$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: vfX9OzQZysmJSxK+B3mMKGejolZILzemAc279dLIFEM= Subject key identifier: 3E:06:A0:84:97:88:6B:7C:DE:15:20:E2:1B:BF:15:E8:CA:87:33:7C Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 01A136DA5EE961FE4A3A1625B6492EC9FDCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 1AAD Signing time: Tue 13 Oct 2026 20:00:43 +0000 Manifest this update: Tue 13 Oct 2026 20:00:43 +0000 Manifest next update: Wed 14 Oct 2026 20:00:43 +0000 Files and hashes: 1: 1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa (hash: qtH86zFamX3mvPAvdw+q4UCXn4ioDZi9V1NWUgQSNY4=) 2: FVTkjzWbmN1CXQ1gquYHPct9ixg.roa (hash: O+F6tjESCYzZkWop7KXE+D6dIUDkHaDfPEsn4FO2i5Y=) 3: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: 8oCzt8mqJbytv0tcMr9xMOnHtwl3XyQAx139zYeLCZM=) 4: U_NZYpjmvtYZaAL9QOJbt18Da90.roa (hash: ImEoqLKkocpZGN3jliyG2JmnXa2NgKRx1aFT2s7Ccsg=) 5: XjDc2QA9m4quHMdfD5XNqmD-sRU.roa (hash: hUIq0ryrPFUtWnGVn0EVGNy126+7rvo1zZWi0URfcgg=) 6: b-jvFTusq2yMHvQus-EOGvQIcIU.roa (hash: UEESHc2CoqAdsZBnwreDavJ8dh67qE0F5/NXF/uJif0=) 7: eVf9uWw4an4J37lWXFXCY7TXLRA.roa (hash: TLeYBm2fbdmHg6RfdNeCWlTy8uamiAq/QUF9qcFVMZU=) 8: ossK8NVWIjYFpVS_EefAqYZy2IE.roa (hash: /y0pnw5X9uBmKvZNWFvXcQIM9KTs6u2DfBY5eqhbuoU=) 9: tsRs_smMGnXJS6Ngg5EdidV6amo.roa (hash: s9qZIcL7Vpb5CW9P2b/OUKeQv+DX4uJC5U3wk2Lpo2c=) 10: txvH1TOH6wMQ5yQgLlacwoKKBQ4.roa (hash: edU/OVpHTHKV2scSWmXngs1gD9tCdP7QXrGFexnNs6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Oct 2026 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:36:da:5e:e9:61:fe:4a:3a:16:25:b6:49:2e:c9:fd:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Oct 13 20:00:43 2026 GMT Not After : Oct 14 20:00:43 2026 GMT Subject: CN=3e06a08497886b7cde1520e21bbf15e8ca87337c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e9:16:dd:53:03:04:63:7e:7c:42:39:ae:7b: 40:f7:5d:24:ce:24:2e:c0:54:a1:f7:0d:40:a0:4f: 61:a1:d9:cc:34:62:9d:8a:89:fe:dd:e5:09:a7:ee: 66:12:10:a3:95:f0:be:62:6f:6a:e8:72:39:8e:09: 8f:98:1b:1a:fc:b2:b3:cc:f1:4c:4c:dc:68:41:7c: a6:ab:1b:0c:06:72:af:5f:bf:c8:60:94:8c:9a:f7: 70:5b:fc:0a:b0:3b:34:45:ad:1b:2c:13:f1:07:a2: 8d:04:c5:89:7a:73:77:2c:c1:c0:83:56:87:e8:bd: bc:4e:58:88:f7:5b:f1:1e:e1:5f:1b:fb:33:97:70: 32:5b:96:6e:24:81:68:9e:2c:45:79:9c:d7:2b:dd: f6:53:1f:39:69:3f:6e:c9:dd:33:df:e9:86:9e:cb: 07:af:e6:60:1e:aa:f4:9f:63:e8:a5:db:71:9e:b0: 83:7b:5c:ff:a9:b3:b8:15:d3:3d:50:a9:83:68:1f: 4b:4a:37:c1:77:b1:14:5a:3d:02:e7:4d:67:67:62: ee:6f:6e:66:15:10:66:22:9e:f0:36:c0:db:b5:79: e0:3b:d7:01:8c:1d:52:70:fe:9e:07:1c:cf:c5:34: af:70:c5:42:9d:f0:ae:6c:f2:d0:96:f6:20:44:5a: cf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:06:A0:84:97:88:6B:7C:DE:15:20:E2:1B:BF:15:E8:CA:87:33:7C X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:73:79:80:77:ac:a3:d3:66:68:5a:db:01:4e:57:99:96:06: 64:13:1d:86:cf:92:72:5b:12:e6:4a:57:9f:68:c4:61:45:e5: af:8e:fc:6d:0f:9a:80:4d:2e:29:19:4d:63:48:2d:5b:14:d1: 6e:1d:5c:14:1c:ad:ce:5a:d0:e6:8a:58:84:88:ca:7e:43:a2: 42:3f:00:15:cc:46:6a:bf:65:4f:c2:94:bc:69:42:c0:dd:b5: 09:77:8e:e3:80:69:b7:3d:a9:9d:85:7a:44:79:cd:6c:fb:e3: ac:c1:cd:e7:17:05:0e:36:93:b1:86:7a:67:f1:76:7c:c6:be: 81:a3:fc:f2:d7:d6:06:df:7c:5e:ba:0e:e3:04:5c:7c:8c:a8: b3:77:9b:0a:e4:6f:75:cf:28:5b:6c:8c:8f:6d:65:8a:dd:e9: 2c:17:0b:bb:ec:9e:e0:94:38:48:13:85:f4:a9:cf:00:20:60: 29:a4:cb:ac:4e:8d:ef:4e:cd:46:81:70:b0:79:e7:24:f3:3f: 98:be:21:d9:48:3b:c8:7f:2b:f3:0c:df:f3:85:c2:94:40:81: f2:ba:dc:53:84:0d:fe:32:4f:53:f0:5b:44:eb:3c:87:c8:2e: 02:30:50:03:de:26:ac:5a:87:e8:38:e3:ad:2f:33:8a:f2:2a: f9:36:8e:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaE22l7pYf5KOhYltkkuyf3MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjYxMDEzMjAwMDQzWhcNMjYxMDE0MjAwMDQzWjAzMTEwLwYDVQQD EygzZTA2YTA4NDk3ODg2YjdjZGUxNTIwZTIxYmJmMTVlOGNhODczMzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ekW3VMDBGN+fEI5rntA910kziQu wFSh9w1AoE9hodnMNGKdion+3eUJp+5mEhCjlfC+Ym9q6HI5jgmPmBsa/LKzzPFM TNxoQXymqxsMBnKvX7/IYJSMmvdwW/wKsDs0Ra0bLBPxB6KNBMWJenN3LMHAg1aH 6L28TliI91vxHuFfG/szl3AyW5ZuJIFonixFeZzXK932Ux85aT9uyd0z3+mGnssH r+ZgHqr0n2PopdtxnrCDe1z/qbO4FdM9UKmDaB9LSjfBd7EUWj0C501nZ2Lub25m FRBmIp7wNsDbtXngO9cBjB1ScP6eBxzPxTSvcMVCnfCubPLQlvYgRFrPzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4GoISXiGt83hUg4hu/FejKhzN8MB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQnN5gHes o9NmaFrbAU5XmZYGZBMdhs+SclsS5kpXn2jEYUXlr478bQ+agE0uKRlNY0gtWxTR bh1cFBytzlrQ5opYhIjKfkOiQj8AFcxGar9lT8KUvGlCwN21CXeO44Bptz2pnYV6 RHnNbPvjrMHN5xcFDjaTsYZ6Z/F2fMa+gaP88tfWBt98XroO4wRcfIyos3ebCuRv dc8oW2yMj21lit3pLBcLu+ye4JQ4SBOF9KnPACBgKaTLrE6N707NRoFwsHnnJPM/ mL4h2Ug7yH8r8wzf84XClECB8rrcU4QN/jJPU/BbROs8h8guAjBQA94mrFqH6Djj rS8zivIq+TaO3g== -----END CERTIFICATE-----Generated at Wed Oct 14 04:59:50 2026 by rpki-client