$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json) Hash identifier: 7FrtMxoQi1uZ8uraGlCCIizzTxukIC0ngazNozEMpJU= Subject key identifier: 0D:8E:99:0F:D9:CF:A4:DC:4A:69:C8:C5:D3:C4:F9:14:CA:46:59:A1 Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Certificate serial: 01A0BFF9CF073E0620014D561D28E1D3B36D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft Manifest number: 121F Signing time: Sun 20 Sep 2026 18:00:14 +0000 Manifest this update: Sun 20 Sep 2026 18:00:14 +0000 Manifest next update: Mon 21 Sep 2026 18:00:14 +0000 Files and hashes: 1: 33gU1W_UI1Ae18rle6T32Am_ap0.roa (hash: CtHyr3lbVK0nM4M5V+efOeDGbhPQI4ZIEpY0w9de2vw=) 2: 7d0P9doBZNnco0Uk-uyE95zYsRU.roa (hash: C0smtXlBUg5wv9v0wIvA4FN2yM+ZFAWopSk3eOTxr4A=) 3: BDT11QF-TtgdWALp45xoyYelUsM.roa (hash: mujOfcZnyEUoIqlubLK7erXRFeA189kfqWm71HEHJLA=) 4: EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa (hash: VhRxVbInTPM1O+Ldm/7obKGqKOZ2+6LZ1EZrcIQqOtM=) 5: H9M9hJ2Wf0edu4O6BWjDO8iQCIY.asa (hash: X7hW2mdrTDcdJA7Y5SsLSoNgjMb7M7DnZnmZizxX5K0=) 6: LE0LYSRlSHBlwqkbBS3d-4jQXVI.roa (hash: qNI5ryb9dP4ZDLAtMIMap6nbp3+t9sAW2t3qbIFwYZE=) 7: R0_kceYfRxNkC07z5_goD7lcpms.roa (hash: FEoDIQ7PdmBYSR8wJzuRGgdrz3q9v6cQLPAXPSKQRAc=) 8: VZOyRy0tzJ2sfmNYjeH9siUXpok.roa (hash: hg8jPOLxAFpxHffAZVtykZM6KfjDO72SPntESUbpkNs=) 9: eO9gFOF2DFVAaSQC-qU8Cc5tUvk.asa (hash: oREm2BU1au2wLbubTl/7hfGGiO50t8g7O52UFNL9Yd4=) 10: fMPPEhoc1eJ7TtYJwhoTEBEj3u0.roa (hash: TFEzfDo3Zwa4HL59NImWxFGsVixNQrbjisILgLkXLHY=) 11: sPWdnd-6eDj5X9yNO4z9PSISSlQ.roa (hash: agHieGTKdf4veiuZ5e0ZnuSvZ/4cBqOGV3qPQeuYVLw=) 12: uDj2Yyjz9Osyu9dJCu_3OQFz4uA.roa (hash: 3im4Wph6tBomBtiDPxXDGzF9rSSihCEjyLDoawI+nsw=) 13: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: QXf8df6hYtE78GpJJq4ydvNvV/7MkqpfAOe0bqAU+SM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:f9:cf:07:3e:06:20:01:4d:56:1d:28:e1:d3:b3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Validity Not Before: Sep 20 18:00:14 2026 GMT Not After : Sep 21 18:00:14 2026 GMT Subject: CN=0d8e990fd9cfa4dc4a69c8c5d3c4f914ca4659a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ae:31:e7:29:71:21:b2:d5:b1:2b:c4:19:a3: a0:60:a5:23:e4:d1:48:c2:3c:3f:79:b9:3a:65:1d: ff:11:62:73:66:5a:5f:6a:5e:a4:34:15:ad:e9:31: 81:59:57:ba:11:3e:da:6a:76:f6:ec:f0:46:04:ca: 32:9c:b3:a9:de:35:74:8a:2e:97:bb:06:be:b0:eb: b8:fa:1a:e1:48:a7:0a:fa:69:ea:bb:65:90:d4:9c: 92:2e:09:4c:07:31:d1:53:7a:3e:89:eb:87:a0:17: ee:fb:c8:f2:d8:f9:02:63:0a:f1:ad:b9:1e:da:a3: 3d:00:ab:7e:da:a7:58:df:60:14:b1:14:88:4f:43: cc:f0:d3:52:3a:9a:d3:63:75:2d:32:78:1e:77:88: 63:8e:47:3e:26:23:12:79:e6:ab:30:73:e7:7f:29: e1:85:10:64:27:03:68:8d:2f:05:89:80:d3:16:55: bf:da:0a:d8:a2:69:c3:84:be:59:dd:6d:19:ce:2e: 17:41:9f:b2:66:9a:f8:32:67:ae:5d:06:fc:1f:32: 29:d9:24:ca:84:6e:53:44:1e:b6:50:cc:61:19:02: 10:5b:ce:f6:b7:ed:04:3a:ff:bc:b2:98:b3:da:25: 41:3e:48:ba:c4:2c:2f:a1:74:88:18:a3:40:0a:0f: 02:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8E:99:0F:D9:CF:A4:DC:4A:69:C8:C5:D3:C4:F9:14:CA:46:59:A1 X509v3 Authority Key Identifier: keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9c:f2:2f:51:97:88:df:d9:62:4c:d6:1c:1c:9a:25:64:b7: f8:c5:05:cf:a3:05:5d:a3:e6:74:c6:40:11:ed:02:d2:9e:e4: a6:56:2f:cd:0d:3d:28:48:9a:92:6b:30:d9:b5:e5:6a:7c:5f: f6:9b:a0:4a:fe:0c:17:01:36:7a:85:d4:52:1e:f8:1c:5d:14: 13:c1:d7:24:f4:71:27:5d:2e:dd:cf:f3:fd:38:83:be:12:51: 96:f7:3e:f0:bc:6d:ba:f1:7d:06:7e:09:f4:e2:8f:ec:99:4b: 80:da:c7:e4:4f:fc:4c:fc:15:bd:c0:5a:78:05:bc:f8:42:2a: c7:c2:86:c7:46:2e:0a:63:13:3b:4e:40:e4:37:a0:71:df:13: 21:c3:de:28:4b:19:3c:5e:8c:96:82:c0:16:e0:4e:2c:b5:fd: 5e:50:cb:c2:35:b7:60:43:08:e5:75:a5:65:2c:1e:7f:c9:9f: 75:b7:a2:93:49:79:f9:5f:80:25:c8:c7:f4:06:97:c3:b6:9c: 15:7a:88:06:b9:3c:76:18:e7:ba:f7:e1:ea:fb:db:48:32:2c: eb:51:c2:bc:f7:79:6f:56:df:41:3c:30:e1:68:6a:c7:6b:84: 32:cb:73:0b:47:bb:50:a9:5f:ca:68:88:3a:5d:57:37:2f:bf: 48:f7:2d:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/+c8HPgYgAU1WHSjh07NtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm MTlmN2UwHhcNMjYwOTIwMTgwMDE0WhcNMjYwOTIxMTgwMDE0WjAzMTEwLwYDVQQD EygwZDhlOTkwZmQ5Y2ZhNGRjNGE2OWM4YzVkM2M0ZjkxNGNhNDY1OWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK4x5ylxIbLVsSvEGaOgYKUj5NFI wjw/ebk6ZR3/EWJzZlpfal6kNBWt6TGBWVe6ET7aanb27PBGBMoynLOp3jV0ii6X uwa+sOu4+hrhSKcK+mnqu2WQ1JySLglMBzHRU3o+ieuHoBfu+8jy2PkCYwrxrbke 2qM9AKt+2qdY32AUsRSIT0PM8NNSOprTY3UtMnged4hjjkc+JiMSeearMHPnfynh hRBkJwNojS8FiYDTFlW/2grYomnDhL5Z3W0Zzi4XQZ+yZpr4MmeuXQb8HzIp2STK hG5TRB62UMxhGQIQW872t+0EOv+8spiz2iVBPki6xCwvoXSIGKNACg8CmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2OmQ/Zz6TcSmnIxdPE+RTKRlmhMB8GA1UdIwQY MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt ZGE0NTM4MDIyYWM3LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3 LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJzyL1GX iN/ZYkzWHByaJWS3+MUFz6MFXaPmdMZAEe0C0p7kplYvzQ09KEiakmsw2bXlanxf 9pugSv4MFwE2eoXUUh74HF0UE8HXJPRxJ10u3c/z/TiDvhJRlvc+8LxtuvF9Bn4J 9OKP7JlLgNrH5E/8TPwVvcBaeAW8+EIqx8KGx0YuCmMTO05A5Degcd8TIcPeKEsZ PF6MloLAFuBOLLX9XlDLwjW3YEMI5XWlZSwef8mfdbeik0l5+V+AJcjH9AaXw7ac FXqIBrk8dhjnuvfh6vvbSDIs61HCvPd5b1bfQTww4Whqx2uEMstzC0e7UKlfymiI Ol1XNy+/SPctWg== -----END CERTIFICATE-----Generated at Sun Sep 20 23:09:58 2026 by rpki-client