$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft File: VXSsb0rWwSAzgipHmNLj59ujPVc.mft (raw, json) Hash identifier: DBhNr3XZ0mSUk/vZsAQTE4lOgcEK79En7x9d0fbRRTs= Subject key identifier: 8F:BB:9B:F3:FC:4E:B0:CD:A0:17:5F:2B:BA:AC:B2:1C:35:89:FF:62 Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee Certificate serial: 7E29612C7F9B0346DD0261C2A90E653E68960EBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft Manifest number: 08 Signing time: Wed 04 Nov 2026 17:13:19 +0000 Manifest this update: Wed 04 Nov 2026 17:13:19 +0000 Manifest next update: Sun 08 Nov 2026 17:13:19 +0000 Files and hashes: 1: 0a8b6e8d-7c30-4fa2-b009-7b99eeca32ec.roa (hash: /3jikbp63mDWoeMVfQGFbGGg8jUzRZHNP7ek79X6IyM=) 2: 4735d6a5-b185-4b15-b64f-0d5131ea71b5.roa (hash: nlVADDNGE7+ZKgb+kgvT07XWUk96FLbvjKsv+7d2UVo=) 3: 6ae3720b-b158-42c2-ace1-ec0f74e21739.roa (hash: IpTd81eFbvpL23dExFz1cGm1Ic9oThUrkq/+VTEp/78=) 4: 9aefc989-f280-4c34-8791-8734e3e984c2.roa (hash: pAQEsPwH6Ms86nGIHjj4WWhBN9DMzW+tpDG1DogCR/I=) 5: VXSsb0rWwSAzgipHmNLj59ujPVc.crl (hash: E/XdHoVLcSOZKonHuS1A+EIFi1+RsLX7YtuYk0KyxIo=) 6: afeeb8b2-1d77-47bf-9aa4-fc2aaec74b23.roa (hash: B2quuVaiqNl4SsPv8ug9nPUiXdxYufpGQov/SI4waNM=) 7: b15da18c-cd37-4fe6-ac45-45e48bd6863b.roa (hash: O1ITKnCeUA7mW1qek89DhzD6TDzutYc4dYWbidgl1/Q=) 8: b2415bdd-3465-4d81-b0aa-75151771afb2.roa (hash: yA68RGsxF7pxzhcH5cMzkLT7r7m/E4NZgk8a1F0UfaU=) 9: cf051d11-4d97-48be-af2f-84b6a9fcf4ab.roa (hash: UTlp9OeXFrkBU8EMPTnmQZnNdIYFGwJV0BTF9HXfd68=) 10: dd7b850d-7406-49fd-83c6-2404f7a4895a.roa (hash: t2I3xMEzXx4LaxXfgDm1XYKwXJ4TnzRvpP0qqh7pxfY=) 11: e091280a-1e65-4f5c-acb0-0bd7f826aee9.roa (hash: c1A4qHQeyhFn+AZ4iMBrH644Ia9eJYK4SNf2tQR6HIY=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:29:61:2c:7f:9b:03:46:dd:02:61:c2:a9:0e:65:3e:68:96:0e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee Validity Not Before: Nov 4 17:13:19 2026 GMT Not After : Nov 8 17:13:19 2026 GMT Subject: serialNumber=33580ff8e066e5b4b3ee594ecd2fda4292b7bf361ac4be66b108fe7c1e995bcf, CN=4004ffc2-d53c-4b2c-831b-89e215f51105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:90:bb:0d:36:93:76:ed:b1:60:69:76:25: 7a:7d:b1:8b:1a:04:a9:ec:91:a5:22:09:97:18:6b: de:8e:5a:28:70:ca:ab:24:8f:61:57:3d:98:49:54: 5d:42:19:51:0d:cf:a4:7d:eb:9e:bc:39:00:af:56: 96:b9:f8:21:73:eb:cf:5b:bc:67:c4:dc:7f:8c:90: b1:62:05:fe:81:85:2f:5c:a6:ac:a8:b4:18:13:4e: 2e:22:b4:aa:fa:f5:9b:2f:db:0f:e5:f1:77:6b:a9: 05:05:ec:1b:90:05:eb:8d:0f:3c:5e:e3:f6:ee:b7: bb:8d:36:1e:59:c0:94:5b:8d:cf:2f:58:20:87:ac: ac:3c:86:a0:ab:1e:5d:d0:e8:01:70:37:6f:e1:71: 2c:af:9f:1d:2a:ce:4d:6a:5b:61:4a:aa:aa:db:5c: be:7d:5d:96:20:e1:08:df:0a:2f:75:86:4a:ef:be: dc:43:4c:a1:34:53:22:a2:af:5a:14:77:a5:c8:14: 67:bb:bd:19:fc:c1:59:ef:61:af:40:e1:c5:77:79: df:a4:35:1b:85:dd:7c:4f:66:0e:69:3b:13:e3:cc: 07:57:f7:a8:b5:eb:a1:d5:0d:78:9c:65:57:9d:29: 59:65:40:a4:18:ff:50:b2:e1:48:ff:66:91:63:d8: f6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BB:9B:F3:FC:4E:B0:CD:A0:17:5F:2B:BA:AC:B2:1C:35:89:FF:62 X509v3 Authority Key Identifier: keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:24:65:66:69:1f:0d:bf:69:7c:ff:05:0a:23:3e:5f:e1:7b: 4f:e4:3c:bd:b6:4f:5c:6b:91:a1:46:f3:ba:f9:1c:df:d2:51: a8:0e:4c:ee:b9:d5:f3:3b:8c:29:e6:67:d9:2d:c7:c2:b7:c3: d9:cf:0e:00:eb:0f:a6:f9:6f:c7:dd:82:10:b6:e5:a8:68:a1: 73:6a:6a:71:12:48:8c:e4:12:e6:1c:5e:f2:1f:34:65:15:0c: 94:17:13:30:d5:78:dd:a7:3c:44:b4:47:ab:87:e9:33:de:5e: 1a:e6:0a:50:ea:ba:b9:f5:f0:6b:ea:b0:43:cc:bf:ec:08:76: 72:c4:d0:ef:41:aa:1b:8e:ce:90:5e:82:6c:40:03:7c:df:0c: 28:28:2a:8d:53:ec:59:67:b1:fa:49:7f:d3:72:37:fc:e9:14: 87:a7:2c:18:fe:68:9c:84:ec:5e:df:6a:21:67:02:ca:21:c5: ab:a9:c3:68:2a:95:ab:55:43:2e:8f:f9:92:a8:0b:f1:33:49: 96:de:a8:e6:8b:ab:d5:8d:8b:c9:b7:65:06:c5:7a:58:0a:f0: aa:34:88:05:82:80:eb:42:f7:6d:46:e1:e5:cf:6e:d9:58:e6: 50:c0:ec:02:b2:8a:2d:fc:0f:77:ec:80:8c:3c:f9:d0:e3:58: 27:9f:77:37 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUfilhLH+bA0bdAmHCqQ5lPmiWDrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5ODYxZjA1NTRhNjk5NGUxODZhNzBjZGY4NDg3ZTMy MDMxZmZlZTAeFw0yNjExMDQxNzEzMTlaFw0yNjExMDgxNzEzMTlaMHoxSTBHBgNV BAUTQDMzNTgwZmY4ZTA2NmU1YjRiM2VlNTk0ZWNkMmZkYTQyOTJiN2JmMzYxYWM0 YmU2NmIxMDhmZTdjMWU5OTViY2YxLTArBgNVBAMTJDQwMDRmZmMyLWQ1M2MtNGIy Yy04MzFiLTg5ZTIxNWY1MTEwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKkNkLsNNpN27bFgaXYlen2xixoEqeyRpSIJlxhr3o5aKHDKqySPYVc9mElU XUIZUQ3PpH3rnrw5AK9Wlrn4IXPrz1u8Z8Tcf4yQsWIF/oGFL1ymrKi0GBNOLiK0 qvr1my/bD+Xxd2upBQXsG5AF640PPF7j9u63u402HlnAlFuNzy9YIIesrDyGoKse XdDoAXA3b+FxLK+fHSrOTWpbYUqqqttcvn1dliDhCN8KL3WGSu++3ENMoTRTIqKv WhR3pcgUZ7u9GfzBWe9hr0DhxXd536Q1G4XdfE9mDmk7E+PMB1f3qLXrodUNeJxl V50pWWVApBj/ULLhSP9mkWPY9lECAwEAAaOCAjEwggItMB0GA1UdDgQWBBSPu5vz /E6wzaAXXyu6rLIcNYn/YjAfBgNVHSMEGDAWgBQwmGHwVUpplOGGpwzfhIfjIDH/ 7jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01KaGg4RlZL YVpUaGhxY00zNFNINHlBeF8tNC5jZXIwgZUGCCsGAQUFBwELBIGIMIGFMIGCBggr BgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8zOTVjODc0YS1iY2Y5LTRmN2MtYjkwMC1kMjU1MDcyYzNlZTcv VlhTc2Iwcld3U0F6Z2lwSG1OTGo1OXVqUFZjLm1mdDCBiAYDVR0fBIGAMH4wfKB6 oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92 b2x1bWUvMzk1Yzg3NGEtYmNmOS00ZjdjLWI5MDAtZDI1NTA3MmMzZWU3L1ZYU3Ni MHJXd1NBemdpcEhtTkxqNTl1alBWYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANckZWZpHw2/aXz/BQoj Pl/he0/kPL22T1xrkaFG87r5HN/SUagOTO651fM7jCnmZ9ktx8K3w9nPDgDrD6b5 b8fdghC25ahooXNqanESSIzkEuYcXvIfNGUVDJQXEzDVeN2nPES0R6uH6TPeXhrm ClDqurn18GvqsEPMv+wIdnLE0O9BqhuOzpBegmxAA3zfDCgoKo1T7FlnsfpJf9Ny N/zpFIenLBj+aJyE7F7faiFnAsohxaupw2gqlatVQy6P+ZKoC/EzSZbeqOaLq9WN i8m3ZQbFelgK8Ko0iAWCgOtC921G4eXPbtlY5lDA7AKyii38D3fsgIw8+dDjWCef dzc= -----END CERTIFICATE-----Generated at Thu Nov 5 07:03:30 2026 by rpki-client