$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: BG6UiNGFrsPg6wB2/8ln7vHxc54zwwmzFvp2MV6MAc0= Subject key identifier: B9:F8:60:CC:0D:A8:67:C7:2D:6F:7F:10:C6:41:E9:2A:03:B5:FB:89 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 01A0CBC7C892AFC23455CC665C7AB503F76B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 1265 Signing time: Wed 23 Sep 2026 01:01:02 +0000 Manifest this update: Wed 23 Sep 2026 01:01:02 +0000 Manifest next update: Thu 24 Sep 2026 01:01:02 +0000 Files and hashes: 1: 74nAH9muoqGD-s4yAjGfkwaZSpY.roa (hash: D3Z53fCQBRC5btWm2TKOEsF5ZZDk5JfPmaKFAGt33yM=) 2: 8-p5z6a3n-5Vbg_FUQcHOfePr1k.roa (hash: T0w7zmmsEVS9b11trnjpNDiN07nDknNytyRJ3xCbFlo=) 3: 9c8fl-F23xypfkbqbl1n5JPG_84.roa (hash: lNc776mR+msxcq+rQeOV4AB0lZ4u3hobNqWSqkfBl4w=) 4: BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa (hash: QG9xQu9PRC+aBkksrXZrhX4apZcVikxD0oV/WFqRvns=) 5: EUcioYCNgoBr4fX2m_esrOCrQGM.roa (hash: 0JHPbY7p1Ja0Q0GjkadwueehBILVs0m7aNuPr13Bguc=) 6: Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa (hash: DJFlUJTizA9NLrEk8PUMB7MGXkecQxJA+XnDIeJTTP0=) 7: L5qyY9jZaitIZWVHzJF8EMKtnJw.roa (hash: RHPOnQl7M+92fyRwAlYoQqCItx05c0P7/Yx6ROjX9QU=) 8: etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa (hash: 62w4oF2cGdWj0o3BpcwxlZBpiXXPXN7RYr3Sd64Mob8=) 9: pmjWXndiYs4KEBmLyUOfoVEBC-k.roa (hash: 0OAhoLS3wlHvG79outXZ8QvOduBA5V35p0IKCSGmHXM=) 10: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: zJul8EOcwjE9v/sF/6dOAjk7adzJEDPTtishD2wDtpE=) 11: uzUF1iytiBjIXaGoXYbb89U983Q.roa (hash: GmwJF+if9a4Li6CDW3Ardtoa/NUyQLlBVKRkV0wDIP0=) 12: zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa (hash: FQoneHTBSyuTPA9+pRMwse2b3ajv2eaAnyk8ybdQibM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 01:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cb:c7:c8:92:af:c2:34:55:cc:66:5c:7a:b5:03:f7:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Sep 23 01:01:02 2026 GMT Not After : Sep 24 01:01:02 2026 GMT Subject: CN=b9f860cc0da867c72d6f7f10c641e92a03b5fb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:f4:5a:f2:63:aa:f3:13:bb:6d:8c:d3:b0: 97:19:8c:11:20:aa:7a:78:d1:2a:a3:7f:e1:f4:c2: 4d:da:7d:5c:69:2a:97:de:51:43:9d:37:8c:60:ef: 5a:30:10:65:fb:e4:cf:37:0c:71:c3:d6:e7:62:6d: 7e:15:44:7f:5a:f4:07:62:08:14:0c:02:a5:07:7b: d5:0d:6b:38:73:b3:10:58:6f:3b:96:8e:27:97:10: f9:57:38:16:ab:62:c6:73:6a:25:ab:d2:1d:d6:ba: 69:a1:a6:68:ef:71:17:b4:7e:c0:34:c3:67:15:09: be:53:ed:34:5a:81:86:35:0d:56:f0:3d:4c:6d:64: 49:1d:7e:fb:7e:80:0d:b8:b8:cc:bb:ad:87:ee:e1: d5:66:72:7f:33:01:24:54:0a:db:52:d2:bd:8f:3f: 86:d3:2d:3a:9c:87:91:c2:ed:fa:f6:ff:03:d4:71: 7d:6c:83:bb:27:ea:36:e7:ec:2a:a6:08:3f:4c:75: b5:11:52:a5:f3:5e:3e:04:6b:41:23:d1:05:c5:af: 05:40:87:f4:e0:0b:1a:94:91:24:8d:ae:3a:13:61: 66:2c:23:45:3f:07:87:fd:46:bf:5c:bd:4f:5d:fe: a0:f7:cc:c6:1d:45:c8:28:8b:c2:14:1b:80:00:c8: a4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F8:60:CC:0D:A8:67:C7:2D:6F:7F:10:C6:41:E9:2A:03:B5:FB:89 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:d6:65:2d:90:dd:ec:12:21:dd:8b:83:7a:65:b2:ab:9c:f7: 3a:4c:05:58:e7:6f:18:d7:66:82:c4:8f:31:3f:e6:7a:29:99: 6e:76:d9:1e:99:01:9a:ef:fb:4d:08:3b:fe:57:97:62:cf:a5: 1a:40:20:0f:e5:42:18:65:20:1f:b4:7b:6d:3b:c1:39:91:ff: 48:e6:4f:23:08:23:da:25:0e:1c:84:24:bd:52:05:ce:11:88: 7a:dd:1b:4c:b0:97:7a:5f:63:6a:e0:27:05:e2:6f:3f:36:5e: d5:2a:f8:de:aa:79:4f:7c:65:c3:da:c9:cd:cc:7e:5f:23:f2: 6a:67:d4:eb:9c:aa:c7:ad:63:10:9d:f2:47:11:d3:67:d8:cc: be:74:59:04:e7:18:83:13:35:00:2c:44:43:63:74:c0:dd:16: d0:70:ed:f6:89:6f:bd:a3:82:db:ba:7d:16:c5:0f:8e:4c:ec: 78:92:d3:24:93:9c:de:1f:75:32:a3:f4:7b:9d:df:5e:19:0d: f5:84:be:58:04:3c:2e:eb:1b:1c:f8:9e:df:4c:2d:bd:4c:a6: 14:51:12:d0:8c:06:f7:0c:72:2d:91:b7:ee:56:c6:f2:e0:e3: 5d:46:06:99:f0:01:78:46:25:0c:41:e0:6c:70:76:bd:d5:a0: 87:ac:92:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDLx8iSr8I0VcxmXHq1A/drMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwOTIzMDEwMTAyWhcNMjYwOTI0MDEwMTAyWjAzMTEwLwYDVQQD EyhiOWY4NjBjYzBkYTg2N2M3MmQ2ZjdmMTBjNjQxZTkyYTAzYjVmYjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty30WvJjqvMTu22M07CXGYwRIKp6 eNEqo3/h9MJN2n1caSqX3lFDnTeMYO9aMBBl++TPNwxxw9bnYm1+FUR/WvQHYggU DAKlB3vVDWs4c7MQWG87lo4nlxD5VzgWq2LGc2olq9Id1rppoaZo73EXtH7ANMNn FQm+U+00WoGGNQ1W8D1MbWRJHX77foANuLjMu62H7uHVZnJ/MwEkVArbUtK9jz+G 0y06nIeRwu369v8D1HF9bIO7J+o25+wqpgg/THW1EVKl814+BGtBI9EFxa8FQIf0 4AsalJEkja46E2FmLCNFPweH/Ua/XL1PXf6g98zGHUXIKIvCFBuAAMikTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLn4YMwNqGfHLW9/EMZB6SoDtfuJMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNZlLZDd 7BIh3YuDemWyq5z3OkwFWOdvGNdmgsSPMT/meimZbnbZHpkBmu/7TQg7/leXYs+l GkAgD+VCGGUgH7R7bTvBOZH/SOZPIwgj2iUOHIQkvVIFzhGIet0bTLCXel9jauAn BeJvPzZe1Sr43qp5T3xlw9rJzcx+XyPyamfU65yqx61jEJ3yRxHTZ9jMvnRZBOcY gxM1ACxEQ2N0wN0W0HDt9olvvaOC27p9FsUPjkzseJLTJJOc3h91MqP0e53fXhkN 9YS+WAQ8LusbHPie30wtvUymFFES0IwG9wxyLZG37lbG8uDjXUYGmfABeEYlDEHg bHB2vdWgh6ySwg== -----END CERTIFICATE-----Generated at Wed Sep 23 10:26:21 2026 by rpki-client