$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft File: 6sLBr9S97JgFBvoH33yGYtVU-kY.mft (raw, json) Hash identifier: UgCZDuTL+qlaSz+hJ4HPEwmxjCrN9aWQORA4QW/k4+0= Subject key identifier: 17:B6:5B:40:47:CB:5B:F1:63:BE:76:99:03:59:0B:B8:5B:30:47:FA Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Certificate serial: 01A0C88F5EC431556D3DF36954C120C50D8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft Manifest number: 14A4 Signing time: Tue 22 Sep 2026 10:00:34 +0000 Manifest this update: Tue 22 Sep 2026 10:00:34 +0000 Manifest next update: Wed 23 Sep 2026 10:00:34 +0000 Files and hashes: 1: 1-4XTHBoNFNr1l-5DlJv7kCOEAsg.roa (hash: kxVoHYAy1StJ1GWwbeUY54WsYp9aXThsq2UtgssAUdE=) 2: 6sLBr9S97JgFBvoH33yGYtVU-kY.crl (hash: iaUTE0SFqdusyXSmuHBSwizhAYdx+aXOnoJwT+anmTI=) 3: 8suHpidG1fhuELuUk5b3-OweTPg.roa (hash: 1eHJkoJhddFda4qCfEu1aQasvyxw+vlSo8SFBBVgpqU=) 4: FUuTK2fFAsqRcCumhRtIZo91RHY.roa (hash: sL7JcIGdywrGzv3v04y8pkGzCLFmkDsGBJu4wKma/MI=) 5: JDnserL7-kZp6PufFEVsEIFtixc.roa (hash: B3BCDo9ccdOnZFxqd0AyuudhQ55NDi4GfocT/dyaSh0=) 6: LXIlN5E_-7FwagFmPTLTkaa9y5c.roa (hash: 6fdLU7tUE6uJypDCFnhQj74QKiyWE5+++0HOzxZo/Ls=) 7: NoSK7sZyq5DVw267WTMAXasfJ-A.roa (hash: Bg3ZeyYpcA1S2YyAVbtMxuNPQPI+1r0FDTP7AdCyUJQ=) 8: T2Ez-OQKFMetVOVEwJmKx8ETjVY.roa (hash: dQaHOpIJ7tn06p6U+or5Gija2NCtSWcSz1gCN9tE9xg=) 9: UzApq6EOLSmo_f-FmHtKYMlNkG8.roa (hash: uaHU4qHF04fH5UL/VGo93ZAzSiASc8qoSn8SilcNKx8=) 10: e-PI40mcmW_4qj2wj51dZytuRJ4.roa (hash: IWJbxQ32owD5Lwd1nR2dmmdsgfysZX9pSs6x+OurREE=) 11: rCtSQ7fOIAO3hF-dZmFyOrblm2s.roa (hash: JkQ7BSC0RdZovffT+QwWvb+UrSCXmLKi6BtijI7KA5c=) 12: uEqxyS_Z6CD4ga3QenDz-xQtzRs.roa (hash: cZVI9tUEYNEfl0cyEalypCg6wqkUJ2Ynk/3s857D/qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:8f:5e:c4:31:55:6d:3d:f3:69:54:c1:20:c5:0d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Validity Not Before: Sep 22 10:00:34 2026 GMT Not After : Sep 23 10:00:34 2026 GMT Subject: CN=17b65b4047cb5bf163be769903590bb85b3047fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:5c:27:2e:04:45:1c:1c:ea:a0:b8:8d:cf: c5:56:b0:49:6f:98:16:e0:70:bc:33:38:98:83:84: d3:b1:68:5d:12:3b:40:82:0a:f1:57:49:96:00:3e: 82:46:e0:40:ce:3e:71:e7:7a:42:8f:79:6c:6a:ad: e1:ea:20:10:ca:66:41:e5:78:3c:8f:b9:b3:60:7c: 95:1f:ca:09:9e:bb:0a:4c:a5:fa:3f:b5:25:18:e2: cd:34:cf:c0:17:3c:7f:63:39:8f:ff:15:f5:96:18: aa:a6:2e:90:1e:1c:88:53:ea:a9:7d:81:eb:99:f9: 49:94:32:ca:4f:bf:49:cc:9e:87:38:81:97:13:0a: f0:dd:f7:4a:79:4e:dc:03:ce:11:e5:d7:0f:aa:c2: c6:27:fb:b7:de:a4:12:9d:b7:9a:76:cd:ee:df:a3: 7b:37:bc:1a:e2:4c:88:f2:72:6d:9c:77:d9:60:da: eb:31:67:ca:75:a8:e0:a1:3c:ea:20:d6:bd:7b:ce: b8:ca:a0:f5:88:b5:8e:32:98:63:4a:3e:44:22:20: 77:84:13:e1:19:5e:9c:77:46:ba:99:d6:8a:51:48: be:76:e9:41:e3:84:d1:f6:4e:82:b9:1d:7e:82:e7: 60:78:c4:ed:eb:7b:55:d3:a2:2d:0d:48:33:61:3a: 81:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B6:5B:40:47:CB:5B:F1:63:BE:76:99:03:59:0B:B8:5B:30:47:FA X509v3 Authority Key Identifier: keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c3:1a:c7:0c:e6:99:4c:fe:66:25:4c:4e:20:3d:9f:da:aa: 89:0a:40:a2:ed:b7:c8:44:03:34:16:77:fd:f9:1f:67:4a:48: a4:dc:10:60:e0:b9:36:d4:a2:59:cb:c1:2c:cf:b2:7c:2b:df: 50:31:e0:97:3d:f0:a8:74:6a:85:94:c2:1c:21:50:df:0e:1b: 7b:5d:99:27:44:c8:07:4b:65:c9:21:0f:64:75:ab:be:4d:38: 75:22:0a:40:2a:80:89:85:49:74:e3:f6:6e:64:98:1d:c7:92: 18:c8:59:43:9e:1f:37:6f:e2:22:d9:a9:03:b1:0e:5e:8f:13: 83:17:e9:34:4e:f1:9c:84:03:a8:c7:7b:e5:d0:76:d3:9d:89: 36:51:3b:b5:22:7b:98:87:bc:05:6e:fd:09:98:a3:53:73:12: ac:14:4a:b6:18:51:2d:bd:f9:75:e5:5a:cd:5c:75:2b:03:d7: 1f:8d:2f:93:7b:62:72:72:ee:1a:47:eb:64:9e:bb:b7:74:27: 99:9b:59:62:67:09:1c:9b:70:df:0c:29:3f:67:75:6f:b7:2b: 73:91:08:f7:7b:f2:cd:64:a6:e4:5a:b6:a0:ab:eb:64:26:c8: 52:12:44:9f:4e:cb:0c:65:8e:c0:92:a7:30:af:66:b5:4b:74: f9:82:f9:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDIj17EMVVtPfNpVMEgxQ2OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1 NGZhNDYwHhcNMjYwOTIyMTAwMDM0WhcNMjYwOTIzMTAwMDM0WjAzMTEwLwYDVQQD EygxN2I2NWI0MDQ3Y2I1YmYxNjNiZTc2OTkwMzU5MGJiODViMzA0N2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuZcJy4ERRwc6qC4jc/FVrBJb5gW 4HC8MziYg4TTsWhdEjtAggrxV0mWAD6CRuBAzj5x53pCj3lsaq3h6iAQymZB5Xg8 j7mzYHyVH8oJnrsKTKX6P7UlGOLNNM/AFzx/YzmP/xX1lhiqpi6QHhyIU+qpfYHr mflJlDLKT79JzJ6HOIGXEwrw3fdKeU7cA84R5dcPqsLGJ/u33qQSnbeads3u36N7 N7wa4kyI8nJtnHfZYNrrMWfKdajgoTzqINa9e864yqD1iLWOMphjSj5EIiB3hBPh GV6cd0a6mdaKUUi+dulB44TR9k6CuR1+gudgeMTt63tV06ItDUgzYTqBewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe2W0BHy1vxY752mQNZC7hbMEf6MB8GA1UdIwQY MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt YzBjZWIwMzdhZDQyLzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsMaxwzm mUz+ZiVMTiA9n9qqiQpAou23yEQDNBZ3/fkfZ0pIpNwQYOC5NtSiWcvBLM+yfCvf UDHglz3wqHRqhZTCHCFQ3w4be12ZJ0TIB0tlySEPZHWrvk04dSIKQCqAiYVJdOP2 bmSYHceSGMhZQ54fN2/iItmpA7EOXo8TgxfpNE7xnIQDqMd75dB2052JNlE7tSJ7 mIe8BW79CZijU3MSrBRKthhRLb35deVazVx1KwPXH40vk3ticnLuGkfrZJ67t3Qn mZtZYmcJHJtw3wwpP2d1b7crc5EI93vyzWSm5Fq2oKvrZCbIUhJEn07LDGWOwJKn MK9mtUt0+YL5Cw== -----END CERTIFICATE-----Generated at Tue Sep 22 19:18:21 2026 by rpki-client