$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: QTdVDQLSWOF4GZZXA3V/+7bH/R/f99ecIJhx6nktxFs= Subject key identifier: 41:A1:9E:78:8A:AF:82:5F:07:7F:8B:DC:16:9D:1A:83:9B:50:B8:43 Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 01A0C5C550849D4707EB48FB0A1662F7434A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 1859 Signing time: Mon 21 Sep 2026 21:00:37 +0000 Manifest this update: Mon 21 Sep 2026 21:00:37 +0000 Manifest next update: Tue 22 Sep 2026 21:00:37 +0000 Files and hashes: 1: 1-W964s-KtZyiNamSbJ6IP1jbFT4.roa (hash: tyUpzznYouv+Rmk3/StqHsUEFXC/JRLOGyGTS4NNP4Y=) 2: GStnKDxU2VExQ_xcPN4egFEKjLo.roa (hash: siSBOiPXXJh3GCU5grMPMkb/iUn8KcQ7coKcPhWce6E=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: uMnm4ANEJ1XxPDTzYpt5Cy3IiC0bpC9p+c0RF7n3QEg=) 4: KzDc8QsMTzvMJxQ96GJ3yCoLi_U.roa (hash: Xkhd86uGm3VF/evalHU0tYC3SzwGKBs1H4sASP/73Pg=) 5: RMWLa9nYNadgqj8fRvJ7gt0vmRY.roa (hash: YPSVWQ4p2Yzt69XO4XRgEZdOa23MUm2U51FrUJbQeG0=) 6: VSrC1QP0T_UaXaaEFdbsOmUjBh0.roa (hash: zTpZ/xLPhwOsaGOqgGhoR4AJouaTmVoH7QdVIfFBLJc=) 7: mju1GTQPLsJiestxJWXcq-E1Bo0.roa (hash: 95gpW7g+cVKJk4QbRN0p3aXkVNHoQsAxKOBXvYSCcxk=) 8: qJD08TGqbLXdbWVjPMA7B5pGkPI.roa (hash: Kx7++AsdN5bNJwCWFiOZcN26zdxHM+ZF2tTRAsBHsXQ=) 9: rg80XbUJLJkTb5OEL1rZgHZ1y6U.roa (hash: vhHXEQRDhmmcuNgaQBq7IXJimIzM9H1G1xvHCsunoqk=) 10: wlkqPCWXMJsz1R99hgzE3_VYv5c.roa (hash: KrKqWLoyfi0cuRqfEdDLZj1DmY6m+y1d1kGaimNA4oE=) 11: xewkVdgaX0V36_1yEpoUi8m7v6c.roa (hash: kF/BrgELi4+Am7OL4A+u/VI4R7I6POdHlx4gpQyUi6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 21:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:c5:50:84:9d:47:07:eb:48:fb:0a:16:62:f7:43:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Sep 21 21:00:37 2026 GMT Not After : Sep 22 21:00:37 2026 GMT Subject: CN=41a19e788aaf825f077f8bdc169d1a839b50b843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:84:f2:6d:78:26:f7:90:53:ac:6e:12:08:49: 62:b8:57:28:b2:ba:d4:43:c9:cd:a8:a5:ad:de:a0: f0:cf:2c:12:7f:30:3e:c0:70:be:a1:df:8e:c8:73: 18:08:49:26:7a:d8:c9:a5:de:3a:bb:8b:f2:b0:2b: 57:06:1f:33:22:b7:36:b6:30:e0:d5:f0:5c:c9:69: 05:cb:c5:f0:45:29:fc:84:c0:9a:d4:87:7a:c4:70: 28:8a:13:32:75:6c:4c:1b:ea:6c:90:23:b3:96:00: 8f:0c:18:f6:60:26:0e:c8:df:8d:52:6a:19:a0:a8: eb:76:48:cd:31:be:31:b0:8f:31:e5:bc:ce:ff:e2: 0e:02:a1:dd:fe:f5:0a:1f:8d:d0:b3:c2:c2:2a:fd: 2b:ab:c0:ab:03:7a:5a:68:29:d1:51:d5:01:dc:77: 14:60:59:ef:0b:9a:5c:f1:3d:8f:63:1b:47:d0:5b: 41:f3:bd:d9:b9:c6:29:c8:79:2e:cd:ec:36:d4:60: 91:7a:27:8b:3b:41:ee:0e:4e:72:bb:58:ec:a3:d7: 24:c9:cb:23:b6:4d:f2:1c:8f:18:f2:02:f4:88:d8: fb:9a:37:17:ad:4f:65:ac:36:8c:c9:1c:ac:14:3d: fd:f3:e3:02:55:99:40:44:a6:6a:67:7e:05:a7:6c: 0b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A1:9E:78:8A:AF:82:5F:07:7F:8B:DC:16:9D:1A:83:9B:50:B8:43 X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:27:ab:15:39:4c:20:87:b2:01:93:47:4d:c1:cd:bd:1c:a6: ba:f1:a4:a4:0f:7b:46:a8:01:20:dd:a2:16:15:8c:fb:ed:b3: a1:86:c3:5d:3f:d1:13:90:1b:6e:4a:2e:14:63:dc:de:7d:e3: 51:ec:b8:c4:27:8c:ae:f7:40:01:b1:c6:54:0c:7b:e2:c6:26: 0f:8b:4c:0b:19:cf:62:ca:35:fe:c8:9b:39:ef:da:d1:08:12: 1e:03:15:a2:5e:90:a4:6f:e6:0d:4f:67:1a:fd:df:6d:c7:b1: 60:15:7d:0e:2b:47:99:e6:59:70:db:55:3f:2c:04:cd:36:7a: 9b:5c:67:7b:de:fc:15:e4:f8:54:83:65:94:c7:7e:8d:da:d8: 12:b1:52:3a:9a:d5:ae:be:15:72:7e:64:63:9a:8d:a5:74:b2: 99:ac:ea:03:7c:fd:00:d2:a0:b4:65:85:94:32:e9:39:de:03: 66:d5:e5:36:c9:f9:09:33:4b:f3:ef:f9:79:65:df:f1:68:c1: 01:2d:a0:14:30:7d:60:24:ab:e3:5a:19:68:b1:72:7d:b9:81: f6:67:ed:94:af:45:40:c9:8c:95:50:70:0c:17:7e:8e:82:33: 2c:66:d4:3c:87:29:17:08:70:8e:ec:76:78:bc:06:a2:5f:85: 0a:d6:bf:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDFxVCEnUcH60j7ChZi90NKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjYwOTIxMjEwMDM3WhcNMjYwOTIyMjEwMDM3WjAzMTEwLwYDVQQD Eyg0MWExOWU3ODhhYWY4MjVmMDc3ZjhiZGMxNjlkMWE4MzliNTBiODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+YTybXgm95BTrG4SCEliuFcosrrU Q8nNqKWt3qDwzywSfzA+wHC+od+OyHMYCEkmetjJpd46u4vysCtXBh8zIrc2tjDg 1fBcyWkFy8XwRSn8hMCa1Id6xHAoihMydWxMG+pskCOzlgCPDBj2YCYOyN+NUmoZ oKjrdkjNMb4xsI8x5bzO/+IOAqHd/vUKH43Qs8LCKv0rq8CrA3paaCnRUdUB3HcU YFnvC5pc8T2PYxtH0FtB873ZucYpyHkuzew21GCReieLO0HuDk5yu1jso9ckycsj tk3yHI8Y8gL0iNj7mjcXrU9lrDaMyRysFD398+MCVZlARKZqZ34Fp2wLKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGhnniKr4JfB3+L3BadGoObULhDMB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSerFTlM IIeyAZNHTcHNvRymuvGkpA97RqgBIN2iFhWM++2zoYbDXT/RE5AbbkouFGPc3n3j Uey4xCeMrvdAAbHGVAx74sYmD4tMCxnPYso1/sibOe/a0QgSHgMVol6QpG/mDU9n Gv3fbcexYBV9DitHmeZZcNtVPywEzTZ6m1xne978FeT4VINllMd+jdrYErFSOprV rr4Vcn5kY5qNpXSymazqA3z9ANKgtGWFlDLpOd4DZtXlNsn5CTNL8+/5eWXf8WjB AS2gFDB9YCSr41oZaLFyfbmB9mftlK9FQMmMlVBwDBd+joIzLGbUPIcpFwhwjux2 eLwGol+FCta/rw== -----END CERTIFICATE-----Generated at Tue Sep 22 08:34:46 2026 by rpki-client