$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft File: UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft (raw, json) Hash identifier: qONp0gkNQLccgGsdJhTN9h7ufUjk2Y0hzXbb8Qf+PpU= Subject key identifier: AB:A2:89:47:51:A5:22:A6:08:F9:FE:6C:33:FF:3F:95:60:46:79:F4 Authority key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1 Certificate issuer: /CN=519d802caf9aa8f427f1dd08556c89995f0478d1 Certificate serial: 01A1893FCE2AADAD91241C115C11E48D7D20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft Manifest number: 0121 Signing time: Thu 29 Oct 2026 20:00:22 +0000 Manifest this update: Thu 29 Oct 2026 20:00:22 +0000 Manifest next update: Fri 30 Oct 2026 20:00:22 +0000 Files and hashes: 1: 2B2WsXFKrE0PsjMLGDLFgrkoQHk.roa (hash: I2f8cSCJ55gr+41EbqG2bCbVCSI6WYHHpiTlmKWKwag=) 2: 351arMODSIyd3CJc9fgPAtsmlNI.roa (hash: Yo2IiguJDajHZ2abX/Lenjc2Oi/XsPFxr+IXj+TfOw0=) 3: O1bRHs3xt5FsIbl_ziUUS70e2Oo.roa (hash: GDAX7A9G25jk6iCRuWUSO9OYN1CP4Rha8hkEH61irKE=) 4: QnubMT8LlGCKqDGLx2msA8oQFZE.roa (hash: F29CsKJrPeic4M/8FQtLYPOvQ2ukLb2sF2KJke9Fycg=) 5: TVciBvbG1XVG5ssHlr4AadQK2fk.roa (hash: QwF4SWXY6yBXWUo8zo5vTIE9qB3GoAOkQodC/dlqVwc=) 6: UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl (hash: OdF6Dv1TPrLTqBUyphiH1N9v0VbQwyrp5EXWsKIHpJo=) 7: hs3fngFJt1NiocNCIA7qGPYWsTU.roa (hash: ToEvpANK+Yu0KXslqAyftUZpThJvK58TLmLx0aI2m1A=) 8: q8Tmc6EzFqnUmMxMTIt9c3dEYxI.roa (hash: v/Ru9OVe1/q99gN31o9CAbNDujPce0SS4XxW2atJ/R0=) 9: slPI9aN-JbfbvX_GY814pCJ8UFA.roa (hash: EeGAyjsGw6lAKae9brKTE8ngKeD+Md25/vDKFnzwqig=) 10: tm-LFqSPmanwgI1syFmGkI6nKdc.roa (hash: lIW2bmaFFTJOzvB2HW/qgxs6vnJmoBOrm3elLnIZeZI=) 11: tygQWENVMllkytSnL6uy2BmJtDA.roa (hash: NRsdT+DiuF+skvZYNUC1kJYT3am+ZHBeil1YQrMV2pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Oct 2026 14:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:89:3f:ce:2a:ad:ad:91:24:1c:11:5c:11:e4:8d:7d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=519d802caf9aa8f427f1dd08556c89995f0478d1 Validity Not Before: Oct 29 20:00:22 2026 GMT Not After : Oct 30 20:00:22 2026 GMT Subject: CN=aba2894751a522a608f9fe6c33ff3f95604679f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:e1:0c:2c:ce:a0:47:9e:15:ab:a4:02:07: ac:e3:68:9b:6c:57:a8:97:5d:33:fe:de:74:ba:30: 2b:c8:a7:d2:2d:e9:58:18:c4:af:8c:18:a4:2a:82: 74:1f:de:bf:c2:98:40:ea:50:17:72:8b:12:d8:13: 59:d0:20:78:b8:1a:03:ef:be:9a:5d:c8:67:8b:b2: 5f:8a:45:af:f9:62:58:92:cf:b8:9a:e7:db:24:33: b6:56:62:c2:8e:a7:ad:83:2f:f1:62:a9:f1:fe:81: 60:cd:25:ea:46:b6:1c:04:f4:cf:29:91:21:e1:84: fe:39:12:6b:d2:0a:4b:9c:16:46:7e:d1:4a:51:a1: cc:7b:e1:74:fe:79:27:e1:3e:44:6c:40:17:86:58: b1:ca:61:f3:6f:63:7a:94:df:73:77:38:a2:a5:5b: 55:00:39:5c:3c:e8:67:91:a7:1d:c3:69:b0:34:1b: f2:93:0a:d6:39:89:74:70:5e:82:32:9a:63:af:29: fc:3a:5d:8e:c3:40:ad:5e:e3:fb:61:4c:71:49:02: 90:5b:3d:da:37:45:53:a6:7d:96:da:26:08:55:f7: 65:f0:e9:be:5e:30:30:9f:2c:3e:2f:c8:07:f3:cb: d9:18:a0:73:f0:09:78:7d:53:b4:13:f2:91:91:32: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A2:89:47:51:A5:22:A6:08:F9:FE:6C:33:FF:3F:95:60:46:79:F4 X509v3 Authority Key Identifier: keyid:51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:31:7f:2a:9b:e4:b8:fd:cc:61:02:21:d5:8e:8f:14:68:ee: b3:b5:46:34:d5:4f:30:a1:9d:ff:70:64:c9:2c:59:6b:f5:e0: 14:01:ed:53:f1:b7:81:e2:9e:c6:cc:4c:27:d2:29:0a:c9:38: c7:05:c1:f5:a7:d0:10:9b:c1:28:77:0e:22:6c:b7:8b:11:f7: fd:36:45:e8:2e:bd:55:b7:45:a2:8e:09:45:d2:28:84:5a:4f: 12:67:16:f2:ea:98:63:10:31:dd:9a:74:c7:94:63:58:89:cc: 2e:5a:f2:71:eb:2f:82:0b:1f:37:78:87:d9:54:5f:bf:2d:e0: 0f:14:f4:15:e1:09:22:d3:9b:bf:d4:a8:4d:2e:fe:ca:62:31: 3a:da:70:10:89:14:51:aa:5b:8e:43:17:03:70:4a:db:42:0c: f6:4a:84:a2:49:61:a8:ff:b1:61:f6:ce:71:bb:ea:cb:2c:72: 0f:42:da:30:54:a5:13:b6:ad:ad:fa:46:7a:60:75:bb:32:2f: 22:45:e7:97:e1:aa:4e:93:5f:ae:76:f3:60:1f:dd:b8:56:ae: 24:8d:70:e7:42:f8:6a:d9:60:35:82:b2:58:ab:39:01:d0:e3: 2b:5a:31:fa:df:d5:e1:87:04:c2:37:f4:39:9e:3d:99:76:fc: 99:0a:ae:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGJP84qra2RJBwRXBHkjX0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOWQ4MDJjYWY5YWE4ZjQyN2YxZGQwODU1NmM4OTk5NWYw NDc4ZDEwHhcNMjYxMDI5MjAwMDIyWhcNMjYxMDMwMjAwMDIyWjAzMTEwLwYDVQQD EyhhYmEyODk0NzUxYTUyMmE2MDhmOWZlNmMzM2ZmM2Y5NTYwNDY3OWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjPhDCzOoEeeFaukAges42ibbFeo l10z/t50ujAryKfSLelYGMSvjBikKoJ0H96/wphA6lAXcosS2BNZ0CB4uBoD776a Xchni7JfikWv+WJYks+4mufbJDO2VmLCjqetgy/xYqnx/oFgzSXqRrYcBPTPKZEh 4YT+ORJr0gpLnBZGftFKUaHMe+F0/nkn4T5EbEAXhlixymHzb2N6lN9zdziipVtV ADlcPOhnkacdw2mwNBvykwrWOYl0cF6CMppjryn8Ol2Ow0CtXuP7YUxxSQKQWz3a N0VTpn2W2iYIVfdl8Om+XjAwnyw+L8gH88vZGKBz8Al4fVO0E/KRkTK0RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuiiUdRpSKmCPn+bDP/P5VgRnn0MB8GA1UdIwQY MBaAFFGdgCyvmqj0J/HdCFVsiZlfBHjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jZDM3OWMtYzk1MS00NjMzLWJiNTYt MDcxNzY0NjkwZWNmLzEvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jZDM3OWMtYzk1MS00NjMzLWJiNTYtMDcxNzY0NjkwZWNm LzEvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTF/Kpvk uP3MYQIh1Y6PFGjus7VGNNVPMKGd/3BkySxZa/XgFAHtU/G3geKexsxMJ9IpCsk4 xwXB9afQEJvBKHcOImy3ixH3/TZF6C69VbdFoo4JRdIohFpPEmcW8uqYYxAx3Zp0 x5RjWInMLlrycesvggsfN3iH2VRfvy3gDxT0FeEJItObv9SoTS7+ymIxOtpwEIkU UapbjkMXA3BK20IM9kqEoklhqP+xYfbOcbvqyyxyD0LaMFSlE7atrfpGemB1uzIv IkXnl+GqTpNfrnbzYB/duFauJI1w50L4atlgNYKyWKs5AdDjK1ox+t/V4YcEwjf0 OZ49mXb8mQquhA== -----END CERTIFICATE-----Generated at Thu Oct 29 22:51:28 2026 by rpki-client