$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: qvEvb8hIBK5Q4UqPX1S/U90BsxnzskLtttmrLpr4QV0= Subject key identifier: 5F:46:48:B1:31:46:84:4C:EA:A5:FE:6B:5D:76:D3:7B:57:B4:B8:32 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 01A0C10CC5DB57C69FBBD80DD97031F46E0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0E35 Signing time: Sun 20 Sep 2026 23:00:34 +0000 Manifest this update: Sun 20 Sep 2026 23:00:34 +0000 Manifest next update: Mon 21 Sep 2026 23:00:34 +0000 Files and hashes: 1: 3XxaxeuZ7iM0ebsgQ6e4nE8tq1Y.roa (hash: ZHQvqc3AjnvJ4i30CY2+IHpSDOtKKcn94Zv5aIxu/F8=) 2: 4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa (hash: OFGALUWYGYQUhuMA4C2j6MOHRafPxWdeZlAg1HAW/jw=) 3: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: 5OHqxHYJZ8w6i0jKtVHGRnR+THqq94eK3BezqWWb6X8=) 4: 5hEpXm6JhvNCBMohzU0WFPWcKWc.roa (hash: 5apiiJXUanfecSLX+wSn16e0ImKfrAKnCBH8X2xdMts=) 5: 7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa (hash: wOK3QkIDyuyuhwElcyAXXhM7VzIujoUrpG6d1AXTVD0=) 6: 8ox74_3b54ZfTc4DeQETb8PsUPY.roa (hash: vj2+zv5BVQ43SpJ3ePtXZ5AYs4y6XvVrTsGHlyhgZT8=) 7: ClwzdGSmtXrO63HgPlEjZ_se0A4.roa (hash: Sjb3Q2nRtqdPoqA1Q0gRD+djUqyx+vfH/8hgBocbxnI=) 8: EINmH16ST6OUnY1UpUrXyjquvLI.roa (hash: vwKYSQYNUUKZRTfqbJNmOaG0AXH1wXYAB9jnHwduhJ0=) 9: FLyGvBKQojenrUgcHw5F_vXoR5M.roa (hash: wWH4rrqtCAvj0ZmKjpwrUD3i4tjfNtIEnQMtH9GGPpk=) 10: FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa (hash: YX0wEIroArcfrMK0kLF5yqvQRyMMkmkLMUF5gri9v8k=) 11: HZ7C4ms11ElfIAOCXz2KP1UZQOo.roa (hash: XB0mb76ajFkdDxe5edVo54FP1IvbB8otJuWMuOU3oU8=) 12: QL4XIa93X9j8w6Q69GPbrIm9Txg.roa (hash: q3a41ZI2Ed5MjFN9KCPKVx+N+9H7Kne18XdEvUkqHKo=) 13: TrG4pnKU9a83MBBasyD0Ivn02bQ.roa (hash: Z2HeK8ZrgnND3BzDzaG6qvWsR0AG5jzPVRskgeF9nrE=) 14: UHt3t85lrKHcyjienOyacQwMwos.roa (hash: hY4NRwA9EwRYqsnV0/TdPTzMBwj14qwILJc+qsHefLY=) 15: ZMww3s4SgUbcv1vXaQXxI5rF2As.roa (hash: tdO0PjMgmNl+4sBpkXgoSewTuzECcJf6zwmM9qa8uWI=) 16: Z_dqpDR46U8a06PlLNjM5vLBW6g.roa (hash: 9eLcbAW7bFjEoS4sJ/flUUOf9W/Q/QeXHH/Nf8GqO7E=) 17: _82cHPWdD8U7C1sniheBgC2F7fY.roa (hash: qbuKXsHTUOPuJFxTAC7wGY6PjrnYJdIJ0GDkVQSoVko=) 18: avB3BJTEosYtGqAqX_I_e46zMIo.roa (hash: tQdZzTA0pjh0uRVc3g5OMEZULnG07QAexhOO4lWbwiM=) 19: b756xL9Ohc4j-N7yuoOMTmSfzg4.roa (hash: e8kS2C9m/jMicLDrkmKtaDWY53H+r+O/OyqUYKWbl0E=) 20: hEV1AO7cmD8Fxt7_HPntz-NhYa8.roa (hash: 4QBBkQhpKfouENaQ8oOXZecXgb/rwr35/TlkQhonMwY=) 21: irsMyG4o80ZN9Sk8EByejJziQYw.roa (hash: cS1Kvn4FUa0h5mXwTGEtWyys4EftbAer1bNA+Fs3gvg=) 22: l5AMFBmHig3utUwAeUoIptYvWBU.roa (hash: 29Taz9FkGiqdp8kzswOfND0kqZeVLaNfps7c+42KXtU=) 23: mug4xbomzaetj7AbqFb1Z7Hzfuc.roa (hash: Im7mIZjfsxeaSqfKSctYOSnWuVRcpLrD0caKVFIE+7U=) 24: nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa (hash: ZoPGJhQjngDKtHRl4GaKJCyCLGknp9jYT2TDKz7hc78=) 25: qharjoYw5TDEtIf_l3c7aPwXTD8.roa (hash: TEWcqez4B3s/VWobIX7btBqISBR9JER1IYMvOR5OrNc=) 26: rPGOaQT_OmBAJqUyQykV24mLyKs.roa (hash: f9K5lcsoxS9S8VliZjknC4Exxafsx0Xp+rbtKzm43FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c1:0c:c5:db:57:c6:9f:bb:d8:0d:d9:70:31:f4:6e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Sep 20 23:00:34 2026 GMT Not After : Sep 21 23:00:34 2026 GMT Subject: CN=5f4648b13146844ceaa5fe6b5d76d37b57b4b832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a9:6e:7d:94:fb:84:7f:6d:0f:44:6d:6c:44: 76:35:e3:2f:2b:78:0e:82:cf:0c:86:cf:e6:08:dc: 63:5c:77:55:01:3b:0d:17:2a:1d:29:10:1c:1f:81: 51:e7:ca:15:2b:00:45:05:78:7a:bd:91:87:0c:41: bf:7e:c7:70:9e:a0:a2:df:40:1d:db:50:6b:e7:a3: 8d:d6:f6:7c:e0:11:b9:fa:95:66:fe:b7:30:e1:8d: ef:52:8d:e7:1a:49:9e:bf:09:b9:c2:1f:aa:6a:fa: 79:79:6b:cf:9e:55:c4:bd:b5:d7:47:5d:4d:57:ed: 8a:30:cf:17:70:1a:e0:b1:16:a5:83:38:01:90:e6: 18:e1:8b:ee:ea:0c:ca:f4:49:47:1e:c0:c7:d3:19: 55:63:e6:48:db:4f:c8:55:c2:ab:cd:5e:9c:86:f4: 0e:4e:8b:7e:44:ef:8e:5d:19:1a:60:a8:4b:5c:cc: 59:5b:63:fd:14:aa:d2:8c:6a:9d:5f:b6:f6:0f:83: fc:0a:a3:45:68:c3:4a:5d:dc:44:f6:c0:a7:dd:6d: b7:1a:a6:8f:9f:c5:2a:6e:be:80:f7:7b:d2:cf:c9: 84:9a:2a:ec:60:52:58:5c:23:5a:ac:a7:82:c6:e5: 9f:67:c2:4d:ad:b4:b8:fd:19:e8:5f:76:16:68:66: e5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:46:48:B1:31:46:84:4C:EA:A5:FE:6B:5D:76:D3:7B:57:B4:B8:32 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:db:da:b7:ee:7a:91:8f:25:a3:3e:d1:08:4b:d6:64:b9:dc: 65:63:87:5e:6b:58:ad:b3:45:75:14:8c:91:fa:fe:af:81:ff: bc:e9:a7:89:07:39:62:5e:82:91:92:8d:3a:55:8c:df:71:52: 76:6a:bf:08:de:3a:74:e2:44:32:6e:c6:05:aa:0a:a7:77:cb: 79:dd:61:2c:ec:c7:37:1f:b2:d2:d0:ed:82:88:89:91:19:68: cf:3b:3b:10:e1:1e:70:c0:b2:72:20:22:09:2e:8d:23:ae:73: 23:52:fe:19:21:a5:54:d5:1f:a1:cb:ff:1a:46:fd:bf:53:2c: d2:46:77:fe:7a:7c:ae:b5:0c:08:d3:c1:e6:2a:97:3a:96:88: 5e:c7:a4:0b:d1:8b:91:3d:49:7f:63:7b:9c:a9:51:00:00:63: 2a:04:28:8d:e3:79:3f:24:a8:16:58:e6:b3:3d:78:b6:5a:c0: 15:f2:ba:17:81:0d:67:4f:d8:cd:44:90:f7:7d:b0:ec:67:3d: f0:e4:a4:3a:c8:a0:19:4c:9e:58:d0:8d:bc:14:ee:62:17:5d: a9:59:18:44:8d:6d:b5:1b:aa:68:7f:6f:1d:0f:50:ac:bb:ab: 67:09:f4:2c:50:0b:a5:5c:c2:3a:13:8a:e6:3d:b7:d7:ad:f1: ec:d4:28:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDBDMXbV8afu9gN2XAx9G4LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwOTIwMjMwMDM0WhcNMjYwOTIxMjMwMDM0WjAzMTEwLwYDVQQD Eyg1ZjQ2NDhiMTMxNDY4NDRjZWFhNWZlNmI1ZDc2ZDM3YjU3YjRiODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6lufZT7hH9tD0RtbER2NeMvK3gO gs8Mhs/mCNxjXHdVATsNFyodKRAcH4FR58oVKwBFBXh6vZGHDEG/fsdwnqCi30Ad 21Br56ON1vZ84BG5+pVm/rcw4Y3vUo3nGkmevwm5wh+qavp5eWvPnlXEvbXXR11N V+2KMM8XcBrgsRalgzgBkOYY4Yvu6gzK9ElHHsDH0xlVY+ZI20/IVcKrzV6chvQO Tot+RO+OXRkaYKhLXMxZW2P9FKrSjGqdX7b2D4P8CqNFaMNKXdxE9sCn3W23GqaP n8Uqbr6A93vSz8mEmirsYFJYXCNarKeCxuWfZ8JNrbS4/RnoX3YWaGbl9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9GSLExRoRM6qX+a11203tXtLgyMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9vat+56 kY8loz7RCEvWZLncZWOHXmtYrbNFdRSMkfr+r4H/vOmniQc5Yl6CkZKNOlWM33FS dmq/CN46dOJEMm7GBaoKp3fLed1hLOzHNx+y0tDtgoiJkRlozzs7EOEecMCyciAi CS6NI65zI1L+GSGlVNUfocv/Gkb9v1Ms0kZ3/np8rrUMCNPB5iqXOpaIXsekC9GL kT1Jf2N7nKlRAABjKgQojeN5PySoFljmsz14tlrAFfK6F4ENZ0/YzUSQ932w7Gc9 8OSkOsigGUyeWNCNvBTuYhddqVkYRI1ttRuqaH9vHQ9QrLurZwn0LFALpVzCOhOK 5j23163x7NQoBg== -----END CERTIFICATE-----Generated at Mon Sep 21 03:37:57 2026 by rpki-client