$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft File: Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft (raw, json) Hash identifier: f8tQ1OO1rf8knwW9JoSLOUhg8UuD2XG5sw7XFMAbRt0= Subject key identifier: 5B:B9:D8:24:DD:1E:B1:72:48:BC:43:66:D4:20:AD:C5:F7:5E:A1:C2 Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Certificate serial: 01A1298C7F05F71F97AAEE3D28EEE2517FDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft Manifest number: 1AA1 Signing time: Sun 11 Oct 2026 06:00:35 +0000 Manifest this update: Sun 11 Oct 2026 06:00:35 +0000 Manifest next update: Mon 12 Oct 2026 06:00:35 +0000 Files and hashes: 1: 1N902uWxBewZ5PtMsS3s5KUkFgs.roa (hash: o8+FHwdwrm2FTsBbNR1O1Ec7gfE8MxmnmProyM8q4BU=) 2: 8ErlG4UTOYiF9gfxJf6TwQxeHEg.roa (hash: eSbwcz9+x7y60mhJ4MzK/Nn0JkZvIqiuM+EDo594NbU=) 3: Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl (hash: /v8HRoTUs0HR+nIe1sjXs13GIW6hH+9MIxMiootURb0=) 4: NdaVlYyGJzmfbtga--jSELZwlbE.roa (hash: 44YtoyTu9IHJo6Ox432rtAmIAiFL2xtPhJVn1fVc8ls=) 5: PXLUhkQGAdUhNdDhpDuX0qygtu4.roa (hash: C+ltPVNXFjYPNIseXTX/KmgQFlM5AY25yJREciY6tp8=) 6: ScefcWvuVGksXbQ0acoDdIYtZjE.roa (hash: l6JU0XgsxIoGIXcMc/fmzvrEp0Yz0Adf89ehE860isQ=) 7: YPVTV3WJ_kGERtyfsujU7TWmTuo.roa (hash: 3mQ5HyF6SXyaMb4D8sGEX7HkxBwBKSkoqI68TSckUnY=) 8: h4TS8P3Y9MPkSGxAwU5ny5ii-0Q.roa (hash: Z3pTNwIsVEmIXkCWPiwIUSynncIo2xxknOvYt/KXrfg=) 9: khuyur07z0KIfw77cPqiILd6kWM.roa (hash: jw4UZ6Kl6Ypyl46B52Rks2JHmI7Dr2yJY3HZEtC2NY0=) 10: t4QXxCvVmATXxT0HCiqC_03hiYc.roa (hash: FFvuRkQsX/cM6EacvCjfXpy5kO0eYWaiz4Ci86Jfl6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 04:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:29:8c:7f:05:f7:1f:97:aa:ee:3d:28:ee:e2:51:7f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Validity Not Before: Oct 11 06:00:35 2026 GMT Not After : Oct 12 06:00:35 2026 GMT Subject: CN=5bb9d824dd1eb17248bc4366d420adc5f75ea1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c2:7b:48:da:66:06:ce:af:83:10:1f:4e:1e: 4f:40:52:67:54:9e:5b:29:57:e1:88:99:61:55:ae: 4a:b3:b6:42:8c:38:08:3a:f3:80:17:5a:ea:75:8c: 5e:43:95:da:59:74:c3:fd:f5:09:75:ba:87:40:8b: 56:e5:f0:36:78:c4:73:41:41:eb:cc:84:25:01:2d: 0b:ac:f2:97:49:5f:12:93:68:29:43:41:c5:2e:d0: 63:33:74:d4:fa:49:68:42:ea:6f:1a:62:b8:c7:77: 58:fb:56:a2:0e:31:a1:e2:10:5c:62:9b:8f:cc:4f: f2:8d:b7:89:88:c7:9d:7d:b6:07:83:01:48:2f:d5: bc:a2:f1:60:5a:80:9c:dc:8e:b9:ba:4c:95:49:e4: 71:aa:90:e8:3f:4b:93:42:92:c5:38:46:17:47:3a: b9:da:9e:6e:a1:89:94:f2:69:59:5e:0a:74:82:8f: fe:a6:99:ca:74:9a:8f:7b:1d:86:a4:20:06:18:01: 05:b8:a3:ee:12:25:b6:30:3a:85:4b:8b:53:05:07: 74:41:1e:8c:1d:a9:67:80:de:a8:16:05:49:eb:15: 02:bf:78:2c:46:20:76:f0:5a:77:c0:3a:b0:9d:53: 83:b0:46:ed:70:34:88:90:48:fc:df:bc:e9:10:22: bf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B9:D8:24:DD:1E:B1:72:48:BC:43:66:D4:20:AD:C5:F7:5E:A1:C2 X509v3 Authority Key Identifier: keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:dc:d7:fc:80:37:fb:35:57:76:5d:ff:93:2f:b2:50:20:6d: b5:95:7a:05:a1:76:40:27:22:ba:ea:b2:d8:22:fd:c7:1f:c6: e7:12:61:d1:39:a8:8c:61:ac:60:7d:9a:85:7a:ac:51:fa:65: 4a:3f:14:25:2e:e9:fb:d2:85:0a:40:45:f2:a5:a2:32:10:53: 12:e6:9f:df:a5:a8:49:a5:c5:2b:0c:90:85:e6:bf:60:a4:af: 50:ce:dc:02:aa:15:69:22:7e:c9:b0:d9:92:88:fb:b8:4e:0e: 38:92:49:c0:3a:f4:42:6b:4e:09:62:1a:5b:f9:e2:e0:00:7e: 77:ed:fd:93:1e:83:bf:99:fe:ee:cb:21:b5:87:de:ee:7e:36: 2f:cd:b9:83:10:ba:d9:d6:ff:11:58:04:7a:19:7d:ec:87:25: 12:50:48:14:e7:e5:bc:27:16:3e:69:a0:e1:5b:75:ae:9d:1a: 71:3c:6a:2a:5e:80:e2:d9:61:bc:62:cf:45:e8:35:db:a9:4b: af:ac:2a:ae:e1:a1:39:e9:94:23:2e:b3:a3:f3:b3:79:00:62: be:74:49:0f:da:50:83:31:de:17:92:69:23:b0:c9:96:ef:b3: 98:0c:ef:d2:56:b5:80:c8:41:8b:59:4b:c8:ae:b5:c4:7b:7c: de:32:1e:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEpjH8F9x+Xqu49KO7iUX/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll MGEyMzgwHhcNMjYxMDExMDYwMDM1WhcNMjYxMDEyMDYwMDM1WjAzMTEwLwYDVQQD Eyg1YmI5ZDgyNGRkMWViMTcyNDhiYzQzNjZkNDIwYWRjNWY3NWVhMWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98J7SNpmBs6vgxAfTh5PQFJnVJ5b KVfhiJlhVa5Ks7ZCjDgIOvOAF1rqdYxeQ5XaWXTD/fUJdbqHQItW5fA2eMRzQUHr zIQlAS0LrPKXSV8Sk2gpQ0HFLtBjM3TU+kloQupvGmK4x3dY+1aiDjGh4hBcYpuP zE/yjbeJiMedfbYHgwFIL9W8ovFgWoCc3I65ukyVSeRxqpDoP0uTQpLFOEYXRzq5 2p5uoYmU8mlZXgp0go/+ppnKdJqPex2GpCAGGAEFuKPuEiW2MDqFS4tTBQd0QR6M HalngN6oFgVJ6xUCv3gsRiB28Fp3wDqwnVODsEbtcDSIkEj837zpECK/IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFu52CTdHrFySLxDZtQgrcX3XqHCMB8GA1UdIwQY MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt Nzg3OTFjOTM1NmEzLzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9zX/IA3 +zVXdl3/ky+yUCBttZV6BaF2QCciuuqy2CL9xx/G5xJh0TmojGGsYH2ahXqsUfpl Sj8UJS7p+9KFCkBF8qWiMhBTEuaf36WoSaXFKwyQhea/YKSvUM7cAqoVaSJ+ybDZ koj7uE4OOJJJwDr0QmtOCWIaW/ni4AB+d+39kx6Dv5n+7sshtYfe7n42L825gxC6 2db/EVgEehl97IclElBIFOflvCcWPmmg4Vt1rp0acTxqKl6A4tlhvGLPReg126lL r6wqruGhOemUIy6zo/OzeQBivnRJD9pQgzHeF5JpI7DJlu+zmAzv0la1gMhBi1lL yK61xHt83jIeMw== -----END CERTIFICATE-----Generated at Sun Oct 11 11:27:41 2026 by rpki-client