$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft File: bOl89NjQvBezrx1ixNcUiGYb0hI.mft (raw, json) Hash identifier: hOIdJt89YvKQSOYlGcxItFDolSZhfuNKfj856dGG7K4= Subject key identifier: 14:E7:3A:CE:A3:F4:D4:05:29:50:90:39:07:55:28:AD:0E:90:FE:0A Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 01A0D7965B3BC0B5197AFEA85F2559EB8F30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft Manifest number: 1A7C Signing time: Fri 25 Sep 2026 08:02:29 +0000 Manifest this update: Fri 25 Sep 2026 08:02:29 +0000 Manifest next update: Sat 26 Sep 2026 08:02:29 +0000 Files and hashes: 1: 3VQqtiom1KN9zcDFbHb_HNwz1EI.roa (hash: n7BuRmEffiATFiumwmipm2pKN3sbI8aRpEp3yWS0w6c=) 2: 53Y6HNT6PybZ5fv0RIq3VzI1Ero.roa (hash: gfRH81Dg27dQ3kodzezmL1Q0yfGmr/Pdqe1spxmMPZE=) 3: 7fjKgyx9Yaxh1FmHZYJUH95301c.roa (hash: T1XxvO4P4dkHl+WGoPHzZBE5VBrM/N30kEx3n7zSiDA=) 4: 8rGqH77YTfgMLRPyoN61N8RnEq0.roa (hash: ZNQ10Ukgjrp4rH/Ovez3kQihf1PS+l23PddvrRzZauI=) 5: BXn_bVoFgxHmHunAkFZSuzgFSwk.roa (hash: jxJIsK3YcEKMp25t1FYnjxefcJAQeAeiUCQ6rxD9bpw=) 6: BoaVLgPlhn4qr_fU3lgNc_DP-CI.roa (hash: 8gys4r5Jrh79V6ospkWBTCV9aubZPTwmXqR+dBSZNIM=) 7: E1du0wCDYd0qkbzycOzoURh4BYI.roa (hash: KvrqxA058Oc1sNN2BjNJzwOLTtzAgr6gDrllwRypkQM=) 8: ID3uGpE-dcekqFUA9CaskNQTHgw.roa (hash: +8FnPQxela/00fZdYSydOiN682t6g2gq5E5EtP0QcC8=) 9: LfmeRYcfUiEj399TDpOym_UlFRA.roa (hash: BkStJv/EZ8z0hAQkEE3CqcK8hG9A1BieEUEqY6z0bK8=) 10: NEyQG9kyLEW4Um4QAvO7DA9LZsE.roa (hash: v1Y4jsLwKJqAeGZpT4JA4xV86AlZtwzcF7xc4splz3Q=) 11: TY35IYclW4VPKdwgjzeN1-eRV5w.roa (hash: NrbtXiKXpUhJK+M5wfVFLQO6KPLEcpep0fo9uaa4vxY=) 12: UPWe1Wug7fNHuCoRI5LkUE4bICs.roa (hash: RDVH/BCV293ZQWWctDV3PRotDWVexWOj6PnUwJgAPTM=) 13: ayDmsI9qPMkxJ9NCKjnvD4ewlH0.roa (hash: D0WB+C7bGTZZc6yEWTFDivFil9okzEXHOU5scGXoB+Q=) 14: bOl89NjQvBezrx1ixNcUiGYb0hI.crl (hash: 07tEOTSYZ1xX3BynEhtDgC1Zl2P4Tg+0LjwUASt5vPk=) 15: h-Wv51tawGDDmzKTTiZygQFK1dI.roa (hash: gqUuhqm1O9kzFr7mzHK7ZrQWJPre8M3ei4+B6j2pDcQ=) 16: kDFa5fuToySOCU5vcGqCPDIk2Pc.roa (hash: I1BI9NSvaTv9rq7lHhxdUbN5f5WvqbSLYeczo8o1iF8=) 17: kehR6DRCeFwK5vsEVm60Bz8cG6c.roa (hash: L7sYa6xHC69xAZ7O1gkCc5slSgVN1A33m9IE9XvzF3U=) 18: mpGPMzUEL2GiaFu_ro-uoSMpDSM.roa (hash: De6x6yshStzd8qqnnIj6N4UKaPqhjyF/TsaAnqUmWqQ=) 19: oBqkwnj05lVwlwGOkOtelMXi290.roa (hash: KWxt3/pFpWp3KL1iplFsqb9jfnpqg64kOikp0uiyOdM=) 20: sBAGBCoZpRTh-6po9Toi-VKMV10.roa (hash: XU348a2UokXBEiecPQsK1jFxCMx0Gc+NuqKhJQxgwZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d7:96:5b:3b:c0:b5:19:7a:fe:a8:5f:25:59:eb:8f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Sep 25 08:02:29 2026 GMT Not After : Sep 26 08:02:29 2026 GMT Subject: CN=14e73acea3f4d40529509039075528ad0e90fe0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:06:99:6f:b0:f4:7d:eb:fa:fd:fb:48:5e:ed: 3b:35:91:77:9d:d9:bb:35:2c:78:d9:97:3f:7a:2b: f6:4d:60:d1:b4:dd:e4:bd:a6:90:bc:48:a9:fe:87: b4:16:0f:cc:d1:a3:d7:99:86:11:e7:51:53:ef:92: f9:84:c4:ba:f9:4b:9a:98:cd:4c:07:7f:c6:f7:08: 7c:d1:59:56:4c:38:68:ae:16:ed:67:6d:b6:c5:21: 4b:32:08:4c:27:1f:c1:67:c3:bb:7b:ee:55:59:39: cc:f2:a5:7c:a2:6b:9c:a5:34:5d:e7:2b:9d:19:b0: 44:a6:e2:6b:65:3e:3f:81:91:d3:de:8e:c3:d9:aa: 4f:a8:72:f0:f1:83:8e:5b:a4:f7:80:61:78:19:98: 56:2c:35:70:dd:bd:da:ed:09:60:d3:a4:98:48:0e: dd:3a:7f:4c:be:9b:1c:38:a4:24:9d:14:cb:e6:7b: 9d:16:53:3b:f7:c8:6a:97:59:16:ae:8f:78:00:49: 38:93:02:c6:a1:25:40:a1:a3:41:8b:21:6f:af:41: 0c:fb:3c:7d:57:00:32:f0:ee:20:fb:2c:1d:06:a3: 9a:52:a0:f5:50:25:65:29:bb:95:b9:eb:52:35:9a: 02:5a:26:bc:75:96:10:15:b3:3a:21:44:8c:4c:7c: 61:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E7:3A:CE:A3:F4:D4:05:29:50:90:39:07:55:28:AD:0E:90:FE:0A X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d9:6b:ae:23:c0:0e:8d:76:75:b5:e9:6c:38:9b:ac:c5:ad: 64:d5:b4:65:93:57:9a:97:ec:1a:78:1b:53:48:75:dd:34:dc: 86:19:35:e0:fa:4e:86:4d:7a:d4:18:87:c2:5f:ff:3d:3e:8d: 97:92:06:6f:a0:dc:f4:78:70:78:2d:f1:f2:4e:a0:be:c1:44: a3:d8:14:93:47:e5:2f:17:0d:61:5a:fe:a2:6d:4c:13:a9:ed: 15:2f:7f:2b:53:0f:b8:ac:64:31:9e:49:07:d6:92:9b:fe:dc: 9c:f5:4a:c4:19:49:e3:21:62:90:26:7a:55:b8:14:1a:d2:e4: cb:a8:aa:2c:05:fa:fc:e4:ab:6f:01:06:aa:09:b8:c5:05:07: ec:d4:e9:0a:98:1c:27:d0:11:9c:18:f6:5e:0b:3c:5e:20:f7: f3:67:99:49:ee:60:fe:99:41:7e:5c:50:ca:f2:a1:e7:8a:17: 5c:dd:0b:e0:34:b8:73:b2:6b:65:28:02:91:0d:b2:d2:62:a4: 65:ed:d2:d2:81:19:f1:d1:c6:30:bd:5e:cc:2d:a2:6f:57:a0: 43:2a:f6:22:33:56:f3:5c:7a:ab:55:6c:b2:df:98:5f:6a:7a: 3c:80:31:31:e5:a1:9e:35:83:98:de:0a:ab:c9:f6:cd:01:0f: 11:91:77:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDXlls7wLUZev6oXyVZ648wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjYwOTI1MDgwMjI5WhcNMjYwOTI2MDgwMjI5WjAzMTEwLwYDVQQD EygxNGU3M2FjZWEzZjRkNDA1Mjk1MDkwMzkwNzU1MjhhZDBlOTBmZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwaZb7D0fev6/ftIXu07NZF3ndm7 NSx42Zc/eiv2TWDRtN3kvaaQvEip/oe0Fg/M0aPXmYYR51FT75L5hMS6+UuamM1M B3/G9wh80VlWTDhorhbtZ222xSFLMghMJx/BZ8O7e+5VWTnM8qV8omucpTRd5yud GbBEpuJrZT4/gZHT3o7D2apPqHLw8YOOW6T3gGF4GZhWLDVw3b3a7Qlg06SYSA7d On9MvpscOKQknRTL5nudFlM798hql1kWro94AEk4kwLGoSVAoaNBiyFvr0EM+zx9 VwAy8O4g+ywdBqOaUqD1UCVlKbuVuetSNZoCWia8dZYQFbM6IUSMTHxhTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTnOs6j9NQFKVCQOQdVKK0OkP4KMB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadlrriPA Do12dbXpbDibrMWtZNW0ZZNXmpfsGngbU0h13TTchhk14PpOhk161BiHwl//PT6N l5IGb6Dc9HhweC3x8k6gvsFEo9gUk0flLxcNYVr+om1ME6ntFS9/K1MPuKxkMZ5J B9aSm/7cnPVKxBlJ4yFikCZ6VbgUGtLky6iqLAX6/OSrbwEGqgm4xQUH7NTpCpgc J9ARnBj2Xgs8XiD382eZSe5g/plBflxQyvKh54oXXN0L4DS4c7JrZSgCkQ2y0mKk Ze3S0oEZ8dHGML1ezC2ib1egQyr2IjNW81x6q1Vsst+YX2p6PIAxMeWhnjWDmN4K q8n2zQEPEZF3BA== -----END CERTIFICATE-----Generated at Fri Sep 25 13:07:24 2026 by rpki-client