$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json) Hash identifier: LMnnE65BXGjp/D8KzPEeG+HXY0tiMjvpvu/UwRw7iWw= Subject key identifier: 22:A6:E6:27:3A:99:43:3F:72:BF:AD:90:B6:F4:03:BD:60:A6:B7:3E Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Certificate serial: 01A0BDD48A85ED90CF7C7184941829C6B788 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft Manifest number: 1A71 Signing time: Sun 20 Sep 2026 08:00:17 +0000 Manifest this update: Sun 20 Sep 2026 08:00:17 +0000 Manifest next update: Mon 21 Sep 2026 08:00:17 +0000 Files and hashes: 1: 0UXZLxmo0wM791OjAQvNwfm2flg.asa (hash: fckAHmyvVNaeQqmLb5z5kUo++7GABr5luLIf2iVlPj8=) 2: 44CA1k5d4Zw23GcP4lb4i4-vDPc.roa (hash: 6c/pnyjlYlDcfbUXGOzr645pKHpIFoe+rR3oaf4Be6g=) 3: 4OwitvkmkhKV2LtZpk1QLZTpl4E.asa (hash: aGnCO3oIRNu7nbl3yxascrT5ogI+38YhsT0IaT24+Ps=) 4: 5xi8bSy9c83Bg6qClBnmgJJbFA4.asa (hash: RSBuuu1KOgBq7xwPJfJizf07iznlWzC9UjX015Je8yk=) 5: 6IqI9gfABI1V0avL-WdqDQ9gNGk.asa (hash: x/3Qd9UB9tmsdebQBpFmyTkyhk8Goo0sm80nqeO+7ZQ=) 6: CvTWeK7xp9gyjdFy-y9UwtpH8uE.roa (hash: 733OwKswiweiXSLuyQj7UGTmZLfaZ6qRpmED62r0qvA=) 7: EutctDjYApRtXZCCgXc1_FMXFMI.roa (hash: +qc+pkUgzkZJUvQ7/ijItcJlPfU6GdEPJtEIGHeSZ+w=) 8: H5cJU-sxt-hZI6FMau1LEtyh614.asa (hash: NYeq2kG2iVJonZO0Jwu2qtybJFReQWpFb9Vj1/WLpQg=) 9: IIZ_mGH3X6355DF3JRICMRfOqTQ.asa (hash: TxemWnQodUkymHC8e+RcAhRi9Z78sNJiYQ7hSaXm0gs=) 10: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: b1i+fqiBhiZB/x0G4AzWDm+DXFKy7dhpsiBHOvSScMU=) 11: N6KyBv5Xx5MGRmWO1SOVIpA2W_I.asa (hash: cD3zCeI88xWZ6CMz6J0M2Axze+U4XS2co5BuDwABalI=) 12: prkwm3Nwi4i7nBXudHI4KuKfmHI.asa (hash: krdyRxkzH8bZP80JYgy+3OWYOrwBKzT/IXHhrb1NwSs=) 13: vVF3pTqa2KJdx2p8PlUWcXPESX4.roa (hash: 8smQRNWHO8FZtO5kA7zQSvtufSO4Sm4HtWZBhh9ooug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bd:d4:8a:85:ed:90:cf:7c:71:84:94:18:29:c6:b7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Validity Not Before: Sep 20 08:00:17 2026 GMT Not After : Sep 21 08:00:17 2026 GMT Subject: CN=22a6e6273a99433f72bfad90b6f403bd60a6b73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:da:de:3a:e0:11:57:b2:4f:67:57:60:3d:bf: 5c:77:85:f7:8e:e2:27:9c:10:66:b5:18:47:6a:37: a7:8d:d5:db:e4:1b:c7:9b:67:3c:44:40:22:b6:71: c4:b1:0b:38:18:db:84:95:1c:ad:46:fe:a5:aa:9d: 24:60:e4:c2:b7:9b:00:3d:21:86:aa:b4:28:8f:1f: be:04:d7:e5:44:8a:e3:d2:67:71:47:74:08:33:19: 97:46:f3:45:4c:fe:1b:e2:d4:fc:61:df:2a:f3:30: 62:cc:b0:d1:0c:d5:72:cc:64:df:2e:67:b9:0e:37: 9b:53:c0:f3:76:1d:0a:22:25:de:74:5c:79:36:25: 94:3e:a9:46:61:0b:9b:43:71:3b:5e:2b:f4:58:02: 1a:02:6e:0d:1d:5e:1e:45:85:a8:f9:46:16:af:8c: 48:8d:4d:b9:86:ca:d6:44:5e:bd:9c:e1:5a:05:1f: 9b:83:6f:fc:3b:dc:b6:b9:14:f0:be:fb:b1:7e:da: 14:b2:65:d5:a4:9e:66:e2:9d:2a:6b:c3:c4:81:99: 3e:37:a7:87:70:dd:84:70:56:42:67:ee:7d:f0:da: 30:80:48:01:3f:2a:6c:88:f3:da:62:b4:cc:02:9d: e0:01:b2:e9:cd:91:26:9f:be:a8:8a:5b:ff:2b:13: bc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A6:E6:27:3A:99:43:3F:72:BF:AD:90:B6:F4:03:BD:60:A6:B7:3E X509v3 Authority Key Identifier: keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:66:01:27:d7:bf:60:40:a5:fe:c5:25:aa:1a:40:b0:49:c3: 01:22:1b:77:00:3c:ce:c0:09:6f:ec:70:31:7f:0c:9e:9f:3e: 4b:8f:40:d3:b0:d9:b5:3b:99:3f:05:f1:be:9f:09:14:b6:8c: ed:09:15:bd:84:5d:c5:ed:30:6b:cc:a6:97:49:c3:10:29:b4: 8a:6d:aa:a9:c1:2b:fe:82:b4:83:14:e4:01:b6:79:b5:af:25: 9e:da:c9:1d:07:77:77:1e:9b:40:79:04:6d:e9:d4:5e:4b:8a: 36:bd:11:09:9d:22:c3:85:3c:c6:f4:f1:ef:de:8e:0c:6d:ba: 6b:35:02:be:b3:e4:9b:a2:b0:89:69:64:96:0d:12:e7:13:22: 4a:20:e5:e2:79:7c:ab:87:2b:64:b7:7b:bd:74:c8:45:55:94: 42:8b:f4:43:67:a7:af:97:1f:8e:fd:64:3b:0b:7a:8e:4f:65: b3:cd:13:61:6b:d6:05:94:d3:28:03:0b:cf:24:ef:86:ec:ab: 65:af:b3:6a:5c:50:4f:fc:4d:2b:63:0b:ec:56:42:70:0d:de: bd:43:73:e8:e4:e4:70:60:fd:cc:21:9f:61:52:46:23:36:66: 2e:6b:0f:38:32:ae:03:5d:83:9a:f9:96:bf:ef:79:0d:86:c3: 2a:1c:81:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC91IqF7ZDPfHGElBgpxreIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl MjFiYjkwHhcNMjYwOTIwMDgwMDE3WhcNMjYwOTIxMDgwMDE3WjAzMTEwLwYDVQQD EygyMmE2ZTYyNzNhOTk0MzNmNzJiZmFkOTBiNmY0MDNiZDYwYTZiNzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9reOuARV7JPZ1dgPb9cd4X3juIn nBBmtRhHajenjdXb5BvHm2c8REAitnHEsQs4GNuElRytRv6lqp0kYOTCt5sAPSGG qrQojx++BNflRIrj0mdxR3QIMxmXRvNFTP4b4tT8Yd8q8zBizLDRDNVyzGTfLme5 DjebU8Dzdh0KIiXedFx5NiWUPqlGYQubQ3E7Xiv0WAIaAm4NHV4eRYWo+UYWr4xI jU25hsrWRF69nOFaBR+bg2/8O9y2uRTwvvuxftoUsmXVpJ5m4p0qa8PEgZk+N6eH cN2EcFZCZ+598NowgEgBPypsiPPaYrTMAp3gAbLpzZEmn76oilv/KxO8qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKm5ic6mUM/cr+tkLb0A71gprc+MB8GA1UdIwQY MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt ODUwZjM0OTA2MjI5LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5 LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsmYBJ9e/ YECl/sUlqhpAsEnDASIbdwA8zsAJb+xwMX8Mnp8+S49A07DZtTuZPwXxvp8JFLaM 7QkVvYRdxe0wa8yml0nDECm0im2qqcEr/oK0gxTkAbZ5ta8lntrJHQd3dx6bQHkE benUXkuKNr0RCZ0iw4U8xvTx796ODG26azUCvrPkm6KwiWlklg0S5xMiSiDl4nl8 q4crZLd7vXTIRVWUQov0Q2enr5cfjv1kOwt6jk9ls80TYWvWBZTTKAMLzyTvhuyr Za+zalxQT/xNK2ML7FZCcA3evUNz6OTkcGD9zCGfYVJGIzZmLmsPODKuA12DmvmW v+95DYbDKhyBAw== -----END CERTIFICATE-----Generated at Sun Sep 20 13:03:56 2026 by rpki-client