$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: 18tJoXJ4holRVoH4XP9/LOsY+8e+HZW/jM5rdLJmwGM= Subject key identifier: 06:0C:40:92:D5:0D:83:C8:2B:D9:BF:78:0B:EA:3E:B1:87:2A:FE:0A Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 01A1291EDA736A89CD75042CD09F5FA5F8C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 1AAB Signing time: Sun 11 Oct 2026 04:00:50 +0000 Manifest this update: Sun 11 Oct 2026 04:00:50 +0000 Manifest next update: Mon 12 Oct 2026 04:00:50 +0000 Files and hashes: 1: 4Y6MQ3p-LB6KrtJDo2AEO8Db164.roa (hash: 5atEicVhW+L7Xp6D+LeVcw6nuJeehWHQba6IJiOM6Ms=) 2: 7P1NmxTBDEHT49XjS37xdv0HWW0.roa (hash: cSJXMiv1wlSUmF1FROdK00apGKOHDsvE7GRfHisp/xM=) 3: As_pVbbnYy_pmBMm0RcX49iX6nY.roa (hash: qzus9UnBcueHhtxBHMySF8j/gf9sbzuNZT387lhMVtE=) 4: Q7kjVEhiYHEz_AIBuFCX2o6kXpQ.roa (hash: MuV9xof7zxa6mZSUu9k4zgmUqNgq/+xzFvRw2ejciSU=) 5: VmKAAjA4J61Er2pV6nmm2We8eeg.roa (hash: H91QyBvG1I/wj9YFT3ovdtrMrR5xBG3HkuYFKTPkUdk=) 6: Z2JoyRveJcrOS84W6TpEPChd0u8.roa (hash: aEKu2ZE0v6kUC0OnwN6L0HbgZBJi/Gu9YSjx1j8FGfg=) 7: aC9Q_3qjddY1l6-wNmHh31rhiv4.roa (hash: uKO8uok9xpbvJA3MGYKk7ndaYzKJUW2pxyQNGvBjSDU=) 8: bAu2nHwwaI2xhx67rCFJbdWrOiQ.roa (hash: PPgISwxtGfhelxALTN8TWlqq+07YWVYIQR2uMCsI0BQ=) 9: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: Az3Xw9KwthSdiucSRXgka84rEyzfRWrV14WAU19d5fA=) 10: ozLeruCkBhC4yZCUw5lMFfl-TtM.roa (hash: ygWG9N1PXEIgHYpH9dLMI7Qu5ggvIeMB+/+Dm4Mbbz4=) 11: q47qpt1p1Wj02CxPXYgOsikq_GY.roa (hash: RR0Z4b1X2W/yjPPcvR1hUKYG5qy0mYBUJ7YN4lZTqrk=) 12: s0Slj9yVMX7lCq79bqSGCqW6KPg.roa (hash: RaEewhp7TYWAZZHFh2A3/CMtjGLdyIT76c5b57zkYYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Oct 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:29:1e:da:73:6a:89:cd:75:04:2c:d0:9f:5f:a5:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Oct 11 04:00:50 2026 GMT Not After : Oct 12 04:00:50 2026 GMT Subject: CN=060c4092d50d83c82bd9bf780bea3eb1872afe0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:52:fc:3f:87:ca:35:77:cc:80:3d:e5:ac: 08:96:79:3e:d3:26:01:01:6f:d9:09:60:85:e9:c2: 29:29:db:55:67:44:5a:69:a6:83:a6:d8:74:4e:0b: 4e:19:9a:e2:61:a2:b6:1d:4d:4d:8d:44:22:79:d2: e6:14:6f:8a:c9:ce:3a:56:61:a2:49:d0:24:ae:04: 18:56:89:47:01:e6:d2:83:3f:03:85:7b:e5:e3:d2: 5a:1d:73:ea:20:b1:19:f7:99:95:df:0e:6b:cf:8f: 1d:ab:ca:08:a3:65:2d:42:a3:de:00:4c:ad:cc:f7: c5:8f:dc:e0:c9:55:c2:42:fa:bc:73:92:2a:3e:d0: b0:e3:a9:f6:9c:a1:78:05:ca:42:26:c1:0a:ea:7c: 09:9b:40:c8:48:c4:4e:85:8e:e2:3e:da:bf:dd:79: 6b:fa:e6:1d:f8:bc:86:2d:68:68:83:c4:17:57:46: 4d:4f:c9:d4:28:8d:02:64:b0:c9:a8:27:84:36:49: 10:62:e5:b1:ca:65:84:70:ef:a8:86:65:2e:6b:e5: 6c:33:49:2f:cc:25:00:8a:25:f4:d2:ad:8d:9a:a6: 1c:a6:52:03:c4:4d:e5:30:c1:9f:73:53:0b:f1:56: fc:88:30:16:33:50:2f:dd:e4:6d:6a:33:dc:c1:06: d7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0C:40:92:D5:0D:83:C8:2B:D9:BF:78:0B:EA:3E:B1:87:2A:FE:0A X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:71:12:d4:96:ad:17:37:a5:e4:fe:b3:0d:72:da:54:50:33: 45:ef:0e:ef:ce:de:73:f3:39:3d:c3:6f:be:8e:5f:43:69:aa: 1c:f3:c4:8c:11:57:bb:fa:4e:e1:5f:dd:db:b9:e1:24:0c:c7: a9:db:e8:c8:70:fa:8a:60:3a:4f:b1:d3:df:c8:44:b7:5f:ff: 8d:57:6d:50:e2:50:31:92:a9:c6:97:28:e7:75:86:bb:7b:35: 1c:2d:ff:2c:92:cf:dc:b1:40:15:8c:fd:32:4f:c6:c7:80:99: 07:55:51:a4:3d:2b:38:b9:6c:e7:24:55:cc:1a:c6:a7:71:63: a9:61:e1:d5:19:a6:fd:20:cd:8c:94:7e:64:e8:29:ec:f1:0d: 41:96:ff:39:11:fe:74:e8:e2:49:18:f3:5d:17:58:1a:5c:e8: 24:bf:8c:a3:55:8c:f4:4b:be:9c:9d:0b:d7:6e:5c:c7:eb:ba: 77:c5:e5:52:b4:65:ba:1e:f8:45:24:29:19:0d:ec:3b:14:88: e8:e3:8f:84:f9:a7:86:28:e5:32:e6:ac:38:23:56:ad:08:b1: 55:c0:af:aa:17:af:92:24:d1:ad:57:5a:c7:b0:40:37:32:54: 1a:2a:0a:56:ee:cb:98:3e:55:12:34:1b:bc:3d:97:6a:64:c5: f5:b8:6b:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEpHtpzaonNdQQs0J9fpfjAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYxMDExMDQwMDUwWhcNMjYxMDEyMDQwMDUwWjAzMTEwLwYDVQQD EygwNjBjNDA5MmQ1MGQ4M2M4MmJkOWJmNzgwYmVhM2ViMTg3MmFmZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdRS/D+HyjV3zIA95awIlnk+0yYB AW/ZCWCF6cIpKdtVZ0RaaaaDpth0TgtOGZriYaK2HU1NjUQiedLmFG+Kyc46VmGi SdAkrgQYVolHAebSgz8DhXvl49JaHXPqILEZ95mV3w5rz48dq8oIo2UtQqPeAEyt zPfFj9zgyVXCQvq8c5IqPtCw46n2nKF4BcpCJsEK6nwJm0DISMROhY7iPtq/3Xlr +uYd+LyGLWhog8QXV0ZNT8nUKI0CZLDJqCeENkkQYuWxymWEcO+ohmUua+VsM0kv zCUAiiX00q2NmqYcplIDxE3lMMGfc1ML8Vb8iDAWM1Av3eRtajPcwQbX3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYMQJLVDYPIK9m/eAvqPrGHKv4KMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3ES1Jat Fzel5P6zDXLaVFAzRe8O787ec/M5PcNvvo5fQ2mqHPPEjBFXu/pO4V/d27nhJAzH qdvoyHD6imA6T7HT38hEt1//jVdtUOJQMZKpxpco53WGu3s1HC3/LJLP3LFAFYz9 Mk/Gx4CZB1VRpD0rOLls5yRVzBrGp3FjqWHh1Rmm/SDNjJR+ZOgp7PENQZb/ORH+ dOjiSRjzXRdYGlzoJL+Mo1WM9Eu+nJ0L125cx+u6d8XlUrRluh74RSQpGQ3sOxSI 6OOPhPmnhijlMuasOCNWrQixVcCvqhevkiTRrVdax7BANzJUGioKVu7LmD5VEjQb vD2XamTF9bhrEA== -----END CERTIFICATE-----Generated at Sun Oct 11 05:33:50 2026 by rpki-client