$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft File: SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json) Hash identifier: kpxoNut7A6/fWhQbtI0nV2cic70+xuncOTUki1fgyyM= Subject key identifier: EF:1A:D4:FC:70:2B:DB:7B:42:F6:D7:7B:7F:70:85:05:72:A8:A0:59 Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 01A0CDB5F6B345EC48B50E8A01152ABCB740 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft Manifest number: 0BA0 Signing time: Wed 23 Sep 2026 10:00:49 +0000 Manifest this update: Wed 23 Sep 2026 10:00:49 +0000 Manifest next update: Thu 24 Sep 2026 10:00:49 +0000 Files and hashes: 1: 5cflrPSBczVw-y9CBdznGslTCz8.roa (hash: e3Ui7ThS6C0Gj8prOOjSxh7lUAWtygpEnNw9xX2dtRk=) 2: 6ikDq3uU-14xeZ06o1f5sBEku08.roa (hash: 14bAM4PQevceSeTCaULI+ouG0nOTQYIq9lETR/sCBX4=) 3: 6zmwiCnaR_RUV1zVvXd131O-Byk.roa (hash: wivF7cNRJAl3OyL7EJY6TuKfTwqgRld3+ZHQke6SRP8=) 4: 8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa (hash: ciLzKnjSavNPyQD1IQHv/gt0vWyFhjCiKLjRitLPEkE=) 5: DJA8iYfOt3bjbbEH0sfO-Yzt5D0.roa (hash: dll+XV6deSG185dIKUE72K/Hgk2Qi2c2WRrfDucz8Pg=) 6: DPMVT21xt_FxJ1sn3UX-_U68dhM.roa (hash: W+9Q7HyRT/GtNJeWW1rH3dBewR4z6axBBAIPrMJ0PUU=) 7: DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa (hash: MbxJlm+ziQoeXoBZ7l2IXv7uYhNPhhJgV3LLj54kjMg=) 8: HLY3yOfkVYAqEx3IXqQjGqSe60s.roa (hash: 89cRs5OEP6GzsmQJJPOS43nhrd5JryCvGoLQgmsG8Fk=) 9: IFDEhJ7WdnMP_iOIFV_PEMyMTFY.roa (hash: 3abxPKBoQtYdBt0dEdvRfKPwIMD697ubAlSThgqLZRY=) 10: OGHkr0sseqVyPYMaosc0EKOfAbE.roa (hash: wHhBT3+BNkPQLV5c3JD9yLqsApNS0AOyvlFX/QBAowQ=) 11: QbspjSgom0qmdSedksWxw1y_dkI.roa (hash: eJ1YS4oVCoR1VNmiqp1NCkjDzMJ9GIvRJ3pjx5vZ9ic=) 12: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: QvJtCKIodDU/zOXC9QfwH9hLtgOPYj9x9jQe25ztkmA=) 13: TOVytZLtGiR_loWDvv77N1q9Wfs.roa (hash: Sv4e/TvtoYqQVyB6uh9qVYGBsdkIHsts6lbRC1DO+ec=) 14: UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa (hash: Y4z7KLj7vfcDesQxa00pP19sxOBjnRSBjEe98F7tXaU=) 15: WgBBESiMNBhg0ejLbo4ygFVFK_g.roa (hash: fOGX3A1MJMqw5iFjseRV1GnR/NKzbA2c83gmI0QyUAc=) 16: bZJA4Zdk6OCETrYbfAEHSsuzwDE.roa (hash: IUm+Or+NvYeQ78zXKIY9OqKwxZRYHCF8Axsyp7t54Y8=) 17: cLp8aoUEerNehAr3h59hozd_gn0.asa (hash: H0H1PRm+pfO0EaD/QilESt/v2w81RZ9KkTdDOLHz0OM=) 18: q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa (hash: 1g4myUSs6hufFOhffJJdUxf69ZM3/4EE4AG3+gn7wds=) 19: r-jH3K8gcLw126eQ4FkoGo2cj9Q.roa (hash: WprvCGc4fvgZRtpPYXPu9X3gBWvFU60j9mgBknNXAj8=) 20: uLmKjHdh6xVL5Ct2SX4RrNBGZlY.roa (hash: M6ZErU+xYI38Ut27LDMzp6JcZbiEl5nEdPQAb8KQF+I=) 21: vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa (hash: s7mP1EwT7gSUHcvBRHCBoQGsDjEPpmRpeu0/iQN+vMQ=) 22: yaioAwQqgstiMhVwqwEHasXnYDs.roa (hash: B1OftcLanWUv1RXMYsVOlCmHJWT10XchoJjDrQXqjiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:b5:f6:b3:45:ec:48:b5:0e:8a:01:15:2a:bc:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Sep 23 10:00:49 2026 GMT Not After : Sep 24 10:00:49 2026 GMT Subject: CN=ef1ad4fc702bdb7b42f6d77b7f70850572a8a059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:3a:ac:17:d3:6f:7f:0e:d7:b5:26:9f:ed: e1:56:fe:d4:9e:75:c3:e3:78:10:19:d3:f8:a8:8a: b8:77:06:6f:34:25:a9:dc:55:b1:b3:04:23:8c:9a: 79:55:e4:af:f0:42:90:53:ba:64:f5:db:df:1e:72: ba:c0:9e:e0:e7:6f:e4:06:48:4f:bb:8e:4f:2d:17: 0f:d3:4a:ea:99:87:0e:c8:91:92:1d:17:6d:fc:d0: 69:68:79:84:2f:91:3b:3a:19:b4:72:00:b1:dd:3f: e6:f9:a3:7f:0d:a8:35:18:90:d3:5f:d2:97:cc:1a: bf:11:83:80:4e:4e:ea:7a:41:18:a5:20:db:e2:05: 00:06:47:58:3f:a3:30:fc:5d:cf:2e:d2:6f:16:1e: fb:e2:a4:81:ae:c3:06:91:81:74:b7:c6:2a:9f:84: e4:36:b6:d3:90:f7:76:8a:d8:4f:85:a9:ab:6a:c4: 20:4e:34:44:6a:c5:0a:82:93:a3:04:eb:b6:54:53: 92:11:15:75:48:e5:94:6e:44:de:c9:32:c0:59:52: 77:46:47:5f:4a:ec:17:9e:72:b2:1d:59:77:cd:b8: ca:24:f1:37:44:11:ea:78:11:e3:20:4d:03:00:3c: d1:08:ad:a5:96:73:7b:5c:31:d3:4d:ef:05:3d:e8: 8e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1A:D4:FC:70:2B:DB:7B:42:F6:D7:7B:7F:70:85:05:72:A8:A0:59 X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:b1:7e:61:8b:d3:7f:df:57:e9:e6:d0:59:f0:76:8c:6d:75: 3f:d5:d9:a3:c1:c7:17:95:15:1e:38:d5:ed:48:5d:ef:6f:89: 14:29:82:b8:55:ef:8a:b3:92:75:55:ce:b3:6c:92:26:e4:d8: 38:4b:84:ce:9d:9b:37:e9:c8:d2:a7:4a:b5:c3:70:e6:90:e3: 56:4d:ed:8c:0f:35:a2:15:5f:10:07:6d:67:2a:8e:ba:4e:7c: fa:2e:81:82:be:7f:a1:f4:fb:19:9b:56:14:48:69:fb:11:f5: 7d:92:75:07:47:8b:f7:e7:27:47:08:fe:86:5d:20:25:fc:f2: e5:08:d9:56:14:8d:2a:b9:d2:79:e7:df:83:ba:f2:21:f5:c4: 22:52:be:03:db:a0:92:b6:7e:43:46:3b:a4:c3:73:b4:6d:82: 7c:a4:ad:2a:5d:4e:bb:74:81:94:f6:a8:5b:f0:d9:1a:f1:50: 7d:25:07:15:9d:1b:ef:c8:f7:74:32:ad:a9:ec:5c:f6:b2:5b: 0c:09:63:e4:a6:79:ff:3b:30:21:70:44:d6:46:74:c2:bc:84: ac:44:45:b7:50:91:11:9c:83:4f:46:78:10:75:44:d4:cf:33: 59:d2:ee:45:d0:76:a1:8e:b0:b1:0c:78:da:04:78:4c:be:2a: e4:a5:cd:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNtfazRexItQ6KARUqvLdAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwOTIzMTAwMDQ5WhcNMjYwOTI0MTAwMDQ5WjAzMTEwLwYDVQQD EyhlZjFhZDRmYzcwMmJkYjdiNDJmNmQ3N2I3ZjcwODUwNTcyYThhMDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1M6rBfTb38O17Umn+3hVv7UnnXD 43gQGdP4qIq4dwZvNCWp3FWxswQjjJp5VeSv8EKQU7pk9dvfHnK6wJ7g52/kBkhP u45PLRcP00rqmYcOyJGSHRdt/NBpaHmEL5E7Ohm0cgCx3T/m+aN/Dag1GJDTX9KX zBq/EYOATk7qekEYpSDb4gUABkdYP6Mw/F3PLtJvFh774qSBrsMGkYF0t8Yqn4Tk NrbTkPd2ithPhamrasQgTjREasUKgpOjBOu2VFOSERV1SOWUbkTeyTLAWVJ3Rkdf SuwXnnKyHVl3zbjKJPE3RBHqeBHjIE0DADzRCK2llnN7XDHTTe8FPeiO0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8a1PxwK9t7QvbXe39whQVyqKBZMB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLF+YYvT f99X6ebQWfB2jG11P9XZo8HHF5UVHjjV7Uhd72+JFCmCuFXvirOSdVXOs2ySJuTY OEuEzp2bN+nI0qdKtcNw5pDjVk3tjA81ohVfEAdtZyqOuk58+i6Bgr5/ofT7GZtW FEhp+xH1fZJ1B0eL9+cnRwj+hl0gJfzy5QjZVhSNKrnSeeffg7ryIfXEIlK+A9ug krZ+Q0Y7pMNztG2CfKStKl1Ou3SBlPaoW/DZGvFQfSUHFZ0b78j3dDKtqexc9rJb DAlj5KZ5/zswIXBE1kZ0wryErERFt1CREZyDT0Z4EHVE1M8zWdLuRdB2oY6wsQx4 2gR4TL4q5KXNNQ== -----END CERTIFICATE-----Generated at Wed Sep 23 18:49:59 2026 by rpki-client