$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: gGPzBHryH578EGrxLK3zQs3cDrLnQYKqcRiX7gkibdI= Subject key identifier: 37:60:3F:E8:D4:63:C8:19:17:E7:2E:C2:8B:24:63:60:F8:B8:46:F7 Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 01A16A234C467DBDED6588F7EB71B2DB0433 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 1AEF Signing time: Fri 23 Oct 2026 19:01:00 +0000 Manifest this update: Fri 23 Oct 2026 19:01:00 +0000 Manifest next update: Sat 24 Oct 2026 19:01:00 +0000 Files and hashes: 1: 7nyu5Fr8-qZBjDHEUfq6_PwiXC8.roa (hash: VfC3vcI2ofuIQtRz8HrlekZCngt14Y4U47LgFaOVG7o=) 2: FVXBitmEbgj_li_6czx1XRbqiNw.roa (hash: R8xG/GltnW5vfmFXsInhF+U1K0ZAPEo6gDTassjkZ70=) 3: FgBhFfbpwOIh2yLDcYR6t3XYeXI.roa (hash: Xt2Do+PhLFCTF4jZSTOrbDv16PG0FRvMZ65nQcWYGuI=) 4: InntupDduHTVC0cqwDJelb8weXU.roa (hash: vHmmc3H3npnTsbFFZD1XCanAu6wqCMRYNLCV88QKsTY=) 5: KTOGyEIzZTvz0cK9QLa-fpUPjxQ.roa (hash: QEovE649tWS9gIrwPoqmHnxEiPeuGa3E2iwZoAPFly4=) 6: Pr4mDq76semd9HzVIDKeDMYvVQQ.roa (hash: FDZv7C+onU2+GR6E81dEXEL21YIE7+gux++CAkqFZL8=) 7: RQvbDSqBfaVu6td-sVHc8kS0AMI.roa (hash: KdkxzAaIeA05KUt11r/+FMtzXvFNEQ4QHFKm2YSq46I=) 8: crlxWYRKnMsCCBJ1tth-hPygkaA.roa (hash: evxq4WD5Z/WNje3kIBlBqohmCQYIqt7B3zr5TFR6NKs=) 9: l20iodI7qHF5vK-NH6_rVPCVyQM.roa (hash: OGH43ltJUkqqtDPaQP0DDDhIoPXBMr7s0StXwhpwKJo=) 10: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: i1Cpz+0w+V7HiLiwuGXLt4IxSMi5ZJ0BY3us/EcM45w=) 11: x5Spo4-FeBNDNeijBeVZFRWlHuk.roa (hash: 8PshAgwgd0COcwcGY0rg4RaGlhmmQFcQWaE/0hoihqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 19:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:6a:23:4c:46:7d:bd:ed:65:88:f7:eb:71:b2:db:04:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Oct 23 19:01:00 2026 GMT Not After : Oct 24 19:01:00 2026 GMT Subject: CN=37603fe8d463c81917e72ec28b246360f8b846f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:2d:49:6f:e6:86:bc:eb:87:27:c6:20:da: 63:c5:55:03:7a:38:b2:6b:61:e3:28:cd:73:99:20: 0b:78:e6:04:35:48:93:24:c3:c3:e5:55:80:1e:60: 13:dd:5c:41:b7:69:82:83:4c:fd:f4:42:9e:5d:97: bf:d4:63:5a:4e:bd:94:5f:4a:5d:42:70:57:34:80: 78:05:08:73:ad:0b:1b:fd:7e:80:ca:ac:7f:80:c4: 46:bf:a1:3d:1b:60:a4:77:57:ea:41:52:d9:9f:a2: cc:46:4b:00:82:8e:87:1c:33:4a:96:ab:2f:ee:2b: 15:07:0e:2c:49:47:d6:89:cc:3b:1d:6b:f3:fb:27: 7c:28:de:71:4c:50:81:aa:5e:d5:15:72:0c:6c:c3: 91:b4:df:07:3c:a0:66:0f:9e:5f:fa:95:21:1b:a1: dc:75:8d:0c:6e:d5:95:8c:46:c2:bb:f3:6c:40:13: ee:5c:22:34:f6:6a:87:ca:7a:14:69:ca:b0:f3:c3: e1:ff:c5:6e:7b:fd:12:eb:21:21:d4:41:17:5f:6c: c5:9b:5e:63:d7:3c:36:18:65:6f:b2:ca:f9:ff:9a: 8f:3e:03:66:f4:3d:64:ad:70:d2:66:da:ca:db:e0: 16:1d:4a:c6:74:15:21:e6:89:55:be:b2:02:85:b0: 99:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:60:3F:E8:D4:63:C8:19:17:E7:2E:C2:8B:24:63:60:F8:B8:46:F7 X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:a4:1f:3f:34:74:f2:0f:ec:17:29:b5:27:06:92:d7:10:e3: 02:db:fb:8f:57:57:0d:52:b1:ef:86:b3:ab:d0:b5:cb:45:c9: 6d:81:3f:47:e8:e3:cb:6d:90:d4:e2:24:65:e1:e2:36:5f:e9: 5c:e8:a2:b2:87:96:56:16:51:75:8c:ad:44:62:77:82:cd:f9: 8e:dd:a0:1c:cf:0e:47:d4:82:84:e6:ca:b2:cd:48:58:20:a4: b4:09:52:ff:1a:75:6c:5d:d9:55:1c:0a:16:4b:58:01:a9:ff: 0a:ee:06:7e:4c:5e:1b:d1:f5:36:15:b0:64:ed:a8:90:33:91: de:3e:4f:60:3e:4f:e3:47:1e:34:c0:5a:bf:36:11:e5:10:c1: 04:ea:b8:87:03:de:3d:8f:5e:b6:90:7d:e5:53:f7:bd:7f:92: dd:9f:dc:59:bc:a6:2a:ab:39:43:93:49:4e:48:8e:9e:61:2f: cf:cd:45:ce:13:27:e7:16:4f:a6:7c:ba:ef:47:c2:5e:27:11: eb:f8:75:6d:02:ae:84:90:15:62:f5:d3:88:d0:c2:78:7a:5f: 97:fe:d9:51:5f:fe:68:e9:d4:2c:9e:5a:54:32:65:c5:90:a1: ea:85:6f:e0:bf:bb:59:0b:c5:e1:f6:78:00:53:2e:10:89:51: 3f:c1:61:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFqI0xGfb3tZYj363Gy2wQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjYxMDIzMTkwMTAwWhcNMjYxMDI0MTkwMTAwWjAzMTEwLwYDVQQD EygzNzYwM2ZlOGQ0NjNjODE5MTdlNzJlYzI4YjI0NjM2MGY4Yjg0NmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvEtSW/mhrzrhyfGINpjxVUDejiy a2HjKM1zmSALeOYENUiTJMPD5VWAHmAT3VxBt2mCg0z99EKeXZe/1GNaTr2UX0pd QnBXNIB4BQhzrQsb/X6Ayqx/gMRGv6E9G2Ckd1fqQVLZn6LMRksAgo6HHDNKlqsv 7isVBw4sSUfWicw7HWvz+yd8KN5xTFCBql7VFXIMbMORtN8HPKBmD55f+pUhG6Hc dY0MbtWVjEbCu/NsQBPuXCI09mqHynoUacqw88Ph/8Vue/0S6yEh1EEXX2zFm15j 1zw2GGVvssr5/5qPPgNm9D1krXDSZtrK2+AWHUrGdBUh5olVvrIChbCZyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdgP+jUY8gZF+cuwoskY2D4uEb3MB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA46QfPzR0 8g/sFym1JwaS1xDjAtv7j1dXDVKx74azq9C1y0XJbYE/R+jjy22Q1OIkZeHiNl/p XOiisoeWVhZRdYytRGJ3gs35jt2gHM8OR9SChObKss1IWCCktAlS/xp1bF3ZVRwK FktYAan/Cu4GfkxeG9H1NhWwZO2okDOR3j5PYD5P40ceNMBavzYR5RDBBOq4hwPe PY9etpB95VP3vX+S3Z/cWbymKqs5Q5NJTkiOnmEvz81FzhMn5xZPpny670fCXicR 6/h1bQKuhJAVYvXTiNDCeHpfl/7ZUV/+aOnULJ5aVDJlxZCh6oVv4L+7WQvF4fZ4 AFMuEIlRP8Fh/g== -----END CERTIFICATE-----Generated at Sat Oct 24 05:28:57 2026 by rpki-client