$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: MZ7ytgJ9CeTKSPbmiJI+rUD2Re4QbGcn9xcQufWs4L0= Subject key identifier: 39:23:59:61:D8:16:C2:46:51:D5:A2:16:0E:66:1E:C0:E3:F1:2D:1E Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 01A0C5C5002483644D92ED16E1ACB1B650F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 1401 Signing time: Mon 21 Sep 2026 21:00:17 +0000 Manifest this update: Mon 21 Sep 2026 21:00:17 +0000 Manifest next update: Tue 22 Sep 2026 21:00:17 +0000 Files and hashes: 1: 1zdYV17WT7I3TXSQzHhVO7RGIDE.roa (hash: ic+QDZW/iaOfXxz3MlR5QNaF9pen8QrjZ3oMD7NWMNg=) 2: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=) 3: E2xtWZV4AV3kjahi3ya1WwpYjn8.roa (hash: eiCt2qdwFMu87Um/GEdb7fiVQB0BZPI+XYBSTsuRYnE=) 4: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=) 5: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=) 6: WrVfx5xIOyU0VfM4lWHO9zuUBec.roa (hash: XiwYRUE8TPoWMz3FqnBDZHH2r5WpV+Blp9EaBYJYRms=) 7: Zj4CimCazX5aQkiTy0v6Bth5jY0.roa (hash: LI2qWr9NKIdpnEssjh+tl7eWkcbWzEM25rITA+Kd1d0=) 8: Zl7668QzqgpWXy6sh2FJjPCuQUA.roa (hash: 2zmfb9kNRpLa+/F5r/g7AhSNh6Z8kYBICxLEIcI8yZM=) 9: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=) 10: b3hSMqZucbTEWGNrQwAs2IFGkRw.roa (hash: z/yFesinyEyBrIjdwqEECuXJOsbqlJbwdnSENUJBacc=) 11: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=) 12: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: YaxA3Q9lgu+A4dBs4hUa+D2tJomSRoQhTHpEEI/bCTA=) 13: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:c5:00:24:83:64:4d:92:ed:16:e1:ac:b1:b6:50:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Sep 21 21:00:17 2026 GMT Not After : Sep 22 21:00:17 2026 GMT Subject: CN=39235961d816c24651d5a2160e661ec0e3f12d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9c:83:63:52:97:84:3c:50:4f:58:99:b7:2d: 71:5c:f7:d2:95:c7:12:69:db:80:41:43:79:62:b0: 45:c5:2a:4a:5e:00:39:11:28:ad:5b:01:b8:ec:24: 11:c9:c9:c1:1a:1f:27:9b:e1:f6:55:74:34:f6:f2: 33:4d:26:7f:a6:1f:6a:ed:66:17:34:bd:75:8a:e3: 0f:ed:cd:29:fa:3a:a3:60:d8:2f:1e:e0:ba:bc:fa: 07:b4:48:77:6d:91:77:d0:f1:c2:bf:95:df:5d:56: 11:09:11:dd:de:8f:08:87:b7:24:2b:27:88:a8:43: 19:ed:33:87:f0:de:5f:dc:da:29:53:19:8c:a0:73: ca:ae:12:81:8e:6f:56:65:95:21:30:3f:23:63:58: a4:5d:6b:d4:37:b2:39:58:a5:ed:93:7e:bc:b8:1d: a0:b8:7f:fd:b8:6e:97:8b:34:63:38:52:82:d5:bb: 53:19:f9:e0:a2:1e:13:b3:a5:54:3e:2d:c0:eb:30: ce:1f:a9:0e:1e:bb:4c:1e:b4:40:ec:a7:f2:dc:87: ad:23:8f:13:66:98:27:d5:52:31:52:fa:58:58:a3: 8e:64:9a:7b:d1:0d:59:75:0d:f2:47:52:38:75:60: 9e:83:93:03:3a:01:4b:0d:52:32:42:c8:4d:84:d2: 33:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:23:59:61:D8:16:C2:46:51:D5:A2:16:0E:66:1E:C0:E3:F1:2D:1E X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:70:c2:d6:e6:9d:bc:77:77:02:73:74:22:97:41:26:58:1c: 3f:a9:14:06:74:f0:88:6d:bd:e6:ff:4e:67:ae:5f:b4:c6:39: fa:fa:9e:c0:ac:d5:e3:be:b0:9d:c0:47:15:a8:76:6d:76:7d: c8:9e:03:06:96:1b:ad:d9:5c:da:76:05:ee:7b:24:47:ff:60: e2:b2:27:45:41:15:b6:f6:95:d7:5e:e5:cf:c4:1e:d7:5f:9d: f8:57:e4:5b:64:1f:fc:51:33:f4:60:00:6b:0e:6b:79:e9:27: cb:a8:cc:6b:18:5e:5b:0f:c3:77:ef:1d:81:f4:1f:ce:90:ec: 22:f1:79:8c:4a:df:0a:b0:4f:94:12:79:a2:2a:cf:f8:81:db: a4:1a:0b:b1:e6:ae:6e:fe:a7:d1:6f:ca:2c:af:d7:bf:a8:13: fe:f8:9a:24:f3:66:28:53:a3:9e:0e:0b:bf:a6:53:8d:b2:e1: 86:65:60:9a:c7:3b:00:41:9b:f3:7f:9c:d5:f7:de:20:34:08: 05:86:23:9d:b7:e8:8e:62:33:dc:bc:1e:c8:39:3e:64:fe:06: b8:49:a7:9c:61:78:6c:e6:b6:6a:0a:8e:0c:d6:e5:80:61:c3: 81:e9:92:8c:27:25:54:65:fa:f4:dc:10:a1:5b:b7:82:eb:de: 51:49:54:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDFxQAkg2RNku0W4ayxtlD0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYwOTIxMjEwMDE3WhcNMjYwOTIyMjEwMDE3WjAzMTEwLwYDVQQD EygzOTIzNTk2MWQ4MTZjMjQ2NTFkNWEyMTYwZTY2MWVjMGUzZjEyZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pyDY1KXhDxQT1iZty1xXPfSlccS aduAQUN5YrBFxSpKXgA5ESitWwG47CQRycnBGh8nm+H2VXQ09vIzTSZ/ph9q7WYX NL11iuMP7c0p+jqjYNgvHuC6vPoHtEh3bZF30PHCv5XfXVYRCRHd3o8Ih7ckKyeI qEMZ7TOH8N5f3NopUxmMoHPKrhKBjm9WZZUhMD8jY1ikXWvUN7I5WKXtk368uB2g uH/9uG6XizRjOFKC1btTGfngoh4Ts6VUPi3A6zDOH6kOHrtMHrRA7Kfy3IetI48T Zpgn1VIxUvpYWKOOZJp70Q1ZdQ3yR1I4dWCeg5MDOgFLDVIyQshNhNIzQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkjWWHYFsJGUdWiFg5mHsDj8S0eMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHDC1uad vHd3AnN0IpdBJlgcP6kUBnTwiG295v9OZ65ftMY5+vqewKzV476wncBHFah2bXZ9 yJ4DBpYbrdlc2nYF7nskR/9g4rInRUEVtvaV117lz8Qe11+d+FfkW2Qf/FEz9GAA aw5reekny6jMaxheWw/Dd+8dgfQfzpDsIvF5jErfCrBPlBJ5oirP+IHbpBoLseau bv6n0W/KLK/Xv6gT/viaJPNmKFOjng4Lv6ZTjbLhhmVgmsc7AEGb83+c1ffeIDQI BYYjnbfojmIz3LweyDk+ZP4GuEmnnGF4bOa2agqODNblgGHDgemSjCclVGX69NwQ oVu3guveUUlUNw== -----END CERTIFICATE-----Generated at Tue Sep 22 00:23:30 2026 by rpki-client