$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: hrgohwOV+dY6saKJ/Jr0RhXmLpnNXQWZcNY2ki3ly6w= Subject key identifier: BC:7A:15:0E:D0:2A:BC:AB:87:AE:FD:C5:3F:F6:74:97:15:57:18:29 Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 01A0D4CACF7624A26A7C709BA7E351BEBE1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 1445 Signing time: Thu 24 Sep 2026 19:00:56 +0000 Manifest this update: Thu 24 Sep 2026 19:00:56 +0000 Manifest next update: Fri 25 Sep 2026 19:00:56 +0000 Files and hashes: 1: 2JOxayZ4kxrtihpkJSNfTVv34wU.roa (hash: zOn78CRIowaCVixyqjErS7L368UV3aEuLomuXw4ifTk=) 2: 8JmGNshMSYZovGEGptxvSVmLazw.roa (hash: cBtmgXslMy9oeFHfquJAM4IBewoqUtnRBO1wAOTF0Qk=) 3: 9VFCcM5TkSFj-DtH7qLQwgSN5IM.roa (hash: wrh+UMairP6Hp+q2S/1S737Q0ISs8AkPKt06IH0nojo=) 4: EaUMOU4n5eMN9_93bWF9KbfM0Js.roa (hash: Qat9O3DT5PJNAgSB1rpNeEeKlT31JeYDByOxfigK1Mc=) 5: Qds8QcMRNkZLZIxEq4DIiHLqmf8.roa (hash: 8W6wOK2I4qsuYzKI/ho+wcaX0Cqt4fg6SETKF3W+ImI=) 6: TjDmMYZX4kBSUtV2aoQj0qKysRg.roa (hash: l2/gMvnSsklv14g/tuA37El8fuSOsjkNRMRQv6RZ2fY=) 7: X1LVS0a4yLVV-n31U0OmgdyXH_Q.roa (hash: HB5LPZBvI9YtdaaDN25t7bfdVncLanwsoppFOKXdT7I=) 8: arDSEArnZyqLs7jmsgT1tnPs8rc.roa (hash: /Km/RAgR6E8ZdX77lmgH7Nk0dxMhyfy0FGDCtSzOc/w=) 9: bwOIwRe-t7R54b9v9np6_kJQ_dE.roa (hash: Q1d3WN659RXAKPuHuKTKUTC5odQwSZ9Vh4CW0Um2Opc=) 10: d0K0IoBy5xJlcUIFuELdP0a1cwQ.roa (hash: 4io78nOLezFoyBWo3ZpnK3RNwopEXZfQZmn24eH/WJQ=) 11: dxZrm_kRJNnz8YeorAaaxgmTmrU.roa (hash: Le5MlQmjVvWn8m1gclKNCqW1PZyJn3stX+9I88dbC/c=) 12: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: t73RyPozZ2C7XDMxr9AbiYJb9T2K88eDdTESxvxdnsA=) 13: gVoDkYx52kg2ObqLQQiu3dVABJ4.roa (hash: Q8A5Ai5FoLvBhe3BwpyHiBUhPSy+KXj0LhOWSA21Wgw=) 14: mfX6n982kHfEGonK72FOllXPKLM.roa (hash: mQgbn3Sty6H0kID4K5HG3Lec+s4hrDOIUIKg6j/AGRo=) 15: oSJ76RTJAM4Rkm0VytsagsICSMI.roa (hash: 5KF6cvuY3cWzSG6wpKOaFIJmUmHSua9Uf0BUoXvpF6w=) 16: w56M8w2Q_qfZu41_qHQO5zW4jwk.roa (hash: RAJ8brQ6bDHIdv8dDAPBh54oGKG2dIlrIsob6HcQ27I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:ca:cf:76:24:a2:6a:7c:70:9b:a7:e3:51:be:be:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Sep 24 19:00:56 2026 GMT Not After : Sep 25 19:00:56 2026 GMT Subject: CN=bc7a150ed02abcab87aefdc53ff6749715571829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:54:da:c2:c3:d5:6e:7a:0a:1b:54:64:32:14: 6c:e5:e1:8a:4f:6f:10:36:98:59:df:ad:df:a1:ee: 06:71:4b:95:0f:3b:27:a3:c5:93:c6:00:cf:f6:a7: ff:8c:b7:63:dc:c0:42:8e:d9:5d:f9:fe:8a:0a:cd: e5:61:8f:e0:eb:42:3d:42:0b:6a:d5:22:a1:a4:c2: 98:39:fb:55:b0:ae:e3:fa:f3:52:e4:87:71:52:18: 0f:6f:3e:7e:fc:68:fb:29:df:2c:bf:63:81:9f:90: 92:39:e1:e5:e4:67:26:a5:eb:c5:23:38:dc:82:bc: 25:fa:7c:9f:8d:8d:b1:14:8a:fb:44:66:d3:bc:d1: 7d:99:70:56:f9:06:fe:a6:0a:06:33:b3:2c:4c:e2: 65:d0:79:6b:d9:ad:46:71:92:21:d3:38:a1:89:0c: 3e:0b:38:fa:f9:05:de:86:3d:e9:3b:96:55:a8:c3: b9:fa:b5:cd:b5:01:4d:57:a2:c1:4b:a0:c9:d3:af: d1:5b:48:3d:9a:43:b9:5f:60:bd:c5:16:25:6c:04: c1:71:68:c0:85:db:56:9c:ac:c7:1b:25:eb:63:bc: bd:86:13:2e:6e:be:56:a0:3b:21:30:61:43:3f:28: 76:a5:90:a8:70:34:c2:36:54:4a:46:02:2e:03:5b: 3e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7A:15:0E:D0:2A:BC:AB:87:AE:FD:C5:3F:F6:74:97:15:57:18:29 X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:e5:45:8a:99:08:b0:77:66:a1:49:60:ed:06:45:89:07:9d: 9c:ef:e8:00:1b:29:81:4f:3c:6a:c7:24:6d:69:9e:49:77:7d: 9e:72:75:02:c1:73:06:e5:93:7d:4f:66:0f:96:95:98:27:a6: cd:9d:e7:0a:51:39:6e:ec:e5:1e:d9:3f:7c:0f:69:cb:a5:78: 1e:fb:af:40:8a:d3:43:e2:c7:b0:6f:e6:a6:a1:de:e0:b4:1f: 69:37:4b:96:6a:31:55:36:8b:04:e9:33:cb:0b:e4:f4:99:d0: ee:9a:36:e0:de:1c:44:1b:53:e3:72:6e:ef:35:d4:9c:2d:4d: 38:fe:fa:61:d3:21:40:89:06:ca:4f:c1:45:72:5b:22:85:00: bb:16:e3:f7:40:3e:3d:41:39:cb:fa:64:22:6a:e2:b0:e3:de: 85:12:25:39:6d:63:f4:4d:c8:16:b1:e3:b3:36:14:13:28:b1: 70:8f:4d:28:1d:e2:0c:30:d8:74:59:55:dd:1c:7f:72:c2:40: b2:52:ac:c9:ed:c9:ea:2e:a1:24:dc:39:00:0f:7e:20:02:66: 2b:a9:b2:eb:63:5b:fd:ae:c2:29:de:2d:0b:e3:53:b7:07:d3: 35:0c:68:a1:1e:5f:01:02:23:ad:ea:8f:80:a6:6d:8c:f6:b3: 15:a8:e5:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUys92JKJqfHCbp+NRvr4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwOTI0MTkwMDU2WhcNMjYwOTI1MTkwMDU2WjAzMTEwLwYDVQQD EyhiYzdhMTUwZWQwMmFiY2FiODdhZWZkYzUzZmY2NzQ5NzE1NTcxODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11TawsPVbnoKG1RkMhRs5eGKT28Q NphZ363foe4GcUuVDzsno8WTxgDP9qf/jLdj3MBCjtld+f6KCs3lYY/g60I9Qgtq 1SKhpMKYOftVsK7j+vNS5IdxUhgPbz5+/Gj7Kd8sv2OBn5CSOeHl5GcmpevFIzjc grwl+nyfjY2xFIr7RGbTvNF9mXBW+Qb+pgoGM7MsTOJl0Hlr2a1GcZIh0zihiQw+ Czj6+QXehj3pO5ZVqMO5+rXNtQFNV6LBS6DJ06/RW0g9mkO5X2C9xRYlbATBcWjA hdtWnKzHGyXrY7y9hhMubr5WoDshMGFDPyh2pZCocDTCNlRKRgIuA1s+zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLx6FQ7QKryrh679xT/2dJcVVxgpMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeVFipkI sHdmoUlg7QZFiQednO/oABspgU88asckbWmeSXd9nnJ1AsFzBuWTfU9mD5aVmCem zZ3nClE5buzlHtk/fA9py6V4HvuvQIrTQ+LHsG/mpqHe4LQfaTdLlmoxVTaLBOkz ywvk9JnQ7po24N4cRBtT43Ju7zXUnC1NOP76YdMhQIkGyk/BRXJbIoUAuxbj90A+ PUE5y/pkImrisOPehRIlOW1j9E3IFrHjszYUEyixcI9NKB3iDDDYdFlV3Rx/csJA slKsye3J6i6hJNw5AA9+IAJmK6my62Nb/a7CKd4tC+NTtwfTNQxooR5fAQIjreqP gKZtjPazFajl5A== -----END CERTIFICATE-----Generated at Fri Sep 25 00:35:30 2026 by rpki-client