$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft File: 2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json) Hash identifier: VNDZzjcIb1PA4wOxc/wSiAmsroe0oBxFXottwtU9+WU= Subject key identifier: 51:30:8A:5C:B8:0C:F7:CF:0C:8F:C9:E5:DC:FC:41:A9:79:18:37:88 Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Certificate serial: 01A0DB726FF5F3E660FCB6CF277E2C4ACEE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft Manifest number: 1A7A Signing time: Sat 26 Sep 2026 02:01:45 +0000 Manifest this update: Sat 26 Sep 2026 02:01:45 +0000 Manifest next update: Sun 27 Sep 2026 02:01:45 +0000 Files and hashes: 1: 0EOOKZ73EuVKb6azhsikToGYTJ4.roa (hash: tOeqHdzaa5uQmGPeE+9GIo5atcoydPGRdU/daaN1H/s=) 2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: yxfbtel7c1oSzpmq3DJuqISULEEXf/AUGGHT1Ang+z0=) 3: EUeWkU0aryB-YkR2M3TsErGD9Is.roa (hash: gK62/o9yO+OyvLt7cRE+ehw4Ouq7VrrbTSmr3DLojOI=) 4: SpICVub50OICM4yiQk6ulqnyBsU.roa (hash: 1SZAmfW+sJIqJsSkqCTN19QGqChFmDq0AZE9eacMzAI=) 5: W9lGuLlyK3oCTZXvmQuqTo4C2yg.roa (hash: G4w7b1CN5DpM/EZuMWQLQvxT+EVuYLv3nYfxDAbKhDk=) 6: jUElcf1JFP10uCVqAsvtMStO4o0.roa (hash: xrxSdpsBwKaZISPc2IK2Gw1lDuUsBX/PpqeA4Z3a8cs=) 7: o09lL4OudMDTh_jmHHeTIRn2L5s.roa (hash: ctwy00D7K53oO1gqUQQpnsVurkNSXddz4U1vX79+KpM=) 8: pn6Y3GCXjjHBqnK-2a8dWoJu9As.asa (hash: asd3kKFSLHLrOnSUbXKA6WurWf6oqSngwKQtRaOmKfY=) 9: yn6euPUsjq8bRXFpjTNGPdRM13Y.roa (hash: IGe548/q8hO5ei6AedK5a51FhkUkqFo8BXPppwB9Vlw=) 10: znNyesTwbEHb5GdVovxJsLLM9KQ.roa (hash: WbfDTvPg/i+BiVxKsZsH5gFpX+Sz+6FiIPk4KG/O+AA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:db:72:6f:f5:f3:e6:60:fc:b6:cf:27:7e:2c:4a:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Validity Not Before: Sep 26 02:01:45 2026 GMT Not After : Sep 27 02:01:45 2026 GMT Subject: CN=51308a5cb80cf7cf0c8fc9e5dcfc41a979183788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:22:8d:72:24:46:68:e8:32:96:85:c8:9f:ce: 7c:ec:1f:08:ce:ed:7b:f8:5a:eb:84:eb:b1:07:53: 0a:f5:68:23:ce:d8:c0:bb:85:b9:69:1b:93:90:a7: f4:47:22:de:00:b9:df:56:a7:59:1f:f8:10:b8:1c: 2e:5a:a7:12:22:24:8f:eb:df:7f:1e:4d:bc:aa:2e: bb:e2:97:ea:c3:9b:a2:07:f7:39:bc:08:77:9d:72: 54:69:0f:32:29:65:89:27:bc:0f:1b:1b:7e:d7:0f: 4f:f8:10:c5:ed:62:ba:ce:ba:2a:32:16:5e:c7:9d: 4c:b8:b1:8b:38:3c:a3:83:47:a7:cc:dc:72:67:df: 39:83:a2:0d:26:66:23:67:2f:fa:34:1f:71:a6:9d: 7a:5d:f3:b1:0c:e9:2a:37:5e:18:3c:e6:9a:1f:df: 79:47:b4:04:c9:38:d6:6d:ab:78:93:07:76:9b:fc: 1c:16:15:fa:63:e6:67:f5:47:28:5b:bf:ff:ce:30: 2f:d1:93:48:86:11:aa:b8:5a:e7:38:7d:af:2d:1d: 04:ac:41:d4:3b:be:6e:f4:95:cc:d5:b6:45:6c:74: 2c:c0:77:0e:99:8a:5f:3e:d7:13:2b:2e:15:38:20: 18:5c:ab:27:de:d0:9f:26:33:97:c7:22:f0:15:45: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:30:8A:5C:B8:0C:F7:CF:0C:8F:C9:E5:DC:FC:41:A9:79:18:37:88 X509v3 Authority Key Identifier: keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ef:1e:c6:6e:ab:04:72:bb:f1:51:94:92:61:d4:b1:56:64: 34:af:9d:ff:19:a0:04:ec:cd:36:84:de:60:2c:6f:98:ec:65: 0b:2a:6e:41:4a:05:3e:f2:b7:d3:e5:52:bf:eb:16:d9:2d:ce: 50:77:96:88:7f:e2:7c:16:c9:f2:f8:ea:df:b8:f1:40:30:7a: 95:87:63:83:b4:03:5d:01:cd:e3:7a:1c:20:7c:45:4f:2b:d8: 1f:96:a6:68:74:09:ea:15:10:8c:ff:86:43:6a:8b:e0:8a:eb: 4b:89:f3:89:95:63:48:34:dd:27:71:75:8f:7b:71:ac:2b:f3: 3c:ba:dc:42:86:20:0c:22:c1:16:56:07:dc:a4:a0:79:32:12: 6e:4f:d0:14:23:28:0b:b5:c4:e6:0d:fc:de:25:dd:22:ba:7e: ab:bc:8e:39:e7:9a:b4:34:9e:08:e9:b7:31:a6:09:73:f7:e1: 98:01:f2:f3:a2:90:41:1f:0d:60:41:6a:ba:b3:10:6a:a0:7b: 8a:a3:36:fd:7b:4b:51:a9:56:02:23:24:e1:74:ef:36:c4:bf: fc:34:e9:86:ca:9f:4c:0b:8a:05:8c:80:eb:b9:c2:21:f8:61: f4:fc:ac:68:90:cc:51:08:bf:a5:83:e6:b9:37:97:ec:04:9f: 4e:ee:2c:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDbcm/18+Zg/LbPJ34sSs7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmMwYmVjNjBkMGJhY2UxODg5Njc3YmQ5YmI5MDE5MGNj NGZkMjIwHhcNMjYwOTI2MDIwMTQ1WhcNMjYwOTI3MDIwMTQ1WjAzMTEwLwYDVQQD Eyg1MTMwOGE1Y2I4MGNmN2NmMGM4ZmM5ZTVkY2ZjNDFhOTc5MTgzNzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSKNciRGaOgyloXIn8587B8Izu17 +FrrhOuxB1MK9WgjztjAu4W5aRuTkKf0RyLeALnfVqdZH/gQuBwuWqcSIiSP699/ Hk28qi674pfqw5uiB/c5vAh3nXJUaQ8yKWWJJ7wPGxt+1w9P+BDF7WK6zroqMhZe x51MuLGLODyjg0enzNxyZ985g6INJmYjZy/6NB9xpp16XfOxDOkqN14YPOaaH995 R7QEyTjWbat4kwd2m/wcFhX6Y+Zn9UcoW7//zjAv0ZNIhhGquFrnOH2vLR0ErEHU O75u9JXM1bZFbHQswHcOmYpfPtcTKy4VOCAYXKsn3tCfJjOXxyLwFUXogQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEwily4DPfPDI/J5dz8Qal5GDeIMB8GA1UdIwQY MBaAFNn8C+xg0LrOGIlne9m7kBkMxP0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjkt MzQ2OTAzNGZhNDQxLzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjktMzQ2OTAzNGZhNDQx LzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALe8exm6r BHK78VGUkmHUsVZkNK+d/xmgBOzNNoTeYCxvmOxlCypuQUoFPvK30+VSv+sW2S3O UHeWiH/ifBbJ8vjq37jxQDB6lYdjg7QDXQHN43ocIHxFTyvYH5amaHQJ6hUQjP+G Q2qL4IrrS4nziZVjSDTdJ3F1j3txrCvzPLrcQoYgDCLBFlYH3KSgeTISbk/QFCMo C7XE5g383iXdIrp+q7yOOeeatDSeCOm3MaYJc/fhmAHy86KQQR8NYEFqurMQaqB7 iqM2/XtLUalWAiMk4XTvNsS//DTphsqfTAuKBYyA67nCIfhh9PysaJDMUQi/pYPm uTeX7ASfTu4s3g== -----END CERTIFICATE-----Generated at Sat Sep 26 11:13:35 2026 by rpki-client