$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: QncYG9OwC+M03jhXx/OJoTQcupiT3+rbHlwDyMph0sE= Subject key identifier: 2E:D2:B9:4C:76:A2:36:3F:55:46:B3:DA:CE:5F:8B:43:D1:84:57:C8 Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 01A0BEE76FC826ABE435AA8E60CBDF2F37AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: 0250 Signing time: Sun 20 Sep 2026 13:00:33 +0000 Manifest this update: Sun 20 Sep 2026 13:00:33 +0000 Manifest next update: Mon 21 Sep 2026 13:00:33 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: Yf2cZRMAvz66tSwSWGx4OrvaG/PCZNClp4y1Ys+Cdps=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:e7:6f:c8:26:ab:e4:35:aa:8e:60:cb:df:2f:37:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: Sep 20 13:00:33 2026 GMT Not After : Sep 21 13:00:33 2026 GMT Subject: CN=2ed2b94c76a2363f5546b3dace5f8b43d18457c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:90:90:23:fb:92:30:20:42:8e:d4:f3:ac:be: 91:af:55:c5:a4:61:90:92:21:08:02:0d:4b:eb:a1: 21:6b:a7:2b:26:b3:dd:50:69:6a:48:7c:fc:1a:13: 43:ce:9b:73:ba:d2:77:ef:22:b9:06:d5:b1:cd:83: 08:34:7d:de:02:0d:36:8f:2b:9d:72:d4:6f:ae:00: 5c:f5:1c:c1:1f:04:6a:db:d0:5a:96:6a:3d:18:6d: 11:f6:31:49:31:f9:3d:f3:79:4b:b6:03:9b:72:29: 5f:45:79:3f:d0:fe:46:a1:62:93:24:9f:8b:e9:fb: 78:a1:7f:86:b4:cb:c4:bd:52:a3:f1:6a:61:09:86: b5:05:9f:8f:b2:6f:33:cc:6a:db:3f:81:ff:cd:5b: 70:e7:f8:bd:ef:1c:3c:ff:95:e4:4b:94:60:ec:4a: 68:17:f2:78:12:25:2b:8f:0d:bc:af:1c:3f:af:e0: 4f:bf:18:bf:3e:ca:01:74:ab:14:35:81:d5:be:39: 52:7c:62:a9:07:ca:75:8d:36:11:c4:52:de:0d:06: c1:40:c0:36:84:5e:63:29:fa:50:0d:79:e1:04:64: 01:d3:a0:6d:d6:bb:c7:49:8b:38:eb:2b:f9:40:fa: 71:a9:47:1e:f2:9a:5c:b4:f1:2d:db:f7:da:22:e4: c0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D2:B9:4C:76:A2:36:3F:55:46:B3:DA:CE:5F:8B:43:D1:84:57:C8 X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:23:93:3a:7b:e1:a7:2f:c5:04:3e:03:05:ac:53:51:7b:19: 37:ff:9a:83:cf:4e:4d:85:5f:aa:ab:66:c9:fc:1d:35:c6:04: 66:05:d4:85:cd:bb:fb:ab:94:f7:87:12:c6:7c:86:41:12:55: 12:f2:3b:5b:96:15:58:2f:03:54:b9:ff:8a:0a:0f:7c:c7:5d: 55:42:ed:6b:66:57:70:d5:4f:d4:00:a8:16:7f:70:59:6d:bd: 43:5d:6f:bc:84:ff:0a:5b:96:8f:e5:7e:7d:b9:46:c7:63:ce: d7:da:e5:1e:a8:ca:f5:06:75:ae:be:11:95:dd:ce:03:7a:93: 81:33:44:0d:b1:3f:da:1f:49:b8:07:6d:77:22:cf:82:32:03: b8:3a:8b:0f:1a:56:7e:21:7e:29:ea:88:6e:88:d6:6d:30:e5: 14:d9:2e:87:8d:be:88:90:30:cd:d0:a8:f1:ea:d1:48:a6:55: 81:84:03:b7:c0:d3:15:4c:5c:9e:e8:12:f0:0b:0f:ca:c4:d8: 68:e1:bf:24:ed:9e:5e:99:f6:49:ef:93:22:bb:22:64:e9:b9: 92:b1:cd:9f:eb:b0:f0:74:aa:bc:84:9a:66:2a:73:e1:cf:a8: 74:4f:be:0d:ad:bf:d0:da:98:e6:df:a4:45:03:8d:1f:91:9d: 4c:fb:59:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+52/IJqvkNaqOYMvfLzevMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYwOTIwMTMwMDMzWhcNMjYwOTIxMTMwMDMzWjAzMTEwLwYDVQQD EygyZWQyYjk0Yzc2YTIzNjNmNTU0NmIzZGFjZTVmOGI0M2QxODQ1N2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5CQI/uSMCBCjtTzrL6Rr1XFpGGQ kiEIAg1L66Eha6crJrPdUGlqSHz8GhNDzptzutJ37yK5BtWxzYMINH3eAg02jyud ctRvrgBc9RzBHwRq29Balmo9GG0R9jFJMfk983lLtgObcilfRXk/0P5GoWKTJJ+L 6ft4oX+GtMvEvVKj8WphCYa1BZ+Psm8zzGrbP4H/zVtw5/i97xw8/5XkS5Rg7Epo F/J4EiUrjw28rxw/r+BPvxi/PsoBdKsUNYHVvjlSfGKpB8p1jTYRxFLeDQbBQMA2 hF5jKfpQDXnhBGQB06Bt1rvHSYs46yv5QPpxqUce8ppctPEt2/faIuTAPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7SuUx2ojY/VUaz2s5fi0PRhFfIMB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSOTOnvh py/FBD4DBaxTUXsZN/+ag89OTYVfqqtmyfwdNcYEZgXUhc27+6uU94cSxnyGQRJV EvI7W5YVWC8DVLn/igoPfMddVULta2ZXcNVP1ACoFn9wWW29Q11vvIT/CluWj+V+ fblGx2PO19rlHqjK9QZ1rr4Rld3OA3qTgTNEDbE/2h9JuAdtdyLPgjIDuDqLDxpW fiF+KeqIbojWbTDlFNkuh42+iJAwzdCo8erRSKZVgYQDt8DTFUxcnugS8AsPysTY aOG/JO2eXpn2Se+TIrsiZOm5krHNn+uw8HSqvISaZipz4c+odE++Da2/0NqY5t+k RQONH5GdTPtZbA== -----END CERTIFICATE-----Generated at Sun Sep 20 23:51:56 2026 by rpki-client