$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: OhkhZO131cxo1ii0TV6BA5UGCftQ8GT6TrCy3yMRaXU= Subject key identifier: 9C:58:8D:B2:4F:95:23:18:AE:46:C4:12:A7:52:84:1A:38:FD:5A:86 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 01A0CC3634D2FB9692A9B700222E58F45BA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 1AF2 Signing time: Wed 23 Sep 2026 03:01:39 +0000 Manifest this update: Wed 23 Sep 2026 03:01:39 +0000 Manifest next update: Thu 24 Sep 2026 03:01:39 +0000 Files and hashes: 1: TjYcJALyGbmW-x31ry7QsUvdQtQ.roa (hash: knhLPKVdJjwTBCuKiy0BNSL8TQGPgiu2tFYYWRO2204=) 2: baEkayAg80jmYDBU-ExaHSLpuaI.roa (hash: nAErtQy9uElHFQjfJS5ckQ4epiwL6hvpsQEYN9BEeqw=) 3: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: flLY6VAbM44WjEVArnaDbmK0z2ov/065lIy5ByzXEcQ=) 4: cGs3UaDvGLQ1Q_TQpZAPaINt4Es.roa (hash: W7uHnT9KoPvCIjHy/wyMQaAb03AUeFyxBB7Do1XvIvI=) 5: ebSZBecc7df92SgP59-y12trz8Y.roa (hash: eWLHCXv7jbIrxX4dZcu1pV/1wCL3MzIiRwN/vf2jitQ=) 6: hp4kjoTsfGIBSPnL3Ulvv5LRB_A.roa (hash: icmc8vcVjmZSj8X83I0R9LEtCGtKRf3+GDCj0xm9IVc=) 7: nmGtGkrhBfqxDaqozTHEU7woU_8.roa (hash: myNlScXFtUNhqDOYxLDED2mEeSRwem2M2mluAw2qbGU=) 8: oRALtbh2nuCRd23sDYqfy35X5z0.roa (hash: jC6NP1kM59PVY3etFPE/j9NV0XqouvnOb2E4RPSGrX4=) 9: pI2S2lg5Mevtnr1gNuhTMLXlTZk.roa (hash: 5cp4WqQX2Fq4/2gG8NNXNJQnzkTkhV+uz8kgPR8ik8M=) 10: pUi-gLSXqZ0JaQPDBRSSYpMiavg.roa (hash: BVbd5i0a2oHy3QrO+gV4ifjJEQxi06QcvV9UBgsyx9E=) 11: rWySjgHmxws3lM6jmie75S8CDBw.roa (hash: At0oBHsNt1VyqDJTW3hMzgCfUrv9SJ/hPxisShjHIa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cc:36:34:d2:fb:96:92:a9:b7:00:22:2e:58:f4:5b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Sep 23 03:01:39 2026 GMT Not After : Sep 24 03:01:39 2026 GMT Subject: CN=9c588db24f952318ae46c412a752841a38fd5a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:37:a4:13:4f:25:e9:48:c5:e7:ac:41:40:f9: b7:c4:df:cf:9a:5d:82:f5:6b:a4:2c:8e:26:b1:a0: 6f:55:f6:ad:83:30:ae:41:72:9f:1f:85:8a:65:6f: d1:f8:8a:83:bb:a3:e0:75:55:f4:09:4c:b1:9b:9a: 17:a5:4c:32:42:c5:0f:a9:4d:79:81:d3:63:f4:0c: fd:51:aa:dd:3c:49:eb:c9:cf:54:f1:81:30:73:fb: b5:5f:be:10:32:ae:b8:c1:53:b1:33:53:a4:f3:da: 7e:a4:9b:ff:e5:3e:5f:27:8d:c2:e7:38:35:82:ef: 3f:91:11:ff:e0:09:53:0f:b1:02:c6:30:eb:5e:46: 18:d3:3f:9a:3c:c8:cb:6e:a6:5c:e0:92:3d:c8:4b: 49:56:f9:4b:1e:fc:1d:71:e8:71:1b:b7:44:ff:a2: d8:39:46:c3:04:b9:c2:e7:f6:ed:98:c5:cd:8f:1f: 2f:73:af:35:2e:c3:8c:8e:1a:9e:d6:b9:d3:f8:19: 23:8b:79:86:38:42:97:b6:18:fc:31:eb:65:a3:00: d1:8b:a0:e9:fd:06:2b:8e:b4:b7:a1:89:88:ee:bb: cb:5a:d7:2d:94:ad:ab:9c:cb:cb:5b:2c:8b:d2:84: 3f:40:1a:59:49:57:66:db:77:b1:ce:c5:cb:75:c1: aa:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:58:8D:B2:4F:95:23:18:AE:46:C4:12:A7:52:84:1A:38:FD:5A:86 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:14:f6:f1:65:15:be:61:a0:bd:ea:6e:f9:51:65:4b:08:e5: 34:04:50:57:af:ec:1d:ee:db:2e:e9:25:32:2f:cc:cb:10:02: 5b:85:21:0e:41:3c:08:7f:44:14:14:bb:bc:e0:53:ba:f3:8c: d1:0b:f3:0a:d9:58:db:7c:bc:98:06:b5:69:78:76:b7:85:48: c2:ca:df:6d:a5:ef:aa:fa:ee:d7:9a:52:86:e7:4d:dd:27:25: 2b:c2:b4:c5:7e:b0:4a:d8:74:f3:b7:6c:2b:43:07:09:f8:11: 41:4d:c1:b7:4e:76:66:b8:25:94:c2:1e:ab:65:e5:67:c8:f5: a4:a7:1f:dc:2c:72:98:57:18:7a:7b:ec:59:02:6a:85:1a:e7: c6:0b:dd:24:aa:3b:4c:88:a9:15:1b:7e:9a:fb:7e:ac:c9:00: f8:42:35:64:bb:fb:31:1e:44:6b:bf:e3:56:e1:3b:17:24:95: 5b:b2:9a:0e:c8:ad:47:c5:d3:09:95:0c:c0:a8:a4:0e:14:17: 22:99:a5:ec:d4:87:cc:40:36:fe:d4:66:6c:cd:2b:49:80:48: 89:3e:22:2e:78:d0:80:bb:9c:9b:01:65:86:51:bf:1b:01:4e: 8f:f9:7f:5c:74:30:ea:f4:24:24:d0:aa:8d:97:da:ef:99:a5: 15:4e:f1:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDMNjTS+5aSqbcAIi5Y9FugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYwOTIzMDMwMTM5WhcNMjYwOTI0MDMwMTM5WjAzMTEwLwYDVQQD Eyg5YzU4OGRiMjRmOTUyMzE4YWU0NmM0MTJhNzUyODQxYTM4ZmQ1YTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjekE08l6UjF56xBQPm3xN/Pml2C 9WukLI4msaBvVfatgzCuQXKfH4WKZW/R+IqDu6PgdVX0CUyxm5oXpUwyQsUPqU15 gdNj9Az9UardPEnryc9U8YEwc/u1X74QMq64wVOxM1Ok89p+pJv/5T5fJ43C5zg1 gu8/kRH/4AlTD7ECxjDrXkYY0z+aPMjLbqZc4JI9yEtJVvlLHvwdcehxG7dE/6LY OUbDBLnC5/btmMXNjx8vc681LsOMjhqe1rnT+Bkji3mGOEKXthj8MetlowDRi6Dp /QYrjrS3oYmI7rvLWtctlK2rnMvLWyyL0oQ/QBpZSVdm23exzsXLdcGqwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxYjbJPlSMYrkbEEqdShBo4/VqGMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxxT28WUV vmGgvepu+VFlSwjlNARQV6/sHe7bLuklMi/MyxACW4UhDkE8CH9EFBS7vOBTuvOM 0QvzCtlY23y8mAa1aXh2t4VIwsrfbaXvqvru15pShudN3SclK8K0xX6wSth087ds K0MHCfgRQU3Bt052ZrgllMIeq2XlZ8j1pKcf3CxymFcYenvsWQJqhRrnxgvdJKo7 TIipFRt+mvt+rMkA+EI1ZLv7MR5Ea7/jVuE7FySVW7KaDsitR8XTCZUMwKikDhQX Ipml7NSHzEA2/tRmbM0rSYBIiT4iLnjQgLucmwFlhlG/GwFOj/l/XHQw6vQkJNCq jZfa75mlFU7xbg== -----END CERTIFICATE-----Generated at Wed Sep 23 09:45:54 2026 by rpki-client