$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft File: Us2aZRLb8lpfGbgn16LH4iou6N0.mft (raw, json) Hash identifier: jqE3jFUKk4i3O3PP00O4q3dPwCu/xMokbvvVLWvZDcQ= Subject key identifier: CF:62:03:FE:9B:8F:A1:34:D5:F6:86:44:19:79:F2:C0:07:5C:02:90 Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 01A0C746629F7D3B8638653410FF91A3C408 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft Manifest number: 0D3C Signing time: Tue 22 Sep 2026 04:01:13 +0000 Manifest this update: Tue 22 Sep 2026 04:01:13 +0000 Manifest next update: Wed 23 Sep 2026 04:01:13 +0000 Files and hashes: 1: 1-IlB2CphFhJ1Es2Auj6Y8Pv_wcE.roa (hash: dBSNrPPwvAMKy5o27/nj2blgxOw2PO1uOCPT4ejHFgg=) 2: 2GKmq9a4tbRnyy5v_dzbijUGgpo.roa (hash: 5lV0Dnj2JREu67qpiN4zC8MeQVoN3LVpjCKJ+YsJ3TU=) 3: 2rLUhnluwL6wnKGGvW337qHfa_A.roa (hash: vOmCdy4dcO0yKPbRSBS7H0+V0LqrEgZGLIPDsfuR8RI=) 4: 3JNAFPmuRusA7_P1cHUrpNc8ZWQ.roa (hash: zKy+aXsrA8Z978tqaQi0ynXqJW9mllBBtqQYt4mz8gc=) 5: 3eP-ZYKR74zQteZxg-jYK68KuKU.roa (hash: rI+Q6O08EYSoWZw7Ks588qVsTWbvSuHUC1dp2GQPsEg=) 6: 4_TTRfrA4hvyb8aeVnebRoG9aZ4.roa (hash: 3NbkuqOTF46pDYs4QB6pgruxYNEcPm4QNzecOj1ivnE=) 7: KnBckRYNpkrmgA2l68UnOSdG8M8.roa (hash: e9ryBHEjHKpJhCoyv4UnySH5Ms6mFlk1tA5pBRXFaKc=) 8: Px4XmExl2QONyqSP6s8-qLoIeoI.roa (hash: reA0XoIHBbZsGAjNzRWT9dW+9757Ms5dgcUGYfnrDi8=) 9: Us2aZRLb8lpfGbgn16LH4iou6N0.crl (hash: awHslgw9y2aPawBeEIU3albKhusLTp29mOrnzKfP5fs=) 10: VpoR4ytDHWEH5qJGhTngwFniYvk.roa (hash: x6eFh+FvocnjchDTOElJQmMu4KdVVQsAbUfVxqlk4YQ=) 11: b4bnSjrxkGqwlr0zkoxcOijmFkc.roa (hash: fQuLS072q+zjmBm2EgGlUmemoEePNKD15HIZM6Eyfw4=) 12: cwwhcNpzOg_pmBszouIx8h2CHRU.roa (hash: vBJrQQ0ItgE86n69h/fkj396ErwZyqxGCsEUUVNAzdI=) 13: hlAbpQnKYaIDHrjCT-1lNBwSXu0.roa (hash: BILz2oAMGgMF6vZP6W3jaxaaHIODVkHC+m/GaL33QlM=) 14: kPZtrooPlOyF8jQupuEU9Gy1bJQ.roa (hash: KtcI+6F6qPHzsOZYQ0EOD+pODuibLz2OAgS4M/a6Aq4=) 15: ldoq86JhWRtPnXQa0o4fAn7GOes.roa (hash: Zfo5/6efnP/N6jxUB47woZ54SIJcC/xEnjfHGBYnABk=) 16: oLlQgePRk9yvcOlL0Fl_a56u9H4.roa (hash: Wqock9cGRbZPQGtCkafIuYZm7FqajUuA17fJ83OGRks=) 17: xp9MuE3K7E-Sb2HgnwhKc3yErto.roa (hash: 9FJKEkYOHXVi/GiMh+ZQtwPZthuSJbC+u80wUEZ5uBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 04:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c7:46:62:9f:7d:3b:86:38:65:34:10:ff:91:a3:c4:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Sep 22 04:01:13 2026 GMT Not After : Sep 23 04:01:13 2026 GMT Subject: CN=cf6203fe9b8fa134d5f686441979f2c0075c0290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5a:49:7b:9b:31:4c:db:6a:24:81:6d:99:35: 5f:83:6a:8e:a7:6d:9f:e7:2b:cd:cc:63:63:31:da: cb:05:a4:4d:7e:15:67:7d:d1:fe:c5:06:df:60:9c: 66:7f:e0:77:62:87:85:d0:c9:7a:d6:f9:9e:0f:64: ef:6a:8c:dd:8c:7f:47:7c:93:e6:51:b2:4a:9a:67: 5e:64:16:90:fc:35:61:48:47:14:e6:57:2b:ae:fd: 77:2b:bc:eb:cf:0f:3e:45:e0:06:b1:16:59:7f:0c: ee:36:86:b0:a0:56:b0:f2:31:b9:5b:4d:9c:8a:35: 0b:51:2a:ea:72:d3:34:e7:81:ca:b2:90:6d:7b:d7: fa:48:c0:64:a2:0b:bb:a7:15:16:66:9d:a8:cd:cc: a5:54:28:7f:32:ac:00:f5:da:00:71:fd:52:dc:7d: 6e:41:24:74:03:9a:e8:fe:8d:b6:db:e7:6c:64:d9: 0e:1f:14:c4:02:53:47:5d:70:58:d3:03:68:ec:b7: 10:9c:ca:b7:00:c0:f9:55:87:a2:40:42:2b:b1:c3: 87:c9:a1:1d:aa:01:af:47:06:c9:b3:51:1f:d6:56: 38:a3:28:56:95:12:b8:7e:04:fe:df:c2:03:ae:f3: f2:e8:b1:f5:df:d4:8f:59:1a:34:a1:fa:5e:e6:9a: 10:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:62:03:FE:9B:8F:A1:34:D5:F6:86:44:19:79:F2:C0:07:5C:02:90 X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c2:39:25:d0:de:af:1e:1b:81:be:30:13:4d:94:17:98:1d: 91:0c:9b:36:61:38:35:e0:5a:62:85:b2:77:14:16:ef:74:21: 92:1e:e6:ee:d9:3a:7b:05:12:ac:a0:f9:10:37:89:78:62:3d: 48:a0:8b:3b:72:c5:ce:80:58:75:18:5f:62:e5:36:4b:b6:3b: 03:1c:e6:99:38:26:1b:31:b5:f2:3f:88:86:83:0e:2c:22:80: 25:c8:9f:55:a0:10:92:75:2a:d6:6d:e2:f0:cb:54:8c:f5:5d: 16:c0:01:c2:2e:ad:35:20:1d:c3:d6:16:ec:30:52:e5:4e:5a: 74:2f:9f:6f:f5:6a:ad:18:44:45:64:37:41:0a:de:b1:78:da: 9b:c0:b8:43:42:70:a0:ae:ba:66:29:f1:a4:14:cd:61:a5:42: fc:b7:f4:42:1f:4b:e7:c3:cc:87:e9:6b:2e:5d:4f:0a:54:38: 34:23:8c:46:a6:c6:e1:46:31:7b:89:60:eb:a1:b7:14:bc:51: 53:84:0e:06:33:61:65:ec:85:fd:dc:c6:c4:7b:7b:a2:36:2d: 39:b3:8d:5b:55:32:2f:63:e2:ba:27:0a:fc:b9:50:62:48:14: bd:17:89:c1:e2:79:51:1a:0b:99:13:ca:e0:4d:8d:01:79:00: 8f:fc:44:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDHRmKffTuGOGU0EP+Ro8QIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjYwOTIyMDQwMTEzWhcNMjYwOTIzMDQwMTEzWjAzMTEwLwYDVQQD EyhjZjYyMDNmZTliOGZhMTM0ZDVmNjg2NDQxOTc5ZjJjMDA3NWMwMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1pJe5sxTNtqJIFtmTVfg2qOp22f 5yvNzGNjMdrLBaRNfhVnfdH+xQbfYJxmf+B3YoeF0Ml61vmeD2TvaozdjH9HfJPm UbJKmmdeZBaQ/DVhSEcU5lcrrv13K7zrzw8+ReAGsRZZfwzuNoawoFaw8jG5W02c ijULUSrqctM054HKspBte9f6SMBkogu7pxUWZp2ozcylVCh/MqwA9doAcf1S3H1u QSR0A5ro/o222+dsZNkOHxTEAlNHXXBY0wNo7LcQnMq3AMD5VYeiQEIrscOHyaEd qgGvRwbJs1Ef1lY4oyhWlRK4fgT+38IDrvPy6LH139SPWRo0ofpe5poQGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9iA/6bj6E01faGRBl58sAHXAKQMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8I5JdDe rx4bgb4wE02UF5gdkQybNmE4NeBaYoWydxQW73Qhkh7m7tk6ewUSrKD5EDeJeGI9 SKCLO3LFzoBYdRhfYuU2S7Y7AxzmmTgmGzG18j+IhoMOLCKAJcifVaAQknUq1m3i 8MtUjPVdFsABwi6tNSAdw9YW7DBS5U5adC+fb/VqrRhERWQ3QQresXjam8C4Q0Jw oK66ZinxpBTNYaVC/Lf0Qh9L58PMh+lrLl1PClQ4NCOMRqbG4UYxe4lg66G3FLxR U4QOBjNhZeyF/dzGxHt7ojYtObONW1UyL2PiuicK/LlQYkgUvReJweJ5URoLmRPK 4E2NAXkAj/xE3Q== -----END CERTIFICATE-----Generated at Tue Sep 22 16:03:29 2026 by rpki-client