$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: cdR+I3+srFTZKiopVR6sNBCpnlxraD8Yu5qvLK0oyOw= Subject key identifier: 2E:0F:8A:3F:D8:43:93:AA:55:8D:BC:3D:5B:17:F0:31:02:D8:65:14 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 01A0C09FB0D6E85C91EF6E792590365B9CB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 1AEC Signing time: Sun 20 Sep 2026 21:01:25 +0000 Manifest this update: Sun 20 Sep 2026 21:01:25 +0000 Manifest next update: Mon 21 Sep 2026 21:01:25 +0000 Files and hashes: 1: TjYcJALyGbmW-x31ry7QsUvdQtQ.roa (hash: knhLPKVdJjwTBCuKiy0BNSL8TQGPgiu2tFYYWRO2204=) 2: baEkayAg80jmYDBU-ExaHSLpuaI.roa (hash: nAErtQy9uElHFQjfJS5ckQ4epiwL6hvpsQEYN9BEeqw=) 3: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: E7aUl6tCGbEaMfvBZYawmcb7o5ys7T8FXnkNiFjZW40=) 4: cGs3UaDvGLQ1Q_TQpZAPaINt4Es.roa (hash: W7uHnT9KoPvCIjHy/wyMQaAb03AUeFyxBB7Do1XvIvI=) 5: ebSZBecc7df92SgP59-y12trz8Y.roa (hash: eWLHCXv7jbIrxX4dZcu1pV/1wCL3MzIiRwN/vf2jitQ=) 6: hp4kjoTsfGIBSPnL3Ulvv5LRB_A.roa (hash: icmc8vcVjmZSj8X83I0R9LEtCGtKRf3+GDCj0xm9IVc=) 7: nmGtGkrhBfqxDaqozTHEU7woU_8.roa (hash: myNlScXFtUNhqDOYxLDED2mEeSRwem2M2mluAw2qbGU=) 8: oRALtbh2nuCRd23sDYqfy35X5z0.roa (hash: jC6NP1kM59PVY3etFPE/j9NV0XqouvnOb2E4RPSGrX4=) 9: pI2S2lg5Mevtnr1gNuhTMLXlTZk.roa (hash: 5cp4WqQX2Fq4/2gG8NNXNJQnzkTkhV+uz8kgPR8ik8M=) 10: pUi-gLSXqZ0JaQPDBRSSYpMiavg.roa (hash: BVbd5i0a2oHy3QrO+gV4ifjJEQxi06QcvV9UBgsyx9E=) 11: rWySjgHmxws3lM6jmie75S8CDBw.roa (hash: At0oBHsNt1VyqDJTW3hMzgCfUrv9SJ/hPxisShjHIa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c0:9f:b0:d6:e8:5c:91:ef:6e:79:25:90:36:5b:9c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Sep 20 21:01:25 2026 GMT Not After : Sep 21 21:01:25 2026 GMT Subject: CN=2e0f8a3fd84393aa558dbc3d5b17f03102d86514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:24:85:98:21:01:68:a8:f1:96:2f:48:d5:96: 20:cc:f2:21:19:bf:35:15:eb:e8:0f:63:8c:09:8a: 9b:27:49:63:e9:21:a9:2c:40:3e:7b:d5:8f:84:b7: 8a:06:0d:33:34:25:5e:26:86:96:ce:c8:53:f4:50: 9b:3f:ab:bf:34:9d:9d:70:07:9a:3f:fb:bb:be:a9: 3d:b0:88:ae:d4:7b:52:ff:06:a9:df:4b:f9:82:e4: 75:ad:7b:10:7d:9a:52:d0:d9:f0:89:96:3d:22:33: 78:01:f7:10:6d:c7:ac:f9:a6:4f:ef:b0:6e:4a:12: fe:2d:55:ce:06:51:92:44:5b:fc:41:24:2f:b3:22: e3:af:dd:4a:89:aa:2c:5e:81:f7:30:7a:be:0d:ed: b6:9d:5d:b2:8e:aa:a3:db:d1:74:34:8a:fa:99:29: 8a:d4:d1:26:cb:f8:a6:c2:ee:23:25:50:b7:13:ec: 78:b3:c6:92:72:cc:ec:00:92:89:75:b9:8b:b7:6a: 18:93:bf:c3:82:0d:76:0f:d5:14:bd:60:44:12:90: 85:73:c7:73:79:a4:3b:22:cd:11:0d:93:9d:71:fd: 4a:3c:5e:6c:c2:f2:67:af:a4:29:69:6c:f6:33:36: c7:04:b4:41:94:61:26:93:f2:dd:47:d4:9c:79:36: 05:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0F:8A:3F:D8:43:93:AA:55:8D:BC:3D:5B:17:F0:31:02:D8:65:14 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b1:26:d0:63:32:e6:44:a2:b8:be:6b:ef:69:9b:32:82:7c: 7a:02:c6:91:96:13:8f:3f:4d:c1:fe:78:4d:9a:74:d3:e1:cb: 72:32:6d:63:25:f9:b9:42:2a:a7:fb:7c:e3:76:41:00:cf:18: c8:ad:84:7a:1f:d8:cf:c0:f7:84:27:9f:db:cd:5c:08:b4:0e: 92:00:5d:66:0e:95:44:55:e9:9d:18:0a:81:f0:aa:cb:2b:3f: 29:2d:c8:f0:6f:c1:4e:42:f0:26:1d:89:58:9d:87:98:06:84: 9a:0a:e2:f5:35:88:ef:91:61:f5:6d:7d:4d:97:08:88:e2:e6: 9b:50:c2:98:f2:8d:8e:95:8e:0c:a1:b2:b2:b3:5d:1c:b5:b8: ab:59:ab:f5:ee:46:86:43:af:3e:1d:14:12:4e:6b:58:de:2c: 51:2d:c2:74:d2:84:ea:22:89:cf:d3:c2:44:1e:50:05:3c:aa: 5e:bf:c4:d6:1b:8b:cd:63:83:ce:80:f2:10:54:30:ea:ab:d6: 26:15:25:34:65:20:22:8e:8e:80:06:50:be:b8:08:94:ad:21: 5c:36:73:27:e2:7a:e4:30:28:44:7b:51:1b:94:68:13:12:de: 8f:32:fe:8c:c7:9a:d3:0c:73:10:17:76:5e:bd:c8:6a:cb:53: 01:d4:d1:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDAn7DW6FyR7255JZA2W5y5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYwOTIwMjEwMTI1WhcNMjYwOTIxMjEwMTI1WjAzMTEwLwYDVQQD EygyZTBmOGEzZmQ4NDM5M2FhNTU4ZGJjM2Q1YjE3ZjAzMTAyZDg2NTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArySFmCEBaKjxli9I1ZYgzPIhGb81 FevoD2OMCYqbJ0lj6SGpLEA+e9WPhLeKBg0zNCVeJoaWzshT9FCbP6u/NJ2dcAea P/u7vqk9sIiu1HtS/wap30v5guR1rXsQfZpS0NnwiZY9IjN4AfcQbces+aZP77Bu ShL+LVXOBlGSRFv8QSQvsyLjr91KiaosXoH3MHq+De22nV2yjqqj29F0NIr6mSmK 1NEmy/imwu4jJVC3E+x4s8aScszsAJKJdbmLt2oYk7/Dgg12D9UUvWBEEpCFc8dz eaQ7Is0RDZOdcf1KPF5swvJnr6QpaWz2MzbHBLRBlGEmk/LdR9SceTYFKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4Pij/YQ5OqVY28PVsX8DEC2GUUMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7Em0GMy 5kSiuL5r72mbMoJ8egLGkZYTjz9Nwf54TZp00+HLcjJtYyX5uUIqp/t843ZBAM8Y yK2Eeh/Yz8D3hCef281cCLQOkgBdZg6VRFXpnRgKgfCqyys/KS3I8G/BTkLwJh2J WJ2HmAaEmgri9TWI75Fh9W19TZcIiOLmm1DCmPKNjpWODKGysrNdHLW4q1mr9e5G hkOvPh0UEk5rWN4sUS3CdNKE6iKJz9PCRB5QBTyqXr/E1huLzWODzoDyEFQw6qvW JhUlNGUgIo6OgAZQvrgIlK0hXDZzJ+J65DAoRHtRG5RoExLejzL+jMea0wxzEBd2 Xr3IastTAdTRuA== -----END CERTIFICATE-----Generated at Sun Sep 20 23:50:35 2026 by rpki-client