$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json) Hash identifier: VFXPPwkOgF3nH9A2CpdfPsY29FOA60B1XyuSIaQxbqQ= Subject key identifier: 7D:F6:3E:EE:B2:D5:DC:BF:E8:EB:CF:03:DE:33:E5:B5:08:07:57:77 Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 01A0D682F184566659C3535BC47D7BE822C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft Manifest number: 1A80 Signing time: Fri 25 Sep 2026 03:01:40 +0000 Manifest this update: Fri 25 Sep 2026 03:01:40 +0000 Manifest next update: Sat 26 Sep 2026 03:01:40 +0000 Files and hashes: 1: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (hash: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0=) 2: 7238-yc1zsJP5-yGaMOBc9f0LR4.roa (hash: URHGrmmmyevt5Yc3E+g4gLi9Y6wbhMdw/A5AP3gBz1Q=) 3: 8JXNaaQmDQHdM4yP_RNeiswPEDI.roa (hash: UUO1y8o89Fboq48v1C/MZYuzKEwlodMmFc6P3ytbtj4=) 4: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (hash: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0=) 5: Ho8BmWtRsGIfoh9TadeITydo350.roa (hash: jhic1+8GxEt2CK46n93QnO3HxEVdv0LVkgGPn/QSDf0=) 6: NDEJ4OPh2jQQg5h1HdKinOuNm1g.roa (hash: 6YV/mvu0IZaB1NRM8e6QdrWu4qWaOce8H7G5lo4LpOc=) 7: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: yhtv+kKOdvFAk8k5cC/cGywUJ+wbkJuRu7RcZTP5VeM=) 8: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (hash: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E=) 9: VlCsH-gKeuLV89RCvfubppUzoBM.roa (hash: E6tZ0jd2kOODThTzIfCZg56DVUHPrBwKWicp2pqqUq8=) 10: WLquCazhAB0ScMP5a1mkOMpQjSk.roa (hash: X6EOl+E5HOgYEVAmBJUO3eMgT+pMlGAkOYSNqnB4rac=) 11: _Sp9nWnMGENvs_5RlKIg522yEo0.roa (hash: 5BiB2YKH8y+FxStt90RRFoc5lwCZkm5vmcOChmEykmI=) 12: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (hash: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE=) 13: zLW84Gsa8lyQLXbWcT3Qg3ZGSrQ.roa (hash: UXTZQOitHqTP9IRhCn98pWCBLuimV0o0vCpqkwYBveU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 03:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:82:f1:84:56:66:59:c3:53:5b:c4:7d:7b:e8:22:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Sep 25 03:01:40 2026 GMT Not After : Sep 26 03:01:40 2026 GMT Subject: CN=7df63eeeb2d5dcbfe8ebcf03de33e5b508075777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:93:db:18:26:48:4b:2b:a5:67:51:d1:bf:fa: 94:86:bd:96:bd:ab:84:c9:da:58:8b:63:7e:15:f2: f0:67:aa:a5:34:eb:ed:ce:51:87:fa:82:33:17:55: d4:1e:73:de:9e:33:ca:35:54:89:9e:75:3c:7b:e0: 71:ce:96:5b:3e:70:60:63:f1:2c:98:de:5d:b1:c6: 82:e6:af:55:90:80:58:f0:ed:67:73:79:13:03:82: f7:80:e7:66:71:11:6c:66:ea:b4:55:92:5b:c1:c8: 37:8b:35:a4:c1:0f:d3:7c:b2:64:a5:a1:ee:4a:9d: e5:67:44:45:50:88:8c:bd:4f:9b:51:77:43:ce:ae: 3f:26:d7:f6:b8:8e:c6:fa:1d:5f:50:53:d9:3f:9d: 2b:99:d1:c3:fd:47:64:ec:3f:f5:d9:9a:5d:67:cb: a4:eb:ea:25:5d:2d:a7:5d:ca:26:72:a0:50:96:74: 0d:4e:dc:a4:f1:0d:bc:1c:31:eb:38:a2:91:96:4f: d2:ce:47:14:f1:df:d2:91:14:82:72:4c:70:63:41: 86:c3:63:27:d6:a1:eb:0c:ed:a2:1a:61:52:e2:95: c9:08:a5:58:5e:8b:43:b9:2e:4d:80:b0:30:d4:04: 70:ab:78:ca:cc:e8:96:c1:8e:00:c8:c6:72:5b:a7: b7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F6:3E:EE:B2:D5:DC:BF:E8:EB:CF:03:DE:33:E5:B5:08:07:57:77 X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:44:6d:47:a6:59:f2:63:cf:01:ee:c4:22:c9:c4:8b:1c:09: ad:f0:55:d2:04:6f:cf:cd:a9:1e:b8:c0:d4:5c:1c:21:ba:81: 26:2f:3b:e7:42:b0:c2:52:60:f7:d9:72:4d:0d:84:b3:2c:a6: 08:0d:00:cf:15:cc:05:ce:37:aa:1f:44:b6:8a:29:25:72:77: 37:51:46:48:b1:28:b0:fb:09:23:a2:44:64:6f:68:28:44:a4: 44:f5:59:30:56:92:75:5c:8c:23:e0:59:de:76:b2:89:eb:45: 05:d5:24:fd:b6:26:31:96:56:0d:9c:f8:cf:0c:27:0d:3f:86: da:ba:6c:3a:a2:db:dd:44:54:26:66:b3:91:25:14:2d:88:68: ba:08:75:4e:c3:d6:13:c1:68:cb:fd:0a:ff:5b:2f:2d:16:da: 30:a6:42:39:23:16:f5:dc:33:97:65:c3:82:34:66:9e:30:53: 5f:da:e0:78:7c:9a:87:a0:8f:74:da:8f:4d:65:2a:29:b9:54: bc:c9:f6:b2:b1:f9:9f:7e:86:86:f2:f5:52:e1:fb:c5:0e:a9: 40:db:9d:08:b1:44:b9:fb:1b:b4:95:a4:53:f0:39:34:d2:ff: 81:0d:2f:c7:b2:59:a8:31:af:54:41:51:01:b2:5a:68:22:c7: 91:80:c9:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDWgvGEVmZZw1NbxH176CLGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYwOTI1MDMwMTQwWhcNMjYwOTI2MDMwMTQwWjAzMTEwLwYDVQQD Eyg3ZGY2M2VlZWIyZDVkY2JmZThlYmNmMDNkZTMzZTViNTA4MDc1Nzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JPbGCZISyulZ1HRv/qUhr2WvauE ydpYi2N+FfLwZ6qlNOvtzlGH+oIzF1XUHnPenjPKNVSJnnU8e+BxzpZbPnBgY/Es mN5dscaC5q9VkIBY8O1nc3kTA4L3gOdmcRFsZuq0VZJbwcg3izWkwQ/TfLJkpaHu Sp3lZ0RFUIiMvU+bUXdDzq4/Jtf2uI7G+h1fUFPZP50rmdHD/Udk7D/12ZpdZ8uk 6+olXS2nXcomcqBQlnQNTtyk8Q28HDHrOKKRlk/SzkcU8d/SkRSCckxwY0GGw2Mn 1qHrDO2iGmFS4pXJCKVYXotDuS5NgLAw1ARwq3jKzOiWwY4AyMZyW6e3+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH32Pu6y1dy/6OvPA94z5bUIB1d3MB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0RtR6ZZ 8mPPAe7EIsnEixwJrfBV0gRvz82pHrjA1FwcIbqBJi8750KwwlJg99lyTQ2Esyym CA0AzxXMBc43qh9EtoopJXJ3N1FGSLEosPsJI6JEZG9oKESkRPVZMFaSdVyMI+BZ 3nayietFBdUk/bYmMZZWDZz4zwwnDT+G2rpsOqLb3URUJmazkSUULYhough1TsPW E8Foy/0K/1svLRbaMKZCOSMW9dwzl2XDgjRmnjBTX9rgeHyah6CPdNqPTWUqKblU vMn2srH5n36GhvL1UuH7xQ6pQNudCLFEufsbtJWkU/A5NNL/gQ0vx7JZqDGvVEFR AbJaaCLHkYDJ7w== -----END CERTIFICATE-----Generated at Fri Sep 25 14:21:26 2026 by rpki-client