$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft File: Us2aZRLb8lpfGbgn16LH4iou6N0.mft (raw, json) Hash identifier: meYh77NggfSP/mm4o2T+28OuG0M5SRjcRPntNya66nc= Subject key identifier: 31:BB:DD:54:B8:6E:34:DE:BE:74:B1:38:F4:C9:94:3F:C6:1F:45:39 Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 01A0FD59264DA678753DA4579048894193EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft Manifest number: 0D58 Signing time: Fri 02 Oct 2026 16:01:13 +0000 Manifest this update: Fri 02 Oct 2026 16:01:13 +0000 Manifest next update: Sat 03 Oct 2026 16:01:13 +0000 Files and hashes: 1: 1-IlB2CphFhJ1Es2Auj6Y8Pv_wcE.roa (hash: dBSNrPPwvAMKy5o27/nj2blgxOw2PO1uOCPT4ejHFgg=) 2: 2GKmq9a4tbRnyy5v_dzbijUGgpo.roa (hash: 5lV0Dnj2JREu67qpiN4zC8MeQVoN3LVpjCKJ+YsJ3TU=) 3: 2rLUhnluwL6wnKGGvW337qHfa_A.roa (hash: vOmCdy4dcO0yKPbRSBS7H0+V0LqrEgZGLIPDsfuR8RI=) 4: 3JNAFPmuRusA7_P1cHUrpNc8ZWQ.roa (hash: zKy+aXsrA8Z978tqaQi0ynXqJW9mllBBtqQYt4mz8gc=) 5: 3eP-ZYKR74zQteZxg-jYK68KuKU.roa (hash: rI+Q6O08EYSoWZw7Ks588qVsTWbvSuHUC1dp2GQPsEg=) 6: 4_TTRfrA4hvyb8aeVnebRoG9aZ4.roa (hash: 3NbkuqOTF46pDYs4QB6pgruxYNEcPm4QNzecOj1ivnE=) 7: KnBckRYNpkrmgA2l68UnOSdG8M8.roa (hash: e9ryBHEjHKpJhCoyv4UnySH5Ms6mFlk1tA5pBRXFaKc=) 8: Px4XmExl2QONyqSP6s8-qLoIeoI.roa (hash: reA0XoIHBbZsGAjNzRWT9dW+9757Ms5dgcUGYfnrDi8=) 9: Us2aZRLb8lpfGbgn16LH4iou6N0.crl (hash: TfsnhMq/nAZGbTHib+QxOV/0ommD3uwLj3XSk0bVX+c=) 10: VpoR4ytDHWEH5qJGhTngwFniYvk.roa (hash: x6eFh+FvocnjchDTOElJQmMu4KdVVQsAbUfVxqlk4YQ=) 11: b4bnSjrxkGqwlr0zkoxcOijmFkc.roa (hash: fQuLS072q+zjmBm2EgGlUmemoEePNKD15HIZM6Eyfw4=) 12: cwwhcNpzOg_pmBszouIx8h2CHRU.roa (hash: vBJrQQ0ItgE86n69h/fkj396ErwZyqxGCsEUUVNAzdI=) 13: hlAbpQnKYaIDHrjCT-1lNBwSXu0.roa (hash: BILz2oAMGgMF6vZP6W3jaxaaHIODVkHC+m/GaL33QlM=) 14: kPZtrooPlOyF8jQupuEU9Gy1bJQ.roa (hash: KtcI+6F6qPHzsOZYQ0EOD+pODuibLz2OAgS4M/a6Aq4=) 15: ldoq86JhWRtPnXQa0o4fAn7GOes.roa (hash: Zfo5/6efnP/N6jxUB47woZ54SIJcC/xEnjfHGBYnABk=) 16: oLlQgePRk9yvcOlL0Fl_a56u9H4.roa (hash: Wqock9cGRbZPQGtCkafIuYZm7FqajUuA17fJ83OGRks=) 17: xp9MuE3K7E-Sb2HgnwhKc3yErto.roa (hash: 9FJKEkYOHXVi/GiMh+ZQtwPZthuSJbC+u80wUEZ5uBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Oct 2026 16:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:fd:59:26:4d:a6:78:75:3d:a4:57:90:48:89:41:93:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Oct 2 16:01:13 2026 GMT Not After : Oct 3 16:01:13 2026 GMT Subject: CN=31bbdd54b86e34debe74b138f4c9943fc61f4539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9f:f1:e5:2f:e0:e8:91:53:7b:6e:c5:4b:ad: 71:2b:6f:b5:d6:7f:d0:82:d8:90:4d:f6:85:37:72: 08:1f:4d:b9:29:52:cc:eb:fc:82:76:6f:b7:cf:64: b2:96:48:43:9e:5a:fa:4c:c2:19:cb:f8:90:4d:b9: 8b:92:f8:3c:f8:96:a9:4f:02:54:1a:85:f7:a0:82: 13:8f:dd:44:42:e0:ed:08:5f:7f:10:d4:40:0a:88: 98:24:0b:88:9d:f3:d8:9b:58:87:67:47:23:3c:b6: 8f:8f:a5:37:b8:8c:8b:cc:8f:25:b0:cd:41:8b:97: 48:6e:47:62:3d:0b:e4:27:ce:a4:62:c8:22:1b:db: f0:bd:6b:56:9e:46:00:67:84:6b:ee:e2:b3:d8:df: 76:cc:5c:f6:7d:fd:39:a8:6c:45:71:33:cd:c4:71: a9:44:7f:8d:a1:7a:c5:f0:c8:61:7d:73:fa:66:f2: 41:22:b5:52:ad:24:df:83:4a:98:36:2d:8b:29:9a: 75:15:ae:a5:fd:22:d4:a8:18:7d:49:2d:d3:e7:3a: 0b:3a:0f:33:84:17:a4:1f:66:60:e0:88:1f:e8:99: 11:44:1a:a6:68:64:f4:65:eb:eb:8a:09:3b:2c:c2: d8:0b:30:d2:f3:77:38:7a:16:5a:bd:2d:36:6e:24: fc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BB:DD:54:B8:6E:34:DE:BE:74:B1:38:F4:C9:94:3F:C6:1F:45:39 X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:23:27:7c:5f:31:c2:8f:ce:b5:a3:3e:e0:ba:31:6c:de:74: 1d:a5:c4:ed:6a:74:43:bd:d8:f5:a4:d8:6f:76:33:e3:30:20: 67:c7:3a:72:2c:5b:b2:bc:6b:23:68:75:74:3f:f5:67:be:5d: 61:03:65:f3:0b:82:73:33:70:98:42:e6:5c:ea:f7:3a:5f:49: a2:93:62:af:23:2b:2a:a2:68:63:52:21:8b:07:0f:5e:7c:df: cf:27:12:2f:e2:24:3f:ab:e0:c6:60:fd:b8:68:b0:1f:d2:64: 37:3c:f5:d3:e6:eb:ab:1b:87:51:a9:28:d7:03:d4:71:9d:4a: 5e:33:22:9d:65:28:e3:91:48:3d:9a:62:bc:24:2f:f9:bc:7e: c8:d9:a4:d8:28:b0:f1:7c:f9:94:43:4a:ca:53:77:8e:49:b5: a5:31:75:d5:49:57:66:9c:d4:5a:64:e0:2f:1a:df:66:ce:0d: 31:72:2f:c1:22:cd:66:c1:82:ee:f8:be:fe:8f:bc:ab:c5:55: dd:e6:a0:16:09:d9:08:5f:d9:1c:27:96:1e:ff:df:80:f0:7d: 3d:d4:50:15:b7:21:5f:98:16:30:28:01:c3:ee:21:26:64:26: 32:27:ff:e3:33:27:e4:88:a0:e1:99:83:c2:de:9e:7e:17:0c: ed:02:b5:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaD9WSZNpnh1PaRXkEiJQZPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjYxMDAyMTYwMTEzWhcNMjYxMDAzMTYwMTEzWjAzMTEwLwYDVQQD EygzMWJiZGQ1NGI4NmUzNGRlYmU3NGIxMzhmNGM5OTQzZmM2MWY0NTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z/x5S/g6JFTe27FS61xK2+11n/Q gtiQTfaFN3IIH025KVLM6/yCdm+3z2SylkhDnlr6TMIZy/iQTbmLkvg8+JapTwJU GoX3oIITj91EQuDtCF9/ENRACoiYJAuInfPYm1iHZ0cjPLaPj6U3uIyLzI8lsM1B i5dIbkdiPQvkJ86kYsgiG9vwvWtWnkYAZ4Rr7uKz2N92zFz2ff05qGxFcTPNxHGp RH+NoXrF8MhhfXP6ZvJBIrVSrSTfg0qYNi2LKZp1Fa6l/SLUqBh9SS3T5zoLOg8z hBekH2Zg4Igf6JkRRBqmaGT0Zevrigk7LMLYCzDS83c4ehZavS02biT8TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDG73VS4bjTevnSxOPTJlD/GH0U5MB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiMnfF8x wo/OtaM+4LoxbN50HaXE7Wp0Q73Y9aTYb3Yz4zAgZ8c6cixbsrxrI2h1dD/1Z75d YQNl8wuCczNwmELmXOr3Ol9JopNiryMrKqJoY1IhiwcPXnzfzycSL+IkP6vgxmD9 uGiwH9JkNzz10+brqxuHUako1wPUcZ1KXjMinWUo45FIPZpivCQv+bx+yNmk2Ciw 8Xz5lENKylN3jkm1pTF11UlXZpzUWmTgLxrfZs4NMXIvwSLNZsGC7vi+/o+8q8VV 3eagFgnZCF/ZHCeWHv/fgPB9PdRQFbchX5gWMCgBw+4hJmQmMif/4zMn5Iig4ZmD wt6efhcM7QK1xQ== -----END CERTIFICATE-----Generated at Sat Oct 3 06:20:19 2026 by rpki-client