$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json) Hash identifier: 1+mQl2PS7hYSCRBmzGCVHa2LKF3qLkoTtuuOB7MOfSo= Subject key identifier: FD:B3:ED:AE:D3:04:41:B3:C4:0B:95:FD:00:1C:13:CE:6C:F6:DA:DF Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 01A1DF1528771E0E7F09FFB14FA606AE78B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft Manifest number: 1B35 Signing time: Sun 15 Nov 2026 12:01:08 +0000 Manifest this update: Sun 15 Nov 2026 12:01:08 +0000 Manifest next update: Mon 16 Nov 2026 12:01:08 +0000 Files and hashes: 1: 30puVpgFRN4YwWi8xzX_Z-3HoMc.roa (hash: o5oIpcyar+M+5831YpDbcIJBS5S/FPLnrUPDm/0y3l0=) 2: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: gcyDC36AwNqAfkwmLHrJ7mrVWW1cWhWk/n3LKbGDYNI=) 3: 5FnusIit9uaVrldhOS_f_neDWgs.roa (hash: Ipdoz4T//FSaZhmjoZKN6wB6EyXA0tHqJzEOkgjKWOo=) 4: 6VMAkTg85zv_RNH9ZiPNPZuWCW8.roa (hash: Lpm2qdKvSHv1n64+iddb1tvoxMF6Y4LQAfrzqafISLM=) 5: B43PKu9zFU7-_KCXTuxzDe93OU0.roa (hash: friYQXieb4/RtWvPCW9C35Zt9vuRnu7Qsl+CY5jbJEs=) 6: Jmz4FnP7cL-QtALX1djqMHOUM6o.roa (hash: Eo0kFSBPojZrMatbz2kLZgOLTkqJ3viplyIKQqqpV8Q=) 7: QpckzCGCQYLYhpr74LAr4qnTXpU.roa (hash: KyNF1FltPbO/mXuIELm3YgjGIsFSe1HCrIqcFEBwYhc=) 8: V7fO1Dal8JtSLG0LOzVUcF80K-w.asa (hash: ValZt6XlRECidgMBG0dXrQbkDvp8n06Hk4Hd3QapbrA=) 9: XHmPC5BB5bxkkHcCtnmjsISY8Xg.roa (hash: ihbjNp5rHzIKCHcROOvcP+rBQoV7tJGhizvvWUt4nv8=) 10: ZRTAVRMhZT6cxxsi8He5NfGJ2zQ.roa (hash: puVDaYvy8bu1rAUQ7RQ/VHw6qx5cv46U9IaFuh15FHs=) 11: _43Htt9dzLi8msDz8qcZCkhm86k.roa (hash: YaFteb2dAn9Qn0to17VMsejQKPfSuGZrfXxllZGOY8A=) 12: oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa (hash: V8zyoEs8PVkTEGnh+pD54bvpuIuIO+mSB/TZNau2dBA=) 13: qB7xYjamdywCLSZiE2p-rI4CouM.roa (hash: TrY1f9iLn380hsE1RjYtEKEJFQA9mvO2ASaSr9uTJXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:15:28:77:1e:0e:7f:09:ff:b1:4f:a6:06:ae:78:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Nov 15 12:01:08 2026 GMT Not After : Nov 16 12:01:08 2026 GMT Subject: CN=fdb3edaed30441b3c40b95fd001c13ce6cf6dadf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:26:2c:62:1e:6d:27:68:65:a3:6f:1c:f5:74: 26:f3:72:a2:2f:a7:9f:9a:24:c0:bc:fe:69:fc:71: 68:37:64:1a:32:78:3c:9e:49:3a:56:6d:02:59:66: 4b:d3:21:ed:31:72:7d:d9:97:d4:09:60:fd:fd:5e: f5:ef:22:9c:1e:ba:01:0d:77:02:fb:6a:35:cd:b2: e3:30:a1:75:16:17:91:f5:f5:60:69:ac:f4:7f:15: 90:bc:8b:66:9d:e7:e2:20:35:c9:9c:20:6b:54:83: 53:58:89:da:b5:b6:34:35:73:05:6e:eb:cc:38:b2: 8a:ec:8f:9c:93:19:48:05:06:28:ba:bd:9b:2c:df: 0a:d5:b4:95:6f:76:9b:4a:41:17:0d:69:a1:a2:a5: f7:1b:0d:36:8d:f9:b4:bc:e8:48:b6:40:6b:e6:d7: 83:ae:c2:81:4c:5b:6c:ea:48:94:65:9d:e6:63:01: 01:81:47:83:46:f3:da:a6:ff:0f:2a:fc:ad:59:ee: 0a:cd:bc:4b:86:c7:da:52:79:d4:a7:79:27:9e:4b: d7:ed:c5:75:44:48:e6:b4:b8:ed:7b:8d:0b:89:bd: e2:1a:03:41:49:58:fa:5b:5e:61:81:77:c1:35:28: 24:d8:3d:d4:66:24:d0:98:be:a3:c6:10:dd:82:4b: 63:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B3:ED:AE:D3:04:41:B3:C4:0B:95:FD:00:1C:13:CE:6C:F6:DA:DF X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:c8:29:8d:b1:cf:50:51:c5:c8:56:55:0d:cb:74:c8:87:93: 71:43:55:ed:99:dc:81:31:b9:df:88:96:86:ed:c3:0e:2e:9a: fd:3f:2b:02:43:80:dc:ca:19:91:1c:d7:6f:0d:fa:58:01:57: 58:be:ae:b1:17:11:2d:88:c1:44:31:7a:62:98:fd:43:12:2d: b6:fa:a1:8c:aa:30:13:0c:07:9e:08:bc:87:ba:12:e7:32:2a: a7:04:af:4f:52:dc:d6:62:d0:ea:43:26:f2:08:44:7c:87:b2: 41:30:4b:59:94:65:50:29:a7:58:8d:89:33:ac:7c:88:90:60: 1f:50:5b:e3:95:7f:2d:73:4b:d0:36:e2:a1:01:bc:3f:38:da: 13:5b:3b:ac:64:c8:fb:37:b1:6e:72:fd:d4:81:c7:7c:8c:20: cc:1a:d2:39:66:14:1c:f6:aa:a4:5b:82:39:6c:41:6f:ce:5d: d3:cd:64:e3:ba:ba:8b:f8:0b:94:91:a9:b9:af:db:b2:8b:91: b0:e1:26:68:1c:e6:3b:d8:24:43:8d:54:77:55:7d:66:49:47: f7:85:46:df:42:7f:14:1d:22:40:b5:26:61:0e:d3:00:c6:7f: 44:36:b0:6b:e6:60:c3:0a:41:9d:7c:6a:75:7d:38:cc:7a:5f: 17:a4:ca:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHfFSh3Hg5/Cf+xT6YGrniyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYxMTE1MTIwMTA4WhcNMjYxMTE2MTIwMTA4WjAzMTEwLwYDVQQD EyhmZGIzZWRhZWQzMDQ0MWIzYzQwYjk1ZmQwMDFjMTNjZTZjZjZkYWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCYsYh5tJ2hlo28c9XQm83KiL6ef miTAvP5p/HFoN2QaMng8nkk6Vm0CWWZL0yHtMXJ92ZfUCWD9/V717yKcHroBDXcC +2o1zbLjMKF1FheR9fVgaaz0fxWQvItmnefiIDXJnCBrVINTWInatbY0NXMFbuvM OLKK7I+ckxlIBQYour2bLN8K1bSVb3abSkEXDWmhoqX3Gw02jfm0vOhItkBr5teD rsKBTFts6kiUZZ3mYwEBgUeDRvPapv8PKvytWe4KzbxLhsfaUnnUp3knnkvX7cV1 REjmtLjte40Lib3iGgNBSVj6W15hgXfBNSgk2D3UZiTQmL6jxhDdgktj9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2z7a7TBEGzxAuV/QAcE85s9trfMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcgpjbHP UFHFyFZVDct0yIeTcUNV7ZncgTG534iWhu3DDi6a/T8rAkOA3MoZkRzXbw36WAFX WL6usRcRLYjBRDF6Ypj9QxIttvqhjKowEwwHngi8h7oS5zIqpwSvT1Lc1mLQ6kMm 8ghEfIeyQTBLWZRlUCmnWI2JM6x8iJBgH1Bb45V/LXNL0DbioQG8PzjaE1s7rGTI +zexbnL91IHHfIwgzBrSOWYUHPaqpFuCOWxBb85d081k47q6i/gLlJGpua/bsouR sOEmaBzmO9gkQ41Ud1V9ZklH94VG30J/FB0iQLUmYQ7TAMZ/RDawa+ZgwwpBnXxq dX04zHpfF6TKrA== -----END CERTIFICATE-----Generated at Sun Nov 15 16:39:04 2026 by rpki-client