$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft File: QLl0BiRLQQcmJofbG5ZCw9no-EM.mft (raw, json) Hash identifier: hCHbL944DNum2ryJv3tZcXR8IPDV9yVthTiMcxct69c= Subject key identifier: 2D:27:80:E0:10:31:D9:9B:B1:0A:A3:2E:0E:13:B6:39:90:49:C6:CE Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843 Certificate serial: 01A0D23746B906265627CF1558CBC55A6FC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft Manifest number: 025A Signing time: Thu 24 Sep 2026 07:00:32 +0000 Manifest this update: Thu 24 Sep 2026 07:00:32 +0000 Manifest next update: Fri 25 Sep 2026 07:00:32 +0000 Files and hashes: 1: 0HR7OlgVsN6el8WaHefZC1bVuuI.roa (hash: l1VbbEivm6yxThSTyk7Djf67KfprrRMIJL+aTYhbs+I=) 2: 8FJGaZ8MbZPDXJ8q8JZarY-F95A.roa (hash: tFsnUzuCOPHEkB4f570fqaA0O4nTZQAQw1SUPG3ufxw=) 3: 9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa (hash: gmUV0Z8p6eaW6u9bMSNNxq/xKFhizs7ktPd6mWRC4Rs=) 4: OF0KfYMGxGaz-SUOj7rB0oXATdM.roa (hash: CAo9UtR7JTj2SOelEiYNWlJF8pjNdWWHM3G2TfLb0p8=) 5: QLl0BiRLQQcmJofbG5ZCw9no-EM.crl (hash: gTXGd7j6caze+f5dTVGhFxzVEdwuOTFGD4utEl6M8oU=) 6: YWfuggorcd1NM3cGc0ChXxoZNEw.roa (hash: VkuuURovRA8v+JjZIy/jQlWWecLETcf1ZXLwTZUlHvU=) 7: dXo62BJE8_TWzGjB924mtQGI6t0.roa (hash: ZKPOUpy2R7pDezGYw/+HyyJ3LtSfZmM+0w9aYkO7UaE=) 8: gvtwt4XkAQ7Z0R2_oweZhYn7SCE.roa (hash: awPr3bW3s/h+nd/17YaFTV6WgEVXFckOiQCqub9w4h0=) 9: hK51yH0MXa_3Zo5NqvHRwagkNZY.roa (hash: bKZkRKtCfxhAuH8t71x6a90QH8ee6WDJgiRFaE6k0Jo=) 10: ie67OR2yo5azvU54c3v4lv6RpSA.roa (hash: dLMrGnnfDPcjGqurVoVCUolQCVPAwVOwL/z3dpyr5Fk=) 11: u1KOR6Ev1eXNRu72T6geLVczjNY.roa (hash: Cdpt6dAlSWI61+bZpjlmoyuOjvDfy3KfoRUsH8wyb6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:37:46:b9:06:26:56:27:cf:15:58:cb:c5:5a:6f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843 Validity Not Before: Sep 24 07:00:32 2026 GMT Not After : Sep 25 07:00:32 2026 GMT Subject: CN=2d2780e01031d99bb10aa32e0e13b6399049c6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:26:91:5f:09:c9:40:3a:e5:df:ab:a7:c0:bf: 55:dc:86:70:d7:6d:66:dd:03:07:29:4f:7d:ae:29: b0:8c:cd:73:0a:92:a1:29:08:42:90:70:4e:7b:b5: d2:9b:0d:cc:ef:a1:46:5f:6b:9a:23:34:64:63:16: fe:fd:eb:6b:fe:64:97:66:57:16:4a:56:17:a0:5b: 05:83:1b:16:a8:0e:4c:2f:14:78:d7:54:a3:88:9d: 44:27:c8:3e:71:d0:16:5a:da:f6:29:89:a5:1f:77: 33:5d:31:83:ab:00:a7:f8:64:6d:bb:bf:3f:45:c0: fb:a0:24:5a:60:41:8b:87:31:f8:da:eb:5f:87:b2: 5d:f8:19:2c:5d:bc:95:b3:a9:1a:00:69:ae:6c:4c: 4e:ce:ab:5a:1f:ed:c8:ec:f2:8b:6e:9c:7e:35:8c: c2:e0:f3:b0:b0:de:e4:93:dd:a2:b4:af:80:34:e8: 28:81:14:0b:11:4c:44:02:d3:1f:2f:30:cc:21:65: d1:0a:87:b5:31:14:25:df:92:a6:10:b0:48:ec:1b: e2:4e:1a:d9:4d:31:61:29:f2:49:d6:22:7f:c5:67: 95:80:cd:31:db:8c:ae:47:c9:20:10:d8:81:f1:42: d5:b9:02:ac:95:af:b8:b1:31:4f:94:d7:55:65:a3: 27:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:27:80:E0:10:31:D9:9B:B1:0A:A3:2E:0E:13:B6:39:90:49:C6:CE X509v3 Authority Key Identifier: keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:47:7a:dc:24:71:8e:d9:80:84:ca:11:0d:6b:78:df:f2:c4: 0a:cc:8c:b2:e8:4b:26:84:eb:c8:30:4a:75:8d:9c:a4:c9:7e: 90:c6:89:c8:a7:c7:d7:73:d4:4d:80:f4:0a:7d:f6:b0:26:75: 84:99:fd:b8:a1:cc:15:d1:52:05:45:76:88:cc:cb:6f:44:c7: d5:0e:69:2f:48:1d:91:0c:88:37:93:9d:d6:9a:82:d6:fc:01: bf:70:d7:0d:41:30:f5:b6:87:5e:5c:c0:31:e7:da:29:4a:11: 48:91:34:c6:7d:72:b7:ad:f8:99:07:b2:0e:e8:a6:2a:e4:fc: d8:46:c3:48:9a:9f:b9:a4:1e:5a:12:7f:8e:53:eb:eb:3e:4c: cc:13:59:ae:f4:ec:10:6a:04:1d:ff:ac:e4:fa:b0:11:5c:2d: 6f:0c:7f:95:99:7b:ac:94:8c:95:d9:f0:6e:74:bb:45:f3:2b: c0:56:98:53:80:35:4c:d6:1e:56:a4:ac:ef:23:60:fc:f0:fe: 59:af:5c:93:b4:41:94:c7:f8:c0:58:7b:62:c7:10:fd:55:4d: 00:fe:61:b4:68:b1:8a:98:94:a5:43:26:41:b3:6f:68:1a:06: 62:eb:17:a2:b7:f1:c9:70:6e:53:19:26:d2:74:9d:f0:f8:fd: a1:30:a1:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDSN0a5BiZWJ88VWMvFWm/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYjk3NDA2MjQ0YjQxMDcyNjI2ODdkYjFiOTY0MmMzZDll OGY4NDMwHhcNMjYwOTI0MDcwMDMyWhcNMjYwOTI1MDcwMDMyWjAzMTEwLwYDVQQD EygyZDI3ODBlMDEwMzFkOTliYjEwYWEzMmUwZTEzYjYzOTkwNDljNmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyaRXwnJQDrl36unwL9V3IZw121m 3QMHKU99rimwjM1zCpKhKQhCkHBOe7XSmw3M76FGX2uaIzRkYxb+/etr/mSXZlcW SlYXoFsFgxsWqA5MLxR411SjiJ1EJ8g+cdAWWtr2KYmlH3czXTGDqwCn+GRtu78/ RcD7oCRaYEGLhzH42utfh7Jd+BksXbyVs6kaAGmubExOzqtaH+3I7PKLbpx+NYzC 4POwsN7kk92itK+ANOgogRQLEUxEAtMfLzDMIWXRCoe1MRQl35KmELBI7BviThrZ TTFhKfJJ1iJ/xWeVgM0x24yuR8kgENiB8ULVuQKsla+4sTFPlNdVZaMntQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0ngOAQMdmbsQqjLg4TtjmQScbOMB8GA1UdIwQY MBaAFEC5dAYkS0EHJiaH2xuWQsPZ6PhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTct YjE4ZDY3NTgzOTk0LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTctYjE4ZDY3NTgzOTk0 LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUd63CRx jtmAhMoRDWt43/LECsyMsuhLJoTryDBKdY2cpMl+kMaJyKfH13PUTYD0Cn32sCZ1 hJn9uKHMFdFSBUV2iMzLb0TH1Q5pL0gdkQyIN5Od1pqC1vwBv3DXDUEw9baHXlzA MefaKUoRSJE0xn1yt634mQeyDuimKuT82EbDSJqfuaQeWhJ/jlPr6z5MzBNZrvTs EGoEHf+s5PqwEVwtbwx/lZl7rJSMldnwbnS7RfMrwFaYU4A1TNYeVqSs7yNg/PD+ Wa9ck7RBlMf4wFh7YscQ/VVNAP5htGixipiUpUMmQbNvaBoGYusXorfxyXBuUxkm 0nSd8Pj9oTChQg== -----END CERTIFICATE-----Generated at Thu Sep 24 10:19:01 2026 by rpki-client