$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft File: 6985kESx8cxhzHceibSdI4WCwH0.mft (raw, json) Hash identifier: akrNErsek03O6iUEMtUU0WUpVIcohdaBaNIq+x3e48E= Subject key identifier: 8F:B1:4B:59:98:E5:5E:B4:0E:9C:BC:47:1E:21:AD:81:4F:B3:F5:54 Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d Certificate serial: 01A0DBA8D9935F3165F463B35D275FC0B1FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft Manifest number: EC Signing time: Sat 26 Sep 2026 03:01:11 +0000 Manifest this update: Sat 26 Sep 2026 03:01:11 +0000 Manifest next update: Sun 27 Sep 2026 03:01:11 +0000 Files and hashes: 1: 0R8JegqJS72TSxgps8LkSaZO93M.roa (hash: bzPHmYAxh9zxsAi7FMhRtpwbiOeWUj0UvZqNZEFvXuM=) 2: 1fcVWlv-qx152QmoD9YOcrUS7Lg.roa (hash: wlUBrp/1FRbe3QO4vxFglbQf+Jkile5NKFRk8v42yDk=) 3: 6985kESx8cxhzHceibSdI4WCwH0.crl (hash: g5sX6pMHRVXGb2FlTKZemIJLA5ILRLPIL+jUWjwUBmw=) 4: A4U-7phwTYkef8mR1dIeFnz9Wvk.roa (hash: gfDOpM+dmbKKBzSCVie0Kkmz1ZyFgU7RfrvMNCIF264=) 5: ACiq7PUnfxPw7VUiJHMeBlWe2W8.roa (hash: dErc7vBkv+mz2i4cCcDjrz1Nr+sQb9Sm3cGcguldqVk=) 6: AZGSfvVF2aBSDRn_ihzcIWfpdcQ.roa (hash: EVb7Mj3OG5H0UMytTB6DQ5yOP2z+yP5zkMEJ8YGMA1I=) 7: R7Pf0EzaX-yFRMbU80A9k7eGd_0.roa (hash: jeXZAN8VxFOPEzKegeMYU59ubOxlTc5uTncI21wjCK8=) 8: XJq96t3AYbRCnfS7nh1tT1GIo2o.roa (hash: DCbCNIcEwYvcic8+avZqalzxQi8AUgdFK18jg339Z7s=) 9: YJtrcFArWD_uz2yNOX-m6WSFQ3M.roa (hash: xruXaUcy87Eg8MhTGHBVaGMg8Mu4blgygDn6oYs8oqo=) 10: _sgEk7zklCfZtC1O4_dCCLRdlMg.roa (hash: wKMlHNJ1K28OmmB3WsfZYFrOfB6X9R2aDNRCcwZc7Es=) 11: c2w3QKoPlPH3vBuEtnfoEyv9rN4.roa (hash: Zj3hvlJbIFgWC7wJJ6+gJpyVaGnVyiWWtkjmA0jc+ss=) 12: foy3rmrTvDgjTDIvhlnm9qcAC-0.roa (hash: d3xSjhKSrxDttilu81KtUtjLRHSZdD9mi/Rkqyd0zhw=) 13: uA-waARm5JZjm1RSOdEWi8gtdhw.roa (hash: q2jhBOEKA13+Gi8bblMPwqRhwin9tcNd6S6FnjZqGkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 00:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:db:a8:d9:93:5f:31:65:f4:63:b3:5d:27:5f:c0:b1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d Validity Not Before: Sep 26 03:01:11 2026 GMT Not After : Sep 27 03:01:11 2026 GMT Subject: CN=8fb14b5998e55eb40e9cbc471e21ad814fb3f554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:78:d8:7c:6b:5f:db:10:ed:b4:f2:59:9a:51: 47:34:d6:65:e8:20:37:86:9d:f9:47:ed:d3:55:4a: 86:bc:e2:df:9f:b2:46:75:0b:de:72:6a:82:65:55: 8f:aa:cb:54:d3:97:09:42:b7:d6:7e:a2:5b:83:e5: 92:1d:e3:6d:84:7f:7e:93:0e:a4:e2:5d:1a:c7:76: 7d:73:9b:6f:ad:09:9c:e4:2f:8c:18:f3:cc:43:42: 3d:d6:2a:e8:f1:02:84:d4:aa:29:ca:15:b3:96:4a: 46:20:61:92:0c:69:d3:22:a7:25:ba:6a:0e:f0:d0: 91:69:a6:4d:7c:13:b7:49:9c:89:ba:cf:90:e1:55: 7f:32:5a:a0:0e:28:2e:fc:9a:c7:91:5a:b1:ec:d0: d8:ce:21:93:80:1f:33:ac:a6:2f:89:a2:45:f7:cc: 8e:41:17:49:17:bc:68:74:16:cf:27:56:10:91:8b: 19:51:f8:f8:8e:fc:6e:f1:93:64:eb:58:c0:86:c0: 27:f5:5a:30:3d:53:50:3c:93:82:e8:45:fa:87:c2: ff:cc:72:ce:9b:8d:b6:3d:40:3b:37:15:f5:8a:88: c8:33:00:1d:66:41:2c:17:4a:b5:6e:b7:5e:7c:8e: ca:cb:8b:d1:be:e2:80:42:ac:db:be:34:76:e0:ef: b0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B1:4B:59:98:E5:5E:B4:0E:9C:BC:47:1E:21:AD:81:4F:B3:F5:54 X509v3 Authority Key Identifier: keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:28:7c:c6:f2:6a:f1:fd:29:e2:a7:d7:ac:a5:0b:3a:b6:0f: 6c:39:7b:6a:e2:31:70:e4:9b:c3:eb:87:c4:34:80:8d:f5:eb: 64:91:4c:b4:52:3d:5d:04:ed:fa:82:e1:74:45:97:70:0f:d2: f2:4e:64:69:42:be:4c:73:30:e0:14:da:f6:8a:d8:7c:0e:00: f8:42:70:c1:9e:00:9e:27:24:d5:6f:fd:0a:41:b0:e3:fa:83: e9:a8:51:92:a2:00:4e:3f:c1:ba:f8:d1:89:9c:34:5c:5f:29: ab:df:31:4d:81:69:9c:06:ab:53:dd:a1:b6:9b:62:eb:bb:e8: d7:2d:53:d7:ab:6a:7f:7e:3a:d2:b5:30:b2:8f:0d:29:2c:38: af:27:51:11:d8:41:1d:b0:0a:3c:31:67:51:e0:89:c8:2a:4f: be:94:e9:e5:4b:24:78:60:68:af:6f:d7:89:a0:81:b9:16:8f: fe:c3:75:03:af:b7:4a:9a:92:13:52:e2:bd:39:22:bc:c7:03: 54:76:05:b3:c7:03:c6:14:25:1b:e6:aa:01:0e:9d:e5:71:a5: 19:d0:0b:19:f3:33:ca:4c:c9:cd:f9:b1:fa:bf:3a:a1:08:81: 2f:30:54:36:f1:10:e9:8e:1e:e5:31:0d:d6:83:0e:d1:41:ad: 89:b1:c2:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDbqNmTXzFl9GOzXSdfwLH+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZGYzOTkwNDRiMWYxY2M2MWNjNzcxZTg5YjQ5ZDIzODU4 MmMwN2QwHhcNMjYwOTI2MDMwMTExWhcNMjYwOTI3MDMwMTExWjAzMTEwLwYDVQQD Eyg4ZmIxNGI1OTk4ZTU1ZWI0MGU5Y2JjNDcxZTIxYWQ4MTRmYjNmNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHjYfGtf2xDttPJZmlFHNNZl6CA3 hp35R+3TVUqGvOLfn7JGdQvecmqCZVWPqstU05cJQrfWfqJbg+WSHeNthH9+kw6k 4l0ax3Z9c5tvrQmc5C+MGPPMQ0I91iro8QKE1KopyhWzlkpGIGGSDGnTIqclumoO 8NCRaaZNfBO3SZyJus+Q4VV/MlqgDigu/JrHkVqx7NDYziGTgB8zrKYviaJF98yO QRdJF7xodBbPJ1YQkYsZUfj4jvxu8ZNk61jAhsAn9VowPVNQPJOC6EX6h8L/zHLO m422PUA7NxX1iojIMwAdZkEsF0q1brdefI7Ky4vRvuKAQqzbvjR24O+wQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+xS1mY5V60Dpy8Rx4hrYFPs/VUMB8GA1UdIwQY MBaAFOvfOZBEsfHMYcx3Hom0nSOFgsB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCh8xvJq 8f0p4qfXrKULOrYPbDl7auIxcOSbw+uHxDSAjfXrZJFMtFI9XQTt+oLhdEWXcA/S 8k5kaUK+THMw4BTa9orYfA4A+EJwwZ4Anick1W/9CkGw4/qD6ahRkqIATj/BuvjR iZw0XF8pq98xTYFpnAarU92htpti67vo1y1T16tqf3460rUwso8NKSw4rydREdhB HbAKPDFnUeCJyCpPvpTp5UskeGBor2/XiaCBuRaP/sN1A6+3SpqSE1LivTkivMcD VHYFs8cDxhQlG+aqAQ6d5XGlGdALGfMzykzJzfmx+r86oQiBLzBUNvEQ6Y4e5TEN 1oMO0UGtibHC4Q== -----END CERTIFICATE-----Generated at Sat Sep 26 04:52:21 2026 by rpki-client