$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft File: Us2aZRLb8lpfGbgn16LH4iou6N0.mft (raw, json) Hash identifier: i+XYPkNhY5eGmQFAJCPIdX9rm9MYXA0fq5uxRXyvqWA= Subject key identifier: C1:6B:8F:CD:4B:DA:37:FF:58:64:1C:39:BC:6B:87:50:D6:58:9C:E6 Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 01A0D8A8AC828022E1A928B982689B11C49E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft Manifest number: 0D45 Signing time: Fri 25 Sep 2026 13:02:07 +0000 Manifest this update: Fri 25 Sep 2026 13:02:07 +0000 Manifest next update: Sat 26 Sep 2026 13:02:07 +0000 Files and hashes: 1: 1-IlB2CphFhJ1Es2Auj6Y8Pv_wcE.roa (hash: dBSNrPPwvAMKy5o27/nj2blgxOw2PO1uOCPT4ejHFgg=) 2: 2GKmq9a4tbRnyy5v_dzbijUGgpo.roa (hash: 5lV0Dnj2JREu67qpiN4zC8MeQVoN3LVpjCKJ+YsJ3TU=) 3: 2rLUhnluwL6wnKGGvW337qHfa_A.roa (hash: vOmCdy4dcO0yKPbRSBS7H0+V0LqrEgZGLIPDsfuR8RI=) 4: 3JNAFPmuRusA7_P1cHUrpNc8ZWQ.roa (hash: zKy+aXsrA8Z978tqaQi0ynXqJW9mllBBtqQYt4mz8gc=) 5: 3eP-ZYKR74zQteZxg-jYK68KuKU.roa (hash: rI+Q6O08EYSoWZw7Ks588qVsTWbvSuHUC1dp2GQPsEg=) 6: 4_TTRfrA4hvyb8aeVnebRoG9aZ4.roa (hash: 3NbkuqOTF46pDYs4QB6pgruxYNEcPm4QNzecOj1ivnE=) 7: KnBckRYNpkrmgA2l68UnOSdG8M8.roa (hash: e9ryBHEjHKpJhCoyv4UnySH5Ms6mFlk1tA5pBRXFaKc=) 8: Px4XmExl2QONyqSP6s8-qLoIeoI.roa (hash: reA0XoIHBbZsGAjNzRWT9dW+9757Ms5dgcUGYfnrDi8=) 9: Us2aZRLb8lpfGbgn16LH4iou6N0.crl (hash: nP+5Ow5ykLwuzHKd0HW3mOpSxKYzRqKjUdIljkZLNxA=) 10: VpoR4ytDHWEH5qJGhTngwFniYvk.roa (hash: x6eFh+FvocnjchDTOElJQmMu4KdVVQsAbUfVxqlk4YQ=) 11: b4bnSjrxkGqwlr0zkoxcOijmFkc.roa (hash: fQuLS072q+zjmBm2EgGlUmemoEePNKD15HIZM6Eyfw4=) 12: cwwhcNpzOg_pmBszouIx8h2CHRU.roa (hash: vBJrQQ0ItgE86n69h/fkj396ErwZyqxGCsEUUVNAzdI=) 13: hlAbpQnKYaIDHrjCT-1lNBwSXu0.roa (hash: BILz2oAMGgMF6vZP6W3jaxaaHIODVkHC+m/GaL33QlM=) 14: kPZtrooPlOyF8jQupuEU9Gy1bJQ.roa (hash: KtcI+6F6qPHzsOZYQ0EOD+pODuibLz2OAgS4M/a6Aq4=) 15: ldoq86JhWRtPnXQa0o4fAn7GOes.roa (hash: Zfo5/6efnP/N6jxUB47woZ54SIJcC/xEnjfHGBYnABk=) 16: oLlQgePRk9yvcOlL0Fl_a56u9H4.roa (hash: Wqock9cGRbZPQGtCkafIuYZm7FqajUuA17fJ83OGRks=) 17: xp9MuE3K7E-Sb2HgnwhKc3yErto.roa (hash: 9FJKEkYOHXVi/GiMh+ZQtwPZthuSJbC+u80wUEZ5uBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d8:a8:ac:82:80:22:e1:a9:28:b9:82:68:9b:11:c4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Sep 25 13:02:07 2026 GMT Not After : Sep 26 13:02:07 2026 GMT Subject: CN=c16b8fcd4bda37ff58641c39bc6b8750d6589ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:53:83:0e:01:18:46:ed:6e:f7:60:ad:0c: 10:71:ef:9c:96:72:c9:e0:6a:df:b6:bc:71:78:68: 39:98:4e:53:d5:51:a9:bf:f6:ae:08:b0:27:79:8a: 28:37:cc:b8:db:2a:95:22:0c:8b:7e:71:07:f4:16: cf:8e:0e:41:aa:d0:44:64:c5:cf:10:f7:c9:ab:4e: ab:e2:dc:80:2a:19:8a:b8:fa:2a:90:64:f6:0b:cd: 3e:41:7b:ab:c7:36:db:0b:a1:e3:5a:12:e4:fb:42: f6:fd:19:07:68:4c:8c:5a:09:71:d1:b4:5a:95:5b: ff:9f:54:0b:18:0e:ef:97:de:ad:20:48:61:d5:3e: 80:76:38:cc:ed:5c:df:4e:73:4a:83:96:2b:61:dc: 76:2c:f2:f1:c2:fb:04:46:ad:00:ce:9e:bf:c8:66: 33:90:3e:57:00:b2:00:66:e7:bf:fc:a8:a7:f8:f0: dc:ea:5b:5b:ed:9f:67:f9:56:3c:aa:c5:16:bc:a7: 50:8c:de:4a:04:d9:00:1b:23:4f:0b:43:04:50:eb: 71:cd:3f:07:15:e2:88:13:8a:aa:fd:0d:78:2c:95: 8b:e3:86:20:03:a3:06:8a:9c:99:cc:19:b6:78:9c: 52:a4:29:7b:1a:8b:3f:0e:10:02:e6:5b:92:a3:7f: 6d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6B:8F:CD:4B:DA:37:FF:58:64:1C:39:BC:6B:87:50:D6:58:9C:E6 X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:97:8b:df:4e:79:e9:32:f2:66:5b:91:5f:97:bd:d2:1b:15: cd:fd:1f:8f:2a:f7:6f:b8:a8:bf:8f:ad:01:ce:0d:f1:44:8c: 0c:eb:56:90:eb:18:8d:94:47:8f:23:4f:10:14:50:7a:7e:d8: c4:03:6e:5c:30:41:36:41:c9:eb:ed:0b:89:5c:1b:41:9e:b3: 73:3d:f3:bc:53:2c:36:fb:d5:e3:50:fa:b3:1c:df:7d:4e:b3: 00:2e:82:81:46:9e:2a:7e:81:e4:29:d3:35:54:55:6e:8c:48: b4:f8:5c:d8:a3:97:e6:7e:be:a1:b1:e2:c4:12:e8:64:85:c1: 31:72:f0:c5:ce:71:9d:7a:8f:8a:20:8b:87:ce:1d:f6:91:d4: 91:ea:bb:fe:5c:39:91:95:d0:de:fa:bf:74:56:dc:5e:f4:2c: e4:f6:f1:8f:79:df:0b:5f:ea:84:0b:3e:57:0a:38:e5:31:fd: bc:18:80:7b:92:bf:42:ee:88:b7:aa:6f:a1:f4:13:a1:66:81: 9a:da:39:06:ee:cb:77:6d:e6:b5:f0:ff:51:55:67:32:e9:5d: 8f:58:f0:b4:1f:60:89:2a:88:b9:99:7f:5d:20:7f:3a:9e:21: 20:60:44:ae:93:8a:3f:1d:9c:d7:f1:b1:07:3f:e7:5d:71:4c: c1:18:63:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDYqKyCgCLhqSi5gmibEcSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjYwOTI1MTMwMjA3WhcNMjYwOTI2MTMwMjA3WjAzMTEwLwYDVQQD EyhjMTZiOGZjZDRiZGEzN2ZmNTg2NDFjMzliYzZiODc1MGQ2NTg5Y2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMhTgw4BGEbtbvdgrQwQce+clnLJ 4GrftrxxeGg5mE5T1VGpv/auCLAneYooN8y42yqVIgyLfnEH9BbPjg5BqtBEZMXP EPfJq06r4tyAKhmKuPoqkGT2C80+QXurxzbbC6HjWhLk+0L2/RkHaEyMWglx0bRa lVv/n1QLGA7vl96tIEhh1T6AdjjM7VzfTnNKg5YrYdx2LPLxwvsERq0Azp6/yGYz kD5XALIAZue//Kin+PDc6ltb7Z9n+VY8qsUWvKdQjN5KBNkAGyNPC0MEUOtxzT8H FeKIE4qq/Q14LJWL44YgA6MGipyZzBm2eJxSpCl7Gos/DhAC5luSo39tNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFrj81L2jf/WGQcObxrh1DWWJzmMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpeL3055 6TLyZluRX5e90hsVzf0fjyr3b7iov4+tAc4N8USMDOtWkOsYjZRHjyNPEBRQen7Y xANuXDBBNkHJ6+0LiVwbQZ6zcz3zvFMsNvvV41D6sxzffU6zAC6CgUaeKn6B5CnT NVRVboxItPhc2KOX5n6+obHixBLoZIXBMXLwxc5xnXqPiiCLh84d9pHUkeq7/lw5 kZXQ3vq/dFbcXvQs5Pbxj3nfC1/qhAs+Vwo45TH9vBiAe5K/Qu6It6pvofQToWaB mto5Bu7Ld23mtfD/UVVnMuldj1jwtB9giSqIuZl/XSB/Op4hIGBErpOKPx2c1/Gx Bz/nXXFMwRhjqA== -----END CERTIFICATE-----Generated at Fri Sep 25 19:27:49 2026 by rpki-client