$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json) Hash identifier: mQvBIrMH9Enfi3sBVNXtJiBDNIDdzyrSaXc20lHGU+k= Subject key identifier: EB:5B:69:2A:D5:68:FA:50:73:7E:50:A6:D7:5D:4A:67:0C:C6:90:A2 Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Certificate serial: 01A11CACC2436B77EEB1B578A7E365158CEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft Manifest number: 1250 Signing time: Thu 08 Oct 2026 18:00:46 +0000 Manifest this update: Thu 08 Oct 2026 18:00:46 +0000 Manifest next update: Fri 09 Oct 2026 18:00:46 +0000 Files and hashes: 1: 03qDd_x5kIQisyJDyHVAhJWRLFM.roa (hash: Bmg2Fe/T2cmfuLkUG6xBLZwUcgZn+z1pedq3EUjKeVA=) 2: 33gU1W_UI1Ae18rle6T32Am_ap0.roa (hash: CtHyr3lbVK0nM4M5V+efOeDGbhPQI4ZIEpY0w9de2vw=) 3: 7d0P9doBZNnco0Uk-uyE95zYsRU.roa (hash: C0smtXlBUg5wv9v0wIvA4FN2yM+ZFAWopSk3eOTxr4A=) 4: BDT11QF-TtgdWALp45xoyYelUsM.roa (hash: mujOfcZnyEUoIqlubLK7erXRFeA189kfqWm71HEHJLA=) 5: EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa (hash: VhRxVbInTPM1O+Ldm/7obKGqKOZ2+6LZ1EZrcIQqOtM=) 6: H9M9hJ2Wf0edu4O6BWjDO8iQCIY.asa (hash: X7hW2mdrTDcdJA7Y5SsLSoNgjMb7M7DnZnmZizxX5K0=) 7: LE0LYSRlSHBlwqkbBS3d-4jQXVI.roa (hash: qNI5ryb9dP4ZDLAtMIMap6nbp3+t9sAW2t3qbIFwYZE=) 8: TXguGT_UTl1GdyDJUiKFRpuOX_o.roa (hash: fAuVLNao9cvO8YJmECjpJXFSsNjlEB4NUGFkoGhsksY=) 9: VZOyRy0tzJ2sfmNYjeH9siUXpok.roa (hash: hg8jPOLxAFpxHffAZVtykZM6KfjDO72SPntESUbpkNs=) 10: eO9gFOF2DFVAaSQC-qU8Cc5tUvk.asa (hash: oREm2BU1au2wLbubTl/7hfGGiO50t8g7O52UFNL9Yd4=) 11: fMPPEhoc1eJ7TtYJwhoTEBEj3u0.roa (hash: TFEzfDo3Zwa4HL59NImWxFGsVixNQrbjisILgLkXLHY=) 12: sPWdnd-6eDj5X9yNO4z9PSISSlQ.roa (hash: agHieGTKdf4veiuZ5e0ZnuSvZ/4cBqOGV3qPQeuYVLw=) 13: uDj2Yyjz9Osyu9dJCu_3OQFz4uA.roa (hash: 3im4Wph6tBomBtiDPxXDGzF9rSSihCEjyLDoawI+nsw=) 14: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: NqCWXVT5WUfnQkomfcrx9nXzWgXsvAj388WxcOjauPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 14:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:1c:ac:c2:43:6b:77:ee:b1:b5:78:a7:e3:65:15:8c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Validity Not Before: Oct 8 18:00:46 2026 GMT Not After : Oct 9 18:00:46 2026 GMT Subject: CN=eb5b692ad568fa50737e50a6d75d4a670cc690a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c3:0b:d6:8a:3c:25:98:55:1f:5f:17:f5:a3: b5:f6:09:10:71:8e:c7:ba:d7:7a:65:38:56:7e:3b: 68:f6:61:0d:04:69:da:36:dc:50:3d:2e:83:de:be: 70:69:4b:dd:1b:c6:13:21:f7:87:47:72:a4:d3:44: 25:20:26:85:ad:cb:e3:dd:b5:c8:43:a4:87:ca:9c: 98:59:68:ed:5a:54:96:cb:d0:be:3c:2a:92:be:2e: 17:f9:dc:e4:66:8b:7f:bb:9c:c0:e4:f6:8c:a1:4d: 1e:71:f1:88:3b:68:9b:07:37:3c:90:6f:bb:21:39: 41:eb:11:4d:d4:b9:d5:82:e4:ae:7b:02:48:9e:60: 56:e6:26:4c:92:12:f9:9c:3f:35:00:74:13:4a:8e: 74:fb:ca:2c:c4:e8:a3:a0:8d:56:e7:36:03:b4:23: b0:d1:14:d7:1b:78:25:32:05:c6:43:c0:99:d1:57: 01:dd:f6:9d:7b:42:33:98:f9:4d:92:c7:f6:1a:bc: 32:20:9a:18:c4:3c:9f:4b:15:52:41:5b:ff:db:35: 02:85:e3:4f:78:60:95:74:42:8b:f3:8b:25:b6:51: f2:a2:59:bf:be:45:90:47:eb:4a:c2:7a:dd:55:21: 74:bf:68:84:9a:cf:b7:58:e1:4c:15:4c:c7:a3:03: ea:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5B:69:2A:D5:68:FA:50:73:7E:50:A6:D7:5D:4A:67:0C:C6:90:A2 X509v3 Authority Key Identifier: keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1b:c9:a3:65:d7:53:e9:dd:67:ba:38:36:f4:d5:c5:25:fe: bf:d1:d0:62:3a:d6:44:2c:52:2a:e2:a1:96:50:89:8a:3c:d9: 30:4f:7b:36:18:37:94:c7:c9:b4:b4:c2:d1:af:dc:c7:99:91: 8e:e5:a7:08:fd:3b:d0:1e:34:a3:9b:ad:a0:c5:6c:5a:5d:c3: 0a:d4:e7:3c:a6:1a:33:63:c5:73:ef:02:14:bc:db:12:dd:b6: 69:79:eb:7a:bb:03:56:29:99:be:8d:c2:8b:8f:49:91:6a:ef: db:b6:53:1d:d6:76:44:c0:f2:6e:24:e4:69:73:e8:b9:b4:9b: e8:14:a2:89:22:b0:c3:68:db:bf:73:6a:5f:db:ab:c6:da:ad: fa:c5:6d:d4:60:69:e2:a9:f7:50:53:95:ef:94:9b:d9:ea:63: 4d:5c:91:9b:58:53:5d:d8:b0:bc:a3:ce:7b:f0:5d:1b:93:f2: 62:b2:4b:79:ca:ab:aa:fb:dc:37:a4:40:fd:08:8c:ea:9a:f4: c1:dc:9f:f1:d7:68:32:ac:e3:7f:be:41:df:07:ab:a5:4a:79: 0e:7e:86:a6:86:cd:9c:d8:ee:47:e5:1e:ee:50:b8:8f:8a:c9: 1c:e1:d4:6e:c7:38:2a:68:78:20:10:1a:f8:44:71:0d:ef:77: b5:84:4c:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEcrMJDa3fusbV4p+NlFYzrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm MTlmN2UwHhcNMjYxMDA4MTgwMDQ2WhcNMjYxMDA5MTgwMDQ2WjAzMTEwLwYDVQQD EyhlYjViNjkyYWQ1NjhmYTUwNzM3ZTUwYTZkNzVkNGE2NzBjYzY5MGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsML1oo8JZhVH18X9aO19gkQcY7H utd6ZThWfjto9mENBGnaNtxQPS6D3r5waUvdG8YTIfeHR3Kk00QlICaFrcvj3bXI Q6SHypyYWWjtWlSWy9C+PCqSvi4X+dzkZot/u5zA5PaMoU0ecfGIO2ibBzc8kG+7 ITlB6xFN1LnVguSuewJInmBW5iZMkhL5nD81AHQTSo50+8osxOijoI1W5zYDtCOw 0RTXG3glMgXGQ8CZ0VcB3fade0IzmPlNksf2GrwyIJoYxDyfSxVSQVv/2zUCheNP eGCVdEKL84sltlHyolm/vkWQR+tKwnrdVSF0v2iEms+3WOFMFUzHowPqqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtbaSrVaPpQc35QptddSmcMxpCiMB8GA1UdIwQY MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt ZGE0NTM4MDIyYWM3LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3 LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhvJo2XX U+ndZ7o4NvTVxSX+v9HQYjrWRCxSKuKhllCJijzZME97Nhg3lMfJtLTC0a/cx5mR juWnCP070B40o5utoMVsWl3DCtTnPKYaM2PFc+8CFLzbEt22aXnrersDVimZvo3C i49JkWrv27ZTHdZ2RMDybiTkaXPoubSb6BSiiSKww2jbv3NqX9urxtqt+sVt1GBp 4qn3UFOV75Sb2epjTVyRm1hTXdiwvKPOe/BdG5PyYrJLecqrqvvcN6RA/QiM6pr0 wdyf8ddoMqzjf75B3werpUp5Dn6GpobNnNjuR+Ue7lC4j4rJHOHUbsc4Kmh4IBAa +ERxDe93tYRMyw== -----END CERTIFICATE-----Generated at Thu Oct 8 20:49:17 2026 by rpki-client