$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json) Hash identifier: e/qZbhw6KQlCt3q9oLafsd65we63CiCbQiWCkqU+zb4= Subject key identifier: 16:53:18:87:06:09:5E:3C:ED:C5:FC:EA:1D:82:26:DF:C9:5D:DF:B3 Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71 Certificate serial: 01A0EE1D29BD0D5DA3E13399C7817C8F2BE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft Manifest number: 1A83 Signing time: Tue 29 Sep 2026 17:01:23 +0000 Manifest this update: Tue 29 Sep 2026 17:01:23 +0000 Manifest next update: Wed 30 Sep 2026 17:01:23 +0000 Files and hashes: 1: 2uP2P6fTf1qo4PWRRqgeE7TTacE.roa (hash: 9eSLYCb2FWzNsHTSZC1SEnCMNPegGVcyv6j21qK1mw8=) 2: 5rakYdNxKMjh5JNPex8iKzp_gtA.roa (hash: 6LspddKmtQtuac9ZuOl1VnhHP0Iq5oFWoFzvEG8ERXE=) 3: 814WTzXBXOIciV517t_FSJpheFU.roa (hash: 3rVBxA84Q0GQ5WcUB0js4QFJ7jGwBh1Rh823C6IzdeE=) 4: AogunF2vY6jwFQqloSaO1hbzpk8.roa (hash: it2LBzN2gPXG+ZsVF9U3YkMRcRGbDQsz+oO4JZZUzeg=) 5: JNtEUjv1u2nrR2kJY3xTk9eLdQU.roa (hash: y7e9qF3W4oZOepFOJNd5APdu3FIuFqB+iMZzLRxwKEo=) 6: PQhkPKvFMO7XAZJCK0yg6JOYn-Q.roa (hash: GclksRKdEgrXLLR1LhQTLSvorV7LCPoO0w2Ir6KfZ4M=) 7: Qi3PbQnrdw7q8NtmLcDOyzuEuok.roa (hash: Ene2M6hdbbKNY0YIKXvUxR9PygRHkyqGW28j+nRBH9E=) 8: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: 7ZgGsTA8VFg8H0FUacfwZOXdwObL98SfEL2ptHr6duM=) 9: UKQMI_1tAdL7QkXpECyLkKgiFXw.roa (hash: xCvizHfY/xMnYQ9a7uuh91R0ms1D7ktEV/mIEaRjfJ8=) 10: iB6K871-MTgrHCKR-pl3wKEY8VE.roa (hash: evrLdA7V1aTPB0+S9RwUtMXPCQscLGRKXxGpKmpY5Z4=) 11: of6LgZjZn377OWe4qW9VxsrXlzU.roa (hash: mzM/Cns9/j03lTiA+9ZfDQNcGWtBmHN0WQWYMBfi0eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 15:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ee:1d:29:bd:0d:5d:a3:e1:33:99:c7:81:7c:8f:2b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Validity Not Before: Sep 29 17:01:23 2026 GMT Not After : Sep 30 17:01:23 2026 GMT Subject: CN=1653188706095e3cedc5fcea1d8226dfc95ddfb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:14:ce:e6:e6:9d:12:14:3c:ef:99:b6:c1: d5:99:bb:52:f2:16:1c:c9:9c:72:67:54:75:b2:03: 38:91:2b:d7:aa:5c:dd:a2:27:a2:5f:98:f0:f2:64: d3:57:bf:a2:db:d4:75:ff:df:a9:05:74:0c:da:4a: a3:83:f0:a7:40:ce:45:b5:de:70:92:19:ea:19:6e: 7c:93:19:cb:99:26:ea:17:83:ce:a9:41:a8:92:9c: 46:3c:f0:d0:55:70:b1:f8:14:78:fb:5d:87:79:40: f9:f3:64:e5:4d:7e:74:43:24:76:74:24:70:bf:95: b9:43:09:e0:26:10:21:9b:49:d5:d7:97:b9:01:ac: 64:3e:cf:de:75:46:eb:95:82:e1:88:5d:a2:d4:fd: 64:09:0b:72:d2:d2:e7:f9:37:87:f1:70:65:1e:65: 41:b1:5b:01:85:ea:f9:f0:ea:4a:de:bb:a3:21:75: 50:ef:d8:50:66:15:be:bf:79:96:1b:b5:26:62:f0: 4c:a6:6c:2d:8f:72:d0:93:bb:6d:81:2b:69:1f:59: 58:08:fb:4d:c8:07:ee:4f:6e:5f:44:91:86:7f:4e: a3:ba:ee:2f:8b:84:4c:fe:a4:ed:bd:e3:a5:8d:fd: aa:88:0d:66:d7:f8:a7:7c:61:30:be:b2:6d:59:8a: d6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:53:18:87:06:09:5E:3C:ED:C5:FC:EA:1D:82:26:DF:C9:5D:DF:B3 X509v3 Authority Key Identifier: keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c6:66:1f:86:e1:95:5e:60:5a:80:ae:44:a7:9a:3d:f7:01: 33:05:0e:75:5c:ab:21:81:99:d3:b4:02:02:75:ff:6e:40:1e: ec:f2:44:e1:0d:a2:df:bb:21:33:22:50:1c:4c:da:df:1f:f2: 5c:c1:d2:4c:07:02:66:48:d5:79:fc:21:10:60:f6:1f:3e:d7: 02:e1:41:75:ad:ac:4f:c5:a6:b9:9d:ea:f2:3e:7a:10:7f:30: 32:ca:73:dc:d2:d0:57:68:8f:a8:b2:8f:a8:ba:a6:1a:64:9b: da:b6:05:d2:d5:bd:db:76:40:75:e3:59:7d:1b:1a:65:31:e2: f9:92:90:df:ee:ff:f2:30:58:89:b8:af:af:66:ba:de:53:c4: 85:bb:c4:1e:3c:c3:e5:2d:ba:f1:99:35:8e:b0:67:d3:23:62: 05:5f:fb:8d:62:15:97:f2:14:db:be:1d:1b:ae:ef:61:09:5a: db:41:04:49:46:bc:ab:33:42:eb:24:e3:26:a9:d1:a5:57:9b: 8f:8c:16:e0:8c:ce:9b:7c:3d:47:06:58:0e:e3:20:2c:a2:77: da:11:f7:5d:84:b7:46:66:01:40:a7:97:78:07:c9:ba:80:5f: fe:90:78:2f:8a:46:54:8a:5c:f1:cd:c5:b5:29:3b:9b:64:e2: 8e:a5:e0:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDuHSm9DV2j4TOZx4F8jyvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk ZWZlNzEwHhcNMjYwOTI5MTcwMTIzWhcNMjYwOTMwMTcwMTIzWjAzMTEwLwYDVQQD EygxNjUzMTg4NzA2MDk1ZTNjZWRjNWZjZWExZDgyMjZkZmM5NWRkZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtykUzubmnRIUPO+ZtsHVmbtS8hYc yZxyZ1R1sgM4kSvXqlzdoieiX5jw8mTTV7+i29R1/9+pBXQM2kqjg/CnQM5Ftd5w khnqGW58kxnLmSbqF4POqUGokpxGPPDQVXCx+BR4+12HeUD582TlTX50QyR2dCRw v5W5QwngJhAhm0nV15e5AaxkPs/edUbrlYLhiF2i1P1kCQty0tLn+TeH8XBlHmVB sVsBher58OpK3rujIXVQ79hQZhW+v3mWG7UmYvBMpmwtj3LQk7ttgStpH1lYCPtN yAfuT25fRJGGf06juu4vi4RM/qTtveOljf2qiA1m1/infGEwvrJtWYrWHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZTGIcGCV487cX86h2CJt/JXd+zMB8GA1UdIwQY MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt Zjg4OWNhMTYxYzAxLzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsZmH4bh lV5gWoCuRKeaPfcBMwUOdVyrIYGZ07QCAnX/bkAe7PJE4Q2i37shMyJQHEza3x/y XMHSTAcCZkjVefwhEGD2Hz7XAuFBda2sT8WmuZ3q8j56EH8wMspz3NLQV2iPqLKP qLqmGmSb2rYF0tW923ZAdeNZfRsaZTHi+ZKQ3+7/8jBYibivr2a63lPEhbvEHjzD 5S268Zk1jrBn0yNiBV/7jWIVl/IU274dG67vYQla20EESUa8qzNC6yTjJqnRpVeb j4wW4IzOm3w9RwZYDuMgLKJ32hH3XYS3RmYBQKeXeAfJuoBf/pB4L4pGVIpc8c3F tSk7m2TijqXgaQ== -----END CERTIFICATE-----Generated at Tue Sep 29 19:22:03 2026 by rpki-client