$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json) Hash identifier: IfGRWKZXeTTMT+uV5em5xECdR9jCqvsk8P5ui4EkDiM= Subject key identifier: 74:AB:2A:5E:51:26:A3:A5:11:94:06:E7:45:93:C1:F9:C5:9F:67:E3 Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 01A0C9A23A08AD38C01AB17A5E7D4653ECF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft Manifest number: 1A89 Signing time: Tue 22 Sep 2026 15:00:47 +0000 Manifest this update: Tue 22 Sep 2026 15:00:47 +0000 Manifest next update: Wed 23 Sep 2026 15:00:47 +0000 Files and hashes: 1: 20sKUViZ_Hjr1_tKwt6E16rEi4A.asa (hash: +8vZKz+2gviXypf2joFi3QZPabFG5GEATLlv5LqXS4o=) 2: CvSQt69yariNUKKDqC1XPhdiuj8.roa (hash: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4=) 3: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (hash: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME=) 4: Nc8mzlcMXDBsY7O6ihHQFG1WCgU.asa (hash: iQmoFJHZkfRHhMs5YGfVosqhKZChubT5bE16CXVlGGg=) 5: QOv9AtzM59S_WNU7KUIEWRfJl68.asa (hash: 6O0jKZ/+i/G9w5+oF5K0c5UTn7UqPYc3SNDvmBucH+4=) 6: ZwaHHkAxYbCALztUHzr9t910LSE.roa (hash: awAUeIPVKxbZycfV9eBB6aIDe26Y/5AYawVHPNK3iBw=) 7: a4kSWXHUjeJ3UXaQ-vc8USD7130.asa (hash: lbgYBLK33JoEr+PhrlEn3no20wzVFGeWMxTDLDLfyNY=) 8: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (hash: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs=) 9: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: 3ArJYMMaSWKIOBdRQqw7rkdU14+1yfFdeCVGGYYyVlY=) 10: rcmHaxoTWcNTxZe_mPx7kxySOCM.asa (hash: O6qjpwATHjg2d599LQuSUGaHIPpnCna32+4L4kHdkpE=) 11: s6yVUAmV4-mOF-duMQCYR1UyGIg.roa (hash: s42/lXry+QgyFMd63oGPEQ8IfqkpzCT53ph9km2DlbQ=) 12: xywW8VsvtWulmUgX-o54Ju69bE8.roa (hash: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c9:a2:3a:08:ad:38:c0:1a:b1:7a:5e:7d:46:53:ec:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Sep 22 15:00:47 2026 GMT Not After : Sep 23 15:00:47 2026 GMT Subject: CN=74ab2a5e5126a3a5119406e74593c1f9c59f67e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:37:9e:c1:77:52:2c:44:bc:64:79:7d:c4:8a: 8d:6b:0d:e5:9d:9b:0c:6e:bc:59:24:e3:a5:30:cf: 26:2b:1e:18:a3:70:ad:96:fa:e5:35:69:19:52:78: 4a:da:b0:8f:ff:ef:36:7c:21:f7:31:fa:03:2f:c1: 53:72:e3:58:37:a8:21:53:5d:49:3e:d6:6a:11:53: 72:4b:49:31:7d:ef:ec:bd:01:d4:5e:21:38:5e:7f: 38:a0:c9:ea:ea:7e:f8:fa:ca:3f:4b:98:da:94:92: 11:3b:8c:7f:b2:cd:3e:9b:1f:cf:77:74:2a:43:99: 3f:94:c2:bf:a8:aa:e7:2d:85:8c:d2:10:59:d7:d2: aa:1b:af:2d:93:b4:af:1b:90:71:21:33:11:2d:be: 8a:84:9c:58:87:96:b8:1b:6e:73:da:22:e2:7d:be: 9b:0a:4a:59:88:28:c4:22:07:e1:60:90:a9:a8:6c: 44:5a:82:e1:ac:79:46:2d:72:2a:b4:d3:38:1a:bf: 78:52:bc:0d:15:a4:81:0d:d4:07:92:c8:bf:36:e7: dc:5d:fd:50:cd:25:24:21:40:54:1f:5a:b4:bc:96: 2e:ff:97:cf:fa:64:10:c1:83:2b:9c:8d:ec:f4:ed: 61:1a:dc:30:02:3d:ae:54:76:c3:96:28:a8:68:bc: 27:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AB:2A:5E:51:26:A3:A5:11:94:06:E7:45:93:C1:F9:C5:9F:67:E3 X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ac:65:53:ab:c5:14:ee:bf:16:99:f7:40:18:66:9c:ce:ed: 07:b8:9c:98:c2:2e:06:98:12:63:36:56:cc:2e:04:1b:4c:a8: a4:ce:21:89:70:fd:c1:5b:5a:db:6e:91:e3:1f:ab:fb:50:00: a4:8f:16:a0:4d:67:d3:5a:d0:65:0c:f3:4d:93:e9:fb:33:59: d5:f1:ba:53:c9:ff:57:8f:c4:94:0b:b7:03:d3:5a:16:d9:5e: 51:c7:0b:b6:fb:42:d8:0b:03:dc:f0:e7:03:ad:cb:5a:56:d6: 65:9f:ee:66:9b:a6:58:c1:3e:fc:b1:5b:6b:7e:17:54:dc:e3: 1e:9f:f1:53:da:2b:82:fc:2b:99:7a:46:5c:56:05:d9:25:0f: 14:2e:d9:18:28:31:41:5d:aa:b0:f7:16:85:b0:6d:19:17:7c: ed:52:74:d9:1b:53:a2:46:c6:94:72:c0:a8:b5:51:bf:9e:7e: 05:37:a7:4b:e9:57:0e:68:60:65:e1:9d:13:01:54:44:ce:4c: bd:10:5a:e7:6f:64:10:13:d4:04:92:ab:42:4b:d1:a7:37:2e: 98:69:2c:3b:a5:34:2b:05:21:97:c8:12:6f:8f:b9:32:d6:81: a2:11:d8:27:59:e2:e3:54:03:83:ca:aa:65:f7:94:7b:4a:92: 7b:ed:cb:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDJojoIrTjAGrF6Xn1GU+zxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYwOTIyMTUwMDQ3WhcNMjYwOTIzMTUwMDQ3WjAzMTEwLwYDVQQD Eyg3NGFiMmE1ZTUxMjZhM2E1MTE5NDA2ZTc0NTkzYzFmOWM1OWY2N2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DeewXdSLES8ZHl9xIqNaw3lnZsM brxZJOOlMM8mKx4Yo3CtlvrlNWkZUnhK2rCP/+82fCH3MfoDL8FTcuNYN6ghU11J PtZqEVNyS0kxfe/svQHUXiE4Xn84oMnq6n74+so/S5jalJIRO4x/ss0+mx/Pd3Qq Q5k/lMK/qKrnLYWM0hBZ19KqG68tk7SvG5BxITMRLb6KhJxYh5a4G25z2iLifb6b CkpZiCjEIgfhYJCpqGxEWoLhrHlGLXIqtNM4Gr94UrwNFaSBDdQHksi/NufcXf1Q zSUkIUBUH1q0vJYu/5fP+mQQwYMrnI3s9O1hGtwwAj2uVHbDliioaLwnrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSrKl5RJqOlEZQG50WTwfnFn2fjMB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqxlU6vF FO6/Fpn3QBhmnM7tB7icmMIuBpgSYzZWzC4EG0yopM4hiXD9wVta226R4x+r+1AA pI8WoE1n01rQZQzzTZPp+zNZ1fG6U8n/V4/ElAu3A9NaFtleUccLtvtC2AsD3PDn A63LWlbWZZ/uZpumWME+/LFba34XVNzjHp/xU9orgvwrmXpGXFYF2SUPFC7ZGCgx QV2qsPcWhbBtGRd87VJ02RtTokbGlHLAqLVRv55+BTenS+lXDmhgZeGdEwFURM5M vRBa529kEBPUBJKrQkvRpzcumGksO6U0KwUhl8gSb4+5MtaBohHYJ1ni41QDg8qq ZfeUe0qSe+3LqA== -----END CERTIFICATE-----Generated at Tue Sep 22 22:27:00 2026 by rpki-client