$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: C+M5P5UiS0DaxQy2pS3jHDcXtzjrKFwCvAcCQzF54PM= Subject key identifier: 05:6A:20:14:89:BE:66:18:F3:EB:92:F3:90:49:94:34:8B:CE:E5:77 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 01A0BF1EB17AE202A3E80BC20051858C2453 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 1AB6 Signing time: Sun 20 Sep 2026 14:00:54 +0000 Manifest this update: Sun 20 Sep 2026 14:00:54 +0000 Manifest next update: Mon 21 Sep 2026 14:00:54 +0000 Files and hashes: 1: 1Cwbh-EBkqRBbTaTb-Y36KV1_f4.roa (hash: KaOvvLBbfyfPARr7O7r9zR6vas9QNYiMvTjqvCPXEUI=) 2: 4vDYopNfblYxNyrSl7_Y8BBd78I.roa (hash: 9L22tlP5yMozusESHvaSo7CwK7JqSGuZhoMXYx5tMKw=) 3: 5cE4cXv9NfAhTzlsvseSXv-Va78.roa (hash: imOu3NBS+5L3w9gmNSjFTt0fMM+20Ow725s46hfVaoM=) 4: 6TVF3dArdPB2NJxy7_Pdt8ium4c.roa (hash: TnqA7ATOZWUWRWUjYZnrgFVgbRIJUV3+W+Bfc18gIck=) 5: 7_hKJNCWOqs8t2EHuZj_d2dqY80.roa (hash: oy0SSTc3SuINToqj7/oP07vHJ6DF+ESaKkvhl2mG+rc=) 6: 9dzcaLIqbqLLjoq0zYXtDd1PnhY.roa (hash: qxt/JZrhSAN1jPHN0Hazm3PY3+cu+jvBRtI3PEduO0E=) 7: 9myGapApVrb4JbejkloU4P66zLc.roa (hash: 6EFV77uWAJvDV9lSFY6CsxJphPSKH4/4PVdWuftIQJ8=) 8: A1Sn2zSUbNP7tg_tCQPhQ2GabPo.roa (hash: Y1xrHO7mpChPGsPDqY7/o0HC8lbKL4Hj7HnmDQ8IpHY=) 9: AxycDmx0_sRBRNwROaLXtKkwrSA.roa (hash: /OH19GJSnVpqoFUA2l9v57qAgYy75+THHbmUdJGT9/U=) 10: BgaPpw4QZZFq8BjvHJztJJvHVPk.roa (hash: 1bdyBEdjzw65JHZi7PKNdH+OzNLoot3lZr9JxQYu6k4=) 11: DfQSPmYelNb0NF30t1iTQWlUs5o.roa (hash: QnQiSZ4dExtUn1E1FxF2JPdUhkzoCuIvrEqj49xiXjQ=) 12: G_vLaWL_4n0xx6AmTZKeOZFeQ1M.roa (hash: 2JUl1gxV4a+1huqyyhuozz6EfwwCu7xROBFLG6lBkXQ=) 13: HmPFJkjojfXkQXnX-ShV0bymoms.roa (hash: qiXaZzgKfCkOjQoBV7iB0khwdnyrdRGDGRMiD17+W5Q=) 14: HtxrMlw1XYD3O00XvDNyUfXKFD8.roa (hash: okOUXYArEcKSjt4C2XgrkB0y7IllxSkE0rtSnZOlw/I=) 15: LfPTL7ZW-A5mmvN1zdwvatohGGM.roa (hash: ozraq4O9mZcm6giPdikSak7iJBai30VVr/xRbiF+gKI=) 16: MFjK1TdR2-EWSFy7AA-7itO08_A.roa (hash: 4bC2aj689nlbVmXthWCOX8uRipnLTQKmP66UYi+2xP8=) 17: WM5LG-fnu91VKfL9mtzuLq5EpX0.roa (hash: Fjhlzc33AyWtb0YGnkyn0RPTDS6aEVoPK1yfkJtVCyU=) 18: Wfqf17fPNrqhYEuomD94h7cLzTQ.roa (hash: +K1HlQK29dpjLdYpqFFk3MJakrfyvQ2V89xPZB0rlNk=) 19: ZNXbO3wa73OxZsGaC73Tv6OfGL4.roa (hash: lhKT5GFgOwPiLaKmkEPqlSiSwbXyE2FWLpI/hBm483Q=) 20: aBHHIsoOk3cwdTg01_-s4u0Jsjk.roa (hash: PbrAA8TMsU9WP0enV5kXL9Tl3hHucxigMTmbYxEfjpk=) 21: dnBR3jW0Kh4UVx_oWTNX9npKj2M.roa (hash: ogXmRAS68aAykUp/xTYTY3s+V2LuvqBkBMoKuQRwEjk=) 22: euYDIHjNOElKG9xyIjVvLMgwbp0.roa (hash: ckqC95VvdwpQ5J6I9qWWAJjmtLx1boikxydqGEik3aw=) 23: ib3eXdJ0h8wtIzIl2cBYokJr_9Q.roa (hash: NphbwdgT6fB0qOIn0HJy/kyHWoDJIQz8cXWMiK9ya4Y=) 24: igm3-NIqQRhNu9yZxNTMh_1HJYo.roa (hash: cfGF5AAxd5HmRNRxM7Asm85cxUZHuluzpiB9gp54keg=) 25: k5L4tohXQ4Ed_n59tNNB1TzR1Q4.roa (hash: 3rnORVw3E2u078fD2E2EbKJTg0lHYsmpc4uiLB3Yv/8=) 26: lSanMDeIzNXvZBhpiuO2WcMcnGA.roa (hash: z1k+Po4k1NiDxL5nJsZYdntctP6qEJPsnJ4NvYoS3GU=) 27: lueVV_jKMeHO5Ubr9jZ-cwt5lHo.roa (hash: 9c+KFKnP0O3swEyj7ofbRvYd449L+eQRnVpdXmf8AiM=) 28: q87YasPi0P-A4RG5sPV3wuAufYQ.roa (hash: kJZPr94cnSfkBS7GDeJfwaSpjY+FpnvEJHJB2hPmYoo=) 29: r6L-LOAJal8uHDRb_CYkXODg1eI.roa (hash: aCR0n6oC/E6XKOlk59ckRsddz1GnAenTV0tVYHytF9I=) 30: sdcvoTQBQgoeAFopLsTr-xpMuPs.roa (hash: WtnlbPaLYL1j+j4AclbHMyJ9VcWAM1c5WBmY3q72Npc=) 31: sosLhbhkTvBUhOU75DldwucY6Bg.roa (hash: RsdZKseQ5cZTMhfbgKgzdRVtC3Oz1kE+VOIzvDaMuWg=) 32: uaYE5V2zqlkxFilciFUOq7CjWZw.roa (hash: PCiK7eyJf1Lc5VeA8orNlbLV1UFE7CUmS9PTtgP0Kig=) 33: uhrmeJIDBf0UOu2SKTeGKN2KLdU.roa (hash: 6yakXLB9HxwcEdeaop2mfVwvTXAmim03f6ri7g4Sfy8=) 34: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: tWZG/7P9bNny1Boz+TWy9M67H4J5lsIgYV2BAzSW+nA=) 35: uqK8RxQN9LvzCAlm9cz-JPc33k0.roa (hash: QBT2sv9FfNzV4E0o6WzeRcOpOw1Nw/sc0uB77lAIYy8=) 36: vloaPvYoyY7lftrTQCapPW0IXOY.roa (hash: jGy6XOMpTVxN0ST97KCkF87I0GrKB16LjlLEWBSNbCQ=) 37: xEGlR8AyR4zdleMn0h5pddeRX14.roa (hash: ZkNfc0IpugjxRFp85te3h6YIm1ECTC91UgGg0apvU/I=) 38: xyaLQZsDAvrm7P96t1P_1iQ01ug.roa (hash: 8WV+5vFShCRtn2TW6yJKkPCd8zXeEaaVVDKdZ+jH3aY=) 39: yflRQXgc3sRXtlMhgbPQejPgA54.roa (hash: ELCJ/0UNTdR4XmPGdTDQGIRX33BsOogxgdA0Xu5bAP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:1e:b1:7a:e2:02:a3:e8:0b:c2:00:51:85:8c:24:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Sep 20 14:00:54 2026 GMT Not After : Sep 21 14:00:54 2026 GMT Subject: CN=056a201489be6618f3eb92f3904994348bcee577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:37:ca:78:f6:2b:5f:4f:ff:d3:3d:b5:18:26: 62:9b:b9:b3:97:4b:bb:c8:ff:bb:ff:50:bc:ef:b0: da:c9:08:8f:65:9b:42:c4:40:9e:98:21:45:61:2c: 5e:f8:ad:bc:e3:05:f0:72:c8:f0:1b:d1:27:83:4c: c4:72:f2:5f:f9:99:7f:e6:dc:89:c0:69:4d:e1:a0: 5b:cc:3b:75:44:6b:72:b7:61:3f:7f:b0:6e:33:00: 3c:e4:d1:91:49:1c:47:a0:b6:d9:7c:2d:a2:85:45: 40:f4:ff:14:7b:13:90:8a:eb:0d:27:49:26:7c:29: 95:69:7a:d0:29:06:04:08:e9:a9:56:50:ff:d1:fc: 84:af:fe:3c:f9:a8:36:cc:1f:56:24:a9:48:e5:67: 64:a1:d2:ec:8a:ad:b6:6b:1d:e1:a2:cf:7c:d2:fe: 92:02:eb:ed:ee:d2:3c:c4:10:3b:64:19:50:6f:fa: 95:c5:10:ba:9c:6a:26:a7:49:dd:62:26:4c:66:2d: df:ce:a0:14:0f:ac:08:db:e4:f2:29:ab:ba:c7:b1: 80:ad:80:c4:57:76:b6:62:e9:26:19:1d:05:a7:38: 9f:4c:e1:06:b6:b2:86:26:ca:31:6f:8d:71:f6:e9: 0d:3e:2f:cd:1d:1c:77:9f:ab:43:90:c5:16:60:58: f2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6A:20:14:89:BE:66:18:F3:EB:92:F3:90:49:94:34:8B:CE:E5:77 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:bf:fd:7c:cd:61:2d:22:52:03:bd:4d:89:7b:ad:8d:b4:6e: 10:aa:0a:06:3a:90:1a:c0:99:f9:45:fb:c1:f1:4f:f3:da:1c: 35:3c:86:94:75:36:4e:50:4f:c5:46:aa:98:60:1a:b3:2d:ba: aa:1c:51:ff:31:86:e4:2e:ca:93:63:74:c8:20:4a:d2:da:f3: 98:92:f0:3d:83:57:6b:00:4a:94:ef:87:b6:a4:80:71:fa:86: 10:36:ff:d6:0b:cb:a8:a6:ce:f8:ae:ed:c9:79:d2:b6:ee:79: cf:5d:5e:93:a1:29:37:e9:ca:97:56:6e:89:1c:9a:14:62:be: d1:ef:e0:87:37:40:14:f9:05:84:c2:f0:48:08:67:e5:68:06: 34:1a:5d:6f:dd:75:a0:8d:40:99:0e:e7:40:ac:14:ce:8c:4d: 10:e2:b3:b0:c5:fb:cc:ca:d5:6e:6c:be:39:86:68:ae:bf:51: df:40:16:ac:61:48:c0:43:53:7d:74:91:2a:a7:ba:65:31:f3: 8f:88:d4:b6:09:b1:f4:21:35:32:0c:0a:19:c0:a5:7b:3b:23: 68:f0:b3:44:86:15:87:aa:66:f3:06:bf:2a:ab:c9:d5:7d:2a: 52:0c:e6:5e:78:3d:f0:92:c6:d9:6a:0d:eb:84:98:11:a8:a5: ef:61:02:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/HrF64gKj6AvCAFGFjCRTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwOTIwMTQwMDU0WhcNMjYwOTIxMTQwMDU0WjAzMTEwLwYDVQQD EygwNTZhMjAxNDg5YmU2NjE4ZjNlYjkyZjM5MDQ5OTQzNDhiY2VlNTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDfKePYrX0//0z21GCZim7mzl0u7 yP+7/1C877DayQiPZZtCxECemCFFYSxe+K284wXwcsjwG9Eng0zEcvJf+Zl/5tyJ wGlN4aBbzDt1RGtyt2E/f7BuMwA85NGRSRxHoLbZfC2ihUVA9P8UexOQiusNJ0km fCmVaXrQKQYECOmpVlD/0fyEr/48+ag2zB9WJKlI5WdkodLsiq22ax3hos980v6S Auvt7tI8xBA7ZBlQb/qVxRC6nGomp0ndYiZMZi3fzqAUD6wI2+TyKau6x7GArYDE V3a2YukmGR0FpzifTOEGtrKGJsoxb41x9ukNPi/NHRx3n6tDkMUWYFjy2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVqIBSJvmYY8+uS85BJlDSLzuV3MB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIb/9fM1h LSJSA71NiXutjbRuEKoKBjqQGsCZ+UX7wfFP89ocNTyGlHU2TlBPxUaqmGAasy26 qhxR/zGG5C7Kk2N0yCBK0trzmJLwPYNXawBKlO+HtqSAcfqGEDb/1gvLqKbO+K7t yXnStu55z11ek6EpN+nKl1ZuiRyaFGK+0e/ghzdAFPkFhMLwSAhn5WgGNBpdb911 oI1AmQ7nQKwUzoxNEOKzsMX7zMrVbmy+OYZorr9R30AWrGFIwENTfXSRKqe6ZTHz j4jUtgmx9CE1MgwKGcClezsjaPCzRIYVh6pm8wa/KqvJ1X0qUgzmXng98JLG2WoN 64SYEail72ECBQ== -----END CERTIFICATE-----Generated at Sun Sep 20 18:01:16 2026 by rpki-client