$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json) Hash identifier: jwSWCzYEhxbdT7SpsX0DKvBlWfuuG0QgOjO7Xc2VnNM= Subject key identifier: 43:C8:CB:A8:18:BB:A2:FF:85:1E:DA:3B:89:F2:B6:53:25:A2:F7:7F Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71 Certificate serial: 01A0DACDD5A9D5BBF69E87021121AD10611D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft Manifest number: 1A79 Signing time: Fri 25 Sep 2026 23:01:57 +0000 Manifest this update: Fri 25 Sep 2026 23:01:57 +0000 Manifest next update: Sat 26 Sep 2026 23:01:57 +0000 Files and hashes: 1: 2uP2P6fTf1qo4PWRRqgeE7TTacE.roa (hash: 9eSLYCb2FWzNsHTSZC1SEnCMNPegGVcyv6j21qK1mw8=) 2: 5rakYdNxKMjh5JNPex8iKzp_gtA.roa (hash: 6LspddKmtQtuac9ZuOl1VnhHP0Iq5oFWoFzvEG8ERXE=) 3: 814WTzXBXOIciV517t_FSJpheFU.roa (hash: 3rVBxA84Q0GQ5WcUB0js4QFJ7jGwBh1Rh823C6IzdeE=) 4: AogunF2vY6jwFQqloSaO1hbzpk8.roa (hash: it2LBzN2gPXG+ZsVF9U3YkMRcRGbDQsz+oO4JZZUzeg=) 5: JNtEUjv1u2nrR2kJY3xTk9eLdQU.roa (hash: y7e9qF3W4oZOepFOJNd5APdu3FIuFqB+iMZzLRxwKEo=) 6: PQhkPKvFMO7XAZJCK0yg6JOYn-Q.roa (hash: GclksRKdEgrXLLR1LhQTLSvorV7LCPoO0w2Ir6KfZ4M=) 7: Qi3PbQnrdw7q8NtmLcDOyzuEuok.roa (hash: Ene2M6hdbbKNY0YIKXvUxR9PygRHkyqGW28j+nRBH9E=) 8: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: /EnQyyAvjNpTdksmYcmq/07jYn2Wk4paAm6z/lgTW5A=) 9: UKQMI_1tAdL7QkXpECyLkKgiFXw.roa (hash: xCvizHfY/xMnYQ9a7uuh91R0ms1D7ktEV/mIEaRjfJ8=) 10: iB6K871-MTgrHCKR-pl3wKEY8VE.roa (hash: evrLdA7V1aTPB0+S9RwUtMXPCQscLGRKXxGpKmpY5Z4=) 11: of6LgZjZn377OWe4qW9VxsrXlzU.roa (hash: mzM/Cns9/j03lTiA+9ZfDQNcGWtBmHN0WQWYMBfi0eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 23:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:da:cd:d5:a9:d5:bb:f6:9e:87:02:11:21:ad:10:61:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Validity Not Before: Sep 25 23:01:57 2026 GMT Not After : Sep 26 23:01:57 2026 GMT Subject: CN=43c8cba818bba2ff851eda3b89f2b65325a2f77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:95:d9:27:dc:eb:29:43:8f:65:cc:94:65:ba: a4:6b:c7:bb:06:14:bd:4c:bf:c2:3f:1a:2b:fc:1d: 7e:de:63:16:00:79:e3:60:88:55:d4:3c:6e:7b:3b: 51:fa:1a:72:1d:51:b0:b7:a7:ed:13:3d:95:d4:0a: 48:e8:b6:60:e3:c3:ef:38:a6:cf:31:89:0c:ae:9c: b1:c7:4a:2d:60:3d:74:50:09:92:e1:94:59:21:2f: 07:b1:0b:d0:80:34:13:35:43:3c:79:c1:84:a4:06: 91:2f:7b:30:32:c6:c6:be:ba:6a:2c:b9:91:9a:3e: 53:16:79:cd:66:83:2e:69:6c:60:09:c1:5a:21:e9: 9b:12:bd:28:7d:71:3e:35:49:61:ec:1a:f3:85:66: af:3e:2e:c6:6c:2c:3f:1b:fe:58:d7:04:10:cc:88: 34:88:8a:ac:fd:75:df:20:d9:b1:41:71:ba:b6:b0: 8d:91:9b:53:c1:8a:4b:db:fa:a4:90:d4:50:59:17: 42:54:94:79:59:31:28:2c:c4:ba:e8:05:b4:6b:78: 36:14:de:aa:e7:ed:59:3e:4e:f0:af:41:e1:49:39: d8:53:49:43:bd:1e:0e:5a:7f:80:be:75:20:56:09: 5b:13:15:b2:e0:da:35:32:a3:d7:e9:88:ce:2e:14: 68:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C8:CB:A8:18:BB:A2:FF:85:1E:DA:3B:89:F2:B6:53:25:A2:F7:7F X509v3 Authority Key Identifier: keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e0:45:d8:84:8a:61:56:a6:1d:61:87:da:ae:f3:0f:3c:42: 02:ac:48:1b:35:fa:24:c2:7c:c5:8d:a8:1b:4c:b9:87:83:86: 3d:16:2d:41:60:10:a6:55:db:83:9d:08:0b:d0:02:49:e5:42: fb:61:fa:67:71:84:6e:f0:d6:bc:8d:57:9e:6b:d5:fd:06:45: 1b:0f:6c:ae:eb:7f:70:fb:2d:c6:2d:d1:54:16:8d:a6:07:0a: 32:4f:34:a5:1f:c9:23:aa:8d:cf:81:c4:a2:84:bd:1f:98:64: 2b:7e:5e:8f:d2:4a:db:2a:9e:45:46:25:33:e8:2d:f4:fc:8b: a5:51:f5:08:e3:32:be:02:91:70:b9:66:c6:ef:76:c0:71:ca: ca:de:da:2e:c7:a4:16:59:d1:4c:85:75:a7:e3:d3:b0:a2:76: 09:f0:95:37:dd:6e:28:7f:4a:21:be:28:a7:7f:e7:0b:60:3c: 86:ba:30:a4:f9:1a:08:19:17:22:bd:f7:e2:d1:c5:41:e4:0a: 2b:36:f6:12:25:b7:74:cd:94:1d:73:23:3d:ec:64:f2:da:61: f5:e8:c7:d2:ea:6c:44:cc:d5:19:04:33:02:2a:df:20:06:58: fa:a0:9c:f9:84:96:cd:33:a8:9c:3d:36:9d:b1:c0:1c:64:f8: 55:68:9f:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDazdWp1bv2nocCESGtEGEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk ZWZlNzEwHhcNMjYwOTI1MjMwMTU3WhcNMjYwOTI2MjMwMTU3WjAzMTEwLwYDVQQD Eyg0M2M4Y2JhODE4YmJhMmZmODUxZWRhM2I4OWYyYjY1MzI1YTJmNzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35XZJ9zrKUOPZcyUZbqka8e7BhS9 TL/CPxor/B1+3mMWAHnjYIhV1DxueztR+hpyHVGwt6ftEz2V1ApI6LZg48PvOKbP MYkMrpyxx0otYD10UAmS4ZRZIS8HsQvQgDQTNUM8ecGEpAaRL3swMsbGvrpqLLmR mj5TFnnNZoMuaWxgCcFaIembEr0ofXE+NUlh7BrzhWavPi7GbCw/G/5Y1wQQzIg0 iIqs/XXfINmxQXG6trCNkZtTwYpL2/qkkNRQWRdCVJR5WTEoLMS66AW0a3g2FN6q 5+1ZPk7wr0HhSTnYU0lDvR4OWn+AvnUgVglbExWy4No1MqPX6YjOLhRoTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPIy6gYu6L/hR7aO4nytlMlovd/MB8GA1UdIwQY MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt Zjg4OWNhMTYxYzAxLzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeBF2ISK YVamHWGH2q7zDzxCAqxIGzX6JMJ8xY2oG0y5h4OGPRYtQWAQplXbg50IC9ACSeVC +2H6Z3GEbvDWvI1XnmvV/QZFGw9srut/cPstxi3RVBaNpgcKMk80pR/JI6qNz4HE ooS9H5hkK35ej9JK2yqeRUYlM+gt9PyLpVH1COMyvgKRcLlmxu92wHHKyt7aLsek FlnRTIV1p+PTsKJ2CfCVN91uKH9KIb4op3/nC2A8hrowpPkaCBkXIr334tHFQeQK Kzb2EiW3dM2UHXMjPexk8tph9ejH0upsRMzVGQQzAirfIAZY+qCc+YSWzTOonD02 nbHAHGT4VWif4w== -----END CERTIFICATE-----Generated at Sat Sep 26 10:18:01 2026 by rpki-client