$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json) Hash identifier: /Cc/zdanjXLtvk1AFpq245MOB/fmiIMRryyOAcRektM= Subject key identifier: B7:94:97:B7:FB:10:67:AD:81:D3:76:89:31:EC:02:82:E1:4F:14:5C Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 01A0D0800BB11DFA8ED39B85E512399ADDD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft Manifest number: 1AAC Signing time: Wed 23 Sep 2026 23:00:47 +0000 Manifest this update: Wed 23 Sep 2026 23:00:47 +0000 Manifest next update: Thu 24 Sep 2026 23:00:47 +0000 Files and hashes: 1: 6cPzePL8SbPhYxlEre30SLCYl-Y.roa (hash: bpE4jQ6I0nBPjXRqOCXt82xgQ0N1iRPYG2gk58BlGfE=) 2: 7qKC_f93I4x5vZAkFd7YPrFcC7k.roa (hash: Fej8whp10bdKNIubAsMMxHxf8nDoH0W086yoYql/4Y0=) 3: AglMX7mwwb3rspJEIopyVPwTx-E.roa (hash: S+AWhAQbQR4GQpkHiPCQOCsaczJj/pHTNHnGM4CmrlA=) 4: ItLnYEbliO9uy4pN2f9Nx-cbnMU.roa (hash: SC8dz/gz97zrc/Tqdl9uM99+iCk/s/X41bIC+YpTYTI=) 5: MNvipI6k91242S53W3jqVcArQhc.roa (hash: 7sDpPYB99HElo2KA5xuF+lvuTcscLhsFKunpulQrN5o=) 6: MiUKM4-anjUIiLLo25o4aW1endE.roa (hash: 8GJk2lpNvqF8G6oHGKOgI8d2pjeWdDUhOm/xZPhFJK8=) 7: U2EVUUWlWvbUAILqaxAgK8pY0KE.roa (hash: P61yHP4ZBPMnRJW1hcXnzx/7WhRn7HOpJpj+yy4Yx4A=) 8: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: TKc80MXOWMCXVXFj7xoAySjDUHqnpw4NlO39EfyPJhs=) 9: WFdUi3XXatfTABnfBpngGAHzARo.roa (hash: kKjPRwwZCBaY9u1h1EFLYB9g9DPTFuUTOwPzWAxE6M4=) 10: bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa (hash: LIqVQ9mxztvdOqUbAJcArQV2MAsX+TwnaJ0MIMH4BK4=) 11: dvCXrpuIgKHCZtQqB3diL4N4JNk.roa (hash: fvscbXWy0N/msqi2rtIwXgUHt2kq1AX6g+9LTX7Mfrk=) 12: wiv8BGLIxUUMQwOeROx0j4rSHpg.roa (hash: 0dTxqq6Mcxp0f/baeK9P3ozslv5RRG7NpV1hP4JK7gg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:80:0b:b1:1d:fa:8e:d3:9b:85:e5:12:39:9a:dd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: Sep 23 23:00:47 2026 GMT Not After : Sep 24 23:00:47 2026 GMT Subject: CN=b79497b7fb1067ad81d3768931ec0282e14f145c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b0:1a:29:e7:d2:d8:d2:04:77:61:62:59:53: 1c:aa:47:a2:51:c4:38:8a:5a:62:ea:04:b6:c6:52: 56:62:62:02:db:4e:72:d0:c1:b8:02:6d:41:e7:3f: cf:a0:b5:5f:d1:e7:7e:e0:40:2f:5a:db:1e:04:f6: b8:53:56:36:ad:21:f2:8e:67:01:1c:f2:4c:d1:94: 59:b2:18:ea:17:e2:cb:31:81:0e:1e:17:66:ab:2a: c1:be:b5:68:5f:9b:56:e2:93:61:ef:c9:42:b1:b6: f9:0a:77:38:37:83:07:67:40:90:07:6a:50:c3:98: a2:2b:5f:2e:1b:be:b3:22:53:87:6e:42:ce:40:ca: 02:db:0d:ef:02:f6:de:62:52:95:3a:7f:57:e0:5e: 48:40:06:d1:8a:ca:c4:4e:bb:d1:c4:b5:e6:ba:ca: 17:b2:0b:75:b8:54:3d:f7:6a:fa:70:bf:69:45:2c: 04:d9:10:db:c1:f2:d0:bf:09:6e:bd:a3:2a:26:b9: f4:22:1e:09:44:c6:24:34:a8:5c:9f:e2:5f:1e:3d: b4:a2:37:38:bb:02:5d:32:f2:3b:f3:1c:47:62:db: 61:42:ff:d0:f8:1d:51:76:d8:aa:82:f8:26:8c:1c: 03:28:da:3b:63:0e:33:1e:c4:25:62:b4:f2:8d:f4: ae:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:94:97:B7:FB:10:67:AD:81:D3:76:89:31:EC:02:82:E1:4F:14:5C X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:e7:19:76:d2:43:53:57:51:2e:ae:69:96:a4:f8:7c:ba:b0: a9:7b:b4:1b:6e:29:6b:b9:92:1e:f7:83:91:11:48:e6:5d:8b: 39:12:a7:40:89:ec:0e:b2:9f:8e:1d:b2:6a:6f:7d:3a:87:e3: 92:9f:46:54:79:df:3c:cc:73:eb:c8:cb:6a:28:0a:0d:92:88: b5:18:32:cd:bf:d9:69:2e:61:f9:0f:84:bf:77:c9:96:ad:25: 01:2d:65:60:3c:05:ee:1b:23:07:01:a3:5d:d6:fa:c9:05:bc: 43:29:82:fb:a9:83:55:94:11:a4:9f:b6:2a:73:80:4f:af:94: 4f:24:73:57:19:d4:fe:2e:74:bf:4a:cb:5d:80:56:91:cb:f7: 5a:c8:e3:a3:2e:0a:16:66:c0:9a:fa:e2:ac:4a:e7:09:cf:73: e7:bb:eb:14:e3:fe:4f:36:c1:c1:fe:ce:18:12:fb:f8:bc:4d: 78:55:6e:55:95:30:42:fd:96:8a:1c:89:2b:8e:b5:8f:a3:7b: 65:66:3f:fe:c5:ac:dd:56:08:e9:db:e8:64:2f:a2:bb:a7:d6: 98:b9:23:fe:1b:34:b1:d1:2b:2c:6b:6d:90:d1:45:2f:68:c3: 1a:63:4f:1e:d7:6a:fa:2a:70:43:42:54:e8:6d:ac:e5:9a:95: b9:d4:ab:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQgAuxHfqO05uF5RI5mt3QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjYwOTIzMjMwMDQ3WhcNMjYwOTI0MjMwMDQ3WjAzMTEwLwYDVQQD EyhiNzk0OTdiN2ZiMTA2N2FkODFkMzc2ODkzMWVjMDI4MmUxNGYxNDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLAaKefS2NIEd2FiWVMcqkeiUcQ4 ilpi6gS2xlJWYmIC205y0MG4Am1B5z/PoLVf0ed+4EAvWtseBPa4U1Y2rSHyjmcB HPJM0ZRZshjqF+LLMYEOHhdmqyrBvrVoX5tW4pNh78lCsbb5Cnc4N4MHZ0CQB2pQ w5iiK18uG76zIlOHbkLOQMoC2w3vAvbeYlKVOn9X4F5IQAbRisrETrvRxLXmusoX sgt1uFQ992r6cL9pRSwE2RDbwfLQvwluvaMqJrn0Ih4JRMYkNKhcn+JfHj20ojc4 uwJdMvI78xxHYtthQv/Q+B1RdtiqgvgmjBwDKNo7Yw4zHsQlYrTyjfSudwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLeUl7f7EGetgdN2iTHsAoLhTxRcMB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOcZdtJD U1dRLq5plqT4fLqwqXu0G24pa7mSHveDkRFI5l2LORKnQInsDrKfjh2yam99Oofj kp9GVHnfPMxz68jLaigKDZKItRgyzb/ZaS5h+Q+Ev3fJlq0lAS1lYDwF7hsjBwGj Xdb6yQW8QymC+6mDVZQRpJ+2KnOAT6+UTyRzVxnU/i50v0rLXYBWkcv3Wsjjoy4K FmbAmvrirErnCc9z57vrFOP+TzbBwf7OGBL7+LxNeFVuVZUwQv2WihyJK461j6N7 ZWY//sWs3VYI6dvoZC+iu6fWmLkj/hs0sdErLGttkNFFL2jDGmNPHtdq+ipwQ0JU 6G2s5ZqVudSruA== -----END CERTIFICATE-----Generated at Thu Sep 24 03:10:21 2026 by rpki-client