$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: IvDUDnD3sKL4zDKM3S938fxttJQCKtrieRr6HxyuHek= Subject key identifier: 8D:70:9F:5E:15:CC:9B:FD:A3:59:27:7F:83:A9:68:BA:E4:3F:E9:0D Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 01A17401FC3F80F87691B384535D01E6A670 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 145C Signing time: Sun 25 Oct 2026 17:00:49 +0000 Manifest this update: Sun 25 Oct 2026 17:00:49 +0000 Manifest next update: Mon 26 Oct 2026 17:00:49 +0000 Files and hashes: 1: 1zdYV17WT7I3TXSQzHhVO7RGIDE.roa (hash: ic+QDZW/iaOfXxz3MlR5QNaF9pen8QrjZ3oMD7NWMNg=) 2: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=) 3: E2xtWZV4AV3kjahi3ya1WwpYjn8.roa (hash: eiCt2qdwFMu87Um/GEdb7fiVQB0BZPI+XYBSTsuRYnE=) 4: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=) 5: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=) 6: Zj4CimCazX5aQkiTy0v6Bth5jY0.roa (hash: LI2qWr9NKIdpnEssjh+tl7eWkcbWzEM25rITA+Kd1d0=) 7: Zl7668QzqgpWXy6sh2FJjPCuQUA.roa (hash: 2zmfb9kNRpLa+/F5r/g7AhSNh6Z8kYBICxLEIcI8yZM=) 8: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=) 9: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=) 10: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: b+FyUCbn1qH3J1KLcnXtoSFtqCXX+z+qrzZeHMDceFE=) 11: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=) 12: n02-ZYJ9m5SZhrBqWk_1khgF-c4.roa (hash: 5LLo9UejeR5e6s24U5EcKRFzvnsIV1B+TelnGxofLbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 15:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:74:01:fc:3f:80:f8:76:91:b3:84:53:5d:01:e6:a6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Oct 25 17:00:49 2026 GMT Not After : Oct 26 17:00:49 2026 GMT Subject: CN=8d709f5e15cc9bfda359277f83a968bae43fe90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:36:f3:9d:d3:77:d7:1c:8e:75:1a:eb:c7:b2: f8:74:c3:00:02:63:49:a2:4c:b8:36:7c:41:d2:ab: 21:b8:3f:7e:a9:9d:bd:4d:35:cc:44:37:f1:2a:a1: 10:d2:4d:e3:98:b9:2c:07:db:17:2c:de:b3:26:67: 1e:0f:25:e1:c9:bb:6f:b1:55:6c:a4:22:a8:9d:5b: 0a:fe:bc:95:4e:39:f7:30:d6:82:0f:ff:35:05:cd: 5a:dd:41:96:e2:5f:f1:1a:0c:ea:7f:16:de:9b:c3: ce:1a:47:ee:3f:ea:8b:b0:a1:dd:92:43:1b:44:70: 7d:b4:73:f6:6d:84:88:6b:a6:3d:56:4e:e3:0e:ce: b2:a4:e9:91:b4:0f:91:25:fa:13:c8:32:bf:24:fe: 71:59:78:ac:e8:fd:05:55:0e:cf:ca:dc:34:80:11: ba:67:34:ed:6d:00:a8:36:79:85:31:93:d0:8f:c4: 63:7f:b2:48:6c:a5:b9:b2:cb:82:d7:44:b6:c4:3e: 51:b1:d2:35:5a:35:36:69:32:e8:08:e3:4d:2c:37: d8:80:ea:f8:c7:11:cc:21:0a:67:a2:27:d1:e2:4a: bc:d2:64:8a:43:65:7b:62:24:75:b2:95:64:d0:5c: fe:6b:ae:07:af:a3:73:5a:2b:ce:d4:2b:c9:b7:47: 9f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:70:9F:5E:15:CC:9B:FD:A3:59:27:7F:83:A9:68:BA:E4:3F:E9:0D X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d5:22:9e:f1:e4:81:39:5e:32:16:c0:d8:aa:69:ef:55:cd: 73:e0:66:46:8c:2a:21:b3:c0:81:9f:03:cb:60:94:84:2a:c1: 75:30:8f:5e:4a:8b:5d:24:12:94:29:9f:da:49:7e:7d:bf:16: e3:76:ef:21:04:d6:1f:df:06:0e:f9:ff:73:90:95:68:86:6a: f9:ce:a5:6c:7b:a7:89:8a:28:72:81:03:66:92:ce:90:3d:58: f4:75:67:8e:2a:c5:43:46:49:a8:ee:1e:fc:a3:9c:37:b2:5c: 4f:af:db:2c:99:4a:8a:90:67:4a:99:a5:8f:9d:bd:59:54:6b: 0e:7a:45:03:fd:0e:f4:46:90:69:32:16:42:01:3b:31:aa:9d: c1:57:13:7a:06:e0:29:ac:a2:77:6d:df:36:62:a7:77:9b:6e: 07:59:7f:01:d2:4e:16:02:56:f4:47:1d:7f:9f:39:73:f0:c0: 23:f9:52:dc:6c:e6:3d:fd:45:a0:7e:ee:5a:85:4a:ab:ae:74: 4f:9e:aa:52:7c:76:73:d7:28:eb:77:dd:bb:93:d3:a7:02:13: 40:d4:58:a6:e5:e5:27:f4:98:a4:77:7b:d1:d3:ec:f3:ab:2b: 97:d0:a5:bf:ec:e7:57:24:cb:d3:cd:52:87:c8:29:d0:81:11: e8:b5:69:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF0Afw/gPh2kbOEU10B5qZwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYxMDI1MTcwMDQ5WhcNMjYxMDI2MTcwMDQ5WjAzMTEwLwYDVQQD Eyg4ZDcwOWY1ZTE1Y2M5YmZkYTM1OTI3N2Y4M2E5NjhiYWU0M2ZlOTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjbzndN31xyOdRrrx7L4dMMAAmNJ oky4NnxB0qshuD9+qZ29TTXMRDfxKqEQ0k3jmLksB9sXLN6zJmceDyXhybtvsVVs pCKonVsK/ryVTjn3MNaCD/81Bc1a3UGW4l/xGgzqfxbem8POGkfuP+qLsKHdkkMb RHB9tHP2bYSIa6Y9Vk7jDs6ypOmRtA+RJfoTyDK/JP5xWXis6P0FVQ7Pytw0gBG6 ZzTtbQCoNnmFMZPQj8Rjf7JIbKW5ssuC10S2xD5RsdI1WjU2aTLoCONNLDfYgOr4 xxHMIQpnoifR4kq80mSKQ2V7YiR1spVk0Fz+a64Hr6NzWivO1CvJt0efNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1wn14VzJv9o1knf4OpaLrkP+kNMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitUinvHk gTleMhbA2Kpp71XNc+BmRowqIbPAgZ8Dy2CUhCrBdTCPXkqLXSQSlCmf2kl+fb8W 43bvIQTWH98GDvn/c5CVaIZq+c6lbHuniYoocoEDZpLOkD1Y9HVnjirFQ0ZJqO4e /KOcN7JcT6/bLJlKipBnSpmlj529WVRrDnpFA/0O9EaQaTIWQgE7MaqdwVcTegbg Kayid23fNmKnd5tuB1l/AdJOFgJW9Ecdf585c/DAI/lS3GzmPf1FoH7uWoVKq650 T56qUnx2c9co63fdu5PTpwITQNRYpuXlJ/SYpHd70dPs86srl9Clv+znVyTL081S h8gp0IER6LVpdQ== -----END CERTIFICATE-----Generated at Sun Oct 25 21:00:57 2026 by rpki-client