$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: yhAqg7Eu3kU71RWFd4hLXelXhQIhCmZdMaDTskcGnsA= Subject key identifier: ED:AC:18:E7:C1:C5:41:35:74:52:BA:FB:2D:85:DB:51:DE:1D:86:D6 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 01A1DE703008268CDE61DB7FBC54D8C2987B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 1B80 Signing time: Sun 15 Nov 2026 09:00:56 +0000 Manifest this update: Sun 15 Nov 2026 09:00:56 +0000 Manifest next update: Mon 16 Nov 2026 09:00:56 +0000 Files and hashes: 1: TjYcJALyGbmW-x31ry7QsUvdQtQ.roa (hash: knhLPKVdJjwTBCuKiy0BNSL8TQGPgiu2tFYYWRO2204=) 2: baEkayAg80jmYDBU-ExaHSLpuaI.roa (hash: nAErtQy9uElHFQjfJS5ckQ4epiwL6hvpsQEYN9BEeqw=) 3: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: SMBTCiFn3fg6AGbk0STpywQLOpW7T2Zi/7a3+375Dxc=) 4: cGs3UaDvGLQ1Q_TQpZAPaINt4Es.roa (hash: W7uHnT9KoPvCIjHy/wyMQaAb03AUeFyxBB7Do1XvIvI=) 5: ebSZBecc7df92SgP59-y12trz8Y.roa (hash: eWLHCXv7jbIrxX4dZcu1pV/1wCL3MzIiRwN/vf2jitQ=) 6: hp4kjoTsfGIBSPnL3Ulvv5LRB_A.roa (hash: icmc8vcVjmZSj8X83I0R9LEtCGtKRf3+GDCj0xm9IVc=) 7: nmGtGkrhBfqxDaqozTHEU7woU_8.roa (hash: myNlScXFtUNhqDOYxLDED2mEeSRwem2M2mluAw2qbGU=) 8: oRALtbh2nuCRd23sDYqfy35X5z0.roa (hash: jC6NP1kM59PVY3etFPE/j9NV0XqouvnOb2E4RPSGrX4=) 9: pI2S2lg5Mevtnr1gNuhTMLXlTZk.roa (hash: 5cp4WqQX2Fq4/2gG8NNXNJQnzkTkhV+uz8kgPR8ik8M=) 10: pUi-gLSXqZ0JaQPDBRSSYpMiavg.roa (hash: BVbd5i0a2oHy3QrO+gV4ifjJEQxi06QcvV9UBgsyx9E=) 11: rWySjgHmxws3lM6jmie75S8CDBw.roa (hash: At0oBHsNt1VyqDJTW3hMzgCfUrv9SJ/hPxisShjHIa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:70:30:08:26:8c:de:61:db:7f:bc:54:d8:c2:98:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Nov 15 09:00:56 2026 GMT Not After : Nov 16 09:00:56 2026 GMT Subject: CN=edac18e7c1c541357452bafb2d85db51de1d86d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:19:bd:82:7e:fd:61:cb:94:78:35:43:44:9f: 61:f1:0e:63:6b:a9:d7:9b:88:5b:78:a4:f0:13:5d: 75:75:6d:87:56:e1:33:50:3a:03:56:3a:22:9e:cf: 73:d4:95:21:d8:8b:90:69:49:6e:16:53:36:c0:f2: 02:7e:bd:c7:78:b5:06:80:17:a7:96:f1:0a:46:72: 4b:08:01:45:75:f6:8b:85:34:52:5a:05:21:27:8e: 52:38:7b:00:3e:88:bc:2f:be:8c:cc:66:8c:b5:0b: ee:16:6b:8a:66:55:2e:9e:2a:c1:da:ff:25:9c:ba: 44:40:5d:c1:5b:e8:28:39:01:d2:94:d0:43:0a:9a: 1d:f5:3d:d3:b4:d5:9a:62:9b:93:86:68:7a:94:64: e8:bd:67:07:4b:db:b3:0c:0e:fb:c2:24:b1:4c:1e: 78:67:9a:3e:06:9e:f1:3b:f4:c4:11:85:d6:dd:0b: c7:ff:0e:ca:54:0d:5e:9f:91:85:2c:e6:1b:1a:24: 3d:92:23:de:75:b8:f8:0e:04:29:ed:69:55:08:c6: a5:53:ac:c5:2b:fe:ad:8e:c5:4f:13:63:e5:a1:02: 25:0e:d6:1e:ac:0d:5a:ce:aa:19:9b:04:e2:a9:49: 3f:1f:2f:d2:9a:2b:fd:01:5a:f9:d3:75:b9:eb:ee: 27:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AC:18:E7:C1:C5:41:35:74:52:BA:FB:2D:85:DB:51:DE:1D:86:D6 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:de:a0:c9:6f:80:fc:93:56:fc:48:50:68:45:49:13:99:9c: 7a:0a:a3:1f:17:08:92:da:60:3b:ca:2b:7f:55:34:fc:27:b5: e3:a6:4a:31:e8:e6:d3:95:a2:69:65:f0:76:8a:15:6f:b5:5c: 2b:49:9e:28:89:9a:00:64:c8:4e:e3:e5:4b:45:ea:af:89:2f: 40:2e:ba:bc:a4:d7:cf:cd:32:6f:7c:26:b0:c8:43:38:9f:ee: b9:aa:d4:d5:60:54:94:f8:87:62:60:fc:99:bd:28:c0:39:70: 9d:ec:eb:9e:eb:dd:03:36:5d:46:3d:b0:bd:d7:0c:0a:bd:b9: c0:52:fe:0b:99:c2:8b:ce:71:d1:f0:88:af:53:25:45:dc:01: 9d:47:ea:95:fa:43:05:52:b3:40:3e:bb:83:19:46:e2:75:22: 80:95:e4:81:c7:f8:49:72:0b:fb:9c:0c:11:b5:ff:b3:b3:95: 0d:41:9c:ad:56:73:1b:65:64:a4:39:c0:32:d4:8d:2f:84:fc: 92:42:ee:e3:f4:79:9f:c0:6c:65:a5:1e:22:ba:0c:5c:7d:d9: 27:7e:25:64:60:e1:be:96:6f:21:64:52:53:7a:dd:d0:95:e8: a5:f5:19:4f:db:20:67:45:e0:ad:e7:31:df:40:14:11:f9:47: 92:e6:8f:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHecDAIJozeYdt/vFTYwph7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYxMTE1MDkwMDU2WhcNMjYxMTE2MDkwMDU2WjAzMTEwLwYDVQQD EyhlZGFjMThlN2MxYzU0MTM1NzQ1MmJhZmIyZDg1ZGI1MWRlMWQ4NmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxm9gn79YcuUeDVDRJ9h8Q5ja6nX m4hbeKTwE111dW2HVuEzUDoDVjoins9z1JUh2IuQaUluFlM2wPICfr3HeLUGgBen lvEKRnJLCAFFdfaLhTRSWgUhJ45SOHsAPoi8L76MzGaMtQvuFmuKZlUunirB2v8l nLpEQF3BW+goOQHSlNBDCpod9T3TtNWaYpuThmh6lGTovWcHS9uzDA77wiSxTB54 Z5o+Bp7xO/TEEYXW3QvH/w7KVA1en5GFLOYbGiQ9kiPedbj4DgQp7WlVCMalU6zF K/6tjsVPE2PloQIlDtYerA1azqoZmwTiqUk/Hy/Smiv9AVr503W56+4nrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2sGOfBxUE1dFK6+y2F21HeHYbWMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARd6gyW+A /JNW/EhQaEVJE5mcegqjHxcIktpgO8orf1U0/Ce146ZKMejm05WiaWXwdooVb7Vc K0meKImaAGTITuPlS0Xqr4kvQC66vKTXz80yb3wmsMhDOJ/uuarU1WBUlPiHYmD8 mb0owDlwnezrnuvdAzZdRj2wvdcMCr25wFL+C5nCi85x0fCIr1MlRdwBnUfqlfpD BVKzQD67gxlG4nUigJXkgcf4SXIL+5wMEbX/s7OVDUGcrVZzG2VkpDnAMtSNL4T8 kkLu4/R5n8BsZaUeIroMXH3ZJ34lZGDhvpZvIWRSU3rd0JXopfUZT9sgZ0Xgrecx 30AUEflHkuaPNg== -----END CERTIFICATE-----Generated at Sun Nov 15 17:22:05 2026 by rpki-client