$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: /wXyjal7qmK6bpqe09+QyBm3VGQwTlk3xTOmqGhSF+c= Subject key identifier: F3:76:24:4C:CD:A7:00:6D:72:0B:5D:C6:A5:01:98:C9:B1:23:1D:D5 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 01A1C2543763E3B2BEE0B5B944A67354385E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 1AF1 Signing time: Mon 09 Nov 2026 22:01:01 +0000 Manifest this update: Mon 09 Nov 2026 22:01:01 +0000 Manifest next update: Tue 10 Nov 2026 22:01:01 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: fkkyJ8RgrPr+5kajOq9YWEM87r1Xge0MBJccvzcFVlc=) 2: 2pZ-2FjfKp_AUPJehyyyCmO33Hc.roa (hash: KSo6Uo4KGXQ+gy+hLjBUZoC/tbnGR8dO325Q6LPyilM=) 3: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (hash: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM=) 4: CvuWIkRHjp5wftfGLU8vOGYCRbc.roa (hash: gj4Tk/zdN+anVbu8mIUIWBYC8RgYdvQOlOOsAUK8Sdk=) 5: IRAfjWAlERnsxDrkVza8YXCUxl4.roa (hash: Ubtt3PSH8NxJ1HHW0Bmr9YJAFmecuPEr+JdwoJmMyLs=) 6: JJfaJkgSEBalqFcc3d6GPKEq5c0.roa (hash: FuHxoLmlLp5uuetTQ7lUzLqCBx0iP3lbv/wcUM9OYTE=) 7: Q_rrlmseqjc9c8mfs_9rzyd3284.roa (hash: GSzKRbWz/hHkNfc9qit79if8AoJkjbgwLaFILxum/nA=) 8: lfsA-CiV23r-qpL7I-OyuqCLA7E.roa (hash: IDCu8RiLCmmGO2wQI4VtUyw3k0YFKxR4jBPe/VBgfYc=) 9: nkzcn1sgGDpbfyqNM00anSE1XXM.roa (hash: /+3MitTOfIJS1gt2shgI9n07vci+NIdPgsMA89TtpO0=) 10: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (hash: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720=) 11: qu1WOvTSGJhb9qCrwaoo2MELsDg.roa (hash: sMcBLOOPq2yXaLqHdTpicJZ4I/4D7ujzTrP/m9dXVgg=) 12: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (hash: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo=) 13: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (hash: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g=) 14: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (hash: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA=) 15: yB3ntVub05F4F9i1cWLaKANNBso.roa (hash: zdKl/J+2C305Q7rX/8wtABN6OkAsZKkNZDLRLh5HUdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Nov 2026 15:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:c2:54:37:63:e3:b2:be:e0:b5:b9:44:a6:73:54:38:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Nov 9 22:01:01 2026 GMT Not After : Nov 10 22:01:01 2026 GMT Subject: CN=f376244ccda7006d720b5dc6a50198c9b1231dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:df:22:b3:55:19:d7:f7:c6:ac:7c:47:2a: e0:ac:9f:a5:7c:c2:46:6d:4d:9a:89:f1:5b:4f:53: e9:29:d4:2f:b2:d6:68:cc:7e:fb:e8:b3:19:a9:e1: b3:b8:bf:aa:02:03:f6:0e:63:de:46:54:78:48:58: 5a:5d:0a:39:1a:3e:21:df:2a:eb:e3:41:34:f6:bb: 1d:61:64:26:5f:19:78:2f:7e:ec:f6:10:69:66:b6: 5e:60:6e:c1:c9:49:8a:88:8a:9d:46:06:11:12:85: df:42:94:30:a3:75:7b:68:0b:b7:57:e1:ea:92:f3: 77:7b:e8:e1:b2:fd:0a:62:2b:60:e4:ca:36:2e:5b: 28:f1:99:d9:0e:6b:0e:d2:e5:35:22:6d:b6:8c:09: 42:1e:35:92:a4:b4:71:34:be:43:56:59:65:f5:f2: 41:8f:d3:06:5a:11:30:b5:a8:2c:43:1a:a9:59:ec: b0:6c:e6:4c:ef:65:95:45:a6:d4:f4:33:3f:da:41: 71:3e:ff:0e:b3:fd:a8:57:fb:81:1c:6f:22:41:c7: a3:cb:89:aa:e1:b1:b0:29:1a:0f:84:23:7e:d4:ec: bc:1e:7d:83:27:e6:f2:11:64:f2:b1:5d:55:d5:d4: 3d:60:e2:5b:43:c4:d5:4d:04:c2:0c:3e:c7:7f:03: fd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:76:24:4C:CD:A7:00:6D:72:0B:5D:C6:A5:01:98:C9:B1:23:1D:D5 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:dc:b8:b1:5b:8d:f6:dc:00:e7:c9:5e:0c:1e:b1:29:6f:43: bf:36:5a:85:77:4b:2b:02:80:10:a3:69:0d:ba:05:db:70:41: 96:88:bb:dc:4b:3a:c9:4b:f2:d5:66:a3:94:a9:17:68:01:60: 68:bc:18:af:65:a6:2f:c4:74:85:ba:a8:78:a0:c6:b4:cd:2f: f4:43:23:fb:d3:e2:7c:6a:3c:fe:b5:b9:e1:27:6f:e8:d9:b8: 36:9a:3f:5a:93:25:7d:64:54:b1:24:6f:ab:73:28:8f:ad:a1: c3:02:ab:46:84:37:eb:27:73:3f:94:b0:84:65:0f:9f:06:d4: 89:b9:3e:3c:cd:51:1f:ae:ff:79:8b:f7:76:81:88:42:d1:04: 1a:b1:41:b2:8d:90:ca:bb:21:dd:73:a2:bb:67:1a:5e:4a:68: 86:ff:60:9a:e6:cf:76:a2:b5:b0:ef:c7:fc:c0:03:13:42:be: 50:4f:a1:00:3e:86:47:80:37:4f:40:1c:1f:07:48:b9:f6:af: ee:dc:d3:be:8b:14:57:a5:93:50:13:df:eb:62:f9:c2:81:c3: 38:8a:ae:50:48:05:3a:c8:3c:33:c0:48:c6:08:2c:a0:ae:4d: 94:5c:11:1b:1d:28:77:38:62:6d:8d:94:93:b2:fd:fc:6e:89: 78:2f:ef:c4 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAaHCVDdj47K+4LW5RKZzVDheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYxMTA5MjIwMTAxWhcNMjYxMTEwMjIwMTAxWjAzMTEwLwYDVQQD EyhmMzc2MjQ0Y2NkYTcwMDZkNzIwYjVkYzZhNTAxOThjOWIxMjMxZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUDfIrNVGdf3xqx8RyrgrJ+lfMJG bU2aifFbT1PpKdQvstZozH776LMZqeGzuL+qAgP2DmPeRlR4SFhaXQo5Gj4h3yrr 40E09rsdYWQmXxl4L37s9hBpZrZeYG7ByUmKiIqdRgYREoXfQpQwo3V7aAu3V+Hq kvN3e+jhsv0KYitg5Mo2Llso8ZnZDmsO0uU1Im22jAlCHjWSpLRxNL5DVlll9fJB j9MGWhEwtagsQxqpWeywbOZM72WVRabU9DM/2kFxPv8Os/2oV/uBHG8iQcejy4mq 4bGwKRoPhCN+1Oy8Hn2DJ+byEWTysV1V1dQ9YOJbQ8TVTQTCDD7HfwP9zQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPN2JEzNpwBtcgtdxqUBmMmxIx3VMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNy4 sVuN9twA58leDB6xKW9DvzZahXdLKwKAEKNpDboF23BBloi73Es6yUvy1WajlKkX aAFgaLwYr2WmL8R0hbqoeKDGtM0v9EMj+9PifGo8/rW54Sdv6Nm4Npo/WpMlfWRU sSRvq3Moj62hwwKrRoQ36ydzP5SwhGUPnwbUibk+PM1RH67/eYv3doGIQtEEGrFB so2Qyrsh3XOiu2caXkpohv9gmubPdqK1sO/H/MADE0K+UE+hAD6GR4A3T0AcHwdI ufav7tzTvosUV6WTUBPf62L5woHDOIquUEgFOsg8M8BIxggsoK5NlFwRGx0odzhi bY2Uk7L9/G6JeC/vxA== -----END CERTIFICATE-----Generated at Tue Nov 10 02:04:27 2026 by rpki-client