$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json) Hash identifier: LHMXlhBpulVWTyzloFsMvUZWYT5hZLR8FLOszEmNPxg= Subject key identifier: E4:F9:F6:23:14:21:EA:D4:FA:BB:5E:05:34:E9:A2:32:6D:B3:E1:3E Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 01A0BDD47F0DB0E83ACD4410F73E5548419B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft Manifest number: 1A9F Signing time: Sun 20 Sep 2026 08:00:15 +0000 Manifest this update: Sun 20 Sep 2026 08:00:15 +0000 Manifest next update: Mon 21 Sep 2026 08:00:15 +0000 Files and hashes: 1: 30puVpgFRN4YwWi8xzX_Z-3HoMc.roa (hash: o5oIpcyar+M+5831YpDbcIJBS5S/FPLnrUPDm/0y3l0=) 2: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: r1L8f4geFByqo/Mvzoj7Yjop/Lf+UfRE/9S9//lu22A=) 3: 5FnusIit9uaVrldhOS_f_neDWgs.roa (hash: Ipdoz4T//FSaZhmjoZKN6wB6EyXA0tHqJzEOkgjKWOo=) 4: 6VMAkTg85zv_RNH9ZiPNPZuWCW8.roa (hash: Lpm2qdKvSHv1n64+iddb1tvoxMF6Y4LQAfrzqafISLM=) 5: B43PKu9zFU7-_KCXTuxzDe93OU0.roa (hash: friYQXieb4/RtWvPCW9C35Zt9vuRnu7Qsl+CY5jbJEs=) 6: Jmz4FnP7cL-QtALX1djqMHOUM6o.roa (hash: Eo0kFSBPojZrMatbz2kLZgOLTkqJ3viplyIKQqqpV8Q=) 7: QpckzCGCQYLYhpr74LAr4qnTXpU.roa (hash: KyNF1FltPbO/mXuIELm3YgjGIsFSe1HCrIqcFEBwYhc=) 8: V7fO1Dal8JtSLG0LOzVUcF80K-w.asa (hash: ValZt6XlRECidgMBG0dXrQbkDvp8n06Hk4Hd3QapbrA=) 9: ZRTAVRMhZT6cxxsi8He5NfGJ2zQ.roa (hash: puVDaYvy8bu1rAUQ7RQ/VHw6qx5cv46U9IaFuh15FHs=) 10: _43Htt9dzLi8msDz8qcZCkhm86k.roa (hash: YaFteb2dAn9Qn0to17VMsejQKPfSuGZrfXxllZGOY8A=) 11: oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa (hash: V8zyoEs8PVkTEGnh+pD54bvpuIuIO+mSB/TZNau2dBA=) 12: qB7xYjamdywCLSZiE2p-rI4CouM.roa (hash: TrY1f9iLn380hsE1RjYtEKEJFQA9mvO2ASaSr9uTJXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bd:d4:7f:0d:b0:e8:3a:cd:44:10:f7:3e:55:48:41:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Sep 20 08:00:15 2026 GMT Not After : Sep 21 08:00:15 2026 GMT Subject: CN=e4f9f6231421ead4fabb5e0534e9a2326db3e13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7d:41:7a:bc:a9:3b:8e:9a:db:c1:f6:04:cb: 1a:54:1a:d2:a3:c5:6a:21:ab:c6:0e:63:c7:7e:7e: 48:3c:90:fc:3a:98:b7:08:88:fa:14:fb:3d:33:51: dd:83:75:a5:26:11:fc:d7:ba:e0:27:66:7e:2f:37: be:06:87:b7:ca:84:bd:64:51:38:0a:0d:25:e3:0f: a7:8d:c7:5c:ef:ff:89:f7:86:9d:6a:45:1d:f6:d1: d7:b6:28:2c:ad:57:10:69:16:2c:76:65:b7:d2:26: 3c:b8:4e:61:54:bb:e3:6d:28:6a:ba:e5:40:38:9f: 25:be:b6:f1:78:fa:95:e7:f5:0f:1c:86:7a:35:67: 27:e6:b3:82:22:fd:37:c6:20:52:c8:df:6d:2b:1f: 42:a8:7d:d3:29:7a:6b:20:4f:14:f5:ce:38:25:39: 6d:6e:ab:ac:bd:ed:77:76:02:43:44:43:81:6c:5e: 25:ee:ec:44:d2:09:2d:a8:4d:b7:32:c0:b5:1f:55: 17:8c:04:27:2a:b8:1e:96:95:af:96:21:c7:09:66: 51:3e:7d:2f:00:b2:c0:93:d6:06:6a:4f:74:6d:f6: 47:5b:22:57:a8:6e:20:fa:0d:7b:74:9e:65:4c:58: 9b:f4:df:cf:20:52:d7:19:31:cb:33:27:f6:63:3f: cb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F9:F6:23:14:21:EA:D4:FA:BB:5E:05:34:E9:A2:32:6D:B3:E1:3E X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:59:89:79:db:a1:06:ec:c0:59:36:6f:93:d1:4c:29:c7:00: 69:86:6e:a7:c6:f8:46:8e:0f:59:e8:3f:d6:82:71:8b:3d:d7: 49:0a:67:f7:84:c1:93:1a:3f:6b:0d:0a:b9:f2:0b:49:bc:27: 7d:ee:6c:7f:bf:09:65:11:08:46:be:54:42:82:ad:99:ea:5e: b8:43:80:52:02:f4:cc:b3:61:de:e5:b6:85:f6:6c:e5:57:2f: 0a:6e:6c:02:0b:d5:b3:e7:3e:05:2c:fc:40:de:73:c2:9b:cc: 83:73:b2:ce:52:ae:f4:c4:6a:93:2e:22:3b:26:00:54:47:b5: ab:46:70:9e:7a:ab:28:00:66:15:0d:5a:12:b5:fa:52:c7:c9: 7e:78:e5:97:4b:14:55:b0:7e:4b:fe:38:28:ea:cd:83:b5:28: d5:2e:46:fa:11:61:b3:d3:d9:6c:d4:e4:ea:dd:02:b8:3c:be: cf:57:b0:de:6c:95:f6:66:35:fa:b6:3a:7d:2a:e8:e3:f7:d5: bd:8c:df:f4:43:b2:c0:bf:9e:56:9e:be:da:a2:ce:d6:36:3c: d9:17:33:c5:35:c3:93:d5:f7:e2:d2:eb:33:34:2b:69:80:24: c9:29:13:6f:42:82:32:76:73:e5:c9:e3:2e:b6:1d:7e:e4:cd: 4a:37:c5:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC91H8NsOg6zUQQ9z5VSEGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYwOTIwMDgwMDE1WhcNMjYwOTIxMDgwMDE1WjAzMTEwLwYDVQQD EyhlNGY5ZjYyMzE0MjFlYWQ0ZmFiYjVlMDUzNGU5YTIzMjZkYjNlMTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn1BerypO46a28H2BMsaVBrSo8Vq IavGDmPHfn5IPJD8Opi3CIj6FPs9M1Hdg3WlJhH817rgJ2Z+Lze+Boe3yoS9ZFE4 Cg0l4w+njcdc7/+J94adakUd9tHXtigsrVcQaRYsdmW30iY8uE5hVLvjbShquuVA OJ8lvrbxePqV5/UPHIZ6NWcn5rOCIv03xiBSyN9tKx9CqH3TKXprIE8U9c44JTlt bqusve13dgJDREOBbF4l7uxE0gktqE23MsC1H1UXjAQnKrgelpWvliHHCWZRPn0v ALLAk9YGak90bfZHWyJXqG4g+g17dJ5lTFib9N/PIFLXGTHLMyf2Yz/LxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOT59iMUIerU+rteBTTpojJts+E+MB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArlmJeduh BuzAWTZvk9FMKccAaYZup8b4Ro4PWeg/1oJxiz3XSQpn94TBkxo/aw0KufILSbwn fe5sf78JZREIRr5UQoKtmepeuEOAUgL0zLNh3uW2hfZs5VcvCm5sAgvVs+c+BSz8 QN5zwpvMg3OyzlKu9MRqky4iOyYAVEe1q0ZwnnqrKABmFQ1aErX6UsfJfnjll0sU VbB+S/44KOrNg7Uo1S5G+hFhs9PZbNTk6t0CuDy+z1ew3myV9mY1+rY6fSro4/fV vYzf9EOywL+eVp6+2qLO1jY82RczxTXDk9X34tLrMzQraYAkySkTb0KCMnZz5cnj LrYdfuTNSjfF9A== -----END CERTIFICATE-----Generated at Sun Sep 20 14:52:07 2026 by rpki-client