$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft File: dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json) Hash identifier: kQId9A73YDr29SWyywQJ/d7yHteau4T6Vg8tGaBI0qM= Subject key identifier: E5:2D:B9:A4:E0:0D:CC:1B:6B:32:C8:D1:20:6B:BF:82:79:F5:B1:2F Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 01A1DE3998E9079A85622DDECABA010719AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft Manifest number: 1B79 Signing time: Sun 15 Nov 2026 08:01:18 +0000 Manifest this update: Sun 15 Nov 2026 08:01:18 +0000 Manifest next update: Mon 16 Nov 2026 08:01:18 +0000 Files and hashes: 1: 0i_tJFCQkW4BL4d6bXm4WAypJS8.roa (hash: 61MZ18IZL5EgLoB9w4TH7mfQX+7U0VC5x9A0388yn8A=) 2: 1-JP0PPtCDIK_UNysSaQZClIqsZk.roa (hash: sfCZXINYiH/YUUcCfwXIvxbn90PofsIEnjQBdiFjFFQ=) 3: 3uJwNTCNY55i-5jM3CaDGvETngw.roa (hash: eQzu9ZxiIAP/taHhjsse4i1771g6Ywd3F2q34YSnFrQ=) 4: 42j6rh74kZK8B4TK9TrxT-yy6qs.roa (hash: TpgZQPZnpYPaVp9fqt+Gp0r1j/N3bvdYSt8BYEQV4W8=) 5: 4rdTxE4U8SWi3axBDMycJ1e2dVc.roa (hash: Xdko31FAcZqa8CKzUmvaPLbn8FzZeXlJr3Mz2L3FEGY=) 6: 59Sth-R3BuV9Hjri6g95SVuIU_8.roa (hash: rE2f8KGpsTiN9qUjtXDjk/27rrXTQHhiM7ABCMeYpTI=) 7: 7ILu19nLTjxwFZwoZ2oomheQ5_k.roa (hash: b0mXxRqiKow30AyEMQDJaMJ+FxI8ukNvBg7G/ihSEHA=) 8: 9ONi4c-7XF6Vn2zgdYwKAE0upGE.roa (hash: GdwVnVj0Er6zQr8pOtzRgza7jVJzxa5V5nFDEZ8imc8=) 9: LKaOQokfTIgkWBs2UdoqCTA22vc.roa (hash: cUUhEOlVftW9+j+XpaAsAph0Rp9J2xVMMProgn5lBRE=) 10: LNX9e0qM1FUUPu7JPg66r69yK3k.roa (hash: 4hdxVQWJPFAuhVTEnkZxRAKzt32xutYmv7LRrS+WM4M=) 11: LXHUHSO9WQWL1yjZx_1oGkRxSgI.roa (hash: HOm4ChKdSMnn++SpgwP+q1pIqlQSDcmq1lnjp8gr6/k=) 12: O5gW9hOPRMxR11eVov12x6UzYHU.roa (hash: bkCHLibjEuyg8IqJTSvrDEUtIjNQgIWoyJGDY8GOdz0=) 13: P0EJh06dBX2Z_uKMMzzVb3_JpQI.roa (hash: 265lew4gp/M7KbfXgY3mqUSmqEnG/TJjkIcENzjUQ9M=) 14: P4odDKYu1lCKx-0-6xh-2d3gFVU.roa (hash: pJx8PCnMcEoTQpCvLj2jXwglNIUY3fH2OwKcEuhWXsg=) 15: QGcED9nMBFNEcLIYKfsWpbPgFeo.roa (hash: ZoZ5qhejcJ2eD+U6g8CGcswJ1q+2gIH8nSKoh9/Kbps=) 16: T0yNiTnMr7rQj6L4yFcQz5luZuc.roa (hash: qkIXR7MhpFqaBJh+vVhJ5yECXOO2wVNGqePTqIktFFM=) 17: VWM7lA-UncwK30_u4wZN9H8N1gk.roa (hash: UAC5m76d6Heuh1OxbGU6JpOHUBx0MhMtwx6y8Lbk9fg=) 18: WtbHisRdncnw4HB-C-Q2nOatpCk.roa (hash: 3wmWRlMXTcqOjL6bnR/KTtOAF4ruJh0llk95iowxjzE=) 19: Yu_uuzMGePwC0icaYNERVoH0Cfk.roa (hash: PATzSiQXd51zhFdnNpl0DeghvMrZihxoQe+PXsEdhqA=) 20: Z5QikMa7UwGfn8uO2JzMrRFXYnY.roa (hash: U7DHGYIkh2PVaJpwB3Rs6rnlNqHm+IBWFv5Y36W7frQ=) 21: _Z4F7M-QmFI0Z18UQdlG6FBfQ7o.roa (hash: qJW2rDHAQqCfDrhYBEnMSMAxF6KCHBOPVWkKVY8Nuv8=) 22: b9yPzny7g7NzZoMSg-I0-4xYJRQ.roa (hash: oex26xfzNOy0QvV3r0CTF5Po3sMUSsRDc+0RGORVsd4=) 23: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: GCBJJMn1zXL3if/H3SF5QVdFtHDX5dIdBO4qoyZe6l4=) 24: doMjCvh-T_oVkJKD3Y7qOZoudQA.roa (hash: O0rnzXZPufM0mBq+veKdhSLIRnUWNnJekiSLuJW+WPg=) 25: f8cXMfB8GmIppgsZFcI-OCvQxNk.roa (hash: C/qkMAbaZbD1CDux6NhG+NBRCWcc4xbDi8mJQpA9u78=) 26: fW59nKWFAAcX3FkGdJCNC4LY0lU.roa (hash: QrZ99mG5ipIB8lihFmB86+BQ62v5THWSecfMtXAd/Vk=) 27: hQi_2v4PVaU2DxK_ubm6-NXJZ54.roa (hash: /DoibVc0zt1dXzmqKhW2/HUrHirpTFgRWlWufv4zCoY=) 28: iTv_taBhSWWSwucljCvdm_j4RW8.roa (hash: GE2aWALIL/q/9QPvVk6yJa+XbND+dNPP+iVv+vbA798=) 29: iqkz-oFIpTUAukJ-q0KYzZGnhbY.roa (hash: 4JwiIgby6A2ltqK6a4PhfhVkPMKWfaYDYeB6aMX/De4=) 30: kepdZXENoY0lFOiOd2VYC5Jt8PU.roa (hash: bBmIVbb4z4z4JQQlPc3j4zkDZyWk/Dmtse596NYk1Vs=) 31: mz3LKflSaCjzbLbt50UYZRI14QU.roa (hash: R+3MLAMskLr07qEIftdxyai6y/lFHGIWJS1jtU8VQFw=) 32: q4er2ti9h_W7MKRTNBtj0R5wg8I.roa (hash: Y7raLSBcr0F4VthCcXXBIhwj7MwB/MaClEuc9miqnEI=) 33: rTAcqrsLjdQzWLiPeTE0J8tFjHs.roa (hash: kpmFc9kxITW5Y/O6sK7eQ8xr12ovnarFA8jerArDTmw=) 34: sa0irmG5fTuP-s-e7ehVBplCJx4.roa (hash: 7SZESPqbjMHr+1YpDP1XwHSl42AkB6k/wkqvHyEDf5U=) 35: wA9ChWaX9aTjQjNN5mYeaC542Nc.roa (hash: uwS9DbntInTGgRyBcScvO12ZNTWYbWh0ii3LNRApI90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:39:98:e9:07:9a:85:62:2d:de:ca:ba:01:07:19:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Nov 15 08:01:18 2026 GMT Not After : Nov 16 08:01:18 2026 GMT Subject: CN=e52db9a4e00dcc1b6b32c8d1206bbf8279f5b12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:a1:c8:09:e5:b2:18:e3:d8:dd:f7:a6:1d: 70:4b:bb:69:45:ea:3c:57:bb:6d:3a:7b:48:cf:fb: 41:79:94:0b:d8:71:d5:17:60:c2:b0:8a:51:2a:64: 6f:78:b0:79:27:3f:45:43:d6:3a:d2:f7:44:dc:86: 02:b5:c7:37:5e:4e:cc:c4:b9:84:00:74:94:5e:a5: 3b:12:57:b0:26:65:05:c4:71:77:4c:36:43:36:25: 1f:f8:6e:51:03:d6:a4:aa:7e:30:d3:2f:fb:d6:85: d6:09:6e:3a:94:e1:84:27:45:23:c6:94:b6:a2:58: 5b:67:2e:5f:f7:d8:db:0c:a0:25:cd:83:f5:01:43: 51:19:5d:8b:39:fd:7e:d5:8f:4b:7c:d3:1a:dc:dc: 0c:c0:f1:ec:2e:26:29:92:c1:26:65:c2:c5:a3:e9: ce:fc:1c:ec:cf:5e:93:9f:49:01:de:24:fe:29:4b: f8:0d:ec:5e:8d:f2:73:c2:91:c1:77:b6:75:3d:84: 9c:15:29:eb:33:28:96:3b:3c:48:3d:e2:d8:71:a7: 0a:c8:eb:a6:14:60:fe:fd:5d:16:df:11:f7:47:04: 23:db:96:ec:42:bc:11:c0:52:c2:95:41:df:c0:2b: f6:de:ea:c3:f2:1a:fd:da:bd:95:c4:ad:bb:2d:c8: d4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2D:B9:A4:E0:0D:CC:1B:6B:32:C8:D1:20:6B:BF:82:79:F5:B1:2F X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:74:26:0f:14:f3:a2:09:2d:94:4e:e9:5b:4c:d1:06:da:22: 08:11:88:7b:f5:9b:20:6c:59:11:36:9f:ba:01:e5:9e:88:48: 3e:97:77:0c:a7:b2:3c:25:55:24:31:64:01:21:8f:25:98:3b: d4:4e:47:9e:69:9e:4f:e4:b1:48:d7:29:7e:94:14:75:32:d7: 98:e9:82:43:ab:d8:4e:12:e9:81:5c:29:91:a9:51:e6:f1:de: 12:c1:c2:94:22:5e:4a:4a:7b:16:01:8d:ae:ec:41:cb:c2:a0: 96:01:0f:b4:fc:c1:19:ec:05:37:36:b0:d3:88:7d:a7:69:0e: 31:11:a9:a8:42:d6:95:2c:99:5f:e2:c5:f3:77:dc:ef:5e:fd: 40:92:d1:a4:67:f9:0e:fd:0b:e5:93:a4:be:25:34:c6:f9:94: 8f:ab:7a:d4:f5:b7:20:5f:e4:de:ac:3a:35:e9:68:4a:b9:eb: 40:97:4b:04:88:f4:37:39:d7:64:8a:b5:e3:46:84:2c:15:d6: 6d:52:0c:2d:9e:1f:bc:3e:2c:f3:4c:0d:d3:ca:25:63:5c:ce: 86:a5:22:3a:a9:d3:07:34:82:3c:02:64:3f:2d:64:04:cf:54: 1f:51:a6:6b:6a:c1:03:8f:3b:25:1e:bd:cc:1e:cc:12:98:d1: 58:58:fe:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHeOZjpB5qFYi3eyroBBxmqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYxMTE1MDgwMTE4WhcNMjYxMTE2MDgwMTE4WjAzMTEwLwYDVQQD EyhlNTJkYjlhNGUwMGRjYzFiNmIzMmM4ZDEyMDZiYmY4Mjc5ZjViMTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtOhyAnlshjj2N33ph1wS7tpReo8 V7ttOntIz/tBeZQL2HHVF2DCsIpRKmRveLB5Jz9FQ9Y60vdE3IYCtcc3Xk7MxLmE AHSUXqU7ElewJmUFxHF3TDZDNiUf+G5RA9akqn4w0y/71oXWCW46lOGEJ0UjxpS2 olhbZy5f99jbDKAlzYP1AUNRGV2LOf1+1Y9LfNMa3NwMwPHsLiYpksEmZcLFo+nO /Bzsz16Tn0kB3iT+KUv4DexejfJzwpHBd7Z1PYScFSnrMyiWOzxIPeLYcacKyOum FGD+/V0W3xH3RwQj25bsQrwRwFLClUHfwCv23urD8hr92r2VxK27LcjUcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUtuaTgDcwbazLI0SBrv4J59bEvMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqnQmDxTz ogktlE7pW0zRBtoiCBGIe/WbIGxZETafugHlnohIPpd3DKeyPCVVJDFkASGPJZg7 1E5HnmmeT+SxSNcpfpQUdTLXmOmCQ6vYThLpgVwpkalR5vHeEsHClCJeSkp7FgGN ruxBy8KglgEPtPzBGewFNzaw04h9p2kOMRGpqELWlSyZX+LF83fc7179QJLRpGf5 Dv0L5ZOkviU0xvmUj6t61PW3IF/k3qw6NeloSrnrQJdLBIj0NznXZIq140aELBXW bVIMLZ4fvD4s80wN08olY1zOhqUiOqnTBzSCPAJkPy1kBM9UH1Gma2rBA487JR69 zB7MEpjRWFj+Dw== -----END CERTIFICATE-----Generated at Sun Nov 15 16:38:18 2026 by rpki-client