$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: YqpM1bofvhrQEFq8Ew8kOdMRBehsIQxJtgVgCXbw80E= Subject key identifier: 85:0C:03:E7:DB:18:13:A1:FC:1E:42:9D:AA:B4:3F:D9:88:EC:78:91 Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 01A0D2008A65ABE8DA5E761E78B8245CD0F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 1799 Signing time: Thu 24 Sep 2026 06:00:45 +0000 Manifest this update: Thu 24 Sep 2026 06:00:45 +0000 Manifest next update: Fri 25 Sep 2026 06:00:45 +0000 Files and hashes: 1: 1UiUTiwKgTMIt2VTMxLe14f3nS4.roa (hash: pqQp2WmJbg2RhT73uD+Ys0RPrhInn/LiUGnsvcFLzWI=) 2: 2IRM0RAkwS2oAZ2BDb8uf2ChjCQ.roa (hash: JPioNw406pRxJydsBBDsLTocLaIvgiBjIbhi/i3xRcw=) 3: 99NN1WXl1e-tpKT6ABRzj8ek8js.roa (hash: 8o+XYKw0+50Z916SkqFv35kFc2HKB1Yb/OlTSFjUqWw=) 4: LlDSn4AAdQvcio-w6ueKASNJzJc.roa (hash: Tt+ws0A+jguw/rGXSOQBHfD+EimDFMYYNfrKEOU8mto=) 5: S87lpzwpwcvhDVlbS4kDtqKKrpA.roa (hash: EL+FrGUGQI1F7I3SdqUWEFxAZnp0C1EKciCac/NeJoU=) 6: UlvxYSaKh8Oc3zweZMlSdRb-gtk.roa (hash: oQKB3We88m7rm0/lXA7VFioKwk6yZDH7U1EGDEWoMxw=) 7: b9R1mHou81pbTN845jWo8AY0dG8.roa (hash: 0MAAHxvRxGYVPd74Q6mtc12UmkhV79TPgssvbAGMnic=) 8: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: Htj4Srgitu8LugtEE7Ili1vPC9273KrdgPnBYTG0BLQ=) 9: neFgjJWOGDDhiUt21Bx56LOdG14.roa (hash: R9/2Kaz88R1d8RCv+znwKCj4763UX3/q7TBZ1tUrH2M=) 10: x5hm9TAkscBUsJAoqCOo4jx5-Lc.roa (hash: c/s5JeLhk8Sq8rrJ5xL9DCoNhE1L+NnzeQZZ7Q2At2k=) 11: zKPJ1aUk7U9x8WVHRd4-RzORH30.roa (hash: oMQrL9GvdJqmjmfNbo6U4V/JwihFWzU7V32F6VSp6yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:00:8a:65:ab:e8:da:5e:76:1e:78:b8:24:5c:d0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Sep 24 06:00:45 2026 GMT Not After : Sep 25 06:00:45 2026 GMT Subject: CN=850c03e7db1813a1fc1e429daab43fd988ec7891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ab:8e:a8:99:e1:65:c6:c1:40:d2:bf:87:47: 31:fd:d1:b0:ce:83:c9:c5:b9:68:35:73:9b:a7:ac: 60:03:3d:59:c2:b6:92:9e:ad:51:9b:72:c3:c7:b6: b9:67:99:c1:88:60:a5:95:36:e4:a4:07:0a:03:bc: fd:c6:43:79:18:52:c4:a6:06:08:7c:4a:52:3c:b6: 73:a3:0f:e0:4f:ca:33:0d:94:c2:ea:c8:fe:57:f1: 0e:31:c8:92:6e:02:e9:d2:1a:a7:98:b3:2a:5e:4d: c6:af:cd:c9:37:4d:90:18:f8:78:da:d6:75:e1:e3: 5e:ad:26:7e:9c:cc:89:1c:f2:fb:bd:b9:4d:60:04: be:d6:96:e6:5e:84:b0:af:ce:8d:28:ef:73:70:f3: cd:1e:71:f1:06:85:bd:df:60:ee:b8:93:02:6d:4e: 03:89:62:20:f4:3a:e0:e1:ca:0b:3d:a2:ea:02:58: dd:b5:fb:90:7a:f9:40:65:2d:2e:e9:3e:54:74:b3: 0e:79:48:70:03:78:6f:3f:b7:62:44:c9:90:48:86: 6a:3b:f0:5c:6b:fc:f0:1d:b7:58:f0:f7:d9:9c:7b: 8d:d1:0f:78:07:e5:c0:e0:55:49:da:a2:10:3f:87: b2:4e:79:f1:28:d7:3f:a6:36:9e:60:85:b5:15:b6: 2c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0C:03:E7:DB:18:13:A1:FC:1E:42:9D:AA:B4:3F:D9:88:EC:78:91 X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3e:f5:57:0d:c4:fc:49:b5:24:b0:4d:57:31:9a:db:d4:06: 4b:2b:a2:40:d5:8f:25:99:a6:53:62:0b:19:a3:2d:f6:65:34: 18:61:15:1b:25:4c:6c:85:90:9d:04:fa:ec:e2:7a:e1:55:b2: 03:fb:86:43:1c:41:79:26:09:ff:0c:24:72:ec:87:6f:ff:74: 0d:f8:da:28:b8:26:bc:8a:b0:da:48:78:ad:03:7c:ad:4a:17: de:e8:20:a8:6a:98:40:c7:d1:23:66:d4:52:fc:6b:75:f0:0f: de:00:a6:96:5a:dd:f0:47:71:63:2c:cd:1c:eb:ca:d1:65:21: c4:b9:fa:51:29:b9:46:f4:70:04:ad:2f:d7:42:d7:dd:aa:25: 4c:e7:82:de:e6:2d:7b:fa:1b:47:92:7a:4e:2e:0e:03:3e:6d: e3:bb:61:38:d1:46:6a:ca:d1:34:d9:40:4b:2f:7d:92:d7:e9: 9a:06:4d:b7:66:90:2b:ea:08:f5:f1:5c:e7:04:1e:f3:4a:ec: ef:ad:ad:5b:57:63:04:d4:79:20:f2:38:2e:86:74:16:bb:f6: 47:1b:2b:1d:2f:9e:12:60:37:5e:3a:6c:36:f9:68:20:6d:d5: e2:d5:a7:27:2b:b0:ff:16:89:15:6f:9f:66:3a:12:5a:a0:09: f5:12:18:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDSAIplq+jaXnYeeLgkXNDxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjYwOTI0MDYwMDQ1WhcNMjYwOTI1MDYwMDQ1WjAzMTEwLwYDVQQD Eyg4NTBjMDNlN2RiMTgxM2ExZmMxZTQyOWRhYWI0M2ZkOTg4ZWM3ODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6quOqJnhZcbBQNK/h0cx/dGwzoPJ xbloNXObp6xgAz1ZwraSnq1Rm3LDx7a5Z5nBiGCllTbkpAcKA7z9xkN5GFLEpgYI fEpSPLZzow/gT8ozDZTC6sj+V/EOMciSbgLp0hqnmLMqXk3Gr83JN02QGPh42tZ1 4eNerSZ+nMyJHPL7vblNYAS+1pbmXoSwr86NKO9zcPPNHnHxBoW932DuuJMCbU4D iWIg9Drg4coLPaLqAljdtfuQevlAZS0u6T5UdLMOeUhwA3hvP7diRMmQSIZqO/Bc a/zwHbdY8PfZnHuN0Q94B+XA4FVJ2qIQP4eyTnnxKNc/pjaeYIW1FbYsNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUMA+fbGBOh/B5Cnaq0P9mI7HiRMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPD71Vw3E /Em1JLBNVzGa29QGSyuiQNWPJZmmU2ILGaMt9mU0GGEVGyVMbIWQnQT67OJ64VWy A/uGQxxBeSYJ/wwkcuyHb/90DfjaKLgmvIqw2kh4rQN8rUoX3uggqGqYQMfRI2bU UvxrdfAP3gCmllrd8EdxYyzNHOvK0WUhxLn6USm5RvRwBK0v10LX3aolTOeC3uYt e/obR5J6Ti4OAz5t47thONFGasrRNNlASy99ktfpmgZNt2aQK+oI9fFc5wQe80rs 762tW1djBNR5IPI4LoZ0Frv2RxsrHS+eEmA3XjpsNvloIG3V4tWnJyuw/xaJFW+f ZjoSWqAJ9RIYYA== -----END CERTIFICATE-----Generated at Thu Sep 24 09:04:58 2026 by rpki-client