$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json) Hash identifier: 2CGJlRxj6s0+AUVGRPmCUhcjoerTdxTr1wqYXKMOZ7I= Subject key identifier: EA:AC:11:CF:3F:64:65:8D:99:65:F7:35:55:34:4B:0F:B7:FA:41:F6 Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 01A17EF3E92F30ED5BA360017A39BD20E5D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft Manifest number: 1B03 Signing time: Tue 27 Oct 2026 20:01:16 +0000 Manifest this update: Tue 27 Oct 2026 20:01:16 +0000 Manifest next update: Wed 28 Oct 2026 20:01:16 +0000 Files and hashes: 1: 30puVpgFRN4YwWi8xzX_Z-3HoMc.roa (hash: o5oIpcyar+M+5831YpDbcIJBS5S/FPLnrUPDm/0y3l0=) 2: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: l2j+PuNgB+EsLVIjS6kg/suluU7mS0lV0SNZip7WJog=) 3: 5FnusIit9uaVrldhOS_f_neDWgs.roa (hash: Ipdoz4T//FSaZhmjoZKN6wB6EyXA0tHqJzEOkgjKWOo=) 4: 6VMAkTg85zv_RNH9ZiPNPZuWCW8.roa (hash: Lpm2qdKvSHv1n64+iddb1tvoxMF6Y4LQAfrzqafISLM=) 5: B43PKu9zFU7-_KCXTuxzDe93OU0.roa (hash: friYQXieb4/RtWvPCW9C35Zt9vuRnu7Qsl+CY5jbJEs=) 6: Jmz4FnP7cL-QtALX1djqMHOUM6o.roa (hash: Eo0kFSBPojZrMatbz2kLZgOLTkqJ3viplyIKQqqpV8Q=) 7: QpckzCGCQYLYhpr74LAr4qnTXpU.roa (hash: KyNF1FltPbO/mXuIELm3YgjGIsFSe1HCrIqcFEBwYhc=) 8: V7fO1Dal8JtSLG0LOzVUcF80K-w.asa (hash: ValZt6XlRECidgMBG0dXrQbkDvp8n06Hk4Hd3QapbrA=) 9: ZRTAVRMhZT6cxxsi8He5NfGJ2zQ.roa (hash: puVDaYvy8bu1rAUQ7RQ/VHw6qx5cv46U9IaFuh15FHs=) 10: _43Htt9dzLi8msDz8qcZCkhm86k.roa (hash: YaFteb2dAn9Qn0to17VMsejQKPfSuGZrfXxllZGOY8A=) 11: oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa (hash: V8zyoEs8PVkTEGnh+pD54bvpuIuIO+mSB/TZNau2dBA=) 12: qB7xYjamdywCLSZiE2p-rI4CouM.roa (hash: TrY1f9iLn380hsE1RjYtEKEJFQA9mvO2ASaSr9uTJXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7e:f3:e9:2f:30:ed:5b:a3:60:01:7a:39:bd:20:e5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Oct 27 20:01:16 2026 GMT Not After : Oct 28 20:01:16 2026 GMT Subject: CN=eaac11cf3f64658d9965f73555344b0fb7fa41f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:54:9a:a8:22:31:65:94:d4:c4:fd:09:47: e1:1b:a4:65:07:b3:70:9a:60:27:be:ef:66:6c:c8: bf:96:b3:d7:c2:78:fb:7a:72:aa:83:af:b8:33:5b: ab:f6:3b:62:a8:aa:c9:ec:22:e9:de:90:43:96:e2: 76:18:a9:ed:14:1b:4b:76:8f:ec:c5:fb:00:d0:b7: 4a:57:cd:67:a5:90:7a:ea:b0:10:4a:f4:2a:2c:a7: 37:b0:69:f6:02:cd:ea:7e:1e:97:cd:4e:44:03:8e: 88:3a:d1:32:d6:4f:80:45:9d:64:39:7a:af:4d:29: 89:e3:64:c4:cf:f7:b3:f9:58:91:5f:c2:71:c5:81: cc:91:cf:6a:bd:bc:41:22:a4:ce:1a:a4:f1:71:c4: dc:0a:36:ff:b2:24:93:37:3e:f7:df:c2:df:6a:53: 9a:48:62:ef:dd:1d:f9:e2:5a:20:9c:1c:3a:1b:6a: 37:f2:e2:16:df:7e:67:64:f4:10:2c:34:87:42:8e: 4d:22:ea:79:c1:33:00:33:1d:30:26:b8:db:38:8e: dc:86:db:b9:f0:0a:1d:62:34:fa:81:35:e1:51:cf: e0:ab:ed:d4:82:24:c9:11:33:89:1b:4f:15:12:7e: 4b:7b:6f:c2:00:ef:8c:ab:61:84:c6:15:63:ca:c2: 77:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AC:11:CF:3F:64:65:8D:99:65:F7:35:55:34:4B:0F:B7:FA:41:F6 X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7d:53:06:98:8e:ef:9f:97:4d:b3:d1:cd:30:41:76:6e:11: 26:ec:68:b5:a8:91:71:15:94:9b:d3:e1:e1:f1:f8:e6:21:1c: 12:36:70:48:9a:98:a7:b0:f1:eb:bb:63:21:c3:1f:a3:3a:2a: 3a:f1:07:e2:25:d1:16:15:45:5c:1e:ea:d5:67:21:f8:42:6c: 7d:18:3a:2c:ab:e7:21:8e:b8:1d:32:2d:0e:5b:e2:02:ff:3a: 25:3f:39:9a:a1:68:a8:6d:22:d5:ed:56:c0:fe:bc:0a:90:9c: 21:cd:a9:ec:85:33:06:fd:dd:49:9c:40:9f:58:3e:db:cc:e6: f2:ce:d8:5e:2d:03:09:7a:cf:8c:61:ba:42:a4:6e:62:79:16: e7:76:f1:11:d4:8b:be:9a:83:d8:ee:91:6a:28:f9:a8:20:07: c1:30:30:42:e3:13:ee:4d:5f:76:10:e1:52:d3:e9:0a:0b:5b: 3a:02:d3:3d:d6:6c:c3:f3:eb:9c:15:cc:fe:c9:25:17:f4:21: e3:81:d3:f8:93:4d:41:8e:6a:9b:4a:78:e3:a6:7c:c7:7c:f2: e5:eb:bc:d6:7d:bc:74:3a:1a:85:0f:30:02:6f:ad:ae:62:09: c2:9a:2f:84:12:51:b5:44:7b:4c:86:12:3c:2a:d1:c2:72:64: 20:9d:14:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF+8+kvMO1bo2ABejm9IOXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYxMDI3MjAwMTE2WhcNMjYxMDI4MjAwMTE2WjAzMTEwLwYDVQQD EyhlYWFjMTFjZjNmNjQ2NThkOTk2NWY3MzU1NTM0NGIwZmI3ZmE0MWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/xUmqgiMWWU1MT9CUfhG6RlB7Nw mmAnvu9mbMi/lrPXwnj7enKqg6+4M1ur9jtiqKrJ7CLp3pBDluJ2GKntFBtLdo/s xfsA0LdKV81npZB66rAQSvQqLKc3sGn2As3qfh6XzU5EA46IOtEy1k+ARZ1kOXqv TSmJ42TEz/ez+ViRX8JxxYHMkc9qvbxBIqTOGqTxccTcCjb/siSTNz7338LfalOa SGLv3R354lognBw6G2o38uIW335nZPQQLDSHQo5NIup5wTMAMx0wJrjbOI7chtu5 8AodYjT6gTXhUc/gq+3UgiTJETOJG08VEn5Le2/CAO+Mq2GExhVjysJ3wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqsEc8/ZGWNmWX3NVU0Sw+3+kH2MB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADH1TBpiO 75+XTbPRzTBBdm4RJuxotaiRcRWUm9Ph4fH45iEcEjZwSJqYp7Dx67tjIcMfozoq OvEH4iXRFhVFXB7q1Wch+EJsfRg6LKvnIY64HTItDlviAv86JT85mqFoqG0i1e1W wP68CpCcIc2p7IUzBv3dSZxAn1g+28zm8s7YXi0DCXrPjGG6QqRuYnkW53bxEdSL vpqD2O6Raij5qCAHwTAwQuMT7k1fdhDhUtPpCgtbOgLTPdZsw/PrnBXM/sklF/Qh 44HT+JNNQY5qm0p446Z8x3zy5eu81n28dDoahQ8wAm+trmIJwpovhBJRtUR7TIYS PCrRwnJkIJ0Uyg== -----END CERTIFICATE-----Generated at Wed Oct 28 04:40:16 2026 by rpki-client