$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft File: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json) Hash identifier: h70WOTvll+Um8zFwamMmyz3GqxENJXWyB/oUDQAgmR4= Subject key identifier: EA:8E:81:7A:C7:8B:ED:62:D4:19:D6:F9:F5:72:C9:96:D3:21:E9:28 Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Certificate serial: 01A0C96B3A4557A6BBC54172043B45488457 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft Manifest number: 1A8A Signing time: Tue 22 Sep 2026 14:00:42 +0000 Manifest this update: Tue 22 Sep 2026 14:00:42 +0000 Manifest next update: Wed 23 Sep 2026 14:00:42 +0000 Files and hashes: 1: 2um_rS6WPk2IN6s5x2XbXkQen_M.roa (hash: B3h5JybIRNgVZgqeJwphCEgik9Z267VqHxwbsqTyFKg=) 2: 5du9oXm-5RnmJ8KX2xj_Zy0VqSw.roa (hash: Y1EwroZc2iGhdcqssdik2/Y5BQLLil5kyZQd3CFxooI=) 3: 8f-eDRc6_FXPO45wpxV1xiQ1HAI.roa (hash: qCD4Jc/TwmM8SzWErouUslVtMstyIPcxvXJzTBG565w=) 4: AQlhfGVcA8R2Bwt2uq11a9BJ3I8.roa (hash: ZpJgowIRgidE/63sx4+7oMD9312HUQ//RvFSY5dDQVE=) 5: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: 3zwPcPslCuVxyEtgYDE52bI6VI3957OaVkteOuCF01I=) 6: DewPVx0uxJChPazGVl04iEQt-GM.roa (hash: zJ7nbS6MIVpf02vap/KhBVzOnoGcoyj3FKo3YbsVGF0=) 7: NRE_ExP25AUx8aw3isiH4EnLbWo.roa (hash: SKLRbqjSGl9WDWUOA+lP72kkE1542Czk3hD2WUZlOgE=) 8: WLsy-DnnYnQhVtIJoLpzduDgWrE.roa (hash: V18CJCRRVUNGPvZK+aRf70kDiLaxF9fIzOBbbor2Dw4=) 9: b1zJ7NbuL57-e0rkevnmNIo0USU.roa (hash: 6oXQKWkeIUo+oie2lp60DcRhSM6jyLL6Sog8QbpX/bA=) 10: mWfbcxQdC8J-VBP4j7EBWfW3Qb4.roa (hash: osYbMfspLkdv49SbR62yA1rUcvBEuqW1/Mq+AH8uZCU=) 11: pcZnUT88SN1u2R3xPf6LVW5AwuQ.roa (hash: ZB/G3ZNzs5uxcuPvRWlbNalCCRVbwpgrXGxyYOGJMA4=) 12: xvB92g3viVT1q0eYULHN2quLguo.roa (hash: VRmr+2VnW18lzVv/zbO7wYNSjIEYoaGpdy+0x7pBFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c9:6b:3a:45:57:a6:bb:c5:41:72:04:3b:45:48:84:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Validity Not Before: Sep 22 14:00:42 2026 GMT Not After : Sep 23 14:00:42 2026 GMT Subject: CN=ea8e817ac78bed62d419d6f9f572c996d321e928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:83:9d:fe:aa:09:18:3d:fc:1d:b7:d8:84: 5e:f1:49:dd:9f:48:e5:a9:6f:df:1d:bd:44:30:ef: 7c:e4:4c:9d:13:8b:ec:84:c8:58:90:e4:8e:f4:05: 24:42:99:ba:5e:f7:c2:99:bf:84:29:0f:fb:2d:5b: af:1e:b2:da:69:7f:13:c7:2d:4f:db:cb:31:ea:ee: 26:5d:9f:0f:77:72:de:df:7b:0c:7f:62:95:95:01: d6:ba:7a:d5:e5:47:1c:4a:be:45:fd:cc:32:7c:9e: 21:23:7c:c7:d7:21:2d:4b:89:fe:2d:25:65:d3:2e: 41:c0:2f:0e:02:a5:84:e8:3f:06:ec:a0:75:a9:90: d0:bd:14:1e:07:31:e3:c1:14:c3:34:1f:61:c0:7c: 3b:23:8a:6f:a5:d1:8b:24:31:28:ab:16:fc:cc:11: c8:19:dd:e7:c7:f3:09:f0:61:39:47:7a:a3:2e:47: a4:97:2e:fb:73:dc:69:93:4c:24:54:cc:eb:f1:9b: db:f9:21:70:15:cf:ed:9a:63:32:a0:8e:e8:d6:11: bb:c9:d0:94:9c:dc:16:8a:01:25:24:d2:f7:ce:74: 9d:9a:e6:5e:53:2d:13:71:35:54:96:d7:55:36:20: d8:11:9d:34:76:cd:cd:14:c8:4f:c8:41:d2:63:49: a8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8E:81:7A:C7:8B:ED:62:D4:19:D6:F9:F5:72:C9:96:D3:21:E9:28 X509v3 Authority Key Identifier: keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7a:89:1d:f1:ff:ac:da:19:ee:2f:b4:2b:50:fe:9e:3b:83: f7:3d:ff:bf:f0:a0:9b:69:b0:b6:87:7a:cc:e1:18:3c:9e:30: de:2a:8a:b6:13:ee:12:32:30:79:ec:c0:06:e8:73:6d:01:35: a2:0d:70:c4:19:f8:7b:10:76:62:03:9f:2a:71:80:8d:35:39: d4:41:f0:71:6d:fe:3e:e9:e8:9a:eb:d3:be:c2:ee:9d:6c:33: 82:85:40:20:11:33:c5:43:74:59:82:8a:fa:77:3f:ee:27:9d: e3:b6:4c:cc:51:a5:4c:5c:4a:bc:b5:eb:dd:3a:da:63:50:a7: 16:db:dc:c1:48:a4:e4:b5:4c:aa:c5:a9:e2:40:48:29:91:24: fa:ca:33:c1:3d:03:c6:7b:25:8d:5d:12:bc:2c:02:f1:bc:25: bc:57:bb:0f:0e:e7:10:b0:ce:70:2d:96:ed:ab:fa:c1:7c:8b: 16:c9:d6:d3:94:78:9b:de:8a:3b:ca:29:d1:49:a6:f3:da:17: f1:86:a7:69:24:57:d0:ab:c8:63:9f:66:2c:38:01:24:8e:34: 84:4a:62:dc:3d:93:8d:1f:3e:71:67:a8:21:e0:6d:06:c1:a4: 9c:3b:48:b6:1e:36:8a:65:bb:44:0a:cd:44:27:8f:56:21:21: cd:3d:5b:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDJazpFV6a7xUFyBDtFSIRXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh M2Q0YjUwHhcNMjYwOTIyMTQwMDQyWhcNMjYwOTIzMTQwMDQyWjAzMTEwLwYDVQQD EyhlYThlODE3YWM3OGJlZDYyZDQxOWQ2ZjlmNTcyYzk5NmQzMjFlOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyyDnf6qCRg9/B232IRe8Undn0jl qW/fHb1EMO985EydE4vshMhYkOSO9AUkQpm6XvfCmb+EKQ/7LVuvHrLaaX8Txy1P 28sx6u4mXZ8Pd3Le33sMf2KVlQHWunrV5UccSr5F/cwyfJ4hI3zH1yEtS4n+LSVl 0y5BwC8OAqWE6D8G7KB1qZDQvRQeBzHjwRTDNB9hwHw7I4pvpdGLJDEoqxb8zBHI Gd3nx/MJ8GE5R3qjLkekly77c9xpk0wkVMzr8Zvb+SFwFc/tmmMyoI7o1hG7ydCU nNwWigElJNL3znSdmuZeUy0TcTVUltdVNiDYEZ00ds3NFMhPyEHSY0mo3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqOgXrHi+1i1BnW+fVyyZbTIekoMB8GA1UdIwQY MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt MmUxYzBhZjRmYWE0LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0 LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXqJHfH/ rNoZ7i+0K1D+njuD9z3/v/Cgm2mwtod6zOEYPJ4w3iqKthPuEjIweezABuhzbQE1 og1wxBn4exB2YgOfKnGAjTU51EHwcW3+PunomuvTvsLunWwzgoVAIBEzxUN0WYKK +nc/7ied47ZMzFGlTFxKvLXr3TraY1CnFtvcwUik5LVMqsWp4kBIKZEk+sozwT0D xnsljV0SvCwC8bwlvFe7Dw7nELDOcC2W7av6wXyLFsnW05R4m96KO8op0Umm89oX 8YanaSRX0KvIY59mLDgBJI40hEpi3D2TjR8+cWeoIeBtBsGknDtIth42imW7RArN RCePViEhzT1bsw== -----END CERTIFICATE-----Generated at Tue Sep 22 22:15:59 2026 by rpki-client