$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: Cw4CGZTNPSqRAPXX9sN++dx3GU3wjbZ8tOtMPe2MUgw= Subject key identifier: 59:EC:2E:DF:91:2A:1E:EA:10:21:B5:A1:63:D6:E7:60:C6:10:C9:53 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 01A1AB5EE4FA1636DA9F56F86E22C8936669 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 1A7F Signing time: Thu 05 Nov 2026 11:01:25 +0000 Manifest this update: Thu 05 Nov 2026 11:01:25 +0000 Manifest next update: Fri 06 Nov 2026 11:01:25 +0000 Files and hashes: 1: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (hash: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8=) 2: ABhJOuq81aAMPa4_YYIO3v-t4oU.roa (hash: 0eeFSSqt4KgbYUOgEizxWBOCbjrR9YB3YtAIVlPFnN4=) 3: IPWNhyQxn8-D80dsDEI3Muy7j4w.roa (hash: JR2kZnfGEReYvLarJyG91LQRoVZfPpAoA2dBMj0ig2w=) 4: MJk2hRWFPXbWPid66y-yooVzeJI.roa (hash: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=) 5: Mcn8ffph0vFbf5y77sp8qX9cvuQ.roa (hash: oh6B2oDiINNmRv7LyEyRUP7+GJCatnxM+IyU6VV9yRs=) 6: Oi-RJ2dhND8R3bCPKlX2wVza8B4.roa (hash: AY1jUsJQoUBtPYQaCHvczNv8Mdfj3rI4udwi0diUU84=) 7: TXWio7T0yQ8fPQNndu5iMXKIPyk.roa (hash: Ptazack76ll8xJWikp2M96Ej4NUgmKdtpGkA8A7sIE0=) 8: __KT70ir2b12tsfvWsQwOzZ4SWs.roa (hash: U40qvVXwLqE+3d+p8VD5hkkPBVtM5TzS/GB+oxmksS0=) 9: ceKjGHCvCXf_MEK8NMfyXBnLoVU.roa (hash: hhPEmrABIH3Expe/KF3PZ8pAmJCxcVnuEeGLXskO2EU=) 10: dNyetmWu_99kmHhkiZvcLr-cuzU.roa (hash: forzVhrHGmXFVsQJmgLEUSqJW9c/HnLATZaoS4TWk3M=) 11: gnoYrT4knURKrt5KKBfShHVozwM.roa (hash: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM=) 12: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (hash: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg=) 13: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: S3+rV50adsdDmYALa3xHBLncubrHJlWwLbleOiZXcVQ=) 14: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (hash: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI=) 15: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (hash: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU=) 16: vDEzYqBkCfgUY7uwB1YZdOKY4lA.roa (hash: FWKvLV4V8Zp4mvo/6tBcMGGo3HEXFD5ePSPM/5NPrKo=) 17: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (hash: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:ab:5e:e4:fa:16:36:da:9f:56:f8:6e:22:c8:93:66:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Nov 5 11:01:25 2026 GMT Not After : Nov 6 11:01:25 2026 GMT Subject: CN=59ec2edf912a1eea1021b5a163d6e760c610c953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b2:e2:35:5d:cf:f7:2b:99:8b:28:52:ce:07: 49:87:b9:cd:fc:2c:61:ca:ba:69:cc:05:7a:d5:a3: 8e:0c:3c:6f:ff:2b:95:21:66:ad:b1:3f:67:fc:36: 47:e2:98:3e:dc:d3:0f:f1:a4:46:08:11:30:e1:c6: 46:8b:fa:e5:79:3b:4a:78:08:c1:2e:c0:00:6c:6b: 5b:a3:3d:da:02:3f:ee:34:f0:65:8e:a4:26:c8:9d: ba:92:06:87:3a:7e:79:0d:e7:7e:52:26:1a:1c:fe: 14:11:6e:94:a8:c9:e2:55:75:f7:3c:33:a8:86:ce: 30:a0:8d:16:16:60:4a:49:3d:e7:2a:18:37:be:76: 32:e1:db:10:d4:14:92:4e:d9:84:f9:10:d2:02:be: bd:f0:fe:35:50:6f:a6:79:6a:54:16:a5:e9:bb:02: fd:09:49:73:d6:08:3c:02:2c:33:ac:7d:7f:f9:5f: 7a:4a:42:e1:94:bc:2d:b3:62:fe:f4:61:cf:ee:4c: 16:a1:c7:be:44:a8:2a:96:c8:7c:2d:93:75:54:fd: c4:52:ed:6a:0f:a2:6f:52:b5:f4:2f:27:1b:5b:91: fb:68:0c:45:a8:d7:d7:59:13:15:86:e5:14:09:a3: a7:8b:30:b2:9e:2a:43:5d:9c:73:67:0d:4b:6f:dd: 74:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EC:2E:DF:91:2A:1E:EA:10:21:B5:A1:63:D6:E7:60:C6:10:C9:53 X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b1:38:de:f1:4c:8c:02:2c:d0:c1:86:e5:ac:4a:7b:08:db: 6e:7b:8e:35:3a:d7:79:df:e4:e5:79:f9:26:ce:5d:7e:d3:78: bf:c6:88:55:c5:74:af:e0:cc:3f:e1:15:0a:69:52:2c:a7:9a: f8:88:50:a9:76:73:e2:8e:32:f3:5a:c8:e3:f9:21:e9:9f:7e: 85:34:a2:55:20:3a:03:a8:57:54:d3:a9:00:f7:31:70:57:d0: 60:47:19:0c:15:62:2d:ab:39:e6:f3:15:f3:3a:6b:e6:9c:3b: 33:fa:7a:49:99:96:4d:4a:52:30:d5:45:aa:9a:dd:21:55:b4: bc:93:09:ed:1a:6e:2f:c1:cd:eb:6e:ca:e4:ef:83:8a:5e:08: d0:2d:44:0f:bb:52:93:b9:91:da:19:2b:2f:c4:06:27:57:6c: 59:1a:55:f2:51:dd:5a:65:a5:37:6c:75:04:5c:7c:04:27:01: 6d:32:2a:61:9b:27:8f:14:5b:09:91:a4:fd:a3:b1:89:d0:08: 0a:0e:f8:77:50:80:75:b5:30:f6:b9:23:28:c4:30:b6:a8:fe: f7:d5:10:d4:cd:78:44:a0:09:39:cc:09:5e:cb:1d:4d:bd:9c: 38:ad:b1:e0:b5:80:d6:56:b5:fb:17:30:56:68:9a:96:1f:79: 30:74:cc:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGrXuT6Fjban1b4biLIk2ZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjYxMTA1MTEwMTI1WhcNMjYxMTA2MTEwMTI1WjAzMTEwLwYDVQQD Eyg1OWVjMmVkZjkxMmExZWVhMTAyMWI1YTE2M2Q2ZTc2MGM2MTBjOTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrLiNV3P9yuZiyhSzgdJh7nN/Cxh yrppzAV61aOODDxv/yuVIWatsT9n/DZH4pg+3NMP8aRGCBEw4cZGi/rleTtKeAjB LsAAbGtboz3aAj/uNPBljqQmyJ26kgaHOn55Ded+UiYaHP4UEW6UqMniVXX3PDOo hs4woI0WFmBKST3nKhg3vnYy4dsQ1BSSTtmE+RDSAr698P41UG+meWpUFqXpuwL9 CUlz1gg8AiwzrH1/+V96SkLhlLwts2L+9GHP7kwWoce+RKgqlsh8LZN1VP3EUu1q D6JvUrX0LycbW5H7aAxFqNfXWRMVhuUUCaOnizCynipDXZxzZw1Lb910wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnsLt+RKh7qECG1oWPW52DGEMlTMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbE43vFM jAIs0MGG5axKewjbbnuONTrXed/k5Xn5Js5dftN4v8aIVcV0r+DMP+EVCmlSLKea +IhQqXZz4o4y81rI4/kh6Z9+hTSiVSA6A6hXVNOpAPcxcFfQYEcZDBViLas55vMV 8zpr5pw7M/p6SZmWTUpSMNVFqprdIVW0vJMJ7RpuL8HN627K5O+Dil4I0C1ED7tS k7mR2hkrL8QGJ1dsWRpV8lHdWmWlN2x1BFx8BCcBbTIqYZsnjxRbCZGk/aOxidAI Cg74d1CAdbUw9rkjKMQwtqj+99UQ1M14RKAJOcwJXssdTb2cOK2x4LWA1la1+xcw Vmialh95MHTMbA== -----END CERTIFICATE-----Generated at Thu Nov 5 19:52:35 2026 by rpki-client