$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json) Hash identifier: 1UHXhkkswtDCGZuHfDeEqrgwJ2Xs0MDJTCdsgjZ0cXY= Subject key identifier: 35:09:82:06:9C:BF:9C:EA:EA:DF:B8:D3:4D:0E:4C:8F:1B:29:DE:64 Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 01A0C821A8C862E926181F1C2AF9477B6748 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft Manifest number: 1A77 Signing time: Tue 22 Sep 2026 08:00:44 +0000 Manifest this update: Tue 22 Sep 2026 08:00:44 +0000 Manifest next update: Wed 23 Sep 2026 08:00:44 +0000 Files and hashes: 1: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (hash: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0=) 2: 7238-yc1zsJP5-yGaMOBc9f0LR4.roa (hash: URHGrmmmyevt5Yc3E+g4gLi9Y6wbhMdw/A5AP3gBz1Q=) 3: 8JXNaaQmDQHdM4yP_RNeiswPEDI.roa (hash: UUO1y8o89Fboq48v1C/MZYuzKEwlodMmFc6P3ytbtj4=) 4: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (hash: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0=) 5: Ho8BmWtRsGIfoh9TadeITydo350.roa (hash: jhic1+8GxEt2CK46n93QnO3HxEVdv0LVkgGPn/QSDf0=) 6: NDEJ4OPh2jQQg5h1HdKinOuNm1g.roa (hash: 6YV/mvu0IZaB1NRM8e6QdrWu4qWaOce8H7G5lo4LpOc=) 7: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: E0IFxqgBQSdDB04VECa81hTpDrAQ4bU9+OhVjNN4v1A=) 8: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (hash: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E=) 9: VlCsH-gKeuLV89RCvfubppUzoBM.roa (hash: E6tZ0jd2kOODThTzIfCZg56DVUHPrBwKWicp2pqqUq8=) 10: WLquCazhAB0ScMP5a1mkOMpQjSk.roa (hash: X6EOl+E5HOgYEVAmBJUO3eMgT+pMlGAkOYSNqnB4rac=) 11: _Sp9nWnMGENvs_5RlKIg522yEo0.roa (hash: 5BiB2YKH8y+FxStt90RRFoc5lwCZkm5vmcOChmEykmI=) 12: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (hash: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 05:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:21:a8:c8:62:e9:26:18:1f:1c:2a:f9:47:7b:67:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Sep 22 08:00:44 2026 GMT Not After : Sep 23 08:00:44 2026 GMT Subject: CN=350982069cbf9ceaeadfb8d34d0e4c8f1b29de64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:3b:3d:72:be:90:6e:3a:a4:a4:2d:9f:b0: fd:01:66:e1:1e:11:a1:0b:fe:85:db:b8:24:da:0f: c3:87:12:f9:f9:e1:b0:20:62:d7:10:6d:96:74:47: 72:30:b1:d6:d7:9c:96:a1:96:ca:33:7c:8b:64:0f: 0e:e2:05:6a:0c:bd:21:42:3d:9e:d6:81:cf:e3:e8: b9:b6:0a:3a:5e:65:66:5b:aa:c4:2d:ef:11:a1:c3: f4:d9:10:65:e2:42:81:00:e0:5d:5c:6d:28:5c:cb: 64:b6:05:f1:a4:34:d9:7b:e2:80:92:0f:a2:0c:81: a2:c8:5e:d1:43:d9:e5:16:1f:7a:1a:0f:19:0e:93: a7:ae:04:55:7f:6d:51:7b:29:f2:f2:c7:2a:57:97: c1:02:bd:62:d3:f8:71:a4:31:64:37:d9:f7:45:2a: 36:f2:4d:2b:7b:6a:52:5d:6b:df:4f:ca:2e:3e:79: bb:6e:9e:c0:6a:32:4b:8e:67:f9:69:5e:f3:0c:11: 8d:7c:b4:c7:55:fe:31:92:c9:a7:27:2f:06:d6:fc: 1c:55:65:d4:d9:f3:9c:10:37:e8:d3:d8:e7:78:3c: eb:39:ef:5f:72:51:b5:d5:fa:05:4d:58:fd:d5:08: f5:b3:e0:ee:af:9d:0e:29:21:ef:38:35:e3:62:e8: 9b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:09:82:06:9C:BF:9C:EA:EA:DF:B8:D3:4D:0E:4C:8F:1B:29:DE:64 X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:89:6d:b5:ff:78:00:ab:87:03:f6:6c:17:b6:23:b0:26:70: 25:8b:1c:b4:0b:1b:88:81:92:c7:9a:fc:40:9e:df:04:89:89: 07:42:5e:9c:26:60:d8:ff:40:f9:9d:9b:8d:ba:30:29:8f:0b: 56:86:d4:56:e5:44:c2:e0:3a:9a:de:1a:1c:66:10:66:b2:1d: e8:c4:8b:09:19:6e:2b:3d:72:5a:10:7e:5e:7f:0e:73:cd:43: 03:a6:84:f9:fb:bb:eb:6b:ad:1b:86:d8:88:87:50:50:24:fa: 8f:5e:a7:db:96:4a:06:df:16:40:8a:76:d4:79:d1:14:84:41: 3a:7a:ba:3b:8f:a9:40:a8:22:da:ed:ec:c9:45:85:f7:c1:6c: 46:a5:9e:40:44:22:08:39:a6:17:a4:44:d0:f3:11:9f:b9:38: ca:d4:9d:85:ae:ae:c0:ce:17:5e:c6:3f:24:7e:54:e9:ef:9d: ac:f9:3a:1a:1f:b4:ca:7f:a4:39:3d:60:7d:a6:dc:a3:d2:af: 23:89:a1:b0:fa:d1:8a:c7:02:81:d1:17:8a:30:17:36:e1:90: da:0c:0b:c5:2c:49:b6:9d:cb:50:65:b9:77:99:08:46:17:1f: 72:2f:c8:04:55:ce:94:c2:5a:13:0b:17:45:fd:29:61:33:46: e3:18:00:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDIIajIYukmGB8cKvlHe2dIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYwOTIyMDgwMDQ0WhcNMjYwOTIzMDgwMDQ0WjAzMTEwLwYDVQQD EygzNTA5ODIwNjljYmY5Y2VhZWFkZmI4ZDM0ZDBlNGM4ZjFiMjlkZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgE7PXK+kG46pKQtn7D9AWbhHhGh C/6F27gk2g/DhxL5+eGwIGLXEG2WdEdyMLHW15yWoZbKM3yLZA8O4gVqDL0hQj2e 1oHP4+i5tgo6XmVmW6rELe8RocP02RBl4kKBAOBdXG0oXMtktgXxpDTZe+KAkg+i DIGiyF7RQ9nlFh96Gg8ZDpOnrgRVf21Reyny8scqV5fBAr1i0/hxpDFkN9n3RSo2 8k0re2pSXWvfT8ouPnm7bp7AajJLjmf5aV7zDBGNfLTHVf4xksmnJy8G1vwcVWXU 2fOcEDfo09jneDzrOe9fclG11foFTVj91Qj1s+Dur50OKSHvODXjYuib8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUJggacv5zq6t+4000OTI8bKd5kMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4lttf94 AKuHA/ZsF7YjsCZwJYsctAsbiIGSx5r8QJ7fBImJB0JenCZg2P9A+Z2bjbowKY8L VobUVuVEwuA6mt4aHGYQZrId6MSLCRluKz1yWhB+Xn8Oc81DA6aE+fu762utG4bY iIdQUCT6j16n25ZKBt8WQIp21HnRFIRBOnq6O4+pQKgi2u3syUWF98FsRqWeQEQi CDmmF6RE0PMRn7k4ytSdha6uwM4XXsY/JH5U6e+drPk6Gh+0yn+kOT1gfabco9Kv I4mhsPrRiscCgdEXijAXNuGQ2gwLxSxJtp3LUGW5d5kIRhcfci/IBFXOlMJaEwsX Rf0pYTNG4xgA4A== -----END CERTIFICATE-----Generated at Tue Sep 22 10:56:58 2026 by rpki-client