$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft File: miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json) Hash identifier: tgdd8bGL7e94/wjFQk8A9mYqo7T8sfvP8tD7khJgogg= Subject key identifier: 3B:1C:FA:58:8A:8A:3F:75:B2:6B:76:EA:BE:32:E7:CB:C4:74:B4:8A Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Certificate serial: 01A1D9EF5775DFF39E4F846A266E54EBAA77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft Manifest number: 0CC6 Signing time: Sat 14 Nov 2026 12:01:43 +0000 Manifest this update: Sat 14 Nov 2026 12:01:43 +0000 Manifest next update: Sun 15 Nov 2026 12:01:43 +0000 Files and hashes: 1: 4BtZ6ImulGiBNPfFEyIkenVvnSE.roa (hash: 6h+jPwLu4nddov8mWqAqvJNAzlSrWOgSVAeEWaQAHMQ=) 2: 9dGHInAQI-j4vyLy3UUNRAYsuCY.roa (hash: Q9ame2KwxdqQfHrlASmNDuZYejwWS5cB+ic/WNNh4SE=) 3: Gc-zxgRLIzAQa_iFPqWdSCs1AfA.roa (hash: knk2ar6caQbw//JlOcHZhkt4Z0WhcJB+DOpi0h0a7F4=) 4: HUdkOXLhBSaGi7zaB3tiAzHsu2w.roa (hash: SMC3snHw7F/Tr45ZUYM0iuFzgEgu3dYKECc195mdzRs=) 5: ZBdtDqtan4ryfsX_DPoSWN_nnIM.roa (hash: mMR9AMjlqz3mZdhz4HhiNub8llzDHhmNDp6KeOjkBNo=) 6: iMagr2JhNrn6UcBo9-V-8mQcTn4.roa (hash: mQklS7JkHJd3eY4Nb4US8i0zJjbD5uDxAwa3Ul/Mehk=) 7: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: 4W7FsCVyzfFOWmBk3d2Fi4bhuHeIhTJsndNdVJkW1Jk=) 8: pTIdOhwN38ILsZQYi8bIDMjeY4U.roa (hash: GtMRQsNo+pmOf3YedJ1j8ncQIy9S7xqsYIsqepUk4Dw=) 9: tkLKI36bEE_d9mFrnpG75Jz1duc.roa (hash: GQR5CqcIcifEV/UVBCebbmLSOnvxcbQORub4i3S8oOk=) 10: ycU_XNZEXN413MBQCsimYNHq3Uc.roa (hash: Nto1BYyts37ycUiG2XmvVx1RqM7RGKIW4OTTPggZvXE=) 11: zt6aVptNzEemFtVcszL1t-xA0vs.roa (hash: pSOP40u7PQPwSGBic+DInKoefhITjHCDk1ttR6rrtpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 10:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:d9:ef:57:75:df:f3:9e:4f:84:6a:26:6e:54:eb:aa:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Validity Not Before: Nov 14 12:01:43 2026 GMT Not After : Nov 15 12:01:43 2026 GMT Subject: CN=3b1cfa588a8a3f75b26b76eabe32e7cbc474b48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a4:e3:d0:f8:4b:32:36:d2:c8:ea:6f:34:c9: 79:9e:4b:af:bf:30:67:52:a7:b3:57:97:9a:17:65: cf:0e:a8:ff:53:94:a0:9c:0a:f8:a4:00:5d:3b:b9: b5:e0:26:d5:d1:6d:62:9a:4a:73:85:61:e4:37:69: 20:1b:f6:06:c9:30:98:f6:c1:fe:53:60:45:b6:5b: ef:66:52:17:0e:e8:97:40:01:07:fe:c3:89:35:9b: 63:30:33:99:40:3e:3b:27:48:47:20:06:b3:c6:f0: a7:94:16:b1:26:e8:40:91:36:8b:af:61:bf:c5:9b: db:09:88:1e:09:65:e3:78:fe:2e:88:33:fc:b3:67: af:be:ef:0f:76:3d:80:b0:2f:97:54:12:a4:1a:6c: 48:9e:5e:b5:3d:1e:a9:8d:d3:df:d7:90:78:5d:90: cc:8b:1d:ad:61:84:9f:8c:da:55:2e:27:48:29:fb: 24:22:1e:4d:ea:b1:26:ba:bd:58:b2:6c:a2:af:1f: 03:65:a6:d5:b6:5c:e4:e8:6e:fe:7f:37:3a:b9:14: fe:0d:14:dc:c4:cb:61:46:90:1b:d3:56:35:10:b8: 62:10:01:4d:6c:4b:86:3a:3c:df:79:c8:f3:a4:64: 20:bd:52:5a:cb:9b:62:e8:a0:be:87:f7:a5:fe:49: 93:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1C:FA:58:8A:8A:3F:75:B2:6B:76:EA:BE:32:E7:CB:C4:74:B4:8A X509v3 Authority Key Identifier: keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:db:bf:64:c2:44:8a:e2:ea:89:25:3f:cf:33:e7:59:4c:e9: b1:f6:eb:d1:71:b8:2d:18:6f:d2:94:de:81:ad:f1:78:de:b2: a6:1a:b1:1e:95:3f:57:0b:fe:58:85:ff:77:40:61:5b:46:a2: a6:a3:37:a6:b3:5a:af:57:bf:c3:81:45:c1:da:d4:cf:4f:5b: 80:16:8b:b0:36:ed:60:95:13:e4:12:92:80:b8:00:57:64:a5: e4:ae:9d:36:69:cd:a2:c9:0a:4e:92:6d:95:cc:86:b0:8c:97: 50:f7:30:54:b3:9e:4e:a5:a4:6e:db:ee:b1:28:eb:ec:9e:fa: d3:9a:fd:a5:26:99:a6:e8:59:3d:65:49:de:ed:16:3a:17:6b: c4:f9:32:fa:07:d7:02:6b:68:85:3a:c9:9a:e4:92:8c:f8:99: 51:15:76:d5:ac:f4:ed:46:32:4b:d7:8e:16:69:b2:2d:02:b9: 38:9c:d3:98:c6:a9:89:14:37:d4:11:3b:94:3c:b4:bc:2f:91: fd:db:90:39:48:04:86:cd:74:b5:44:92:08:b7:4b:cb:2c:2f: 68:58:e7:a0:a8:c1:7a:ee:ca:9d:09:88:c6:9b:2a:a3:a4:ea: 19:09:49:2c:cd:be:3d:b3:13:2b:43:f7:e0:2f:90:f2:3d:8c: 29:88:22:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHZ71d13/OeT4RqJm5U66p3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0 YmY4MDAwHhcNMjYxMTE0MTIwMTQzWhcNMjYxMTE1MTIwMTQzWjAzMTEwLwYDVQQD EygzYjFjZmE1ODhhOGEzZjc1YjI2Yjc2ZWFiZTMyZTdjYmM0NzRiNDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKTj0PhLMjbSyOpvNMl5nkuvvzBn UqezV5eaF2XPDqj/U5SgnAr4pABdO7m14CbV0W1imkpzhWHkN2kgG/YGyTCY9sH+ U2BFtlvvZlIXDuiXQAEH/sOJNZtjMDOZQD47J0hHIAazxvCnlBaxJuhAkTaLr2G/ xZvbCYgeCWXjeP4uiDP8s2evvu8Pdj2AsC+XVBKkGmxInl61PR6pjdPf15B4XZDM ix2tYYSfjNpVLidIKfskIh5N6rEmur1Ysmyirx8DZabVtlzk6G7+fzc6uRT+DRTc xMthRpAb01Y1ELhiEAFNbEuGOjzfecjzpGQgvVJay5ti6KC+h/el/kmTtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsc+liKij91smt26r4y58vEdLSKMB8GA1UdIwQY MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt NDhkNWZmNGJhMjU1LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1 LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdu/ZMJE iuLqiSU/zzPnWUzpsfbr0XG4LRhv0pTega3xeN6yphqxHpU/Vwv+WIX/d0BhW0ai pqM3prNar1e/w4FFwdrUz09bgBaLsDbtYJUT5BKSgLgAV2Sl5K6dNmnNoskKTpJt lcyGsIyXUPcwVLOeTqWkbtvusSjr7J7605r9pSaZpuhZPWVJ3u0WOhdrxPky+gfX AmtohTrJmuSSjPiZURV21az07UYyS9eOFmmyLQK5OJzTmMapiRQ31BE7lDy0vC+R /duQOUgEhs10tUSSCLdLyywvaFjnoKjBeu7KnQmIxpsqo6TqGQlJLM2+PbMTK0P3 4C+Q8j2MKYgiNA== -----END CERTIFICATE-----Generated at Sat Nov 14 20:52:15 2026 by rpki-client