$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: Cwtnrm8WZwzC5HMAULaHAVdUc0QpJCfQuDaWJVTEXF4= Subject key identifier: BA:BC:71:8C:B3:AA:61:CB:24:95:E2:20:E8:6F:F3:4B:3B:8C:6A:D6 Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 01A0BD66CD784604496F4EE411F238C246A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0FA5 Signing time: Sun 20 Sep 2026 06:00:26 +0000 Manifest this update: Sun 20 Sep 2026 06:00:26 +0000 Manifest next update: Mon 21 Sep 2026 06:00:26 +0000 Files and hashes: 1: 1raBdrG8cJ9Bp5UTf1-3ySXpvNU.roa (hash: nidyHf42+8qviczWax8TG8WbQgA/HNtQCPEG+F+WBIY=) 2: 2kDI2fX-vOvB11NNeAS3cg-93eM.asa (hash: NA7gOR6dP2dN+8of3Z/jNBI4ucvB9u9QIPByWzroYZo=) 3: 4p-Cm-GajEDg95U2oK6uzfsp0JU.asa (hash: 5kxjukz9UrNDQRzs1WDtvD2HHIl/VN2fV1l1vptM11w=) 4: D20r0Dc3ziO-pvHNC0RCH6WWn4M.asa (hash: iaKS5DFhrhjGhN9Po/Gl1SfI1i51StPCSZ9Lx4T3V/o=) 5: JLWdtgjMTs_4Sq7DTqKgddlwfrY.asa (hash: 9mBXiLiJ86zw/4udWl2MUcosM1kylDDeUDtsF/0LHfI=) 6: KeXwRGdfZ0moU2iD3Q2mbtR6C3k.asa (hash: kKAEUwnnTtlt/PROwq+dzQgzZQgqzq3CPnTsKxDqyks=) 7: L2QCsrjPe2KM3zZLG_j-necXdRQ.asa (hash: WdEBpYb6JsNA+UMdvTX09oNiIH0VyRdO15C/0tlTHTA=) 8: OGZW3EGUH5W_Sl4Rah9ArDm_EJo.asa (hash: q8G/683GpwIgrnSyD7lVID7X1jS34HiXZGHtfK+B8v4=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: bqKa0YRsYxH7tFUT4rHgcN42asw.roa (hash: 8oWhUO/dKOps3lszSUNTka8Z4cLC6TKDR/CwR798z8A=) 11: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 12: p5zNzQPaIB94IBWFj0Evjw09b6Y.asa (hash: eOPidDTFtzDIvGAErv5iz3BORzDmQalbdnPuHerit6s=) 13: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: tY6GTd3hZ4nPv1EPQeEjHtDYceUota/TezdVkVYs6tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bd:66:cd:78:46:04:49:6f:4e:e4:11:f2:38:c2:46:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Sep 20 06:00:26 2026 GMT Not After : Sep 21 06:00:26 2026 GMT Subject: CN=babc718cb3aa61cb2495e220e86ff34b3b8c6ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2b:23:dc:69:d0:e3:22:46:b8:7e:fc:2a:c5: 6b:ee:31:7a:c3:16:0d:80:93:2a:1d:9a:44:2c:0e: d8:42:ff:23:49:53:ae:d4:ba:26:4d:38:d2:cc:d8: a9:dc:f5:e1:35:85:7b:b0:95:6a:f9:a3:f4:b8:7f: 4b:18:47:3f:f8:5e:9b:5d:e7:d8:a7:8f:4f:d7:18: e2:0d:c8:f3:af:81:f4:de:05:17:a0:e8:5d:be:c7: e1:02:74:d5:dd:9e:df:15:54:da:35:88:5d:39:c7: d3:13:d0:e2:2a:b9:a5:ba:1a:d3:1f:43:4a:c1:25: 12:ed:f9:f9:88:2b:ee:92:41:29:42:db:91:97:2d: e5:7e:97:24:66:a5:54:7b:3e:e8:85:ea:52:95:57: 05:2a:28:dd:0a:27:d3:5e:9c:94:18:9e:04:0a:98: 54:b9:6a:40:fa:83:3a:5e:55:af:31:ac:96:88:25: 4c:70:dc:88:68:c6:38:a5:35:2b:7c:83:54:51:1e: 98:70:9e:1c:5c:f1:3e:10:e8:0a:b3:30:22:3b:c1: d0:93:3a:22:bc:d2:8e:99:1b:47:5e:5c:3b:b8:5c: e5:70:f4:77:4c:d5:5e:38:b8:ca:16:04:19:7a:bf: ac:94:f7:b9:c4:86:c0:21:ea:f6:25:ff:fe:c5:a2: 3b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BC:71:8C:B3:AA:61:CB:24:95:E2:20:E8:6F:F3:4B:3B:8C:6A:D6 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:9c:6f:8a:3a:6f:2e:af:6d:cb:ea:4a:22:60:97:0b:d6:0e: 24:36:f5:0e:10:60:2f:0e:cd:3d:a0:78:30:d6:5c:10:16:94: a8:4e:27:b5:40:ff:69:d6:ea:52:65:8a:ce:97:9c:b0:c6:26: c6:25:ca:aa:5e:30:53:76:2b:07:ee:d3:7b:88:3f:e9:e6:8b: 0f:21:c2:04:d7:32:c4:9f:f0:f9:b0:ce:81:cd:b5:ec:f6:91: b8:52:7f:ba:76:17:f6:f7:e4:e4:8b:67:82:6f:0a:bc:3e:3d: 43:d4:5a:58:0e:e0:08:c3:4c:69:e4:da:91:23:6f:1f:92:93: db:31:fc:d4:5a:28:36:a9:4c:f9:16:4b:18:f8:69:47:e2:c3: 4b:b1:5d:17:54:01:59:42:c0:7d:e5:cc:be:41:b0:b1:ef:71: 59:82:f8:92:4b:d7:c2:71:48:f5:13:c6:71:bc:26:26:b6:ff: 69:c7:a9:bb:c2:a7:c1:98:ea:29:97:a3:75:cb:9b:af:19:3f: 5e:c3:7f:fb:8b:b7:ba:d2:4d:aa:a9:ba:df:dd:1b:33:f8:02: 54:fe:20:f3:89:48:97:77:ab:c7:81:a8:b7:b6:b9:d7:cf:85: b2:0a:ae:16:4c:23:a1:37:a1:a0:78:f3:30:13:db:41:b5:3a: a8:4b:53:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC9Zs14RgRJb07kEfI4wkaiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwOTIwMDYwMDI2WhcNMjYwOTIxMDYwMDI2WjAzMTEwLwYDVQQD EyhiYWJjNzE4Y2IzYWE2MWNiMjQ5NWUyMjBlODZmZjM0YjNiOGM2YWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ssj3GnQ4yJGuH78KsVr7jF6wxYN gJMqHZpELA7YQv8jSVOu1LomTTjSzNip3PXhNYV7sJVq+aP0uH9LGEc/+F6bXefY p49P1xjiDcjzr4H03gUXoOhdvsfhAnTV3Z7fFVTaNYhdOcfTE9DiKrmluhrTH0NK wSUS7fn5iCvukkEpQtuRly3lfpckZqVUez7ohepSlVcFKijdCifTXpyUGJ4ECphU uWpA+oM6XlWvMayWiCVMcNyIaMY4pTUrfINUUR6YcJ4cXPE+EOgKszAiO8HQkzoi vNKOmRtHXlw7uFzlcPR3TNVeOLjKFgQZer+slPe5xIbAIer2Jf/+xaI70wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLq8cYyzqmHLJJXiIOhv80s7jGrWMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZxvijpv Lq9ty+pKImCXC9YOJDb1DhBgLw7NPaB4MNZcEBaUqE4ntUD/adbqUmWKzpecsMYm xiXKql4wU3YrB+7Te4g/6eaLDyHCBNcyxJ/w+bDOgc217PaRuFJ/unYX9vfk5Itn gm8KvD49Q9RaWA7gCMNMaeTakSNvH5KT2zH81FooNqlM+RZLGPhpR+LDS7FdF1QB WULAfeXMvkGwse9xWYL4kkvXwnFI9RPGcbwmJrb/acepu8KnwZjqKZejdcubrxk/ XsN/+4u3utJNqqm6390bM/gCVP4g84lIl3erx4Got7a518+FsgquFkwjoTehoHjz MBPbQbU6qEtTFw== -----END CERTIFICATE-----Generated at Sun Sep 20 12:44:18 2026 by rpki-client