$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json) Hash identifier: nH5VrjBHmuXEGbc1CYIWJ+4mtEV8aBarLux5XXV/6e8= Subject key identifier: B5:3B:61:5D:67:D4:B6:E6:C3:94:73:1E:9A:BA:7F:E4:03:B9:A5:06 Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 01A12955D8FF7AC61C5355FF2EB8840C9D70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft Manifest number: 0B01 Signing time: Sun 11 Oct 2026 05:00:54 +0000 Manifest this update: Sun 11 Oct 2026 05:00:54 +0000 Manifest next update: Mon 12 Oct 2026 05:00:54 +0000 Files and hashes: 1: 1-ctnzOu2AqRoTotuUyqfmWZ69Sw.roa (hash: Y9R2l24kBbqyGrhSPstaoeJ69KKtfxGMiYaBVipK5z8=) 2: 6PHN4EINg95zsWmwMqR_LCCbpc0.roa (hash: Qlikbs7ZBI8ctlfaw3/jTu/l9GkQAhjSgxybaaSAR64=) 3: 77SuR1o4iXHGKTkHKp8TMdrc4mU.roa (hash: yXpIqsMXM0uwteirlGQMGdO/JHFjQjCokd/1EM9213g=) 4: Mo9G1JhWigyZx8b4Z1ztpl3HoaU.roa (hash: 6/JX2hr5dQ72yy0qDOA4ItSaDR3CmA+Vunj3Be7K7Ww=) 5: NFzJJ4j6wzQfqxhnTBiY1Cn7rYg.roa (hash: 5tZaz3kVj+e7u27N68hInpBHHf3h5dZ15X//Kl1uR3A=) 6: SBvRByMqYGQLc42MhIv39wSrM14.roa (hash: +yuXK4U1plTB6Fi9dEb2HppH8vLHLdbotjVkOSomh4c=) 7: SYrllEJSlKvgkdw578ZRNVSFNWE.roa (hash: k4gJZrWaGXAakwoprVZK+70H4xXKeMYoqoBwpy13NQI=) 8: UUqnfAVDQa6lg6vG893HM0lVJYc.roa (hash: 36To8a4pjZ0Y2Qs8m/H0gopLfHuBJ5FyCcUXnUo0w+Q=) 9: fIODe0F2H7U5wAQ5uy_1kDKWqm8.roa (hash: ETRCfd6hwLM8wB2Vmt5McaUCtMtxHeKB1rybYkoCFk0=) 10: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: 6R5R63VsnFYqpyy6b8Z3+yTShfymBs98xP4sSg0uB1c=) 11: jB4bYdWFXZMhIAjQMhMfN8vZ55w.roa (hash: EkZSSIno7HUUjqBtEwf8U/N90NHBkP5MsOxUQJnJNBo=) 12: qI5GOetXdKYh8lrEqXZOEzNWNgs.roa (hash: gOg5TzYEps9BVyLryEBMecl6jyfHJAcCMKO+ZNmQ0RI=) 13: qbK-9RQWdGS_xJXOliPpGoY-V4w.roa (hash: iAYy+5hd5UtMJbweD8Z+MTcR9zIJ+2tv0Xj7Rh16GJY=) 14: tASmvZQ1KYaQWQIw4lmKhvWcByY.roa (hash: ri7thGK0s4tAbDIwaqArMt7wR29/4q7zyG3uwLTYanM=) 15: wNut4W0CI_94GPYF-EhqLdAWsJM.roa (hash: bA9EhkOyyRbeFxEzmWlsFXo4v9xKribtzLHT2Ybvrhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 05:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:29:55:d8:ff:7a:c6:1c:53:55:ff:2e:b8:84:0c:9d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Oct 11 05:00:54 2026 GMT Not After : Oct 12 05:00:54 2026 GMT Subject: CN=b53b615d67d4b6e6c394731e9aba7fe403b9a506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c3:fe:c1:9b:b2:33:82:5b:45:7e:bb:e4:48: 51:15:71:49:25:fd:61:3b:ae:8d:31:55:a8:46:73: 6a:00:94:71:8e:b0:c1:1e:40:92:08:a4:4c:a0:42: 29:62:4d:64:40:4b:b2:a2:c9:3e:fc:7c:9d:f4:32: 76:b2:ba:49:1d:67:92:1f:ab:4f:6d:d1:1d:97:76: 38:d4:48:c0:4e:28:69:94:49:4b:16:17:be:0e:d5: 25:e0:45:ae:e2:21:46:db:cf:de:1d:a9:c9:30:a1: 7d:10:1d:09:27:c1:1b:40:1c:70:11:09:1a:7a:f1: ec:c2:14:b1:30:b7:06:20:64:c2:0a:24:96:fe:d4: 51:2b:10:5e:13:00:71:0b:a9:31:5d:01:d6:ee:43: ba:fe:4c:f4:24:df:a0:0d:24:3e:bb:11:78:87:67: 16:4f:f1:d3:7a:7e:cd:47:2d:a1:3d:b5:eb:06:c1: b1:e7:2f:9c:17:e8:a6:f5:b3:69:7a:7b:94:8b:ed: 45:f5:16:9c:b2:ec:74:bf:17:93:2b:a5:92:56:84: a3:5b:3b:05:33:84:54:34:ea:20:60:e7:5f:cc:18: 54:d0:0d:fb:a7:18:94:4e:3f:3b:3a:d9:10:5c:ac: ca:53:ee:98:cc:c0:d1:07:c8:0e:1f:71:8e:f6:25: 32:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3B:61:5D:67:D4:B6:E6:C3:94:73:1E:9A:BA:7F:E4:03:B9:A5:06 X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:4d:46:cd:38:56:7c:b3:15:e8:ea:7a:ab:fc:36:c7:53:89: 01:dc:a1:05:e0:52:51:6f:a8:be:c4:e4:12:c0:2a:93:ef:62: 0e:33:9c:21:79:9f:14:42:48:12:de:14:95:9d:f1:4d:85:dc: d1:0c:4b:02:ca:7a:13:7b:eb:b5:6a:26:3e:55:9f:da:c3:21: b9:6f:0e:b4:de:0d:81:78:7a:0c:04:f7:7e:6c:af:4f:07:58: 5c:60:00:3f:a3:06:01:f5:bd:71:d7:25:d6:69:54:eb:75:2b: 24:5b:14:b7:11:5e:74:b2:ff:c8:38:ba:9e:85:83:7e:fb:05: a0:ae:a5:48:40:82:73:0c:67:c2:e6:ab:b0:31:6c:58:43:d3: 3b:df:2f:29:fc:02:c7:fe:c7:56:b6:2e:68:f7:a0:b3:2c:6d: 08:ad:ac:14:3c:46:6a:7c:bc:5c:95:60:be:ab:09:cd:14:5c: d2:8c:59:6b:d4:e2:7c:38:40:8f:d8:9c:a1:4d:0a:aa:23:8d: 3e:1f:db:50:bb:e7:87:5f:fa:0b:8f:02:a5:49:c9:70:52:92: 2f:b3:ed:41:4e:a2:70:79:1a:ca:62:64:2a:23:6c:9e:51:7f: 40:b9:71:fd:62:91:db:6e:50:90:12:80:17:c7:a3:a4:a8:51: 36:15:f6:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEpVdj/esYcU1X/LriEDJ1wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjYxMDExMDUwMDU0WhcNMjYxMDEyMDUwMDU0WjAzMTEwLwYDVQQD EyhiNTNiNjE1ZDY3ZDRiNmU2YzM5NDczMWU5YWJhN2ZlNDAzYjlhNTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28P+wZuyM4JbRX675EhRFXFJJf1h O66NMVWoRnNqAJRxjrDBHkCSCKRMoEIpYk1kQEuyosk+/Hyd9DJ2srpJHWeSH6tP bdEdl3Y41EjATihplElLFhe+DtUl4EWu4iFG28/eHanJMKF9EB0JJ8EbQBxwEQka evHswhSxMLcGIGTCCiSW/tRRKxBeEwBxC6kxXQHW7kO6/kz0JN+gDSQ+uxF4h2cW T/HTen7NRy2hPbXrBsGx5y+cF+im9bNpenuUi+1F9Racsux0vxeTK6WSVoSjWzsF M4RUNOogYOdfzBhU0A37pxiUTj87OtkQXKzKU+6YzMDRB8gOH3GO9iUyTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLU7YV1n1Lbmw5RzHpq6f+QDuaUGMB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQE1GzThW fLMV6Op6q/w2x1OJAdyhBeBSUW+ovsTkEsAqk+9iDjOcIXmfFEJIEt4UlZ3xTYXc 0QxLAsp6E3vrtWomPlWf2sMhuW8OtN4NgXh6DAT3fmyvTwdYXGAAP6MGAfW9cdcl 1mlU63UrJFsUtxFedLL/yDi6noWDfvsFoK6lSECCcwxnwuarsDFsWEPTO98vKfwC x/7HVrYuaPegsyxtCK2sFDxGany8XJVgvqsJzRRc0oxZa9TifDhAj9icoU0KqiON Ph/bULvnh1/6C48CpUnJcFKSL7PtQU6icHkaymJkKiNsnlF/QLlx/WKR225QkBKA F8ejpKhRNhX2Rw== -----END CERTIFICATE-----Generated at Sun Oct 11 13:48:11 2026 by rpki-client