$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: yMghzieSVuON6igTeUeTeMh2A2Y0agbqlrBphx7b7Ro= Subject key identifier: 45:89:23:3D:64:28:ED:8A:79:EE:29:3D:E3:08:0C:08:DF:40:D5:7C Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 01A0D5A6CA0201AF7F04FB1E0DF0E9308EB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 1A50 Signing time: Thu 24 Sep 2026 23:01:12 +0000 Manifest this update: Thu 24 Sep 2026 23:01:12 +0000 Manifest next update: Fri 25 Sep 2026 23:01:12 +0000 Files and hashes: 1: 0kI-1w2SNQehfoRycoNU1Pziv3I.roa (hash: viuJDQhBSgYavhQbluwLnuiQSVTVx0a9HzJyfcAYcOw=) 2: 5DlckLw7-djlSZ1lp36YaxGlvKE.roa (hash: eYIP1EqGYnvhmzjtkEGHQx/0NRgSz/vE0nE/kWbBXzk=) 3: 9lOq7Wh0Dc-TKs_jMnqAjp9qty8.roa (hash: gQsP3f9jY08L6TReTRhgCoFcXcYx56yiIKyEwP5fgis=) 4: B7aE9R9fg8NCdOQeiZzwMIi2ZNw.roa (hash: d1Ep9dN1bkXXcsIWaTx6sw5pJSc2xeGu6SeeEZeK/UM=) 5: H3x0T_83rlo2BTe5d7dbAF2ptxg.roa (hash: PQJVU6JoM83KwjANErOepQ3bz3i1NBfWfLmiBsgEm0c=) 6: KQ8fXNipeYkCVN179So0D0TWljQ.roa (hash: XxbQ5bE5bKEdW9jXnVZEomEiZqEsNztBM796TwnerwI=) 7: Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa (hash: 4kpMa9oce3yLyGOA9Rf9dgs0rQL4kCPs5/HrQzn7jc8=) 8: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: z9rN9ZB7xlhgXdpNYVNuh8K6wedIkQV3Ok8Fe9Q/a/o=) 9: apYOCQON8Q50nYzp4ypso-jbqys.roa (hash: GBiBhZg5+hSaQBI+hKWqc24pEoVUkpkEuUna1OBDqxw=) 10: no_ORyMn9T6-xikFSqLg-Gz96M4.roa (hash: Cp3JrKwrBj3GbQGbhILQy1X/3llVpyj5IPBpaVZnel0=) 11: qkO3HWUjh2SeVz2kOfBJ3fz48jY.roa (hash: /yTAZn/rmLrDKLc8NDsiQRU6zHvgZlDcdPO4KfqzKvE=) 12: se8BvmMQMrcgHtpi_ujjg8KT8CQ.roa (hash: cAQdGWRmSeLyjwmIoEHBdUkwP7QnABnaaE31A7C6720=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d5:a6:ca:02:01:af:7f:04:fb:1e:0d:f0:e9:30:8e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Sep 24 23:01:12 2026 GMT Not After : Sep 25 23:01:12 2026 GMT Subject: CN=4589233d6428ed8a79ee293de3080c08df40d57c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8b:0b:a7:7f:15:78:19:3f:b1:c4:ba:7d:28: 34:05:af:52:24:e3:65:cb:1d:de:76:37:7d:d4:72: 10:0c:f4:47:9f:a8:d9:62:10:b3:91:61:9b:6c:e5: a4:ab:7d:f6:ef:ab:f4:40:af:62:5d:81:db:87:c2: 32:07:20:f4:d8:dd:08:cd:d2:dd:55:d8:29:12:d3: 8e:8f:4e:25:a7:0a:43:23:55:69:86:24:19:f6:2a: 89:63:7b:75:2a:fd:01:23:74:36:6e:ef:96:90:1b: 2e:36:78:93:89:a3:f1:7f:66:a8:67:e8:38:fe:bc: 44:80:32:73:0b:f9:e6:4a:69:ae:8f:95:7a:a2:fe: 99:50:57:dc:76:3f:21:e4:5f:dd:36:37:33:70:f2: 27:00:41:a5:f6:18:00:07:32:3a:54:6b:77:71:eb: f6:f3:ca:e8:23:67:9b:b7:2d:44:f7:97:47:ec:64: a0:da:04:03:f9:0e:e0:36:5e:04:bd:47:0c:22:d5: 6e:91:68:e6:fa:0a:e7:4a:4e:9b:d4:50:08:71:ae: e5:f7:a5:21:a9:10:d1:28:7d:0e:12:32:b1:91:19: 6f:a2:c3:4d:0f:39:a5:47:d7:42:63:a4:0b:ac:b3: d9:e3:93:2a:51:41:e6:5d:69:90:56:7d:99:85:ca: 38:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:89:23:3D:64:28:ED:8A:79:EE:29:3D:E3:08:0C:08:DF:40:D5:7C X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:20:b4:fb:5c:19:5c:8f:8a:58:6a:6f:83:fb:94:6e:9a:cb: 31:fd:f0:9d:8c:c6:76:a7:98:9f:23:26:1f:91:9f:30:bd:70: a4:98:ab:ec:90:c6:9b:ed:b5:1f:31:e6:02:a8:50:65:4b:32: 57:10:61:3a:17:9c:b0:ce:e2:5e:6f:fe:e7:c4:ab:38:66:94: 20:8f:a2:96:37:e7:04:20:c9:4e:80:73:e7:d9:de:ef:d3:c1: 68:30:c4:88:a7:d3:95:b4:9e:56:78:d2:b9:66:7e:9a:46:32: 06:07:df:e1:49:25:17:ee:07:67:f6:99:bf:bf:54:47:7e:f1: b4:a9:a5:76:75:64:d4:e4:3e:f3:cf:ab:3e:f1:a2:22:f6:3f: 32:09:c2:98:27:08:10:50:e9:e8:8d:d5:44:c9:52:1d:53:df: 97:c9:38:09:41:6e:69:3d:96:21:ad:e6:a9:26:2d:5e:b3:12: d3:db:71:d9:71:09:78:2b:60:76:94:48:bb:13:d5:49:18:f8: b9:f1:a7:32:1e:42:07:e3:40:c5:ab:ee:fc:48:91:43:24:04: 1b:20:c0:55:f7:e7:eb:e7:59:b2:65:67:7a:55:da:27:19:e6: 45:4e:71:f7:d3:b3:d7:e4:05:57:24:24:0d:c9:79:f0:26:5e: 53:63:26:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDVpsoCAa9/BPseDfDpMI61MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjYwOTI0MjMwMTEyWhcNMjYwOTI1MjMwMTEyWjAzMTEwLwYDVQQD Eyg0NTg5MjMzZDY0MjhlZDhhNzllZTI5M2RlMzA4MGMwOGRmNDBkNTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IsLp38VeBk/scS6fSg0Ba9SJONl yx3edjd91HIQDPRHn6jZYhCzkWGbbOWkq33276v0QK9iXYHbh8IyByD02N0IzdLd VdgpEtOOj04lpwpDI1VphiQZ9iqJY3t1Kv0BI3Q2bu+WkBsuNniTiaPxf2aoZ+g4 /rxEgDJzC/nmSmmuj5V6ov6ZUFfcdj8h5F/dNjczcPInAEGl9hgABzI6VGt3cev2 88roI2ebty1E95dH7GSg2gQD+Q7gNl4EvUcMItVukWjm+grnSk6b1FAIca7l96Uh qRDRKH0OEjKxkRlvosNNDzmlR9dCY6QLrLPZ45MqUUHmXWmQVn2Zhco4aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWJIz1kKO2Kee4pPeMIDAjfQNV8MB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCC0+1wZ XI+KWGpvg/uUbprLMf3wnYzGdqeYnyMmH5GfML1wpJir7JDGm+21HzHmAqhQZUsy VxBhOhecsM7iXm/+58SrOGaUII+iljfnBCDJToBz59ne79PBaDDEiKfTlbSeVnjS uWZ+mkYyBgff4UklF+4HZ/aZv79UR37xtKmldnVk1OQ+88+rPvGiIvY/MgnCmCcI EFDp6I3VRMlSHVPfl8k4CUFuaT2WIa3mqSYtXrMS09tx2XEJeCtgdpRIuxPVSRj4 ufGnMh5CB+NAxavu/EiRQyQEGyDAVffn6+dZsmVnelXaJxnmRU5x99Oz1+QFVyQk Dcl58CZeU2MmIw== -----END CERTIFICATE-----Generated at Fri Sep 25 09:08:35 2026 by rpki-client