:ac:ed:d4:68:90:89:fe:3a:e5:0e:ec:58:f5:b2:e8:bf:9e: 94:10:72:cd:22:02:f0:b0:97:98:33:e1:88:8e:ac:4a:eb:c0: 06:bb:d6:64:b0:93:b6:49:34:48:35:a8:a6:87:be:77:4d:16: 04:a4:44:0c:f9:de:07:b2:03:59:23:a4:da:4c:d4:65:64:4b: 05:52:78:36:0d:26:03:e7:a6:0e:1c:66:18:2c:b4:0e:4a:af: e3:ca:f2:64:e6:77:4d:12:2e:be:83:eb:b1:7b:fc:08:1e:89: 35:df:a8:41:fd:54:ad:e4:3f:fb:11:5a:1b:26:7a:17:41:73: 91:a6:f8:ae:f3:b7:a4:f5:5e:98:77:17:8e:f3:a7:84:a9:02: c3:68:ed:14:a1:95:b4:fc:30:ab:23:39:0e:1d:26:75:ec:ba: 33:bb:ae:ad:50:5c:8d:e2:e0:17:fd:ba:a4:55:b4:ff:5c:f2: ff:bb:90:1f:65:87:74:97:08:ae:49:1e:5f:fc:3c:19:a5:08: 61:df:95:4c:e9:37:9f:1b:da:5e:c2:a1:93:be:cc:e5:13:7e: e1:60:d2:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQSHHxltzhwXn6xHOzvRmjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjYwOTIzMjIwMDAzWhcNMjYwOTI0MjIwMDAzWjAzMTEwLwYDVQQD EyhiNDk0YzA4MzNmMzdjZmQ1M2Q0YTMyNGNjY2M0YmZiMTU3NzQ1NWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuQDQIgYMpL7ORvMiUzYAMDedX8b IQVOMn2MqnJ0yb1MvEJbdZq/WH0ytclnY918CoaykZ3hnj6tdzJKYvQYFy9TTP0a 0pKbhfTSZrfzudzCU7PEFEJP91dBymQsDIyx2ltRXR4ON9bpaGKA8xbjMi9Xpl3N 5IPno4nkueq3CkyVM41+q1lNW+xCSUYvUinTMtmA1hF+pX3wDQUUfZs1l6a1/4Jf K65iiy8lezZzxIsyI1bCzuTa9sOoyWz6zWtKX/QcbQHIgXAVmKmsE5/w3ZzPoZkz tS0ViJlo/I9nCUDlSLSn01BrLLQuY3Peu9xXnQ2kimtvMOzOYa2DOkrXWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSUwIM/N8/VPUoyTMzEv7FXdFWrMB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyIzrlwL SuQHl1Cpb3A5xpIt6JQ37k56IMZTxMChDkD0tNVt4Kzt1GiQif465Q7sWPWy6L+e lBByzSIC8LCXmDPhiI6sSuvABrvWZLCTtkk0SDWopoe+d00WBKREDPneB7IDWSOk 2kzUZWRLBVJ4Ng0mA+emDhxmGCy0Dkqv48ryZOZ3TRIuvoPrsXv8CB6JNd+oQf1U reQ/+xFaGyZ6F0Fzkab4rvO3pPVemHcXjvOnhKkCw2jtFKGVtPwwqyM5Dh0mdey6 M7uurVBcjeLgF/26pFW0/1zy/7uQH2WHdJcIrkkeX/w8GaUIYd+VTOk3nxvaXsKh k77M5RN+4WDS1Q== -----END CERTIFICATE-----Generated at Thu Sep 24 04:34:12 2026 by rpki-client