$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json) Hash identifier: bP9Ze0xblrdGjKXAxUq3IP0nCViIsZMOp1m/VeREu+Y= Subject key identifier: 95:FD:9A:06:DD:C4:75:B9:AF:E5:A4:35:96:CC:61:A6:E7:06:80:EE Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc Certificate serial: 01A10135D9735F5149F0A0CF1EAFFFD1E6CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft Manifest number: 1AA0 Signing time: Sat 03 Oct 2026 10:01:08 +0000 Manifest this update: Sat 03 Oct 2026 10:01:08 +0000 Manifest next update: Sun 04 Oct 2026 10:01:08 +0000 Files and hashes: 1: 0EBeCvxmJyfS91P9dvdoxEsVlJM.roa (hash: Ztm1RYUvm6dAlcHl20eJteXmU6ZIpFtevcVwkSpIGLQ=) 2: 231qsvaOZIqIruO4fkNxN4_GZxo.roa (hash: unnQteTwyKRIT/eUEC+t3+86puUV0nMgnQ966MHZ+gM=) 3: AieLJXAymktRfmukFlACfHWkYRE.roa (hash: /oLmGMPt55iKvBJWcIwKY+SjbZghe8alLWfm6etoAFc=) 4: GQnHTRMHOOfXf-q1lA1GVsIiYEY.roa (hash: 8NrETMC7ms4hMHOoi8XDcOkhkZOGNojhzo06eNcWX7Y=) 5: HOKn3zKmtRSjMP4gY95pRGsQ4t8.roa (hash: gjx4DxQQ6VGBQmKgHHbfJgniL+WNt8A78W7MT9lU+s0=) 6: I-gYLpV-BBY25Tuh_tLWkflSCbE.roa (hash: bNMI/pphMMD6ofbgzIN/kdCqC5aENCj7lwxKpHYdvSs=) 7: KQYzDmlbtLb0TIveiic0hQtg1_8.roa (hash: KwMCQ5pXReeQWpe8C0PWaWWc7IeA3pbKv8Ezi0wF6Rc=) 8: KlidTRE0Ld2vhd7LchTBrjDXtCM.roa (hash: oYu7FrAcgyOmxnR9Y/a2v7qA05r9PwyCGoG1X5C3eMU=) 9: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: fmwnGLjndVQC/BnQmB8w2a36rvQTvnm+zhJVO8T5U34=) 10: oLn3GUiVFVVqpSTWcLHtebawLz4.roa (hash: JQbIV8euT2kTCxgQGDHR/GNa6adXdcVfQkxZZzbOy6o=) 11: qH1VTWt-4KrwL8x5likjxl704mw.roa (hash: 4YYYIkykd4q8NCtsfVXnlE5hDVlIl6oGx0esdZITEMw=) 12: zmr5Arlo83bz2EZMsCebzBonu0g.roa (hash: 3wLrxDIVVtatk269ndPNrri4rStQIN8G6VIxy0jx5CY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 10:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:01:35:d9:73:5f:51:49:f0:a0:cf:1e:af:ff:d1:e6:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc Validity Not Before: Oct 3 10:01:08 2026 GMT Not After : Oct 4 10:01:08 2026 GMT Subject: CN=95fd9a06ddc475b9afe5a43596cc61a6e70680ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f6:97:04:5a:6c:ee:8a:b1:ef:4e:ac:00:4e: aa:3e:e7:a9:da:98:c0:f9:33:33:a2:ab:6e:3d:c3: 5a:c4:27:8e:f2:fc:c1:db:ec:19:d6:90:b4:98:a8: f1:30:87:99:00:fb:88:1c:3a:66:08:98:89:1e:ea: bf:83:85:92:c9:d6:34:4b:cd:72:8d:ae:6d:bf:9c: 87:ae:f0:ea:b5:d4:39:50:75:d3:1e:76:03:f7:15: 6f:13:ca:df:f6:5e:8e:46:54:07:54:75:0a:a4:5a: 15:96:6b:1d:26:1b:fd:e9:c5:6a:b3:d4:3f:56:72: 7b:65:12:ce:23:66:3f:11:b9:98:f3:40:fc:56:14: ef:db:3f:91:42:b5:a9:c1:dd:b0:cc:eb:4f:23:d3: 94:5d:62:19:bd:57:d4:02:06:97:fc:5e:90:b2:33: ed:45:ff:7a:f8:59:01:40:0c:ab:65:1d:ff:cf:9b: 28:54:6f:ab:7b:90:96:c0:c8:aa:93:e6:b8:88:25: e9:94:58:01:6a:63:4f:66:72:ff:24:b0:8c:8c:46: f6:09:82:fb:67:59:a8:54:24:f1:94:c3:b7:1d:bb: 20:e0:b4:6e:ba:5e:59:75:2c:d0:36:21:78:38:52: d0:6b:83:00:08:d6:f4:20:3c:bb:e1:f3:61:b6:f9: 4d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FD:9A:06:DD:C4:75:B9:AF:E5:A4:35:96:CC:61:A6:E7:06:80:EE X509v3 Authority Key Identifier: keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:dc:b0:47:ea:fc:75:f1:48:84:f6:30:0d:be:5a:cd:f5:f1: 49:24:e3:25:a6:e7:15:5b:e8:1f:ea:89:f6:d1:f5:b9:5c:e9: 4f:ae:73:48:c8:be:a2:8a:c7:5d:1a:e5:7f:e9:e3:f2:4b:10: 1f:00:76:d8:70:3c:c2:eb:b6:27:c9:b4:4c:3e:c2:76:1a:36: 6c:a9:a4:6e:ad:c7:14:6e:22:aa:29:80:1d:1c:22:12:a7:e6: 34:d9:f9:c2:97:11:b6:9a:b0:4a:31:49:c1:08:8e:6c:9a:fd: af:b9:17:7d:d8:7c:f4:03:4a:1c:99:64:e1:fb:9a:ff:4d:d7: 13:0f:c0:80:b1:8c:1c:f1:e0:e4:33:96:10:c5:03:c6:f6:18: 22:fe:6f:8b:ff:5d:d4:de:cc:c1:00:f1:ea:fb:1a:42:9c:60: b2:59:2c:05:5e:a9:76:6d:8d:29:d2:4c:60:e1:88:47:35:c0: 1d:1c:6e:a7:1f:4c:28:d3:fc:70:a5:d0:a7:12:98:94:04:12: 69:a5:a9:ce:ef:e9:5c:40:b9:2c:4d:3a:ce:f8:44:eb:41:af: 47:d0:4a:c1:ca:f7:64:0d:d4:6b:bd:53:25:46:1f:0a:c9:67: 67:78:e8:24:fd:84:1b:27:35:ad:03:55:d8:4b:65:c1:38:02: 68:2c:58:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEBNdlzX1FJ8KDPHq//0ebPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjI2ZjY3MWMyNjQzYTVjMDQ4NDYyNjRmZWUwMWY5NDNh YzJiZmMwHhcNMjYxMDAzMTAwMTA4WhcNMjYxMDA0MTAwMTA4WjAzMTEwLwYDVQQD Eyg5NWZkOWEwNmRkYzQ3NWI5YWZlNWE0MzU5NmNjNjFhNmU3MDY4MGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfaXBFps7oqx706sAE6qPuep2pjA +TMzoqtuPcNaxCeO8vzB2+wZ1pC0mKjxMIeZAPuIHDpmCJiJHuq/g4WSydY0S81y ja5tv5yHrvDqtdQ5UHXTHnYD9xVvE8rf9l6ORlQHVHUKpFoVlmsdJhv96cVqs9Q/ VnJ7ZRLOI2Y/EbmY80D8VhTv2z+RQrWpwd2wzOtPI9OUXWIZvVfUAgaX/F6QsjPt Rf96+FkBQAyrZR3/z5soVG+re5CWwMiqk+a4iCXplFgBamNPZnL/JLCMjEb2CYL7 Z1moVCTxlMO3Hbsg4LRuul5ZdSzQNiF4OFLQa4MACNb0IDy74fNhtvlN5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJX9mgbdxHW5r+WkNZbMYabnBoDuMB8GA1UdIwQY MBaAFFIib2ccJkOlwEhGJk/uAflDrCv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgt YTEyZGUzYTMzNTUzLzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgtYTEyZGUzYTMzNTUz LzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtywR+r8 dfFIhPYwDb5azfXxSSTjJabnFVvoH+qJ9tH1uVzpT65zSMi+oorHXRrlf+nj8ksQ HwB22HA8wuu2J8m0TD7Cdho2bKmkbq3HFG4iqimAHRwiEqfmNNn5wpcRtpqwSjFJ wQiObJr9r7kXfdh89ANKHJlk4fua/03XEw/AgLGMHPHg5DOWEMUDxvYYIv5vi/9d 1N7MwQDx6vsaQpxgslksBV6pdm2NKdJMYOGIRzXAHRxupx9MKNP8cKXQpxKYlAQS aaWpzu/pXEC5LE06zvhE60GvR9BKwcr3ZA3Ua71TJUYfCslnZ3joJP2EGyc1rQNV 2EtlwTgCaCxYSQ== -----END CERTIFICATE-----Generated at Sat Oct 3 14:29:45 2026 by rpki-client