$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: pm+kJ7+3rSUYDBkMs/ECEdSNhkllc9dkdBOIBjciwjA= Subject key identifier: E6:38:E5:62:51:DC:FD:13:12:20:5F:ED:9D:20:F4:6E:43:6C:F0:31 Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 01A1DEDE991EC668F639AD9812726063A714 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 1B17 Signing time: Sun 15 Nov 2026 11:01:32 +0000 Manifest this update: Sun 15 Nov 2026 11:01:32 +0000 Manifest next update: Mon 16 Nov 2026 11:01:32 +0000 Files and hashes: 1: A0jJG1saLwhFpwXvphN5KLkIp7E.roa (hash: zfUzOQxZDjIQpzcBLbTZxhWmdADgguB1bEK9a5hzld0=) 2: BHJrH90HA7e2j36fHZGtluntvoI.roa (hash: Y13mf0+6dWn2wsiZuzG7gygvh4nWO0T3oCMxSoXnKls=) 3: I3Qz77k2oYxzlmKadcI15VK2Xho.roa (hash: rl1+7VSSJCLWAX7YF+ZUOE9VZc/4GpcEkb9o7QBoLJw=) 4: IUNo-G5ABIhSuSWdeiVCc3h9D4A.roa (hash: LzcrEnLFMAnlZ+5zqbHv6+pvv/Iv59lNp1OzlwME3F8=) 5: Pwm-W2XqZjbGSCW1vqwh0IMaZZc.roa (hash: MOGwB7iZKu1QkN/hiCIWIk9cs+bF15Y23HgeypcVdhw=) 6: Qh-cWlvCK3ENJMeQ5Kdj5j-CntM.roa (hash: QNgm0CjiYNQ8HH3mx5fg020kz1pfu7xHIb8nNopQXGU=) 7: _4I_-jCH3XR23JxHVWzlSOPi3_M.roa (hash: tqFTpY9AJoIMPhinhdWGv8n5l6XDT7XH/JbG8DY2pa4=) 8: kz88XGl4i-o90qHpgWaNT6qB9F4.roa (hash: iFw0bXeL0s+Rwtq0iRLlZLd1+3x1hxhmoVT6WC3MudE=) 9: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: HzCEEovnGB1gdF7/gEPe9CF+pWb2cv///94oRSeTRxk=) 10: sqmM075pYoIhRN4MwnW9o487rF8.roa (hash: I1CZglIvCm1ewemqOSJLikUmJGVYj4wQzxEvNc+9woA=) 11: vCq8VVeEIofiFQLrkv4khGyN3iM.roa (hash: +sZQ4wGcyHE3djaR6nEoYJEVQLBZat/sIPQiTRwtVBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:de:99:1e:c6:68:f6:39:ad:98:12:72:60:63:a7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Nov 15 11:01:32 2026 GMT Not After : Nov 16 11:01:32 2026 GMT Subject: CN=e638e56251dcfd1312205fed9d20f46e436cf031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c9:2f:ee:df:ea:26:eb:6b:00:78:8d:de:99: b2:da:51:36:44:5a:c4:f4:1c:31:d6:2a:9a:0f:a2: de:28:fd:c7:b3:a7:71:e8:ce:92:42:12:98:3f:1d: d4:16:f7:ee:6d:15:15:ee:0f:81:e5:ee:3f:fe:09: 49:82:b7:91:f0:a6:95:07:7f:ee:d0:ef:2f:29:a6: 99:a9:5d:4f:1a:93:04:ca:52:9b:24:b7:78:6f:87: c4:6d:be:f3:08:cc:f7:98:0b:1c:6e:1b:50:2e:d6: 53:0a:02:b2:63:6f:34:85:a1:e9:66:5d:d5:a7:b1: 66:9f:90:1b:2d:d3:a9:c2:a3:df:7a:3d:38:94:5d: 32:f4:c0:09:41:80:72:54:6d:12:22:dd:47:53:fc: 0e:bf:8e:9a:60:b0:65:a2:f2:60:2b:97:73:a1:00: 36:9b:d6:c2:06:87:4d:1e:dd:8a:a9:c0:12:40:78: 1d:6b:ef:c9:6a:76:82:85:55:67:6a:fb:a7:c7:41: 79:34:80:ca:e6:cb:2a:a1:8e:c4:c3:31:28:5e:eb: fd:7d:e0:71:a6:67:98:6a:43:a8:93:d5:a5:4b:c5: e4:1b:1c:a7:80:36:0a:fb:af:ee:4b:72:cb:6d:b6: 42:2a:01:90:03:a5:15:4b:6e:95:4b:3d:35:30:74: f5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:38:E5:62:51:DC:FD:13:12:20:5F:ED:9D:20:F4:6E:43:6C:F0:31 X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a8:47:f0:60:24:f8:d6:85:fa:fb:33:bf:3c:2b:ef:40:7e: fc:22:48:8d:39:d3:ba:41:5f:67:bb:c1:38:93:79:51:0c:d2: 02:e7:a3:ff:2a:23:41:a0:fb:51:3e:be:d9:90:af:16:48:f6: 80:70:31:05:58:c3:af:59:63:b7:92:4a:f0:bf:37:2a:3d:0e: 79:4f:e1:ea:84:5a:2b:b2:e3:03:fe:d3:7c:a6:d6:08:7a:f8: e2:60:17:22:ab:3c:f2:57:b8:c9:57:22:80:a5:e3:52:4a:4f: 76:fc:85:40:aa:76:5e:c7:2a:cb:ee:ff:ff:36:66:d3:f2:9a: 6f:96:39:57:03:e4:c2:6a:8c:80:79:f7:6b:8e:5b:bd:1d:af: 4a:39:76:a7:c8:df:5a:da:8a:d8:6d:49:25:5b:3a:87:aa:39: 9e:8e:bb:bb:ce:f5:12:52:e8:83:ee:51:66:fc:bc:f2:6c:6a: 0b:61:33:f9:b6:9a:d9:f1:08:31:71:ca:03:13:25:69:5c:7c: ec:17:68:ea:7f:90:db:8b:1d:93:78:5e:b9:e3:b6:81:5c:ba: be:34:3b:8a:48:a0:7f:75:cd:7d:eb:68:1c:d0:c7:c3:55:36: a8:df:f0:a0:81:e2:ea:92:30:84:3e:1d:d4:98:59:01:b4:d2: 72:ae:f7:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHe3pkexmj2Oa2YEnJgY6cUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjYxMTE1MTEwMTMyWhcNMjYxMTE2MTEwMTMyWjAzMTEwLwYDVQQD EyhlNjM4ZTU2MjUxZGNmZDEzMTIyMDVmZWQ5ZDIwZjQ2ZTQzNmNmMDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48kv7t/qJutrAHiN3pmy2lE2RFrE 9Bwx1iqaD6LeKP3Hs6dx6M6SQhKYPx3UFvfubRUV7g+B5e4//glJgreR8KaVB3/u 0O8vKaaZqV1PGpMEylKbJLd4b4fEbb7zCMz3mAscbhtQLtZTCgKyY280haHpZl3V p7Fmn5AbLdOpwqPfej04lF0y9MAJQYByVG0SIt1HU/wOv46aYLBlovJgK5dzoQA2 m9bCBodNHt2KqcASQHgda+/JanaChVVnavunx0F5NIDK5ssqoY7EwzEoXuv9feBx pmeYakOok9WlS8XkGxyngDYK+6/uS3LLbbZCKgGQA6UVS26VSz01MHT1nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOY45WJR3P0TEiBf7Z0g9G5DbPAxMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVahH8GAk +NaF+vszvzwr70B+/CJIjTnTukFfZ7vBOJN5UQzSAuej/yojQaD7UT6+2ZCvFkj2 gHAxBVjDr1ljt5JK8L83Kj0OeU/h6oRaK7LjA/7TfKbWCHr44mAXIqs88le4yVci gKXjUkpPdvyFQKp2Xscqy+7//zZm0/Kab5Y5VwPkwmqMgHn3a45bvR2vSjl2p8jf WtqK2G1JJVs6h6o5no67u871ElLog+5RZvy88mxqC2Ez+baa2fEIMXHKAxMlaVx8 7Bdo6n+Q24sdk3heueO2gVy6vjQ7ikigf3XNfetoHNDHw1U2qN/woIHi6pIwhD4d 1JhZAbTScq73dw== -----END CERTIFICATE-----Generated at Sun Nov 15 16:32:24 2026 by rpki-client