$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft File: 6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json) Hash identifier: Z7zQQlN8+SMnw0x4ZnTE/GT8z36ng67xdfYt0LRhCXU= Subject key identifier: 34:A0:28:A5:C8:A3:50:79:22:94:57:A2:96:A0:E2:A3:68:7C:DD:EC Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Certificate serial: 01A0D200D714798D1A0DB8D14D39722E86B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft Manifest number: 1A82 Signing time: Thu 24 Sep 2026 06:01:05 +0000 Manifest this update: Thu 24 Sep 2026 06:01:05 +0000 Manifest next update: Fri 25 Sep 2026 06:01:05 +0000 Files and hashes: 1: 1-0S5yqLaN3s-rfDorrxE4xmJkSY.roa (hash: xe08thfVWk/Q0PmRvIsVkTS/li36DVR1VhnOJhKWMg4=) 2: 1-LUBueVBqdwiFLK1gsB1AnGbiPQ.asa (hash: L6rsU1pcQ3cdDgJa7jGbs1XAAZhtjuh8eTrAlkKyq8Y=) 3: 3fCUHErbv2WtYx--n4nf1Q6-Ubw.roa (hash: VmDuAyLIouZrOeMJRlVFLUwqzbhKM9CHSnO4kIRdwDo=) 4: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: GRKAXbXB+mvL0Jxr1hagBBlMLjk89+S5o0YA3nv4U+A=) 5: BbRIR3kI21VUGCXjSDWllMbS-8k.roa (hash: EEgGaz+LiLIszuH7ULNxtMHJjtmHM3CUdnjiO3tprKI=) 6: O73kgAQ-kXlFxK4kvQOyEoxMTXA.roa (hash: ETBQDnDgpIBgdAIaW/tfoxKMAV0hJkP0bltM4DA6Q48=) 7: Ps8zJSRRSbDwX3XJR7eOmD7m2uE.roa (hash: 4gOrAZeHV5DljjLNX3EiWeFFJsFqa+d+OW/WO4pBac4=) 8: c7YCMDtvilpnAcHhUKUpazLH8YQ.roa (hash: p8eFTJPY5mhYNqyxOeRrt26FdTu0eyXi+YCF788HwNI=) 9: i22LYTAh0PcLuwu7sEyCzT-6xXM.asa (hash: DPM18lmzzP7eVh2MT51XAxQN2uj0C+J8vlqNWZv6bek=) 10: ox_RAZ62BnMtTtsni2E71dlvqdw.roa (hash: +gTLaHfV2T8wDVaZZ2TtzS3DP1Xu6/AIsWNOHGHf3mo=) 11: zbAORhJVXtMoGKcD9VvlKtXQvCM.roa (hash: Dme/MffDzRscTtpOm/eYuLZJmQW4bf9yIlFMyWJha0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:00:d7:14:79:8d:1a:0d:b8:d1:4d:39:72:2e:86:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Validity Not Before: Sep 24 06:01:05 2026 GMT Not After : Sep 25 06:01:05 2026 GMT Subject: CN=34a028a5c8a35079229457a296a0e2a3687cddec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7f:03:99:7c:91:d6:40:5a:0f:e9:01:34:76: d0:10:72:2b:2c:2e:3d:4a:f7:90:66:e8:51:05:ab: 04:8a:00:44:08:85:fc:cb:43:16:cc:5d:df:f4:f5: 1c:b0:33:77:6a:7e:c4:09:45:ce:f0:6d:56:40:81: d4:af:62:87:17:12:d2:bf:0c:a7:3a:4f:bf:e9:ae: c1:6c:64:e4:7d:28:1d:4d:3d:b0:13:f4:40:23:34: 2f:4d:5e:9d:09:39:5b:d2:6e:92:20:5a:2f:3b:b2: 3c:80:75:a0:18:de:e9:08:3a:33:41:40:64:61:36: 85:21:d5:a2:4d:b8:bd:69:f5:cf:e0:29:f8:e5:65: 16:c8:6e:d7:1a:1c:c7:2a:02:b5:06:bb:a1:71:a5: 4d:27:c2:79:35:b6:31:be:1a:e8:c1:a1:d9:67:92: dd:73:e6:84:fb:e2:f6:8a:30:20:02:ed:ff:91:f3: 33:56:a8:e8:37:bd:a9:71:7b:f0:4c:b7:fa:75:fa: 01:f4:50:b9:3c:db:ba:27:aa:eb:16:c6:21:69:4e: 99:70:37:8d:53:c1:03:0d:7e:27:3b:fe:45:b6:08: 61:05:20:2d:03:66:29:99:2e:7a:a9:71:0e:8e:2c: 89:77:17:95:ae:fe:26:31:d6:76:cd:5c:82:3c:26: d5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A0:28:A5:C8:A3:50:79:22:94:57:A2:96:A0:E2:A3:68:7C:DD:EC X509v3 Authority Key Identifier: keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:22:11:0d:37:bf:8c:f8:f2:10:39:dd:c1:9e:66:c0:0c:83: ad:ca:d6:17:15:84:da:08:af:d1:fd:66:f8:88:39:bb:6e:2a: c1:fa:6b:9e:21:6b:e3:d2:a2:c1:90:ee:3f:09:d4:e0:e7:e9: 99:54:5e:f7:5a:a7:6c:e2:f7:2a:87:83:19:e1:ac:fd:9a:22: bc:1a:5b:ae:c9:a9:58:73:25:a7:da:4a:91:e0:51:48:90:ec: 01:c3:47:9b:65:04:04:4d:b6:5b:bf:d5:1e:80:6b:69:54:1b: 34:5b:c6:ed:0a:97:c8:71:82:8a:56:44:60:3c:0b:e6:cd:18: 6d:11:6b:22:f7:61:16:2a:d4:d5:cc:c8:57:a6:09:d8:11:37: b1:f8:ae:ec:55:29:fd:ee:f8:08:21:aa:23:10:98:fe:70:43: 32:5f:45:4f:5a:9e:3a:0a:03:ec:5e:af:a0:d1:33:e9:00:a5: ba:e4:3d:61:5d:94:f0:0d:c6:3d:e9:1a:a5:67:7c:c1:e4:92: 26:c7:a1:21:36:64:63:02:43:24:e1:62:16:83:46:c5:3c:d3: 30:56:8b:18:30:00:51:8d:33:2a:57:4b:f4:e7:c5:14:54:ac: 05:1b:a1:29:0e:88:8d:3a:26:44:ee:14:0f:4b:38:f4:e1:21: a6:94:f7:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDSANcUeY0aDbjRTTlyLoaxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy M2UzZGIwHhcNMjYwOTI0MDYwMTA1WhcNMjYwOTI1MDYwMTA1WjAzMTEwLwYDVQQD EygzNGEwMjhhNWM4YTM1MDc5MjI5NDU3YTI5NmEwZTJhMzY4N2NkZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn38DmXyR1kBaD+kBNHbQEHIrLC49 SveQZuhRBasEigBECIX8y0MWzF3f9PUcsDN3an7ECUXO8G1WQIHUr2KHFxLSvwyn Ok+/6a7BbGTkfSgdTT2wE/RAIzQvTV6dCTlb0m6SIFovO7I8gHWgGN7pCDozQUBk YTaFIdWiTbi9afXP4Cn45WUWyG7XGhzHKgK1BruhcaVNJ8J5NbYxvhrowaHZZ5Ld c+aE++L2ijAgAu3/kfMzVqjoN72pcXvwTLf6dfoB9FC5PNu6J6rrFsYhaU6ZcDeN U8EDDX4nO/5FtghhBSAtA2YpmS56qXEOjiyJdxeVrv4mMdZ2zVyCPCbVDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSgKKXIo1B5IpRXopag4qNofN3sMB8GA1UdIwQY MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt YTg3MWVjYzIxMmE2LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2 LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0SIRDTe/ jPjyEDndwZ5mwAyDrcrWFxWE2giv0f1m+Ig5u24qwfprniFr49KiwZDuPwnU4Ofp mVRe91qnbOL3KoeDGeGs/ZoivBpbrsmpWHMlp9pKkeBRSJDsAcNHm2UEBE22W7/V HoBraVQbNFvG7QqXyHGCilZEYDwL5s0YbRFrIvdhFirU1czIV6YJ2BE3sfiu7FUp /e74CCGqIxCY/nBDMl9FT1qeOgoD7F6voNEz6QCluuQ9YV2U8A3GPekapWd8weSS JsehITZkYwJDJOFiFoNGxTzTMFaLGDAAUY0zKldL9OfFFFSsBRuhKQ6IjTomRO4U D0s49OEhppT33g== -----END CERTIFICATE-----Generated at Thu Sep 24 12:54:26 2026 by rpki-client