$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft File: Us2aZRLb8lpfGbgn16LH4iou6N0.mft (raw, json) Hash identifier: jlDMfOmr5T/wFae4O5CCQu/B/m4f6iIoUDOjo7+pSuY= Subject key identifier: EE:01:13:DD:FC:72:89:84:93:BC:0D:76:0C:74:48:BF:E8:0D:23:69 Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 01A0C93480E52AE03CC2237EA76052969016 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft Manifest number: 0D3D Signing time: Tue 22 Sep 2026 13:00:56 +0000 Manifest this update: Tue 22 Sep 2026 13:00:56 +0000 Manifest next update: Wed 23 Sep 2026 13:00:56 +0000 Files and hashes: 1: 1-IlB2CphFhJ1Es2Auj6Y8Pv_wcE.roa (hash: dBSNrPPwvAMKy5o27/nj2blgxOw2PO1uOCPT4ejHFgg=) 2: 2GKmq9a4tbRnyy5v_dzbijUGgpo.roa (hash: 5lV0Dnj2JREu67qpiN4zC8MeQVoN3LVpjCKJ+YsJ3TU=) 3: 2rLUhnluwL6wnKGGvW337qHfa_A.roa (hash: vOmCdy4dcO0yKPbRSBS7H0+V0LqrEgZGLIPDsfuR8RI=) 4: 3JNAFPmuRusA7_P1cHUrpNc8ZWQ.roa (hash: zKy+aXsrA8Z978tqaQi0ynXqJW9mllBBtqQYt4mz8gc=) 5: 3eP-ZYKR74zQteZxg-jYK68KuKU.roa (hash: rI+Q6O08EYSoWZw7Ks588qVsTWbvSuHUC1dp2GQPsEg=) 6: 4_TTRfrA4hvyb8aeVnebRoG9aZ4.roa (hash: 3NbkuqOTF46pDYs4QB6pgruxYNEcPm4QNzecOj1ivnE=) 7: KnBckRYNpkrmgA2l68UnOSdG8M8.roa (hash: e9ryBHEjHKpJhCoyv4UnySH5Ms6mFlk1tA5pBRXFaKc=) 8: Px4XmExl2QONyqSP6s8-qLoIeoI.roa (hash: reA0XoIHBbZsGAjNzRWT9dW+9757Ms5dgcUGYfnrDi8=) 9: Us2aZRLb8lpfGbgn16LH4iou6N0.crl (hash: k32ur1nC1FftQuKSQv8Y7SSB2nVLzfaapDfmYmWZcnI=) 10: VpoR4ytDHWEH5qJGhTngwFniYvk.roa (hash: x6eFh+FvocnjchDTOElJQmMu4KdVVQsAbUfVxqlk4YQ=) 11: b4bnSjrxkGqwlr0zkoxcOijmFkc.roa (hash: fQuLS072q+zjmBm2EgGlUmemoEePNKD15HIZM6Eyfw4=) 12: cwwhcNpzOg_pmBszouIx8h2CHRU.roa (hash: vBJrQQ0ItgE86n69h/fkj396ErwZyqxGCsEUUVNAzdI=) 13: hlAbpQnKYaIDHrjCT-1lNBwSXu0.roa (hash: BILz2oAMGgMF6vZP6W3jaxaaHIODVkHC+m/GaL33QlM=) 14: kPZtrooPlOyF8jQupuEU9Gy1bJQ.roa (hash: KtcI+6F6qPHzsOZYQ0EOD+pODuibLz2OAgS4M/a6Aq4=) 15: ldoq86JhWRtPnXQa0o4fAn7GOes.roa (hash: Zfo5/6efnP/N6jxUB47woZ54SIJcC/xEnjfHGBYnABk=) 16: oLlQgePRk9yvcOlL0Fl_a56u9H4.roa (hash: Wqock9cGRbZPQGtCkafIuYZm7FqajUuA17fJ83OGRks=) 17: xp9MuE3K7E-Sb2HgnwhKc3yErto.roa (hash: 9FJKEkYOHXVi/GiMh+ZQtwPZthuSJbC+u80wUEZ5uBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c9:34:80:e5:2a:e0:3c:c2:23:7e:a7:60:52:96:90:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Sep 22 13:00:56 2026 GMT Not After : Sep 23 13:00:56 2026 GMT Subject: CN=ee0113ddfc72898493bc0d760c7448bfe80d2369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bf:78:7d:c1:d5:7f:7f:67:e8:71:9c:97:c0: 1f:6f:7c:44:c4:30:0d:50:50:da:98:2f:b7:d1:46: c7:06:a7:c0:65:73:1a:60:bd:a7:e4:f3:6f:7b:8a: 18:e5:09:2f:5f:95:9a:34:04:c6:9e:c2:44:05:7a: 79:18:d4:a1:66:d2:8d:7f:a8:09:c2:46:06:ba:61: b1:4e:a7:5f:be:6b:81:00:9d:b6:f8:61:96:38:9e: 7a:8b:55:8c:a9:7f:e8:04:b2:1e:58:6c:80:68:45: 21:ce:06:6b:31:3b:82:a6:8e:1c:06:02:37:e5:3b: 77:19:8d:87:8d:bf:5e:67:d3:bc:7d:7f:ef:31:a3: cc:10:5a:d6:a3:cf:0d:71:1e:21:e4:ea:5e:f0:f3: 74:63:c3:ea:7b:31:72:1c:df:7b:55:d9:4a:4f:2f: ac:75:6b:74:55:6c:d0:27:80:3f:6d:f9:f9:07:bc: 6b:ef:b7:da:06:e9:06:cd:2f:c0:38:3f:10:78:b9: 14:a7:45:95:4c:c6:2f:3d:32:9f:4e:eb:13:2f:74: d1:3e:a7:7f:2a:2a:08:8f:b2:54:05:e3:2c:62:f7: 32:3d:e6:7b:93:d8:f0:40:09:cc:4e:e1:06:80:44: d3:1b:af:c9:14:17:3b:11:a9:b3:45:5f:f0:43:5b: a9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:01:13:DD:FC:72:89:84:93:BC:0D:76:0C:74:48:BF:E8:0D:23:69 X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d1:8c:41:5c:24:01:16:97:7b:38:c3:47:ed:ea:7f:40:fd: 6c:76:32:f0:33:b7:b0:6b:da:6b:7f:36:96:cb:80:78:4d:11: 6a:b6:e5:62:a5:e7:9c:7b:12:db:8c:69:ec:da:63:ce:a0:57: bd:f8:4f:fd:b4:08:2a:d1:a5:d3:f4:5b:2f:fe:6b:f4:90:32: ae:7c:59:66:f4:24:4b:32:90:cb:42:9a:94:47:57:23:e5:83: f4:cb:d7:87:93:52:ab:40:8d:f9:49:c4:98:ec:ba:87:b2:27: 69:80:d7:92:e2:e2:07:c3:8a:d1:f3:4f:39:97:ba:63:36:b3: 7e:77:d7:1f:39:bc:66:0e:89:33:d2:45:f5:62:8c:35:62:3b: b6:ac:0e:a9:3b:62:6e:bf:b5:f5:94:39:54:c6:3f:7e:7b:1d: 90:0e:ce:9a:8e:78:35:0d:32:17:ad:29:f3:7e:f8:96:59:d7: cb:db:bc:8e:ac:9d:50:e8:ec:87:d1:c9:a1:00:0e:0a:54:84: 29:59:5e:a3:2c:76:d3:a0:a9:2d:11:a4:58:31:ec:f1:1d:4d: 9b:8e:d4:aa:57:cd:13:4d:36:f9:09:8a:ab:0e:07:dc:e8:1a: 9f:d0:9d:07:82:87:b0:b1:08:8d:7f:a0:f7:68:15:34:b6:64: 3b:0d:b6:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDJNIDlKuA8wiN+p2BSlpAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjYwOTIyMTMwMDU2WhcNMjYwOTIzMTMwMDU2WjAzMTEwLwYDVQQD EyhlZTAxMTNkZGZjNzI4OTg0OTNiYzBkNzYwYzc0NDhiZmU4MGQyMzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr94fcHVf39n6HGcl8Afb3xExDAN UFDamC+30UbHBqfAZXMaYL2n5PNve4oY5QkvX5WaNATGnsJEBXp5GNShZtKNf6gJ wkYGumGxTqdfvmuBAJ22+GGWOJ56i1WMqX/oBLIeWGyAaEUhzgZrMTuCpo4cBgI3 5Tt3GY2Hjb9eZ9O8fX/vMaPMEFrWo88NcR4h5Ope8PN0Y8PqezFyHN97VdlKTy+s dWt0VWzQJ4A/bfn5B7xr77faBukGzS/AOD8QeLkUp0WVTMYvPTKfTusTL3TRPqd/ KioIj7JUBeMsYvcyPeZ7k9jwQAnMTuEGgETTG6/JFBc7EamzRV/wQ1upJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4BE938comEk7wNdgx0SL/oDSNpMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNGMQVwk ARaXezjDR+3qf0D9bHYy8DO3sGvaa382lsuAeE0RarblYqXnnHsS24xp7NpjzqBX vfhP/bQIKtGl0/RbL/5r9JAyrnxZZvQkSzKQy0KalEdXI+WD9MvXh5NSq0CN+UnE mOy6h7InaYDXkuLiB8OK0fNPOZe6YzazfnfXHzm8Zg6JM9JF9WKMNWI7tqwOqTti br+19ZQ5VMY/fnsdkA7Omo54NQ0yF60p8374llnXy9u8jqydUOjsh9HJoQAOClSE KVleoyx206CpLRGkWDHs8R1Nm47UqlfNE002+QmKqw4H3Ogan9CdB4KHsLEIjX+g 92gVNLZkOw22Xw== -----END CERTIFICATE-----Generated at Tue Sep 22 18:24:17 2026 by rpki-client