$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json) Hash identifier: 89bkOchfVydWGLajVPJW47q2yk4TryWYpKSews3P7Cg= Subject key identifier: 20:13:6D:3F:0A:72:3F:16:0D:39:E0:0B:FD:8A:ED:07:6C:62:DE:49 Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 01A0BE430A8573ADA38B271D4BCE6A2B9781 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft Manifest number: 1A88 Signing time: Sun 20 Sep 2026 10:00:59 +0000 Manifest this update: Sun 20 Sep 2026 10:00:59 +0000 Manifest next update: Mon 21 Sep 2026 10:00:59 +0000 Files and hashes: 1: 1vioh8WBBr0buk8B9XgCVmy0V3o.roa (hash: lVxYMENWKDi2+Xm9/q5pj8wEEX5duZBJRp4Rcletd04=) 2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: crqJjJ7KGVkxJLtpMXTfznKDlsi+aote2Pw1h5BX7mU=) 3: 7YSwmmnczm-7IoOuL55xSYq-HHI.roa (hash: vmDduHs9ZG5F5GFKgvuSm+LC37gRA2woLVlUVZydjb0=) 4: 9vE-oLNEkTWomT9KtfRKYgQbe4M.roa (hash: LQb4UezprdlbrPADEMd/FMMoJXKoReBOeeaZW2IdkYc=) 5: JEJwDGH6tSVjpBY1h8WbveXmdw8.roa (hash: icAiQJA6CuQCxFfr68wlBhAPrBN1YQOmgCNH/yLz47M=) 6: Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa (hash: /wKLPFXDpkj0IH9BXQz2t3Z6Zu30xSfrRgv+F7NNrik=) 7: POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa (hash: XEgu/Zx2opS3gJcwoKfkscKC5ZLEdb/Tzp9gunYfHco=) 8: fIwE913q7Z06naykIoTvGwGkXuY.roa (hash: EmEG00KHS79oeuuGgXEcyv9se/C+NigaZ2i4jZMNHk4=) 9: l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa (hash: krROF8fyVawsHQ+SK0aUD/ZdvI6BJ/t4uCdSw1pg/M0=) 10: oFDIJtDDBoVGAzKTE9KXRuqWpB4.roa (hash: D3iuhxVPgcaDAoR/HDppm/vmbt+iyscdjkgBVPTDmTU=) 11: qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa (hash: B/LBg8C9uAjoyAk0cD2HRSSI43uSzwvpTqbFgZE/UJc=) 12: rfbJWPwhcMsIzguwyYnSDhcHedA.roa (hash: So+ZZqhyNdhg6nOLV4bqBYBtp42ztDDW9ObzW5Rvhbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:43:0a:85:73:ad:a3:8b:27:1d:4b:ce:6a:2b:97:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Sep 20 10:00:59 2026 GMT Not After : Sep 21 10:00:59 2026 GMT Subject: CN=20136d3f0a723f160d39e00bfd8aed076c62de49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1a:05:76:56:54:ec:d1:ad:8f:66:84:df:74: 4e:65:fe:6e:ff:e2:1e:42:9b:fc:b5:d6:bb:06:ad: a1:ce:9b:96:a0:fc:36:06:f8:ea:f2:91:28:d6:d3: 70:aa:ce:2d:de:2d:f1:8e:6b:cd:a2:25:c9:30:9a: 59:67:07:88:ad:6e:9d:f1:58:14:8f:e8:6a:5d:c8: 98:fe:fc:a3:b9:12:7a:00:cb:e9:41:a1:8a:d1:46: 22:dc:4c:fb:a3:03:36:9d:d9:14:63:a1:50:06:d0: fd:36:a4:8a:d1:d1:d9:e1:2b:d3:1a:14:0c:d5:4c: cb:b6:03:9b:83:5d:e6:79:68:57:b6:27:31:12:9a: 8f:ab:1b:b4:e9:62:46:f9:01:75:60:87:a4:e9:d6: 7c:71:6b:72:a7:a5:51:00:2a:fb:0e:17:ac:cb:e0: a0:81:43:56:d2:9d:f8:ea:e9:de:81:ec:1a:66:f3: 96:ce:a9:21:2e:6e:d4:8b:57:77:74:cd:d1:e3:55: 7a:4b:d8:2b:c2:e9:57:c7:5e:0e:ee:08:a1:a7:f8: 85:e0:46:67:8e:ac:8d:6f:e1:77:9e:f9:e7:de:9f: 02:b7:cc:2e:55:ee:96:af:5d:0d:f0:4e:9b:cd:eb: 92:64:82:7d:4d:f3:66:5f:31:29:b9:55:79:53:29: 29:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:13:6D:3F:0A:72:3F:16:0D:39:E0:0B:FD:8A:ED:07:6C:62:DE:49 X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:59:70:be:1f:9c:8b:43:ce:84:69:90:b0:15:eb:68:19:d2: 56:a7:f9:37:56:41:7a:35:a3:2b:fe:f9:f4:73:1b:50:a8:04: e6:ba:71:15:2f:4b:eb:13:90:34:47:db:2d:68:50:89:34:02: 53:78:a0:f4:71:d6:3c:38:43:00:6a:a4:9b:31:41:e2:ca:05: 1e:fd:6c:69:05:b6:30:35:99:f2:07:74:51:f2:05:f1:5e:a6: 70:ed:b5:70:fa:5d:0b:67:57:47:c4:8a:ee:0d:b4:90:43:a4: 37:9c:32:22:65:74:5e:ee:bc:5a:15:21:4e:f2:69:70:6a:71: b8:2e:27:8f:89:6e:5a:53:e6:84:1d:13:56:60:d6:9f:a5:5b: b0:dc:a6:21:d9:12:5d:e6:b9:72:43:10:2c:56:6b:d0:ea:49: b7:11:36:75:38:65:15:7d:08:cb:e6:a1:4b:d7:f5:fd:11:85: 76:21:9a:a7:73:1f:14:7b:67:66:6a:26:2f:56:5f:92:0c:f8: 73:0f:b9:77:9e:d7:8c:35:14:1f:9a:0c:4a:c1:8d:ab:9a:4e: 12:a3:c6:c4:52:f3:f3:24:04:25:1c:4b:31:be:9b:24:4b:f4: d1:b2:ab:3e:ef:6f:25:f0:3d:c5:b5:73:6d:0d:72:1b:31:e9: b4:d5:dd:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+QwqFc62jiycdS85qK5eBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjYwOTIwMTAwMDU5WhcNMjYwOTIxMTAwMDU5WjAzMTEwLwYDVQQD EygyMDEzNmQzZjBhNzIzZjE2MGQzOWUwMGJmZDhhZWQwNzZjNjJkZTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBoFdlZU7NGtj2aE33ROZf5u/+Ie Qpv8tda7Bq2hzpuWoPw2Bvjq8pEo1tNwqs4t3i3xjmvNoiXJMJpZZweIrW6d8VgU j+hqXciY/vyjuRJ6AMvpQaGK0UYi3Ez7owM2ndkUY6FQBtD9NqSK0dHZ4SvTGhQM 1UzLtgObg13meWhXticxEpqPqxu06WJG+QF1YIek6dZ8cWtyp6VRACr7Dhesy+Cg gUNW0p346unegewaZvOWzqkhLm7Ui1d3dM3R41V6S9grwulXx14O7gihp/iF4EZn jqyNb+F3nvnn3p8Ct8wuVe6Wr10N8E6bzeuSZIJ9TfNmXzEpuVV5UykpRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCATbT8Kcj8WDTngC/2K7QdsYt5JMB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1lwvh+c i0POhGmQsBXraBnSVqf5N1ZBejWjK/759HMbUKgE5rpxFS9L6xOQNEfbLWhQiTQC U3ig9HHWPDhDAGqkmzFB4soFHv1saQW2MDWZ8gd0UfIF8V6mcO21cPpdC2dXR8SK 7g20kEOkN5wyImV0Xu68WhUhTvJpcGpxuC4nj4luWlPmhB0TVmDWn6VbsNymIdkS Xea5ckMQLFZr0OpJtxE2dThlFX0Iy+ahS9f1/RGFdiGap3MfFHtnZmomL1Zfkgz4 cw+5d57XjDUUH5oMSsGNq5pOEqPGxFLz8yQEJRxLMb6bJEv00bKrPu9vJfA9xbVz bQ1yGzHptNXdPA== -----END CERTIFICATE-----Generated at Sun Sep 20 17:38:22 2026 by rpki-client