$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft File: Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft (raw, json) Hash identifier: 7Jp0WCwMzge8ebCzAS9BC80qyxjfXjrO5eJ6jLIJnLk= Subject key identifier: 86:23:87:3A:D1:90:0E:63:43:84:2C:2F:69:E3:90:2B:B8:A5:F9:F9 Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Certificate serial: 01A0BEB126979680999DCCD05C11198A649F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft Manifest number: 1A95 Signing time: Sun 20 Sep 2026 12:01:15 +0000 Manifest this update: Sun 20 Sep 2026 12:01:15 +0000 Manifest next update: Mon 21 Sep 2026 12:01:15 +0000 Files and hashes: 1: 1QwxBzzrzbLhE53UBSnG0QYKMDg.roa (hash: CVaxoZfOngTvB/Tbw2XbJcH9Ku/qNCgCrqppI4x0a68=) 2: 5F_6MYJ3Tjsft0v2m--XYj9QajM.roa (hash: ptSYdcQn4vRSLxP94ghZiixDk850vlzn8oi5PdxtV2k=) 3: Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl (hash: 0lrSGOMHBX6A7Jc4Fg7eL2YYvCMSauwRyZTGsIQon60=) 4: HiS0kZkH7nLEUXjDWu9S5wYFAWo.roa (hash: dQ7ZhvwA3P8FoUNbgD8WD+l4uyObPXiywcp7g1zCAOA=) 5: WlhMchBpnT-b11_eX-zMEkQyhtw.roa (hash: F7yII+JajBHZk9uba+HGWYQBLwn8rdDHWthC6lkIqoI=) 6: YPfuRkTgnJf0mW0FpNkvVPNS8RQ.roa (hash: paVGX+E91uT2+A9iHUixNqfj4PoBmhTXUi+0RH12uAA=) 7: _mXNiEyzoLTdlZS540O0pnwDOW8.roa (hash: j1fVCxk0bP7hRI+j87ih0al1KJnzWkx9KyZJo2+Hlm4=) 8: az65XDjo2ppJEAUDxgONjCii4JM.roa (hash: KKW2/9btopQsCSi6Q0T0i2j+xys3nWakyAcxPszdD+E=) 9: es3spOIawUyIvWJULYnuVd5QiYA.roa (hash: bnj1HUQLd6UyOiRwZwWc9Ab/jXrxjH+WENuDNP86ym0=) 10: yytX6z-UgD_m9pf3_kgEgiT2POQ.roa (hash: 3RbgmrnsRsLF2URHt+dab8OKV2m4vBqwqKQUl1xF2CI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:b1:26:97:96:80:99:9d:cc:d0:5c:11:19:8a:64:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Validity Not Before: Sep 20 12:01:15 2026 GMT Not After : Sep 21 12:01:15 2026 GMT Subject: CN=8623873ad1900e6343842c2f69e3902bb8a5f9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:68:71:1a:f7:e2:8b:e4:69:83:f9:18:a0: ab:02:8b:bd:1c:a4:8e:a8:d9:3e:19:74:7a:d5:e8: 03:4c:b8:57:39:5b:0d:48:f6:48:58:96:e5:89:64: a1:1b:ef:46:1f:f2:eb:df:45:ab:f7:f0:6b:e6:56: ff:05:dd:8e:78:ac:ac:10:ec:14:c6:61:73:dd:9b: e3:a9:70:26:57:68:b6:1b:cb:b9:cf:0d:26:c1:6a: fa:43:3f:6f:ec:3f:5e:ec:25:d2:2e:ef:33:48:ea: 5b:26:10:d3:c7:4f:77:b0:b4:15:6b:45:4d:6b:bd: db:69:63:33:65:4d:68:62:91:23:5f:06:52:3d:f5: 53:9f:29:ad:3e:1c:34:8f:37:2c:cb:a0:e9:fc:0a: 2d:c2:fa:8c:5b:12:4c:21:fb:bd:15:27:f0:65:ac: b2:db:0d:73:ed:d8:d4:37:97:b4:38:36:5c:33:6a: be:26:a9:71:f5:24:ba:18:25:f9:1b:c3:0f:6d:5d: 19:d9:f4:5a:01:1f:c8:e9:1f:9b:00:7e:39:3e:94: 73:ae:bb:f1:ad:22:fd:dd:5a:2e:b1:6e:1a:59:f1: dc:cb:75:8d:36:5a:f5:0e:cc:ae:eb:ef:0e:70:5e: 31:54:ca:53:77:28:aa:d2:22:45:52:c9:c5:dd:fe: 98:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:23:87:3A:D1:90:0E:63:43:84:2C:2F:69:E3:90:2B:B8:A5:F9:F9 X509v3 Authority Key Identifier: keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:54:c9:d8:7e:f7:5e:e7:a9:d4:9b:58:43:5a:b1:fb:ee:3e: 94:51:dc:d4:42:ec:6d:67:7c:24:b0:94:59:01:bc:96:7f:84: af:5f:68:cc:4d:2b:c7:d7:93:93:a8:0c:7a:01:01:7b:37:85: 0a:dd:12:a8:07:1d:90:2b:86:25:5d:ca:3c:81:6e:cf:6b:8c: 61:0e:d3:6d:f2:89:c8:ba:97:60:d8:92:8a:8d:3c:aa:07:7c: 0d:51:a9:f4:46:4f:09:47:7a:f9:b5:d1:f5:2a:5f:5b:e8:c9: ee:f6:23:4b:22:19:7e:ed:d0:38:a3:62:30:e1:3c:f6:75:1a: 7d:74:10:1c:7c:85:5b:a8:61:52:f6:1c:7f:3f:9a:12:c5:5d: b8:69:04:08:c6:b5:b3:47:a8:a3:2d:d8:6e:4c:56:26:93:65: 9e:8d:d7:a4:92:e4:64:dc:f4:55:96:79:c8:12:eb:8b:e0:64: 0a:42:59:9c:7b:4a:35:fa:78:9a:dc:54:fa:e5:b8:9d:1b:ef: 68:0d:95:c4:17:58:b4:a5:9d:84:08:e6:9f:38:3f:3d:bf:47: 7c:66:72:a9:f6:e3:f1:8e:6e:d8:72:9f:bd:f6:ed:e5:30:b8: 8c:58:d8:98:1c:e4:c2:7f:dd:a6:ef:aa:ba:05:70:88:98:d4: 56:1d:0b:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+sSaXloCZnczQXBEZimSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh NDYzZDQwHhcNMjYwOTIwMTIwMTE1WhcNMjYwOTIxMTIwMTE1WjAzMTEwLwYDVQQD Eyg4NjIzODczYWQxOTAwZTYzNDM4NDJjMmY2OWUzOTAyYmI4YTVmOWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxANocRr34ovkaYP5GKCrAou9HKSO qNk+GXR61egDTLhXOVsNSPZIWJbliWShG+9GH/Lr30Wr9/Br5lb/Bd2OeKysEOwU xmFz3ZvjqXAmV2i2G8u5zw0mwWr6Qz9v7D9e7CXSLu8zSOpbJhDTx093sLQVa0VN a73baWMzZU1oYpEjXwZSPfVTnymtPhw0jzcsy6Dp/AotwvqMWxJMIfu9FSfwZayy 2w1z7djUN5e0ODZcM2q+Jqlx9SS6GCX5G8MPbV0Z2fRaAR/I6R+bAH45PpRzrrvx rSL93VousW4aWfHcy3WNNlr1Dsyu6+8OcF4xVMpTdyiq0iJFUsnF3f6YdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYjhzrRkA5jQ4QsL2njkCu4pfn5MB8GA1UdIwQY MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt N2QxMzQ5ODBjNWJlLzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFTJ2H73 Xuep1JtYQ1qx++4+lFHc1ELsbWd8JLCUWQG8ln+Er19ozE0rx9eTk6gMegEBezeF Ct0SqAcdkCuGJV3KPIFuz2uMYQ7TbfKJyLqXYNiSio08qgd8DVGp9EZPCUd6+bXR 9SpfW+jJ7vYjSyIZfu3QOKNiMOE89nUafXQQHHyFW6hhUvYcfz+aEsVduGkECMa1 s0eooy3YbkxWJpNlno3XpJLkZNz0VZZ5yBLri+BkCkJZnHtKNfp4mtxU+uW4nRvv aA2VxBdYtKWdhAjmnzg/Pb9HfGZyqfbj8Y5u2HKfvfbt5TC4jFjYmBzkwn/dpu+q ugVwiJjUVh0LMQ== -----END CERTIFICATE-----Generated at Sun Sep 20 21:41:12 2026 by rpki-client