$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft File: BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json) Hash identifier: 1KRTkPsZ1i4GvClYqFmkCPcbHT+p1o0NXSOGLXM3ryg= Subject key identifier: FE:25:31:11:DA:0A:83:D7:DF:D2:14:CA:04:95:25:D9:75:CE:6F:E2 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 01A1E028012E04AAD84937BC8FBB17F8F38A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft Manifest number: 195A Signing time: Sun 15 Nov 2026 17:01:20 +0000 Manifest this update: Sun 15 Nov 2026 17:01:20 +0000 Manifest next update: Mon 16 Nov 2026 17:01:20 +0000 Files and hashes: 1: 2Bz-26WJXsOdub2NFv0tQ13PdRE.roa (hash: QF8IxA/E4ZZtbvv05FsyZ1FueR1nYjHpOtKqqYrP72o=) 2: 3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa (hash: mbq8Pr8PdKSRq7yIi7vQcXKq7HeKQhJfSwx0LhWnGCo=) 3: 5DciNWvtD44nvmowaEInWwk8YZA.roa (hash: 4oBae1cQkYxE+N4xYsBQQveSBxypTMY0DWM/AkkENtk=) 4: 5JKLYCytnUKhdyTa14LHQIEKdFE.roa (hash: eArX0/lwmj4LvmBl8JgKR0ALNuxr1zRBSWvGWN5uFfI=) 5: 5i-KLJS79COzLV51bb0tfcQ1uQQ.roa (hash: PnQ0h19PE6J2No2E8613gpettIVTQSAHkgDKgMMgppQ=) 6: 6XFljtVK2V0PF6GXRVQaEjH3Eoo.roa (hash: JvGvYE3ny1jx3z80vidwb1suh41eSZYf4UKZ7JMDcio=) 7: 8Gf4ilOOHDPy8ShRA6DADyswUBw.roa (hash: Gg3fjKtbtCo3yrbVLuhlxWrBwdUSi5rHbyxOcOG2L30=) 8: 8HWIcI9N3AE2x8zYy673Vd_4kfo.roa (hash: LN2KpWeg+Ys04Rwx9lWA0rODgISnXB2tF8WbAfHw9WY=) 9: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: r0VdqNrJp+bXJ8ubOACfiCheGc1MpYNvTHC7Jj7/58A=) 10: C7ABxIBMFqY6WGHp-m3XASsH6n0.roa (hash: TZooGN1msR75BsEyRl0jLlYrZ8Y6P2v4AI3VUVqOn3U=) 11: CdcIcZHeB0GsHSds771hQUpQ7D8.roa (hash: YpLVoBlHUKYqmx9AhANgdWKDLZYZ8nUhqGpu7awPbPs=) 12: DMF7_LfD1ucYhDO0ohFJTTXvNDA.roa (hash: Cy/e5SaBm31dnw0xEGtIe3MOgTmE56seaObi9TTZpSI=) 13: D_yFeSNCNOPeNuhYpJ8Sj6yMqrw.roa (hash: dRua2mdx0T28GkQVz9QSWEzbAac9dJJsdOTGdnj90kk=) 14: FOLsAunRL-qwRUPITmX7DmjtTVo.roa (hash: 87JXVGkuJmGjpwYzfj6Y+tqb44jgW/uD+mWua5302PI=) 15: IYvPR6-UnbcPyQYUJJWwmHE7NK8.roa (hash: P03T/DLhEWvqxS/8YYp/V2MwoFNKYQGAgYeLfjxTL/Q=) 16: JdeaeLKAu5GEjINGKfvIKWcq3o4.roa (hash: a/heKXP0NtGbMelLoYKvGg/fN+ZyDqH56Dk+P1/eR2g=) 17: Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa (hash: qaufeqdeipVE1r+9GyOAZSAG0hMF1qh7wENk1s7zB2A=) 18: LXr6C48Lxn5qLALMmRCp0Zvklfc.roa (hash: xyDipUJK+J0EWyFs8iYbI4e4T5NfmKMOryR8EWn2OIs=) 19: OjeVFAg212uWEJPR4j0wAB5XdcE.roa (hash: NgMhCybIfen0bwNj/HLLxxGGd68yCqKlN9cakd8bl48=) 20: Ppvy7LfSl_8veNKT3PCYySGa_xM.roa (hash: KAldC7Ag1Jpktoi15FEM8qa7XkOMpiKNKU124uNCHgU=) 21: e1EebswLvSdY-s45wNpGdx58Gzw.roa (hash: ytK6YeC0+Vr1vSEybPihbYdwOVH3aRQPaqKvKcc//nc=) 22: e4ScI9UDTbjinOVrH-HzMhxxYaQ.roa (hash: z4aixSBMgxj9VOGw7h6LRSs/oKtO4+/kMkfuz35WEDU=) 23: eBOwN9hT4zejM0AoU4iSaIEjz9s.roa (hash: fKITe0XHXVAprxbNBR9M8OQ9t4GQsguRxsVQ9HUhdnE=) 24: hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa (hash: /bY2rtzWMB1/BM4P1MtY/wIJQHWSb2VyMeLJaYe4zIY=) 25: iVkiAHYOg3HtM_uWUc76kLqrONs.roa (hash: XlSThvg6yDDSVBDMohDGUs845WGTZEUqqZulw7z2Ytg=) 26: iwqxgJYL8mBv3G61SG6QzZnZo_k.roa (hash: 3GX+FmWsXoIqZRfY2WtjR43yzm9CJ2GngD6fPIfSxPg=) 27: mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa (hash: W9XfH8Uvi+taIP3eFXkn/Sc4OUtrs4EPnOFSG+QrLlE=) 28: n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa (hash: 12jqzpGaLihSKEn4m7KQUtKkmWE3dp9k5ig5SAQQ3hM=) 29: rc3l3yce_wnaIAhkm-MVLQ6MlQs.roa (hash: nGpl03qXwZbg5LYiikckCucykULVlnfBwTrh22E2cqw=) 30: tPWk-AfReXdc60ikE9-d-q2ml5k.roa (hash: fuXAhmrSQOQKR0hkXAvHwO1y6kpzsA61B3meXSwM1d0=) 31: zV1fCAaJzxxoyfA0WcdFKJrp2R0.roa (hash: pb1m9M8yHzsPn9L4wFpH1jeHHft9SKcGVcBcOUgBDEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:e0:28:01:2e:04:aa:d8:49:37:bc:8f:bb:17:f8:f3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Nov 15 17:01:20 2026 GMT Not After : Nov 16 17:01:20 2026 GMT Subject: CN=fe253111da0a83d7dfd214ca049525d975ce6fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:22:b3:f3:d5:78:b3:18:89:6a:8e:1a:0f:e2: c9:c2:1e:77:2d:4b:f2:1e:61:b6:29:e5:8e:9c:fc: e6:0d:de:6a:7f:57:e6:8b:4f:fd:3e:b6:1d:1c:c2: ce:9f:6e:2e:69:c6:81:cd:b1:91:60:4f:0f:d2:69: 15:6a:83:a6:ae:c9:1c:e5:7b:fe:48:75:d5:ac:49: 3a:5d:12:18:f5:4f:51:c5:f3:9d:5b:be:33:20:6a: 6d:f5:7e:af:cb:f3:0d:c9:62:b4:75:80:6c:68:1a: 01:05:61:fb:cc:bd:3a:a9:6d:be:79:b7:ea:36:84: 8b:01:42:eb:73:04:c0:7a:1e:cc:c6:91:91:48:d9: b6:ab:ad:8b:03:e7:6a:b6:ed:32:8b:03:bf:1e:3c: 6a:3d:c2:32:72:8b:ca:bc:8f:f5:7d:e4:e0:2e:6f: f8:0a:06:3b:40:b3:8e:1b:78:73:63:9e:c4:07:33: 47:bf:99:ad:48:a3:3e:ee:03:0e:48:fb:2c:ee:c3: 42:bf:48:86:01:f1:ec:6b:2b:5a:da:cf:e7:82:b6: 2e:81:19:68:4b:2a:88:73:78:e1:a9:eb:58:a9:b7: af:b1:e9:87:c5:db:20:0c:f3:c7:66:9c:81:23:8a: 04:5e:12:4b:e8:e2:17:f4:ce:1c:56:8d:a5:74:e8: 87:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:25:31:11:DA:0A:83:D7:DF:D2:14:CA:04:95:25:D9:75:CE:6F:E2 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:07:6b:c9:92:ba:99:6c:a2:30:ba:5a:c1:80:ad:2a:5f:e5: 19:71:af:b3:f6:a9:86:5a:66:00:96:4c:9b:22:ce:fc:77:29: 78:e7:bd:84:68:03:0d:cd:e1:6f:9d:f8:71:c5:b7:96:1b:e5: 5b:5a:8f:02:4c:1e:d4:de:58:a1:56:1b:4b:9d:b3:80:f7:e0: af:c0:ff:71:14:da:22:75:3c:9f:2c:3f:16:20:c3:1d:38:33: 05:58:f4:d4:bf:17:1f:a8:d7:d6:c7:28:a3:c4:2b:78:a0:9a: 23:fa:32:ab:69:6a:c8:a5:41:4a:14:91:18:08:29:54:03:29: d1:9c:83:32:2d:76:92:61:24:3a:f5:a3:7d:83:58:28:17:05: 88:87:c6:50:7f:38:e0:6f:d1:f0:20:91:39:1e:d1:da:0f:00: 13:18:c3:c2:d7:0f:8d:26:d5:a2:93:e6:5b:d7:42:09:a4:a9: 7f:f1:4b:15:cc:d3:2a:24:b1:d3:2e:15:45:95:de:01:dc:b3: 79:4e:c6:11:2a:85:2e:af:18:c5:09:d6:89:c0:ed:00:43:97: cb:6f:70:22:75:b1:f7:ce:7b:27:16:9a:a5:2f:ba:59:18:38: 73:0d:1b:55:e0:8e:3a:bd:96:d7:88:1e:eb:11:3d:a4:74:5f: a0:83:a3:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHgKAEuBKrYSTe8j7sX+POKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYxMTE1MTcwMTIwWhcNMjYxMTE2MTcwMTIwWjAzMTEwLwYDVQQD EyhmZTI1MzExMWRhMGE4M2Q3ZGZkMjE0Y2EwNDk1MjVkOTc1Y2U2ZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSKz89V4sxiJao4aD+LJwh53LUvy HmG2KeWOnPzmDd5qf1fmi0/9PrYdHMLOn24uacaBzbGRYE8P0mkVaoOmrskc5Xv+ SHXVrEk6XRIY9U9RxfOdW74zIGpt9X6vy/MNyWK0dYBsaBoBBWH7zL06qW2+ebfq NoSLAULrcwTAeh7MxpGRSNm2q62LA+dqtu0yiwO/HjxqPcIycovKvI/1feTgLm/4 CgY7QLOOG3hzY57EBzNHv5mtSKM+7gMOSPss7sNCv0iGAfHsayta2s/ngrYugRlo SyqIc3jhqetYqbevsemHxdsgDPPHZpyBI4oEXhJL6OIX9M4cVo2ldOiHvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4lMRHaCoPX39IUygSVJdl1zm/iMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAdryZK6 mWyiMLpawYCtKl/lGXGvs/aphlpmAJZMmyLO/HcpeOe9hGgDDc3hb534ccW3lhvl W1qPAkwe1N5YoVYbS52zgPfgr8D/cRTaInU8nyw/FiDDHTgzBVj01L8XH6jX1sco o8QreKCaI/oyq2lqyKVBShSRGAgpVAMp0ZyDMi12kmEkOvWjfYNYKBcFiIfGUH84 4G/R8CCROR7R2g8AExjDwtcPjSbVopPmW9dCCaSpf/FLFczTKiSx0y4VRZXeAdyz eU7GESqFLq8YxQnWicDtAEOXy29wInWx9857JxaapS+6WRg4cw0bVeCOOr2W14ge 6xE9pHRfoIOj8Q== -----END CERTIFICATE-----Generated at Sun Nov 15 21:55:34 2026 by rpki-client