$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: Eq63lmhyBj1jiikE+1xDb8EXLq+lvngUDylFH6swd0I= Subject key identifier: E5:2C:88:9E:C8:AE:FA:70:97:4C:E9:D8:49:F2:36:B5:48:A9:D3:BF Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 01A0CE2451D936DC050C7AF9A1CD32030405 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 1AF3 Signing time: Wed 23 Sep 2026 12:01:21 +0000 Manifest this update: Wed 23 Sep 2026 12:01:21 +0000 Manifest next update: Thu 24 Sep 2026 12:01:21 +0000 Files and hashes: 1: TjYcJALyGbmW-x31ry7QsUvdQtQ.roa (hash: knhLPKVdJjwTBCuKiy0BNSL8TQGPgiu2tFYYWRO2204=) 2: baEkayAg80jmYDBU-ExaHSLpuaI.roa (hash: nAErtQy9uElHFQjfJS5ckQ4epiwL6hvpsQEYN9BEeqw=) 3: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: e6pzxo1nYJo9VnCF4P0AHIYF4/HM+Un8zNI+7bqTb48=) 4: cGs3UaDvGLQ1Q_TQpZAPaINt4Es.roa (hash: W7uHnT9KoPvCIjHy/wyMQaAb03AUeFyxBB7Do1XvIvI=) 5: ebSZBecc7df92SgP59-y12trz8Y.roa (hash: eWLHCXv7jbIrxX4dZcu1pV/1wCL3MzIiRwN/vf2jitQ=) 6: hp4kjoTsfGIBSPnL3Ulvv5LRB_A.roa (hash: icmc8vcVjmZSj8X83I0R9LEtCGtKRf3+GDCj0xm9IVc=) 7: nmGtGkrhBfqxDaqozTHEU7woU_8.roa (hash: myNlScXFtUNhqDOYxLDED2mEeSRwem2M2mluAw2qbGU=) 8: oRALtbh2nuCRd23sDYqfy35X5z0.roa (hash: jC6NP1kM59PVY3etFPE/j9NV0XqouvnOb2E4RPSGrX4=) 9: pI2S2lg5Mevtnr1gNuhTMLXlTZk.roa (hash: 5cp4WqQX2Fq4/2gG8NNXNJQnzkTkhV+uz8kgPR8ik8M=) 10: pUi-gLSXqZ0JaQPDBRSSYpMiavg.roa (hash: BVbd5i0a2oHy3QrO+gV4ifjJEQxi06QcvV9UBgsyx9E=) 11: rWySjgHmxws3lM6jmie75S8CDBw.roa (hash: At0oBHsNt1VyqDJTW3hMzgCfUrv9SJ/hPxisShjHIa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ce:24:51:d9:36:dc:05:0c:7a:f9:a1:cd:32:03:04:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Sep 23 12:01:21 2026 GMT Not After : Sep 24 12:01:21 2026 GMT Subject: CN=e52c889ec8aefa70974ce9d849f236b548a9d3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b5:6e:7c:44:b0:be:ee:ff:8a:36:cc:26:02: 6b:20:42:09:45:ac:f6:14:f4:c8:93:10:fe:6d:65: f6:43:af:8f:5f:cf:85:4a:fe:e6:16:83:e5:d3:4e: 57:f8:bc:c2:c4:a8:50:52:e6:59:3c:5c:10:3b:79: 68:08:79:6b:f1:5d:2a:a7:73:d3:f1:a6:84:7d:78: 01:37:b0:cd:0b:ec:e6:7f:b7:5a:a9:29:4a:80:a3: 2a:ce:69:77:e0:f2:72:bf:15:39:f9:db:43:78:43: 5f:43:a6:9c:52:a9:0e:a6:8c:0e:d2:0c:7c:2c:4b: 36:26:97:6f:24:ce:62:05:3b:93:bd:1e:3b:6a:bb: dd:a8:22:a4:16:da:bd:40:15:f6:6c:19:f3:f0:a4: c3:7c:59:84:b4:71:8c:a2:b6:f1:74:19:3f:f6:7b: d6:0a:ae:59:63:77:0f:47:23:0b:dd:94:d7:d8:cc: 53:64:22:73:5d:29:7e:59:bf:1a:77:57:9f:2c:06: 54:e8:cd:ab:b6:91:a2:87:c0:36:ee:bd:73:24:76: 3a:e2:17:6c:56:8a:eb:68:a6:52:eb:8e:a0:0f:f5: 60:3b:25:c7:13:55:3c:5b:60:4a:9b:1e:f6:b9:b6: 03:be:15:e1:ab:d1:b6:74:0d:b5:97:44:6a:b9:73: 5d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2C:88:9E:C8:AE:FA:70:97:4C:E9:D8:49:F2:36:B5:48:A9:D3:BF X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:6b:c3:05:e8:b1:89:90:43:a7:8e:db:a0:fb:bc:c9:b2:05: 5a:21:60:a6:0f:bb:e3:fa:1e:fc:c9:01:87:fc:92:a6:8f:e2: 46:ec:0f:a9:d9:3f:d3:90:91:52:99:6d:1d:5a:3a:3b:38:2d: 88:79:8c:30:81:69:45:8d:de:be:9e:46:16:56:e1:38:4a:b2: 65:17:80:2c:13:8e:fa:e8:b2:66:87:94:d0:68:1f:1f:38:ef: fe:0a:24:c4:5d:f6:20:cd:95:d5:2d:e4:71:e8:df:f8:60:ba: f3:09:70:c5:f4:ac:a8:71:0f:09:43:b1:70:89:77:57:55:4a: e5:3c:f5:cc:7a:1a:68:e2:96:01:3a:6a:e4:79:1e:76:80:f8: 09:e2:38:da:a3:e0:45:13:42:26:9d:8c:43:a5:d4:e2:6c:ad: c0:d8:e4:46:12:53:84:fb:be:6d:65:00:cb:a9:56:ba:cc:81: 54:de:e7:61:43:15:08:69:00:05:c0:35:ac:f5:ca:b2:dc:41: f7:2f:75:f4:34:f4:8d:c0:20:b4:17:c9:b0:98:b3:af:c1:2a: d2:09:a1:ec:7e:89:81:c6:44:db:75:4d:e6:ef:0d:54:e4:b9: e9:83:79:f0:7f:3b:34:5c:59:f9:3e:db:f1:67:88:b8:5b:a9: 5b:d6:e8:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDOJFHZNtwFDHr5oc0yAwQFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYwOTIzMTIwMTIxWhcNMjYwOTI0MTIwMTIxWjAzMTEwLwYDVQQD EyhlNTJjODg5ZWM4YWVmYTcwOTc0Y2U5ZDg0OWYyMzZiNTQ4YTlkM2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrVufESwvu7/ijbMJgJrIEIJRaz2 FPTIkxD+bWX2Q6+PX8+FSv7mFoPl005X+LzCxKhQUuZZPFwQO3loCHlr8V0qp3PT 8aaEfXgBN7DNC+zmf7daqSlKgKMqzml34PJyvxU5+dtDeENfQ6acUqkOpowO0gx8 LEs2JpdvJM5iBTuTvR47arvdqCKkFtq9QBX2bBnz8KTDfFmEtHGMorbxdBk/9nvW Cq5ZY3cPRyML3ZTX2MxTZCJzXSl+Wb8ad1efLAZU6M2rtpGih8A27r1zJHY64hds VorraKZS646gD/VgOyXHE1U8W2BKmx72ubYDvhXhq9G2dA21l0RquXNdzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUsiJ7Irvpwl0zp2EnyNrVIqdO/MB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGvDBeix iZBDp47boPu8ybIFWiFgpg+74/oe/MkBh/ySpo/iRuwPqdk/05CRUpltHVo6Ozgt iHmMMIFpRY3evp5GFlbhOEqyZReALBOO+uiyZoeU0GgfHzjv/gokxF32IM2V1S3k cejf+GC68wlwxfSsqHEPCUOxcIl3V1VK5Tz1zHoaaOKWATpq5HkedoD4CeI42qPg RRNCJp2MQ6XU4mytwNjkRhJThPu+bWUAy6lWusyBVN7nYUMVCGkABcA1rPXKstxB 9y919DT0jcAgtBfJsJizr8Eq0gmh7H6JgcZE23VN5u8NVOS56YN58H87NFxZ+T7b 8WeIuFupW9boEA== -----END CERTIFICATE-----Generated at Wed Sep 23 20:15:32 2026 by rpki-client