$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft File: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json) Hash identifier: c4GbKj7X3Y3klcQXFyy6mUOrBeKZn6xqkqG35aOCBWk= Subject key identifier: D9:9F:E1:D2:70:FF:1A:9F:FE:B7:65:DC:58:09:FD:F3:DC:25:4C:F8 Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Certificate serial: 01A08A8C4F2EA44A75EEC66192065C08C8A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft Manifest number: 1AB4 Signing time: Thu 10 Sep 2026 09:00:46 +0000 Manifest this update: Thu 10 Sep 2026 09:00:46 +0000 Manifest next update: Fri 11 Sep 2026 09:00:46 +0000 Files and hashes: 1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: Tz56USdfCbbIDSfKMmenSOg2/RccD9mOKt2Eo5n0t/k=) 2: 6GUIWwZxGI0_11LUAF2nyD6ApTM.asa (hash: o9hRLFlhcdetNherJ5nziP+ejI2p5Hk/AOSB3fzCgR8=) 3: CyXEon0EjqXOHr8IeWjEVFpMffs.roa (hash: 61FTseLqfGHD+d4UC74A9kaSSpCsOAMcXitG3hvPp+Y=) 4: JMUe3al0pklathcu47XaPUqkjyY.roa (hash: WrIFwPH2vXkQmPfNJ4EO/lLH8xEpJfsA80i818mNAGc=) 5: MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa (hash: 0p22EPcUlrbZ/XQd/L2Yz+06mVzq0rpNkXwnhd7vOv8=) 6: QPupw3rP2f5Jivi4SxaBbGE6eqM.roa (hash: KP++DGfsZGB7GL9ySK3Y6Xgm2FRgB01XieKkXEEpykk=) 7: ccBq--nhlrlj-SQFFud3LvSjHcs.roa (hash: xXhVmuwZaVq/u5W4va4FychwRtt+dYkphzF8S3KVfQI=) 8: lIx0KubEd0NAwKbnWvfavDgfMLw.roa (hash: Z1acY8ho4rEFuqnBBBvS7eEzd1qsRchpuvE7DncwSZE=) 9: ql3vqr1zYIaiPZLR54AHsL7ukAE.roa (hash: NYzCia9uixmAZoiKyWTL4nuIIf69H+HSXVKOLeUMj5c=) 10: yIoTvJJYIR2DNvrmk-NbH6cPask.roa (hash: oUH0ut41s6oEH273QOq+dzXsq0k279TftL1vgV4Jygw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:8c:4f:2e:a4:4a:75:ee:c6:61:92:06:5c:08:c8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Validity Not Before: Sep 10 09:00:46 2026 GMT Not After : Sep 11 09:00:46 2026 GMT Subject: CN=d99fe1d270ff1a9ffeb765dc5809fdf3dc254cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:eb:10:10:41:dc:fe:97:01:71:9c:77:3c: df:0e:fc:4b:fd:7e:76:6f:05:ef:b9:23:1d:cc:dc: f4:3a:bb:a0:eb:f3:38:a0:8c:a0:21:51:c6:f5:61: b9:09:e4:52:b8:12:d8:8a:6d:d7:b2:d4:7b:da:0c: 71:56:60:35:24:03:4e:ca:1a:54:8a:49:22:2e:a9: 33:58:f8:51:c8:eb:75:06:c0:70:9d:15:7f:82:60: 9e:13:c9:cf:95:61:0c:68:3e:10:1e:4f:99:52:5c: f1:aa:12:99:5f:c8:af:4f:76:6d:c1:e9:1e:30:cb: b1:9c:a5:cb:70:0e:88:43:b6:6c:90:5d:56:b0:a8: be:fe:cf:aa:7f:fe:3e:f3:a2:d2:68:5f:0b:37:38: 06:cd:f9:d2:76:85:55:5d:b2:28:08:ea:f8:e8:cf: 0e:d9:bc:91:47:ee:0e:82:e7:a3:63:16:85:00:aa: 76:23:30:ba:80:08:1c:65:63:17:25:22:98:96:2f: a2:b5:28:b8:58:d0:33:24:79:01:0f:53:50:9d:35: 20:0f:3a:94:05:ce:f7:5e:77:16:00:0c:07:5d:be: 4c:82:c3:e7:52:8f:72:5b:16:e4:0e:94:aa:b9:15: c9:6b:b9:07:b6:f8:ba:8a:a1:90:74:4d:ac:cd:d4: fb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9F:E1:D2:70:FF:1A:9F:FE:B7:65:DC:58:09:FD:F3:DC:25:4C:F8 X509v3 Authority Key Identifier: keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:97:16:ec:14:ca:ef:30:21:81:1f:12:78:97:5c:c3:71:75: d7:70:b7:87:8d:b2:7a:bf:2d:81:15:2c:47:11:27:6c:5e:7e: 3d:3d:1f:2f:a7:df:8d:3a:c7:03:1d:50:fa:c1:6a:54:55:1f: 96:5d:e6:52:9f:30:90:59:f4:bc:cc:cd:0c:7d:ac:98:a6:05: 4f:5d:d2:f2:e5:b1:18:ba:55:90:6c:3e:0d:c8:3c:62:d1:bd: e9:8c:69:62:58:2e:f2:bd:8f:26:bf:ae:8e:7b:11:88:99:e0: 15:5f:23:8b:28:cc:e1:1d:8d:03:47:d3:5c:ed:23:08:f2:e2: 64:dc:2b:66:95:5d:3f:ed:8c:58:9b:8b:90:89:bb:a1:22:83: 6f:8d:15:37:91:98:03:9b:a2:10:a7:4e:22:5f:1b:63:a0:74: 8f:c2:3b:f4:3b:67:31:2a:f7:32:d0:4d:18:f9:d7:b5:f0:c3: 6b:1f:de:bd:9f:72:21:87:61:dd:b0:12:46:38:b5:dd:f3:46: 71:64:11:b9:a8:20:69:51:2c:cc:fc:1a:45:d0:56:9b:58:a9: 01:85:55:53:f1:d5:88:7b:ca:07:e8:f0:4b:e7:9a:c5:a0:42: 95:b8:52:52:c9:6c:87:07:5e:23:39:5f:c2:96:ee:ef:65:cb: 3f:ba:8a:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKjE8upEp17sZhkgZcCMinMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3 MWJlZjQwHhcNMjYwOTEwMDkwMDQ2WhcNMjYwOTExMDkwMDQ2WjAzMTEwLwYDVQQD EyhkOTlmZTFkMjcwZmYxYTlmZmViNzY1ZGM1ODA5ZmRmM2RjMjU0Y2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzDrEBBB3P6XAXGcdzzfDvxL/X52 bwXvuSMdzNz0Orug6/M4oIygIVHG9WG5CeRSuBLYim3XstR72gxxVmA1JANOyhpU ikkiLqkzWPhRyOt1BsBwnRV/gmCeE8nPlWEMaD4QHk+ZUlzxqhKZX8ivT3Ztweke MMuxnKXLcA6IQ7ZskF1WsKi+/s+qf/4+86LSaF8LNzgGzfnSdoVVXbIoCOr46M8O 2byRR+4OguejYxaFAKp2IzC6gAgcZWMXJSKYli+itSi4WNAzJHkBD1NQnTUgDzqU Bc73XncWAAwHXb5MgsPnUo9yWxbkDpSquRXJa7kHtvi6iqGQdE2szdT7lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmf4dJw/xqf/rdl3FgJ/fPcJUz4MB8GA1UdIwQY MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt ZTQyYTU4MDY0YTYzLzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5cW7BTK 7zAhgR8SeJdcw3F113C3h42yer8tgRUsRxEnbF5+PT0fL6ffjTrHAx1Q+sFqVFUf ll3mUp8wkFn0vMzNDH2smKYFT13S8uWxGLpVkGw+Dcg8YtG96YxpYlgu8r2PJr+u jnsRiJngFV8jiyjM4R2NA0fTXO0jCPLiZNwrZpVdP+2MWJuLkIm7oSKDb40VN5GY A5uiEKdOIl8bY6B0j8I79DtnMSr3MtBNGPnXtfDDax/evZ9yIYdh3bASRji13fNG cWQRuaggaVEszPwaRdBWm1ipAYVVU/HViHvKB+jwS+eaxaBClbhSUslshwdeIzlf wpbu72XLP7qKTA== -----END CERTIFICATE-----Generated at Thu Sep 10 19:18:55 2026 by rpki-client