$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json) Hash identifier: LS/GkX458Yq7wrn8Yv+IaHV4t43yp4jcT2kjyu9mKm0= Subject key identifier: 41:22:44:77:0F:68:2B:15:F5:5D:21:32:6A:D6:8B:C1:91:35:E3:BA Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 01A0D0B6ED301DBBED6521EE32D6FB5D9C44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft Manifest number: 1A7D Signing time: Thu 24 Sep 2026 00:00:44 +0000 Manifest this update: Thu 24 Sep 2026 00:00:44 +0000 Manifest next update: Fri 25 Sep 2026 00:00:44 +0000 Files and hashes: 1: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (hash: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0=) 2: 7238-yc1zsJP5-yGaMOBc9f0LR4.roa (hash: URHGrmmmyevt5Yc3E+g4gLi9Y6wbhMdw/A5AP3gBz1Q=) 3: 8JXNaaQmDQHdM4yP_RNeiswPEDI.roa (hash: UUO1y8o89Fboq48v1C/MZYuzKEwlodMmFc6P3ytbtj4=) 4: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (hash: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0=) 5: Ho8BmWtRsGIfoh9TadeITydo350.roa (hash: jhic1+8GxEt2CK46n93QnO3HxEVdv0LVkgGPn/QSDf0=) 6: NDEJ4OPh2jQQg5h1HdKinOuNm1g.roa (hash: 6YV/mvu0IZaB1NRM8e6QdrWu4qWaOce8H7G5lo4LpOc=) 7: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: 85T/Mzg8e0QeuKkKNWTcaP+MvqgCwmOtk9XsgiLSleI=) 8: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (hash: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E=) 9: VlCsH-gKeuLV89RCvfubppUzoBM.roa (hash: E6tZ0jd2kOODThTzIfCZg56DVUHPrBwKWicp2pqqUq8=) 10: WLquCazhAB0ScMP5a1mkOMpQjSk.roa (hash: X6EOl+E5HOgYEVAmBJUO3eMgT+pMlGAkOYSNqnB4rac=) 11: _Sp9nWnMGENvs_5RlKIg522yEo0.roa (hash: 5BiB2YKH8y+FxStt90RRFoc5lwCZkm5vmcOChmEykmI=) 12: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (hash: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE=) 13: zLW84Gsa8lyQLXbWcT3Qg3ZGSrQ.roa (hash: UXTZQOitHqTP9IRhCn98pWCBLuimV0o0vCpqkwYBveU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:b6:ed:30:1d:bb:ed:65:21:ee:32:d6:fb:5d:9c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Sep 24 00:00:44 2026 GMT Not After : Sep 25 00:00:44 2026 GMT Subject: CN=412244770f682b15f55d21326ad68bc19135e3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:4c:f1:00:de:00:e3:9e:75:c9:63:20:aa: 35:93:58:ab:7b:95:96:43:56:81:44:2c:d1:fa:fb: a1:b5:6c:9d:1c:ea:5f:94:e2:16:41:0c:c2:1d:4a: 80:6e:21:56:ba:e2:b9:82:fc:19:03:01:8e:ca:43: d2:ff:c6:18:a4:b3:8b:48:fb:61:51:1f:3f:34:3b: 3b:d4:92:5e:02:8c:8a:3f:1f:e4:a0:8b:05:44:34: f4:a0:3d:fc:82:a3:5d:06:b2:40:50:5a:55:ea:88: 33:36:b2:11:76:91:fb:10:bc:6b:d1:54:20:68:8b: c4:ef:d7:a4:6f:70:bb:c5:af:53:89:d7:9f:e9:25: cb:4c:ac:ec:87:21:45:3c:a7:01:6f:55:04:dd:d1: 58:04:b2:22:2e:35:45:b5:b3:b5:80:f5:d8:41:2f: c2:23:80:49:4f:19:0f:da:72:97:ac:1d:62:b8:44: c6:a6:4a:c1:83:95:8b:9a:c0:34:eb:90:ae:3f:c3: cc:a0:9f:d1:07:6d:b9:cd:5e:30:bd:a7:d0:05:df: 93:5a:45:e5:5e:d6:8d:34:5f:ce:ce:a3:be:6f:20: cd:d1:c5:ef:9c:e7:c8:f1:c3:ec:ea:26:a0:84:88: 1b:b3:94:89:57:8e:2b:f4:bf:76:f3:52:6d:81:5c: 9f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:22:44:77:0F:68:2B:15:F5:5D:21:32:6A:D6:8B:C1:91:35:E3:BA X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:08:b8:c1:c2:f0:dc:06:cb:13:57:51:ae:9f:39:83:68:8c: de:52:a3:ca:b6:25:a5:7f:14:b7:1e:aa:b1:3c:3e:1c:31:40: 76:56:ec:97:ed:e3:f7:c2:91:34:10:cc:18:10:14:6a:3c:06: 31:5c:d3:e4:d3:35:7c:8e:04:3a:66:62:b5:9d:99:d7:b3:00: cb:fc:ec:32:f7:9d:c3:66:99:b5:b7:ed:f4:a4:06:ca:8d:e3: e4:a4:7a:50:45:7f:96:4f:42:ab:99:66:3c:c4:06:63:22:e9: cf:40:15:7a:00:ad:06:7e:93:85:9e:68:fe:2b:b3:2f:5a:b4: 16:e2:57:e4:00:82:9d:6b:d5:ae:a5:3a:ee:4b:93:8d:51:35: e5:ba:5d:c8:62:e6:ed:c6:6a:8a:80:dc:91:8c:43:b7:38:50: 13:b4:af:5a:f4:1c:17:8e:8c:c1:e6:96:76:c8:af:05:52:9c: 56:96:8c:7c:58:de:f7:08:28:6b:41:87:e5:90:e7:0d:9b:b2: c7:9a:b4:ba:e2:0e:77:ed:0f:75:62:4a:6a:f5:a1:ad:20:d1: 2d:4d:19:6c:5c:54:66:fc:08:31:1c:2b:41:a5:52:f6:64:a8: 6e:16:1b:29:96:ab:28:4c:74:2a:e3:7b:37:89:63:f3:2c:e4: 82:ee:57:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQtu0wHbvtZSHuMtb7XZxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYwOTI0MDAwMDQ0WhcNMjYwOTI1MDAwMDQ0WjAzMTEwLwYDVQQD Eyg0MTIyNDQ3NzBmNjgyYjE1ZjU1ZDIxMzI2YWQ2OGJjMTkxMzVlM2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvItM8QDeAOOedcljIKo1k1ire5WW Q1aBRCzR+vuhtWydHOpflOIWQQzCHUqAbiFWuuK5gvwZAwGOykPS/8YYpLOLSPth UR8/NDs71JJeAoyKPx/koIsFRDT0oD38gqNdBrJAUFpV6ogzNrIRdpH7ELxr0VQg aIvE79ekb3C7xa9Tidef6SXLTKzshyFFPKcBb1UE3dFYBLIiLjVFtbO1gPXYQS/C I4BJTxkP2nKXrB1iuETGpkrBg5WLmsA065CuP8PMoJ/RB225zV4wvafQBd+TWkXl XtaNNF/OzqO+byDN0cXvnOfI8cPs6iaghIgbs5SJV44r9L9281JtgVyfAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEiRHcPaCsV9V0hMmrWi8GRNeO6MB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAi4wcLw 3AbLE1dRrp85g2iM3lKjyrYlpX8Utx6qsTw+HDFAdlbsl+3j98KRNBDMGBAUajwG MVzT5NM1fI4EOmZitZ2Z17MAy/zsMvedw2aZtbft9KQGyo3j5KR6UEV/lk9Cq5lm PMQGYyLpz0AVegCtBn6ThZ5o/iuzL1q0FuJX5ACCnWvVrqU67kuTjVE15bpdyGLm 7cZqioDckYxDtzhQE7SvWvQcF46MweaWdsivBVKcVpaMfFje9wgoa0GH5ZDnDZuy x5q0uuIOd+0PdWJKavWhrSDRLU0ZbFxUZvwIMRwrQaVS9mSobhYbKZarKEx0KuN7 N4lj8yzkgu5XtA== -----END CERTIFICATE-----Generated at Thu Sep 24 02:43:04 2026 by rpki-client