$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: 3RQmiia7ec9KwebLfzX9cz4/SA76RG5FpyeT4X8IllY= Subject key identifier: E7:D4:83:BB:D5:C9:F9:0B:DD:D9:86:EB:90:C5:F3:5A:3D:8F:C7:A2 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 01A0DF85790CFAF9AEFA591F55D575723584 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 17D9 Signing time: Sat 26 Sep 2026 21:01:01 +0000 Manifest this update: Sat 26 Sep 2026 21:01:01 +0000 Manifest next update: Sun 27 Sep 2026 21:01:01 +0000 Files and hashes: 1: 1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa (hash: /UHbAWZkwPjrqgnVqWgrTchojit0XWT8TQ+LY6IFuyU=) 2: 6v3_UhJ7MUeUjwMs45OUb0uqJnE.roa (hash: HmoRuDjbo63Mi/Ve6hqQucNjqbfAMk5jwYB8klrtmn4=) 3: 7geGfuYNebN29vuSfOy_GV5rEnI.roa (hash: HCwsGLsuz7RM9sjbDLuG2DbSJJu30k5afVWUwaIVEjo=) 4: B08LenF7yMg-N_h3Vsro44gwUvU.roa (hash: lBlkYBGRq6hhb9CFJXeVSFMPTiDOZk1Hd5NmnUdVAgk=) 5: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: JQbu0EL37cPGUVt1cBBowJpwveE0IYo38xohgw//eK4=) 6: CYsGcdSH7bcw6ttptcbOdbODOc4.roa (hash: wXe45N0RFs32ccEALNCnd59LOD4wha28MAHYlRsCzAg=) 7: HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa (hash: FQaM849Za5tChtOyzAM+7VK73HDYttogAR0AVk6y8iE=) 8: MNqklcC3mDcAx_nY7EwvhOa8X9U.roa (hash: y5cME2lImwSwJDF/yo1BlC7NlPtCoBG+Fen0gJCa020=) 9: OeSFxPx28HOZ5SP5OFGE4eN9Dkw.roa (hash: IUd/UJp2vz5KGesc4FkG7eW+Uztewk/WazlNqWRZVZg=) 10: P2O8JsbQrSj7hbLlWPhRJkg8f3g.roa (hash: 97KV+nHVxx1mm0wDQuutRXEyv0WrBkuC6RQafxbvZg8=) 11: RYbdj0NLewtXWCgXlYi3OlXXkB4.roa (hash: 81qii9MMa1xqhNFHKwnbqG3tyFuEh9+IuizOP4tFZBA=) 12: RvSp46XarM4KQjsjmd8W8ihdY60.roa (hash: vQ45p3Cs9W4CLKvtCbt/Hgg92ogtLOQSOOU3HtQxzyY=) 13: YLjsu-ME555sTWq6xQaBk12RTHI.roa (hash: iZDrgab1o/HZT8v/s/c94kd+y7+rf2+jsai5MRtDr7U=) 14: YXJuTkaR2hNWDD-AQJZEPPH5ZUM.roa (hash: 0tbVorz/zIP5tFqTzCgpmpkbjskH9+GPr5OhsxgbofA=) 15: beJcu8jp7XoMcK6rAEcUFSDQrYI.roa (hash: zYxTg1jfn9EG78umE8ZucP90B5Y2rJZ1b3uK6DJnlYk=) 16: fAM3pa0EE7jiHrAFo6eOqMsPdek.roa (hash: jl6qmU6yzE54DspheNxyX+IEtosMtIzC14e7gTFFKCk=) 17: nu5qc3FurPA7ene0-Ao16QprmLc.roa (hash: jAdY6e3psk45qZp7fo2Mwz+KQFyicWuxyaHfYwP1ULM=) 18: oOrjHph7LCFfAGNpngQ3mhai8xA.roa (hash: mgAQXj5D8f8s+hAa9EBd/XiB7pdR7qEvc/zDtmhktUc=) 19: wW5pOo-Yi2Fr6-80PQNsGsyzCh0.roa (hash: XuJE9f/EqSb5uZJo5N71rfDUSYnvs1YtjC46AbxvWx4=) 20: wggGh2w-6sQB6ovzilMkq6DwW4c.roa (hash: PBLu8QpYUa8mUZdHc+q4W4ziy06dQNRUZGYN3WcmH2U=) 21: zKosVsnnSwnan5xK-AKXc-6q3RA.roa (hash: AR+C5oOYJwVvPymmFfXk0qR5THoCvoOhDXOz0Nd5wXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:df:85:79:0c:fa:f9:ae:fa:59:1f:55:d5:75:72:35:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Sep 26 21:01:01 2026 GMT Not After : Sep 27 21:01:01 2026 GMT Subject: CN=e7d483bbd5c9f90bddd986eb90c5f35a3d8fc7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:12:1b:31:a7:24:f9:72:5c:0b:fe:68:c0:f8: b5:1c:72:d6:51:49:96:51:f2:8e:68:5b:24:08:d2: d0:ca:c1:d0:a6:31:6f:8a:51:66:88:2a:fc:9a:4e: 63:d4:c6:8c:9e:6c:48:c9:f7:82:45:18:5e:87:2a: db:68:c5:2a:0f:1c:4b:53:3d:7f:f6:4e:04:da:85: a9:5c:a0:72:cb:b5:7d:bf:a3:b7:6a:3a:3b:68:a9: 8f:8e:ec:10:d8:ff:97:71:fe:78:6e:c8:f8:ac:2c: 8c:82:da:f7:27:83:02:b6:76:be:74:74:4d:70:ef: b2:87:bb:dd:fc:0b:6c:86:42:b9:27:53:d0:4c:7c: bc:66:bb:9a:b8:48:ac:4b:33:09:c3:4b:78:81:62: 41:e8:3b:97:4b:cd:8c:d1:96:e0:bb:11:6c:24:2e: 4f:06:a2:76:39:8c:e4:12:99:ac:5c:32:e5:24:f5: 5a:63:ad:da:31:3c:7f:f9:e5:91:1e:64:c0:1d:3a: 0e:64:0b:2b:76:d0:25:28:ae:d5:b4:b6:a6:22:de: 58:35:22:cd:7f:e0:ac:e1:c3:41:eb:40:b7:67:4b: b9:02:1c:ab:2e:6e:9b:df:c7:2a:5a:d9:08:ad:ab: 5c:1d:a6:f0:e0:4c:f4:37:b3:ac:b9:25:6b:24:94: 53:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D4:83:BB:D5:C9:F9:0B:DD:D9:86:EB:90:C5:F3:5A:3D:8F:C7:A2 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:47:53:f8:36:cd:9b:b1:d6:19:02:4b:d8:92:30:f0:97:2e: d7:6a:61:e5:e2:b1:78:ae:cb:04:be:73:88:be:59:71:da:dd: 7a:12:d6:d8:14:18:5e:0d:fe:ba:3d:28:1a:69:e8:5a:66:2a: 15:9b:d8:d0:c2:3f:54:17:e0:83:a4:15:71:74:ce:97:70:f8: c2:81:82:8d:bc:7a:e1:57:82:a3:e5:a4:86:da:2d:43:e5:41: aa:56:26:67:be:85:3a:15:36:a6:b7:ef:b4:34:82:47:39:8e: 9f:60:ee:9b:9b:32:df:3e:e5:56:c0:1e:74:b7:99:da:70:40: 7d:e0:ad:63:70:d7:3e:c2:2b:2c:79:3d:03:2a:72:07:cc:d4: a7:f8:62:b9:41:b2:55:5c:04:b2:e5:26:62:61:76:80:ed:e3: c7:a2:18:fa:58:51:c2:20:89:b6:ac:b9:24:dc:dc:d7:45:30: 3d:be:1f:49:04:51:7e:b7:cf:e3:62:ab:32:98:2d:15:4d:bd: 20:fd:6c:79:93:36:11:49:03:03:48:34:3d:82:25:b4:0d:ac: 52:ff:02:1d:5c:81:2b:a8:ad:53:1e:32:1b:ea:a5:b6:2f:f0: 94:b1:7f:1d:39:9d:c0:9e:09:ab:cd:fc:a1:de:a4:c5:23:92: 69:14:4c:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDfhXkM+vmu+lkfVdV1cjWEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwOTI2MjEwMTAxWhcNMjYwOTI3MjEwMTAxWjAzMTEwLwYDVQQD EyhlN2Q0ODNiYmQ1YzlmOTBiZGRkOTg2ZWI5MGM1ZjM1YTNkOGZjN2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBIbMack+XJcC/5owPi1HHLWUUmW UfKOaFskCNLQysHQpjFvilFmiCr8mk5j1MaMnmxIyfeCRRhehyrbaMUqDxxLUz1/ 9k4E2oWpXKByy7V9v6O3ajo7aKmPjuwQ2P+Xcf54bsj4rCyMgtr3J4MCtna+dHRN cO+yh7vd/AtshkK5J1PQTHy8ZruauEisSzMJw0t4gWJB6DuXS82M0ZbguxFsJC5P BqJ2OYzkEpmsXDLlJPVaY63aMTx/+eWRHmTAHToOZAsrdtAlKK7VtLamIt5YNSLN f+Cs4cNB60C3Z0u5AhyrLm6b38cqWtkIratcHabw4Ez0N7OsuSVrJJRTnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfUg7vVyfkL3dmG65DF81o9j8eiMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUdT+DbN m7HWGQJL2JIw8Jcu12ph5eKxeK7LBL5ziL5ZcdrdehLW2BQYXg3+uj0oGmnoWmYq FZvY0MI/VBfgg6QVcXTOl3D4woGCjbx64VeCo+WkhtotQ+VBqlYmZ76FOhU2prfv tDSCRzmOn2Dum5sy3z7lVsAedLeZ2nBAfeCtY3DXPsIrLHk9AypyB8zUp/hiuUGy VVwEsuUmYmF2gO3jx6IY+lhRwiCJtqy5JNzc10UwPb4fSQRRfrfP42KrMpgtFU29 IP1seZM2EUkDA0g0PYIltA2sUv8CHVyBK6itUx4yG+qlti/wlLF/HTmdwJ4Jq838 od6kxSOSaRRMRQ== -----END CERTIFICATE-----Generated at Sun Sep 27 07:08:09 2026 by rpki-client