$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: d2gvod4mpV3D7SnLtldHuX5n8WsU38S2YW9mIitgF5Y= Subject key identifier: 2D:AC:40:E8:41:2F:44:27:7E:46:3F:D5:4A:D5:DD:D2:B4:EC:28:5F Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 01A16C11AE547F96594520F8AC34CB11E4B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 1AF0 Signing time: Sat 24 Oct 2026 04:01:00 +0000 Manifest this update: Sat 24 Oct 2026 04:01:00 +0000 Manifest next update: Sun 25 Oct 2026 04:01:00 +0000 Files and hashes: 1: 7nyu5Fr8-qZBjDHEUfq6_PwiXC8.roa (hash: VfC3vcI2ofuIQtRz8HrlekZCngt14Y4U47LgFaOVG7o=) 2: FVXBitmEbgj_li_6czx1XRbqiNw.roa (hash: R8xG/GltnW5vfmFXsInhF+U1K0ZAPEo6gDTassjkZ70=) 3: FgBhFfbpwOIh2yLDcYR6t3XYeXI.roa (hash: Xt2Do+PhLFCTF4jZSTOrbDv16PG0FRvMZ65nQcWYGuI=) 4: InntupDduHTVC0cqwDJelb8weXU.roa (hash: vHmmc3H3npnTsbFFZD1XCanAu6wqCMRYNLCV88QKsTY=) 5: KTOGyEIzZTvz0cK9QLa-fpUPjxQ.roa (hash: QEovE649tWS9gIrwPoqmHnxEiPeuGa3E2iwZoAPFly4=) 6: Pr4mDq76semd9HzVIDKeDMYvVQQ.roa (hash: FDZv7C+onU2+GR6E81dEXEL21YIE7+gux++CAkqFZL8=) 7: RQvbDSqBfaVu6td-sVHc8kS0AMI.roa (hash: KdkxzAaIeA05KUt11r/+FMtzXvFNEQ4QHFKm2YSq46I=) 8: crlxWYRKnMsCCBJ1tth-hPygkaA.roa (hash: evxq4WD5Z/WNje3kIBlBqohmCQYIqt7B3zr5TFR6NKs=) 9: l20iodI7qHF5vK-NH6_rVPCVyQM.roa (hash: OGH43ltJUkqqtDPaQP0DDDhIoPXBMr7s0StXwhpwKJo=) 10: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: 2i2NAEVaw9K/K6i8uJNa9P/cI04U1AHfVS6+p+ZHDJ8=) 11: x5Spo4-FeBNDNeijBeVZFRWlHuk.roa (hash: 8PshAgwgd0COcwcGY0rg4RaGlhmmQFcQWaE/0hoihqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 20:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:6c:11:ae:54:7f:96:59:45:20:f8:ac:34:cb:11:e4:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Oct 24 04:01:00 2026 GMT Not After : Oct 25 04:01:00 2026 GMT Subject: CN=2dac40e8412f44277e463fd54ad5ddd2b4ec285f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:ed:11:df:a4:34:14:57:56:35:c0:98:05: a1:01:c9:f2:f5:e2:74:b4:57:22:42:08:70:fd:5f: e2:82:f1:c7:4e:7c:9f:f3:a5:63:aa:6f:16:7d:cd: 98:b8:7e:98:bd:9f:59:c5:76:9b:f2:13:dc:c9:cc: f4:99:26:f7:bb:ed:bc:d1:d7:44:7c:14:a7:dc:a3: 24:44:6a:6b:5c:c5:52:09:85:b6:56:b4:a7:c0:4c: b9:68:a0:3c:76:51:37:61:ae:7b:9a:59:89:57:03: 99:57:94:ad:ba:db:93:11:85:1b:5f:1d:5f:36:84: 83:6f:c9:1b:61:41:02:95:91:b2:0d:78:ac:f2:cb: 54:8b:64:28:59:18:f5:b7:57:87:9e:44:e7:3c:a7: 6b:6c:bc:6e:5b:c4:f2:78:53:a6:87:cc:95:bf:69: 58:b6:4b:07:f2:ed:d4:b2:31:4b:b0:57:c9:45:61: ce:36:99:62:6c:63:ab:f6:03:78:bb:23:3a:14:ed: bd:76:f9:1d:49:5c:42:db:a8:78:ce:dc:f8:ec:2d: 78:cb:65:2a:cb:58:e8:05:08:9a:b1:dc:7a:5d:38: e5:2c:18:37:59:62:f6:ae:6e:15:68:e5:af:25:bd: 48:ff:3b:6e:f4:a7:60:16:e0:e9:6c:8d:97:ad:f7: e1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AC:40:E8:41:2F:44:27:7E:46:3F:D5:4A:D5:DD:D2:B4:EC:28:5F X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:7a:fb:f9:bf:14:03:3f:6a:bb:bb:c4:37:3e:a8:f3:dc:7d: 00:b5:d3:7b:e6:bb:5a:a2:3b:2e:8f:bc:62:90:d0:11:87:49: 5f:5d:ec:07:c1:f1:36:aa:7a:f0:ff:79:e1:95:10:cb:7e:1b: 12:b2:a3:43:45:fa:a3:d0:f0:e7:7b:b4:c6:07:94:5d:61:55: 5b:49:91:78:aa:a4:5f:4e:f5:d2:36:44:6b:55:be:48:51:6d: 78:73:3e:52:5d:38:17:e9:a2:d1:a5:19:f4:89:f4:3a:45:24: 6a:2f:3e:d0:84:ac:14:06:96:08:98:22:e9:80:52:49:f8:ac: 16:74:cf:78:11:a9:1b:58:aa:2b:8a:9a:40:ea:46:b2:71:f7: ca:5a:5c:3f:b4:34:40:28:cb:2b:3e:2f:b0:12:08:f1:ea:a7: 67:b6:6f:d7:fa:97:d7:7d:29:d4:38:7c:a2:d1:98:1e:d7:67: ac:44:4b:cc:b5:37:bb:e0:0d:ae:1e:bc:9b:b2:b3:5d:cc:6c: 21:2b:36:15:b4:a1:f6:35:0f:ca:00:2a:c4:b8:ec:a4:47:40: 72:8d:4e:7e:c9:83:36:33:91:45:12:a4:13:c6:2a:16:7c:66: 25:c1:7e:b2:5f:9d:85:96:b9:c2:64:08:8a:e4:72:08:54:f5: 10:21:19:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFsEa5Uf5ZZRSD4rDTLEeS5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjYxMDI0MDQwMTAwWhcNMjYxMDI1MDQwMTAwWjAzMTEwLwYDVQQD EygyZGFjNDBlODQxMmY0NDI3N2U0NjNmZDU0YWQ1ZGRkMmI0ZWMyODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0DtEd+kNBRXVjXAmAWhAcny9eJ0 tFciQghw/V/igvHHTnyf86Vjqm8Wfc2YuH6YvZ9ZxXab8hPcycz0mSb3u+280ddE fBSn3KMkRGprXMVSCYW2VrSnwEy5aKA8dlE3Ya57mlmJVwOZV5StutuTEYUbXx1f NoSDb8kbYUEClZGyDXis8stUi2QoWRj1t1eHnkTnPKdrbLxuW8TyeFOmh8yVv2lY tksH8u3UsjFLsFfJRWHONplibGOr9gN4uyM6FO29dvkdSVxC26h4ztz47C14y2Uq y1joBQiasdx6XTjlLBg3WWL2rm4VaOWvJb1I/ztu9KdgFuDpbI2XrffhjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2sQOhBL0QnfkY/1UrV3dK07ChfMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXr7+b8U Az9qu7vENz6o89x9ALXTe+a7WqI7Lo+8YpDQEYdJX13sB8HxNqp68P954ZUQy34b ErKjQ0X6o9Dw53u0xgeUXWFVW0mReKqkX0710jZEa1W+SFFteHM+Ul04F+mi0aUZ 9In0OkUkai8+0ISsFAaWCJgi6YBSSfisFnTPeBGpG1iqK4qaQOpGsnH3ylpcP7Q0 QCjLKz4vsBII8eqnZ7Zv1/qX130p1Dh8otGYHtdnrERLzLU3u+ANrh68m7KzXcxs ISs2FbSh9jUPygAqxLjspEdAco1OfsmDNjORRRKkE8YqFnxmJcF+sl+dhZa5wmQI iuRyCFT1ECEZRg== -----END CERTIFICATE-----Generated at Sat Oct 24 07:04:05 2026 by rpki-client