$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json) Hash identifier: hYBFsB5xLixlZoEeoHzW9tIhS6twVsMDkuBpkFwKGDY= Subject key identifier: 90:61:04:8D:20:B9:57:96:52:BB:E1:9A:0F:73:FB:1B:05:8E:42:73 Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Certificate serial: 01A100914F765641CB56FC099086ABA754CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft Manifest number: 106C Signing time: Sat 03 Oct 2026 07:01:25 +0000 Manifest this update: Sat 03 Oct 2026 07:01:25 +0000 Manifest next update: Sun 04 Oct 2026 07:01:25 +0000 Files and hashes: 1: 0ZgQJqVgdfnRZDVgpPvaD-Dzv6E.roa (hash: r5fe+/Due4NZC1alMzrb0UAbeRWncZoeXVNrq7sfX6I=) 2: 0szAMahK1oQnINJK81wlTT6Btig.roa (hash: SZ/iPl1/uEv70XbCNZiszMUzRfgvtHmx/hWYhWGapmo=) 3: 1BYbQVIuZci3v2SJ1lPBRcKopC0.roa (hash: 4k0iveKSc7qYV/Hrii5KFzItmAd9JCdByjYJZZltOTg=) 4: 6V0B2XbUiwZg1uwyso1jKVGrbd0.roa (hash: EhVsz4uU5vPtA18PjB+zS+ctkDe0JVsTRno6/EDARaw=) 5: GvCdkK_WFNni6j1A1wcGWF7UVkQ.roa (hash: B73L31CSXnj3RW8bntsMgtTsreruLzDFUsANn6DFMPQ=) 6: IioJCPvNdNGLMAa_qgwnTe7OHHA.roa (hash: 6db291fyuLEJb9GA//u7Cn1OZhghcTilKR1drZ7PPM8=) 7: USAO41jbUP97p--JRu_ZqtNe5EI.roa (hash: LfdCpC2uNJXwWHbUHSlZAnK3PC0CH3cNb7AHvc9pYvs=) 8: UW-4UFZx7To3RNwelVOgzAwhD_o.roa (hash: eiBKYL64skKUAlgyf8e0asSrepS7YuL7BO8UWyOpmg8=) 9: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: RIFUahvrtIVHcpLyU7wA926QWs+kfIrl6CHXco1cIBA=) 10: XR8VM1EvNL7sWYYKJOlMIsJdia0.roa (hash: fBss7mgIT+jvqqxAE/g6H97kqC0eCcZI1+zi2IjDIjw=) 11: blTJDmoe7j0pG2imb4d5RmwKNV8.roa (hash: lkdPoALJpUXszKPczWtHD0TM29xFr2I3iJ+TcSagtdk=) 12: kjxWd4U66N2G3Y4Ss8NOkBU4rs4.roa (hash: Lh3WoxdQyHUINKZzWX43jjRHwq3dN4GxIBUo7levdrc=) 13: uLXkPJJGCQggfPVEvwg4j2jXSfc.roa (hash: QyMAcsM16I5ZIrDa81UR8j8msdGLV+toeP7AIBOmd5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:00:91:4f:76:56:41:cb:56:fc:09:90:86:ab:a7:54:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Validity Not Before: Oct 3 07:01:25 2026 GMT Not After : Oct 4 07:01:25 2026 GMT Subject: CN=9061048d20b9579652bbe19a0f73fb1b058e4273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b2:0e:1c:d5:cc:7b:59:df:d8:1d:9b:a7:e4: 53:57:ed:1f:41:cb:c3:14:c4:63:5b:3a:e3:d5:1a: e0:bb:2f:05:d9:af:ae:86:91:fa:1e:87:ae:68:dc: 31:70:ba:ad:a1:9d:ad:62:0c:1e:3f:46:30:36:a6: 41:9e:7e:d0:82:2b:45:55:1c:2d:13:d7:22:ca:79: d7:14:a9:4f:e1:4a:7a:76:54:78:6e:4a:6a:ea:9b: 38:9b:55:25:f4:19:d7:34:5d:32:fe:0d:e2:03:ac: ad:28:fd:23:be:1e:88:dc:4d:1e:25:8b:9c:b5:54: 3b:5e:c0:a9:f3:15:3e:48:54:3b:2c:7f:94:ae:6c: 67:ec:cd:00:59:42:d3:94:61:e6:2f:8b:0f:c6:91: b4:19:48:14:06:70:7a:4b:c0:6e:af:bd:d7:3a:73: c1:b9:81:af:11:9a:f6:9b:1e:35:e7:ab:9e:75:c7: 6d:d3:31:b9:29:f5:98:e7:2f:0a:9e:5f:50:b9:e0: 1b:b6:b1:4f:2e:f0:76:08:a3:ce:02:d8:ab:5c:f7: 5f:de:49:2c:57:f2:7a:a3:bc:b0:a2:95:34:2f:d2: 34:c3:75:15:93:d3:6e:16:df:71:24:4a:6f:60:73: be:9e:18:e0:4f:ac:46:a2:31:76:0a:fd:d4:f0:d4: 33:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:61:04:8D:20:B9:57:96:52:BB:E1:9A:0F:73:FB:1B:05:8E:42:73 X509v3 Authority Key Identifier: keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:98:e4:31:97:86:b3:4d:de:d8:2b:51:fc:74:fc:42:1d:d3: d0:60:b2:6f:f6:ce:24:99:9e:f7:87:e5:34:c2:7d:84:8d:f6: 5f:dc:a5:41:5a:6a:cb:97:e4:96:62:cf:c5:2d:ca:35:05:dd: 4e:d1:78:f1:eb:c3:02:6a:e4:87:70:b5:bb:b9:58:db:ad:29: e1:3a:fe:21:c0:c0:ae:2b:49:ed:ae:35:47:b7:c2:fe:a0:d5: c2:a6:fd:7c:47:49:dc:c2:d2:a6:39:10:56:30:22:d1:06:c5: 9f:2e:f0:29:92:d9:75:21:16:86:a6:9a:e2:bb:a7:4e:89:85: ac:6c:1e:cb:25:de:10:96:ee:ab:a3:ba:2e:53:75:c3:f9:3e: df:11:a4:35:00:e7:c4:b4:85:f4:5e:fa:52:0a:7e:f9:2c:a0: 77:98:2b:2e:6c:46:ed:b5:e6:77:72:fa:45:18:f5:68:ef:f5: 49:39:d5:e1:aa:a5:29:56:50:dc:66:4b:32:08:30:9a:0a:7d: a4:46:54:d4:77:5f:97:5f:4c:c2:16:d6:82:75:34:4f:02:db: 6a:da:fe:ce:ec:bf:97:09:4b:87:02:bc:53:27:b1:84:57:5a: 64:1a:48:b1:c1:f2:1b:2f:29:b8:dd:e5:3f:8c:38:de:9d:95: 77:a7:18:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEAkU92VkHLVvwJkIarp1TNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx OTZhYTEwHhcNMjYxMDAzMDcwMTI1WhcNMjYxMDA0MDcwMTI1WjAzMTEwLwYDVQQD Eyg5MDYxMDQ4ZDIwYjk1Nzk2NTJiYmUxOWEwZjczZmIxYjA1OGU0MjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17IOHNXMe1nf2B2bp+RTV+0fQcvD FMRjWzrj1Rrguy8F2a+uhpH6HoeuaNwxcLqtoZ2tYgweP0YwNqZBnn7QgitFVRwt E9ciynnXFKlP4Up6dlR4bkpq6ps4m1Ul9BnXNF0y/g3iA6ytKP0jvh6I3E0eJYuc tVQ7XsCp8xU+SFQ7LH+Urmxn7M0AWULTlGHmL4sPxpG0GUgUBnB6S8Bur73XOnPB uYGvEZr2mx4156uedcdt0zG5KfWY5y8Knl9QueAbtrFPLvB2CKPOAtirXPdf3kks V/J6o7ywopU0L9I0w3UVk9NuFt9xJEpvYHO+nhjgT6xGojF2Cv3U8NQzwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBhBI0guVeWUrvhmg9z+xsFjkJzMB8GA1UdIwQY MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt ZGQ4NjI3NzRhMDkyLzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJjkMZeG s03e2CtR/HT8Qh3T0GCyb/bOJJme94flNMJ9hI32X9ylQVpqy5fklmLPxS3KNQXd TtF48evDAmrkh3C1u7lY260p4Tr+IcDAritJ7a41R7fC/qDVwqb9fEdJ3MLSpjkQ VjAi0QbFny7wKZLZdSEWhqaa4runTomFrGweyyXeEJbuq6O6LlN1w/k+3xGkNQDn xLSF9F76Ugp++Sygd5grLmxG7bXmd3L6RRj1aO/1STnV4aqlKVZQ3GZLMggwmgp9 pEZU1Hdfl19MwhbWgnU0TwLbatr+zuy/lwlLhwK8UyexhFdaZBpIscHyGy8puN3l P4w43p2Vd6cYKA== -----END CERTIFICATE-----Generated at Sat Oct 3 11:16:25 2026 by rpki-client