$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft File: sCJf0DWnzmSnyIveca61YPNIOXQ.mft (raw, json) Hash identifier: DkcJVRGQw5M/iLHgyL0PRNZzuXjOgYn23zvlhOWDV6I= Subject key identifier: A6:91:D2:EC:56:A9:C8:FD:50:C4:78:A2:D9:53:68:38:63:16:A9:57 Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74 Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974 Certificate serial: 01A1DACA69FCEAA286D91CDEA67D745D2900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft Manifest number: 041C Signing time: Sat 14 Nov 2026 16:01:00 +0000 Manifest this update: Sat 14 Nov 2026 16:01:00 +0000 Manifest next update: Sun 15 Nov 2026 16:01:00 +0000 Files and hashes: 1: 0CCIV1hEHH3hY6pokk9jTnU8V30.roa (hash: GgaU+5w/qihCGGu/5k2TUotqsGtIXN8Ll7E8ReKlxoQ=) 2: 27Onk2ipikR9sCWrsjcv1XdwhhU.roa (hash: tYN0cEsdrNAHZ2qeeAujA9ZWZlxGIp9FSB29X48sim4=) 3: 75dJ9l9pm2mLQKlmsqkMPbP5nLU.roa (hash: y9JQO9ERriwN1YTQ2JmQZB4kivefmPeXhn7RTehloi0=) 4: 7k8If11aObVXGmnKtKwIcne1q0o.roa (hash: YMdPgL5RHn3ZUXXjNuLlB+pdjKmlISEakxjgynyqsGg=) 5: AEeBq3XFkbn8pyHJEeb3isWEmIA.roa (hash: gkDvS6y+2rhPnDPFUFxFEdfe5IUZN7R+qqVkzML65dE=) 6: IIIXZtSualOwJL3v5moeDxfjfvI.roa (hash: 7rMLEXqsuij2IE2v0cNkJojz7+yY0hLnMUTfWDw4n9Q=) 7: S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa (hash: w5hcZAmF4buAGhakgXjQA0sa4vpLG5fCK2GR/ajM+u0=) 8: sCJf0DWnzmSnyIveca61YPNIOXQ.crl (hash: weA9/E1jnaYbzQFEGK/Qa4/MXD0eg7Fp0A0dRkOQUU8=) 9: vdGT0nZTpJLGcOzDL6xuJ_FCZW8.roa (hash: Xc1ItXjvzK2wPVfmMfhj8HS0B6C/GKW+6dgSc1M77LU=) 10: wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa (hash: VxkO6fBbTYMBO4jXH/JD3dN5+ZLMhiKDYjCspmghV5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:da:ca:69:fc:ea:a2:86:d9:1c:de:a6:7d:74:5d:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974 Validity Not Before: Nov 14 16:01:00 2026 GMT Not After : Nov 15 16:01:00 2026 GMT Subject: CN=a691d2ec56a9c8fd50c478a2d95368386316a957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4b:fa:56:04:f1:cc:32:83:ea:37:21:56:17: 87:f3:1a:69:e4:33:64:59:2b:2e:c6:97:64:0a:12: 6c:56:60:3c:91:b6:66:1d:b6:d1:99:7a:fb:d6:ed: b3:3c:87:80:22:c6:70:1e:75:41:24:7c:d8:3f:32: c1:4c:0f:8c:0b:15:88:28:18:5e:0a:81:df:4f:b3: f5:bf:4c:bd:1c:f9:21:84:a9:f7:3e:79:b2:5e:7c: 0a:8a:bb:83:4d:0d:e8:ba:c6:ab:56:fa:aa:7e:1f: e7:c6:17:4b:bb:b0:87:eb:24:86:12:7b:a7:f1:44: dc:2c:5e:82:f7:4f:8a:7f:5d:74:d6:19:22:61:48: df:c1:18:dc:d3:19:4e:3f:d8:26:2f:9f:4d:c4:4c: 07:be:a7:f7:85:f9:89:31:de:9d:44:0b:66:15:06: d1:17:6b:d0:48:1e:90:13:b1:3c:7b:9f:0c:c7:18: 10:e4:f6:69:6c:8e:ac:b2:0d:f0:a5:86:99:fc:fd: 7f:cd:8b:27:fd:94:46:75:32:ce:a6:0e:df:15:eb: 6a:a2:0f:d1:82:39:2c:7e:aa:c7:ed:07:37:0b:e1: 52:d3:33:1b:a7:6e:ed:0d:41:61:06:1a:7e:a9:06: 7f:fe:db:cb:08:55:0b:4a:8b:79:6d:79:73:e1:70: 57:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:91:D2:EC:56:A9:C8:FD:50:C4:78:A2:D9:53:68:38:63:16:A9:57 X509v3 Authority Key Identifier: keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d9:08:ac:c7:f8:19:5b:38:36:19:71:10:6e:c0:9b:4b:dc: 2e:4a:4f:31:17:44:73:fe:ff:19:4c:65:13:a7:17:e1:06:c7: 2c:7e:f6:64:13:48:a5:91:56:89:14:d5:04:48:3f:09:3d:9a: 2b:dc:ac:a4:f9:06:19:e7:f3:35:f5:bb:f1:1a:ea:0b:07:59: e2:7e:da:7d:00:3f:05:41:fc:4e:a5:eb:83:a7:6a:7d:47:b4: d8:ae:0b:39:81:cc:76:3e:ce:10:c9:59:14:ee:78:ba:97:c3: b9:5d:45:ba:c5:a8:ae:98:eb:2e:7a:3a:65:fd:4a:80:4a:b4: 8a:6c:31:9f:35:8b:51:eb:a0:b2:14:78:60:90:5f:96:14:be: 7b:71:98:46:4c:e5:cf:5a:78:af:bc:43:dd:af:31:17:25:1c: 6b:b3:8e:ea:97:51:96:aa:e8:7f:72:cb:39:50:c7:26:7a:8a: b0:63:e8:42:21:24:b4:79:90:6c:45:9d:fd:a1:6d:1f:5a:1d: 7d:c3:f1:61:2c:a6:40:e0:58:de:29:35:36:ca:d2:8c:3c:7a: c6:c0:63:59:97:f5:30:26:c0:ab:75:27:2e:1d:0b:92:1d:00: 07:ba:2a:04:aa:d3:bb:22:c0:ea:82:9c:23:ce:ac:0d:04:51: 59:63:c8:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHaymn86qKG2Rzepn10XSkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMjI1ZmQwMzVhN2NlNjRhN2M4OGJkZTcxYWViNTYwZjM0 ODM5NzQwHhcNMjYxMTE0MTYwMTAwWhcNMjYxMTE1MTYwMTAwWjAzMTEwLwYDVQQD EyhhNjkxZDJlYzU2YTljOGZkNTBjNDc4YTJkOTUzNjgzODYzMTZhOTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEv6VgTxzDKD6jchVheH8xpp5DNk WSsuxpdkChJsVmA8kbZmHbbRmXr71u2zPIeAIsZwHnVBJHzYPzLBTA+MCxWIKBhe CoHfT7P1v0y9HPkhhKn3PnmyXnwKiruDTQ3ousarVvqqfh/nxhdLu7CH6ySGEnun 8UTcLF6C90+Kf1101hkiYUjfwRjc0xlOP9gmL59NxEwHvqf3hfmJMd6dRAtmFQbR F2vQSB6QE7E8e58MxxgQ5PZpbI6ssg3wpYaZ/P1/zYsn/ZRGdTLOpg7fFetqog/R gjksfqrH7Qc3C+FS0zMbp27tDUFhBhp+qQZ//tvLCFULSot5bXlz4XBXSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaR0uxWqcj9UMR4otlTaDhjFqlXMB8GA1UdIwQY MBaAFLAiX9A1p85kp8iL3nGutWDzSDl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4Yzct NDQzZTRiYWI3ZGU2LzEvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4YzctNDQzZTRiYWI3ZGU2 LzEvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNkIrMf4 GVs4NhlxEG7Am0vcLkpPMRdEc/7/GUxlE6cX4QbHLH72ZBNIpZFWiRTVBEg/CT2a K9yspPkGGefzNfW78RrqCwdZ4n7afQA/BUH8TqXrg6dqfUe02K4LOYHMdj7OEMlZ FO54upfDuV1FusWorpjrLno6Zf1KgEq0imwxnzWLUeugshR4YJBflhS+e3GYRkzl z1p4r7xD3a8xFyUca7OO6pdRlqrof3LLOVDHJnqKsGPoQiEktHmQbEWd/aFtH1od fcPxYSymQOBY3ik1NsrSjDx6xsBjWZf1MCbAq3UnLh0Lkh0AB7oqBKrTuyLA6oKc I86sDQRRWWPIrg== -----END CERTIFICATE-----Generated at Sat Nov 14 22:38:20 2026 by rpki-client