$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: Eep5qlNvy29NQR98Jaj6pYWyiwVm6cmM6IX9qUJgx48= Subject key identifier: 8E:60:6C:CA:92:42:7B:DD:78:4B:A3:03:48:06:E2:88:6D:C6:61:A2 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 01A0C5C566C6CA9AD853D8323FDC667F9A81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 1A6A Signing time: Mon 21 Sep 2026 21:00:43 +0000 Manifest this update: Mon 21 Sep 2026 21:00:43 +0000 Manifest next update: Tue 22 Sep 2026 21:00:43 +0000 Files and hashes: 1: 0zd4nb5fhm2xTq0WOAi4Xp6bvJc.roa (hash: uMgyt3DoicP5DNjGaZ/5LrHhGzYKFxFylJxozZr11JQ=) 2: 15U-P8KVPY8JhMDqgw8L5oM6fO4.roa (hash: A8TF8Z+NTCSo1JvC6AkpIA17zqlpHZI++mBawEefOjM=) 3: DN1S1WAl_2K3M6Ai-2AoagxMibw.roa (hash: CSPU47hBScO03u7drTuu7JPSF8DLvvXRvBS1TUE4BwI=) 4: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: qPspC+cw76igBCK4Xr583YRfO7bLZ/D8SvSyOFfacjI=) 5: NA8tG2G3hFFALFYl7Venv99NrVc.roa (hash: bJB0cpk0QWUKw0RjswA5Ubr/IfiAoQmBJm3f3NwKfgQ=) 6: NC0UAgfuyICWUK07pGjses6Gmp4.roa (hash: srG5DwbOiKT6ED23Q54cQarx7hW7qMuLeBg5bvdOCes=) 7: OAN3WdNCBOx9GAH-afVSq5R89fo.roa (hash: /EI4b5flaVJsTGBAEIzkodT4ndbdEXX0V5sGa/1LzJE=) 8: OQ88iyxgykv-UuMoZwpp0BBgiSI.roa (hash: 8tW2X/On0vJs7AepnWjVBDXaTpJx0zYz1Hi+i0/YSxY=) 9: abnIXAgJEhW9VldO5YpGFgSVzcA.roa (hash: XCRB0tR9DLtvsf6qW2UBqKQDVi6//m3IqU34W2mRyLA=) 10: kyDGRd8zbEMUETtukg77Ui7V8qY.roa (hash: devk2rJm/x4h0LaLa8i6gGbkJIFyEo6sNK4CrBpAYrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:c5:66:c6:ca:9a:d8:53:d8:32:3f:dc:66:7f:9a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Sep 21 21:00:43 2026 GMT Not After : Sep 22 21:00:43 2026 GMT Subject: CN=8e606cca92427bdd784ba3034806e2886dc661a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:25:2c:ea:ae:48:33:04:69:5b:07:a0:07:15: 9e:b7:81:dd:62:68:bd:e1:ae:46:38:61:8b:5f:a2: f8:59:ea:8c:b6:68:18:34:90:a2:ca:44:4b:f3:6a: 68:7c:3f:9a:64:2a:58:ef:d6:4c:a4:70:2f:f1:0b: d9:03:af:db:05:73:34:df:93:b9:0b:09:3e:4c:90: f1:b8:5e:e6:80:34:ff:f4:f6:eb:d0:06:59:0c:88: 45:ee:57:31:ba:60:78:20:4e:16:56:c8:ae:98:ed: 90:70:00:26:3b:d9:a0:72:dd:4e:e4:d5:1e:00:89: e2:31:68:7f:ee:d6:ec:92:cf:57:b4:06:21:4e:4b: 73:37:32:a6:b2:74:5a:23:e0:e7:dc:b5:05:1c:1a: c7:2e:7d:bc:83:ed:59:38:ac:6c:bb:b6:a1:8b:a2: 24:e3:da:24:56:7f:73:ba:18:6e:5c:cc:65:d7:39: b4:42:5a:1a:8b:b6:d5:1c:b6:12:36:70:71:7b:29: d4:d0:09:38:6a:03:af:a0:16:e7:5a:73:87:bc:d3: d2:33:e1:91:e6:5b:95:30:2f:05:53:bc:7b:35:23: ab:e0:03:e0:14:94:c8:c9:61:b1:cb:9e:5e:ff:f7: dd:79:f9:6f:98:08:54:7c:7c:71:e2:59:b9:64:ed: 5e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:60:6C:CA:92:42:7B:DD:78:4B:A3:03:48:06:E2:88:6D:C6:61:A2 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:6e:05:19:d7:aa:41:33:68:c7:8f:f5:19:b9:63:04:00:b4: 22:3d:88:ce:68:01:2a:a9:0f:2c:14:56:f6:4e:f0:a2:02:ca: a7:95:af:72:02:7f:4a:7e:ef:4d:48:7c:b1:40:ca:9d:60:ec: 4e:14:3f:a3:48:2a:0b:8a:12:e8:fa:77:4f:54:34:f8:f8:21: e9:b4:bb:78:9e:a0:c2:6c:46:29:3b:30:88:c1:94:16:35:2a: c6:ee:06:c1:25:38:c5:c9:d2:4e:19:bd:91:2c:11:30:d2:e0: 14:08:de:a0:bd:1a:a8:db:89:7f:11:a5:54:69:b3:45:b8:7e: 1b:1f:48:5a:4f:e8:07:ba:7b:d5:7c:e6:41:9c:c2:d6:39:ce: 48:68:0f:60:13:36:74:15:29:6f:92:bb:aa:bb:0b:ff:32:14: 20:fa:e7:a6:04:52:a0:82:82:fb:3a:8c:7e:9c:db:7b:66:b6: 77:ba:4a:73:2a:95:08:8d:bf:c0:07:c1:6a:eb:e8:06:10:9c: 6f:ac:6a:05:96:d0:22:9e:ae:0c:71:ec:2e:a1:3a:b3:8d:3f: c7:c1:08:e1:9f:f6:3c:3c:74:df:aa:6d:70:b0:76:c8:16:78: 74:f9:3f:14:8f:69:c7:fa:6a:e7:ac:9a:25:32:02:dc:6e:54: 21:2c:a9:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDFxWbGyprYU9gyP9xmf5qBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwOTIxMjEwMDQzWhcNMjYwOTIyMjEwMDQzWjAzMTEwLwYDVQQD Eyg4ZTYwNmNjYTkyNDI3YmRkNzg0YmEzMDM0ODA2ZTI4ODZkYzY2MWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyUs6q5IMwRpWwegBxWet4HdYmi9 4a5GOGGLX6L4WeqMtmgYNJCiykRL82pofD+aZCpY79ZMpHAv8QvZA6/bBXM035O5 Cwk+TJDxuF7mgDT/9Pbr0AZZDIhF7lcxumB4IE4WVsiumO2QcAAmO9mgct1O5NUe AIniMWh/7tbsks9XtAYhTktzNzKmsnRaI+Dn3LUFHBrHLn28g+1ZOKxsu7ahi6Ik 49okVn9zuhhuXMxl1zm0Qloai7bVHLYSNnBxeynU0Ak4agOvoBbnWnOHvNPSM+GR 5luVMC8FU7x7NSOr4APgFJTIyWGxy55e//fdeflvmAhUfHxx4lm5ZO1e6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5gbMqSQnvdeEujA0gG4ohtxmGiMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoG4FGdeq QTNox4/1GbljBAC0Ij2IzmgBKqkPLBRW9k7wogLKp5WvcgJ/Sn7vTUh8sUDKnWDs ThQ/o0gqC4oS6Pp3T1Q0+Pgh6bS7eJ6gwmxGKTswiMGUFjUqxu4GwSU4xcnSThm9 kSwRMNLgFAjeoL0aqNuJfxGlVGmzRbh+Gx9IWk/oB7p71XzmQZzC1jnOSGgPYBM2 dBUpb5K7qrsL/zIUIPrnpgRSoIKC+zqMfpzbe2a2d7pKcyqVCI2/wAfBauvoBhCc b6xqBZbQIp6uDHHsLqE6s40/x8EI4Z/2PDx036ptcLB2yBZ4dPk/FI9px/pq56ya JTIC3G5UISypyQ== -----END CERTIFICATE-----Generated at Tue Sep 22 08:34:55 2026 by rpki-client