$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: hjg0DMzRe8xU0Ik3ZQfzfZxMmyKeaz6AlQMyJUN+cWQ= Subject key identifier: 4F:0E:CF:BD:C2:6F:95:F2:07:90:D7:73:65:71:36:D5:76:75:DA:E7 Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 01A0EBF8ECC10CE35AE87596F08E02B92D7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 1AAD Signing time: Tue 29 Sep 2026 07:02:34 +0000 Manifest this update: Tue 29 Sep 2026 07:02:34 +0000 Manifest next update: Wed 30 Sep 2026 07:02:34 +0000 Files and hashes: 1: 7nyu5Fr8-qZBjDHEUfq6_PwiXC8.roa (hash: VfC3vcI2ofuIQtRz8HrlekZCngt14Y4U47LgFaOVG7o=) 2: FVXBitmEbgj_li_6czx1XRbqiNw.roa (hash: R8xG/GltnW5vfmFXsInhF+U1K0ZAPEo6gDTassjkZ70=) 3: FgBhFfbpwOIh2yLDcYR6t3XYeXI.roa (hash: Xt2Do+PhLFCTF4jZSTOrbDv16PG0FRvMZ65nQcWYGuI=) 4: InntupDduHTVC0cqwDJelb8weXU.roa (hash: vHmmc3H3npnTsbFFZD1XCanAu6wqCMRYNLCV88QKsTY=) 5: KTOGyEIzZTvz0cK9QLa-fpUPjxQ.roa (hash: QEovE649tWS9gIrwPoqmHnxEiPeuGa3E2iwZoAPFly4=) 6: Pr4mDq76semd9HzVIDKeDMYvVQQ.roa (hash: FDZv7C+onU2+GR6E81dEXEL21YIE7+gux++CAkqFZL8=) 7: RQvbDSqBfaVu6td-sVHc8kS0AMI.roa (hash: KdkxzAaIeA05KUt11r/+FMtzXvFNEQ4QHFKm2YSq46I=) 8: crlxWYRKnMsCCBJ1tth-hPygkaA.roa (hash: evxq4WD5Z/WNje3kIBlBqohmCQYIqt7B3zr5TFR6NKs=) 9: l20iodI7qHF5vK-NH6_rVPCVyQM.roa (hash: OGH43ltJUkqqtDPaQP0DDDhIoPXBMr7s0StXwhpwKJo=) 10: loH6W9YaDJVi_c3lMXBq7Z-WFVY.roa (hash: No0iHbca7x6d/GIYxdtf5GTSkK8pwb2z/PInRJ4s1iw=) 11: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: zgS9N+DHqZXy5jW+xKOOi3lAYUxYiECG9HLzx6qFALQ=) 12: x5Spo4-FeBNDNeijBeVZFRWlHuk.roa (hash: 8PshAgwgd0COcwcGY0rg4RaGlhmmQFcQWaE/0hoihqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 07:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:eb:f8:ec:c1:0c:e3:5a:e8:75:96:f0:8e:02:b9:2d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Sep 29 07:02:34 2026 GMT Not After : Sep 30 07:02:34 2026 GMT Subject: CN=4f0ecfbdc26f95f20790d773657136d57675dae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:d3:33:41:7d:37:b0:94:57:07:62:fa:a2: f7:58:d5:ae:a6:a4:0a:77:cd:1d:e8:27:38:41:88: be:85:6a:56:26:7a:3d:40:d0:23:64:ed:66:d8:4b: f6:a6:07:05:76:77:c3:ec:c8:a2:49:b4:4c:63:07: 06:ae:a1:a1:3e:b8:c5:9b:ce:bc:44:8e:f0:c6:4b: 4f:9a:eb:ea:ef:8e:29:a2:48:08:1a:8a:82:f3:d1: 0a:95:25:55:26:26:f1:71:97:42:e8:9f:10:db:55: ac:fb:34:d9:08:f7:cf:c5:02:be:75:c8:5a:b2:11: 14:c6:c9:05:68:1f:5e:31:69:3c:97:5a:87:95:87: c7:12:1a:85:91:09:42:49:27:f3:c8:07:61:00:24: 95:7c:3c:74:93:8f:6b:e1:9e:c7:db:08:f7:1d:fe: 9e:40:9e:f6:54:af:2f:fa:c2:cf:34:cf:ad:b0:2b: 8d:e1:a0:87:6f:75:9c:7f:cf:97:b7:13:05:80:79: d8:cf:0e:07:5b:6c:56:7c:24:3e:0d:57:58:9a:b5: d4:47:7c:f5:40:4d:56:a4:ba:5b:9f:83:ab:cf:64: d6:dc:20:20:46:fc:44:d0:d0:01:ca:71:58:7c:fd: 6d:1f:ff:fe:ec:29:55:77:69:2b:9f:84:4a:e7:9e: 72:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0E:CF:BD:C2:6F:95:F2:07:90:D7:73:65:71:36:D5:76:75:DA:E7 X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:6c:5e:78:a5:48:5e:e0:fc:89:1c:11:6b:17:45:7f:a6:be: 65:89:f4:6a:5d:e8:1f:d0:13:9f:87:ff:1f:f1:5e:f5:f4:bd: ae:80:35:6e:ab:dc:77:f8:99:fd:16:e3:2b:15:82:27:90:86: 03:c3:a3:af:7d:0f:a5:be:e7:1a:eb:e9:ce:5e:5e:7a:2b:92: 63:01:61:9d:f9:94:0e:53:bf:70:b0:ad:56:52:f0:c6:b5:0c: 8a:fd:d0:71:83:eb:b6:f2:d7:29:5b:c2:e1:00:4a:86:76:c4: 41:6a:65:3b:37:f6:78:43:fa:50:ab:ce:e1:df:a1:c7:22:93: 5e:8e:57:13:7e:ac:fc:a1:49:3a:40:fc:ff:3f:96:40:27:69: 6d:43:ba:62:3e:a4:17:30:bf:27:2d:ed:4e:d4:32:b9:25:35: 43:ae:e4:58:c1:db:c1:ab:67:62:c8:28:73:e8:63:45:4f:a9: f2:8e:da:82:c7:08:04:78:e0:a1:6e:00:91:17:b1:18:bb:f1: 84:59:33:fa:01:a1:c8:96:02:1d:cf:9d:98:95:93:cf:47:52: a3:81:1d:b2:1a:b7:85:73:6b:18:51:c8:61:7b:7f:cd:76:e6: a1:e8:25:cf:b2:b6:9c:9a:83:e7:4e:42:7c:ce:fb:f2:96:1f: f4:e2:8a:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDr+OzBDONa6HWW8I4CuS19MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjYwOTI5MDcwMjM0WhcNMjYwOTMwMDcwMjM0WjAzMTEwLwYDVQQD Eyg0ZjBlY2ZiZGMyNmY5NWYyMDc5MGQ3NzM2NTcxMzZkNTc2NzVkYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYjTM0F9N7CUVwdi+qL3WNWupqQK d80d6Cc4QYi+hWpWJno9QNAjZO1m2Ev2pgcFdnfD7MiiSbRMYwcGrqGhPrjFm868 RI7wxktPmuvq744pokgIGoqC89EKlSVVJibxcZdC6J8Q21Ws+zTZCPfPxQK+dcha shEUxskFaB9eMWk8l1qHlYfHEhqFkQlCSSfzyAdhACSVfDx0k49r4Z7H2wj3Hf6e QJ72VK8v+sLPNM+tsCuN4aCHb3Wcf8+XtxMFgHnYzw4HW2xWfCQ+DVdYmrXUR3z1 QE1WpLpbn4Orz2TW3CAgRvxE0NABynFYfP1tH//+7ClVd2krn4RK555yEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8Oz73Cb5XyB5DXc2VxNtV2ddrnMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmxeeKVI XuD8iRwRaxdFf6a+ZYn0al3oH9ATn4f/H/Fe9fS9roA1bqvcd/iZ/RbjKxWCJ5CG A8Ojr30Ppb7nGuvpzl5eeiuSYwFhnfmUDlO/cLCtVlLwxrUMiv3QcYPrtvLXKVvC 4QBKhnbEQWplOzf2eEP6UKvO4d+hxyKTXo5XE36s/KFJOkD8/z+WQCdpbUO6Yj6k FzC/Jy3tTtQyuSU1Q67kWMHbwatnYsgoc+hjRU+p8o7agscIBHjgoW4AkRexGLvx hFkz+gGhyJYCHc+dmJWTz0dSo4Edshq3hXNrGFHIYXt/zXbmoeglz7K2nJqD505C fM778pYf9OKKvA== -----END CERTIFICATE-----Generated at Tue Sep 29 14:59:45 2026 by rpki-client