$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft File: 2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json) Hash identifier: xoMrD/2a4eUAiMy8NHkglPDYj9qVK/96uuEikL1N/1Y= Subject key identifier: 56:58:1E:18:D4:E5:1C:30:57:1B:CB:25:D3:AF:6C:D4:67:4F:B1:03 Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Certificate serial: 01A0C63354AD3391490250D250FC627DA270 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft Manifest number: 1A6F Signing time: Mon 21 Sep 2026 23:00:47 +0000 Manifest this update: Mon 21 Sep 2026 23:00:47 +0000 Manifest next update: Tue 22 Sep 2026 23:00:47 +0000 Files and hashes: 1: 0EOOKZ73EuVKb6azhsikToGYTJ4.roa (hash: tOeqHdzaa5uQmGPeE+9GIo5atcoydPGRdU/daaN1H/s=) 2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: UJcO/VMZdZbkcf7Od5uNjFiBxEkwSqG6/oVnMXfPdi8=) 3: EUeWkU0aryB-YkR2M3TsErGD9Is.roa (hash: gK62/o9yO+OyvLt7cRE+ehw4Ouq7VrrbTSmr3DLojOI=) 4: SpICVub50OICM4yiQk6ulqnyBsU.roa (hash: 1SZAmfW+sJIqJsSkqCTN19QGqChFmDq0AZE9eacMzAI=) 5: W9lGuLlyK3oCTZXvmQuqTo4C2yg.roa (hash: G4w7b1CN5DpM/EZuMWQLQvxT+EVuYLv3nYfxDAbKhDk=) 6: jUElcf1JFP10uCVqAsvtMStO4o0.roa (hash: xrxSdpsBwKaZISPc2IK2Gw1lDuUsBX/PpqeA4Z3a8cs=) 7: o09lL4OudMDTh_jmHHeTIRn2L5s.roa (hash: ctwy00D7K53oO1gqUQQpnsVurkNSXddz4U1vX79+KpM=) 8: pn6Y3GCXjjHBqnK-2a8dWoJu9As.asa (hash: asd3kKFSLHLrOnSUbXKA6WurWf6oqSngwKQtRaOmKfY=) 9: yn6euPUsjq8bRXFpjTNGPdRM13Y.roa (hash: IGe548/q8hO5ei6AedK5a51FhkUkqFo8BXPppwB9Vlw=) 10: znNyesTwbEHb5GdVovxJsLLM9KQ.roa (hash: WbfDTvPg/i+BiVxKsZsH5gFpX+Sz+6FiIPk4KG/O+AA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c6:33:54:ad:33:91:49:02:50:d2:50:fc:62:7d:a2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Validity Not Before: Sep 21 23:00:47 2026 GMT Not After : Sep 22 23:00:47 2026 GMT Subject: CN=56581e18d4e51c30571bcb25d3af6cd4674fb103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:9f:1c:b9:c6:ae:4c:3b:5b:b0:94:93:df: 68:97:44:df:f4:f5:10:ee:7b:f9:d5:69:e2:b0:ab: cb:ef:6d:77:ba:3b:b0:6e:c5:be:f5:62:ed:87:72: 8d:11:dc:4c:2c:89:bb:55:e6:80:e7:6b:10:5f:ed: c3:f3:05:dd:41:a0:22:f3:62:a8:2c:39:71:a5:08: a8:07:4a:6b:a5:b0:57:4c:48:5e:4a:ba:79:39:e2: 67:96:5b:7c:44:33:1d:31:5b:33:49:15:20:45:46: e8:f2:0c:8c:6e:ae:47:9b:e1:7c:97:d2:60:d4:2b: 6d:62:eb:b3:17:cf:88:75:2d:7b:d4:f4:01:33:e3: 85:4f:f3:12:ee:0f:a9:6b:7a:ed:97:27:11:ee:b6: 51:c3:b0:39:21:35:21:9e:08:ba:79:74:a1:51:7f: 48:ad:a8:88:25:d1:2e:d3:69:d7:22:7b:95:c2:3c: 92:76:88:e8:ae:2c:66:1f:00:b8:67:8d:7d:8e:0e: 68:9e:73:bd:2f:4c:fd:5f:0b:10:5e:5f:95:f1:81: b7:42:a1:9e:34:5c:11:a7:a4:4f:b7:0e:f7:32:6b: 7e:c3:09:cd:92:ac:46:07:b8:61:8d:c7:74:b4:1a: c8:00:bc:9a:4d:3a:6f:54:d9:c1:63:93:33:c0:48: 4c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:58:1E:18:D4:E5:1C:30:57:1B:CB:25:D3:AF:6C:D4:67:4F:B1:03 X509v3 Authority Key Identifier: keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:96:3d:9c:d0:8b:40:05:30:0b:5b:8e:09:35:a8:34:b9:a0: 9f:b2:9e:28:60:0d:0b:3d:2a:23:5f:41:d1:8d:ab:ec:64:8e: 6f:2b:92:34:7c:1d:3c:af:a0:28:67:85:60:5f:8f:b8:34:3f: 59:c5:bb:fb:06:d5:2b:1c:5b:72:00:f5:3b:41:78:54:a5:06: e0:70:dd:a6:0f:52:d7:53:fb:15:01:78:48:1c:44:bc:49:22: a4:39:64:9b:ff:91:41:d5:a3:3d:a2:49:b5:29:31:2c:d7:2e: 1a:d6:4d:23:31:6c:be:31:88:29:96:67:85:00:7c:1c:1e:8a: 5d:f1:8d:08:a6:5c:5f:1e:ea:02:cb:c9:4b:d4:34:6e:73:cb: c6:28:ce:c0:9e:0f:7f:8e:78:1b:15:26:90:dc:ad:89:2b:90: d5:47:f3:a5:97:78:6d:f1:ce:4a:26:7a:fe:c5:ec:d1:7e:c7: 87:c8:be:3e:3b:b5:42:68:1b:49:d6:1a:99:e6:cc:aa:54:a3: 8b:a2:56:10:9f:fd:65:f0:28:5c:27:cb:bf:cc:0e:b5:0f:2d: 0f:30:66:71:5d:c2:50:5d:06:05:47:12:96:26:67:ac:0c:68: 3c:07:7b:d8:d2:1f:e1:8e:61:57:f9:87:7c:2a:63:2a:96:08: cb:ce:dd:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDGM1StM5FJAlDSUPxifaJwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmMwYmVjNjBkMGJhY2UxODg5Njc3YmQ5YmI5MDE5MGNj NGZkMjIwHhcNMjYwOTIxMjMwMDQ3WhcNMjYwOTIyMjMwMDQ3WjAzMTEwLwYDVQQD Eyg1NjU4MWUxOGQ0ZTUxYzMwNTcxYmNiMjVkM2FmNmNkNDY3NGZiMTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEWfHLnGrkw7W7CUk99ol0Tf9PUQ 7nv51WnisKvL7213ujuwbsW+9WLth3KNEdxMLIm7VeaA52sQX+3D8wXdQaAi82Ko LDlxpQioB0prpbBXTEheSrp5OeJnllt8RDMdMVszSRUgRUbo8gyMbq5Hm+F8l9Jg 1CttYuuzF8+IdS171PQBM+OFT/MS7g+pa3rtlycR7rZRw7A5ITUhngi6eXShUX9I raiIJdEu02nXInuVwjySdojorixmHwC4Z419jg5onnO9L0z9XwsQXl+V8YG3QqGe NFwRp6RPtw73Mmt+wwnNkqxGB7hhjcd0tBrIALyaTTpvVNnBY5MzwEhMwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZYHhjU5RwwVxvLJdOvbNRnT7EDMB8GA1UdIwQY MBaAFNn8C+xg0LrOGIlne9m7kBkMxP0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjkt MzQ2OTAzNGZhNDQxLzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjktMzQ2OTAzNGZhNDQx LzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5Y9nNCL QAUwC1uOCTWoNLmgn7KeKGANCz0qI19B0Y2r7GSObyuSNHwdPK+gKGeFYF+PuDQ/ WcW7+wbVKxxbcgD1O0F4VKUG4HDdpg9S11P7FQF4SBxEvEkipDlkm/+RQdWjPaJJ tSkxLNcuGtZNIzFsvjGIKZZnhQB8HB6KXfGNCKZcXx7qAsvJS9Q0bnPLxijOwJ4P f454GxUmkNytiSuQ1UfzpZd4bfHOSiZ6/sXs0X7Hh8i+Pju1QmgbSdYamebMqlSj i6JWEJ/9ZfAoXCfLv8wOtQ8tDzBmcV3CUF0GBUcSliZnrAxoPAd72NIf4Y5hV/mH fCpjKpYIy87d9Q== -----END CERTIFICATE-----Generated at Tue Sep 22 08:17:46 2026 by rpki-client