$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json) Hash identifier: vGmgXKFgbZme3aDXK8zRy248sI5YLQywusDaw6OD5m0= Subject key identifier: F5:5A:F4:2D:45:30:1B:A4:AD:B5:98:AE:84:AD:E9:62:AF:5E:1E:C7 Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 01A17D05C572779DB044F8135B55F167FE89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft Manifest number: 1B02 Signing time: Tue 27 Oct 2026 11:01:32 +0000 Manifest this update: Tue 27 Oct 2026 11:01:32 +0000 Manifest next update: Wed 28 Oct 2026 11:01:32 +0000 Files and hashes: 1: 30puVpgFRN4YwWi8xzX_Z-3HoMc.roa (hash: o5oIpcyar+M+5831YpDbcIJBS5S/FPLnrUPDm/0y3l0=) 2: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: RkYrXKCcOClDn+HjuexgUUXIgckilma05WQBdAQUW8E=) 3: 5FnusIit9uaVrldhOS_f_neDWgs.roa (hash: Ipdoz4T//FSaZhmjoZKN6wB6EyXA0tHqJzEOkgjKWOo=) 4: 6VMAkTg85zv_RNH9ZiPNPZuWCW8.roa (hash: Lpm2qdKvSHv1n64+iddb1tvoxMF6Y4LQAfrzqafISLM=) 5: B43PKu9zFU7-_KCXTuxzDe93OU0.roa (hash: friYQXieb4/RtWvPCW9C35Zt9vuRnu7Qsl+CY5jbJEs=) 6: Jmz4FnP7cL-QtALX1djqMHOUM6o.roa (hash: Eo0kFSBPojZrMatbz2kLZgOLTkqJ3viplyIKQqqpV8Q=) 7: QpckzCGCQYLYhpr74LAr4qnTXpU.roa (hash: KyNF1FltPbO/mXuIELm3YgjGIsFSe1HCrIqcFEBwYhc=) 8: V7fO1Dal8JtSLG0LOzVUcF80K-w.asa (hash: ValZt6XlRECidgMBG0dXrQbkDvp8n06Hk4Hd3QapbrA=) 9: ZRTAVRMhZT6cxxsi8He5NfGJ2zQ.roa (hash: puVDaYvy8bu1rAUQ7RQ/VHw6qx5cv46U9IaFuh15FHs=) 10: _43Htt9dzLi8msDz8qcZCkhm86k.roa (hash: YaFteb2dAn9Qn0to17VMsejQKPfSuGZrfXxllZGOY8A=) 11: oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa (hash: V8zyoEs8PVkTEGnh+pD54bvpuIuIO+mSB/TZNau2dBA=) 12: qB7xYjamdywCLSZiE2p-rI4CouM.roa (hash: TrY1f9iLn380hsE1RjYtEKEJFQA9mvO2ASaSr9uTJXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7d:05:c5:72:77:9d:b0:44:f8:13:5b:55:f1:67:fe:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Oct 27 11:01:32 2026 GMT Not After : Oct 28 11:01:32 2026 GMT Subject: CN=f55af42d45301ba4adb598ae84ade962af5e1ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:e4:19:e3:1a:8d:2d:98:bb:a4:12:3e:85: d8:83:79:92:ad:3b:e0:18:c3:ba:74:41:be:38:b0: 58:33:7c:49:09:8e:13:cd:1c:4b:d9:a4:a9:33:70: 87:3e:61:1f:fb:a3:b3:b6:1b:bc:0d:70:41:40:59: a1:93:54:90:98:ea:34:c0:5f:a6:31:0e:b9:12:8b: be:62:26:36:0d:78:02:28:b8:38:71:6e:e3:1a:c8: 90:c3:ed:4a:0a:a8:3b:2b:d3:47:83:c3:7c:41:1a: 01:e6:2f:b9:55:60:41:56:ce:3a:2b:ae:f2:fb:f0: f0:46:04:8c:c1:eb:65:e3:26:6a:fe:27:6a:99:01: 4b:3d:0b:cf:b9:e9:ca:66:30:c4:5f:11:50:39:1e: b1:fc:37:bf:19:0c:5f:dc:eb:0d:17:27:57:f7:46: 86:68:00:c0:3d:26:80:23:62:14:2f:b3:a5:f7:7c: 53:04:b5:08:07:37:9f:b9:d6:ed:0b:87:8a:ef:44: d3:35:c8:20:39:59:bf:a9:3d:2b:31:2f:f5:1a:56: 75:87:3f:35:a3:63:b9:c4:8f:c9:d7:45:18:a0:f3: 03:45:40:ee:b9:34:69:47:bd:40:43:5a:22:0a:e0: 8b:08:91:ab:78:e4:92:20:47:4c:50:9b:89:9c:49: c0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5A:F4:2D:45:30:1B:A4:AD:B5:98:AE:84:AD:E9:62:AF:5E:1E:C7 X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8d:1a:9a:a6:9d:f6:0e:4f:64:7c:62:e2:da:81:bd:25:5d: 07:6b:08:0f:3e:50:a5:7e:72:9b:6b:80:b4:1e:a6:63:c5:41: 3b:5b:e8:5d:c2:a7:c7:5f:ac:9c:4d:a5:be:73:21:db:f2:3a: bb:fa:35:d1:e6:f6:c8:29:e2:fc:da:07:79:35:c9:34:c1:66: 8d:69:6e:8b:d0:24:f9:09:3e:eb:72:40:2c:0a:38:03:be:59: 62:13:98:1b:99:c6:69:b2:67:a4:98:90:90:fb:87:68:12:43: 87:cf:66:2c:17:0e:bd:59:36:d6:58:75:17:7f:42:1a:48:c1: d7:f5:7e:ba:9e:bc:01:22:51:8f:64:08:52:4b:9f:d4:79:b8: e5:bf:37:96:9f:36:fa:ec:05:63:99:a4:a6:d0:b2:e9:01:41: 8f:0b:55:81:3f:62:47:18:02:e8:de:fe:45:15:88:99:1f:7f: bd:df:c1:90:c3:64:de:09:5b:13:f9:75:3f:6e:89:fa:59:64: 27:d5:97:a1:31:a8:f3:fc:a9:25:dd:89:89:05:79:b8:db:5b: aa:d6:2a:74:8e:64:fb:25:af:c8:49:f5:9e:47:d9:7c:c1:81: 8d:3e:25:f5:2a:d1:51:32:9d:d3:a3:e9:09:2e:7d:16:c6:5c: bc:ef:66:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF9BcVyd52wRPgTW1XxZ/6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYxMDI3MTEwMTMyWhcNMjYxMDI4MTEwMTMyWjAzMTEwLwYDVQQD EyhmNTVhZjQyZDQ1MzAxYmE0YWRiNTk4YWU4NGFkZTk2MmFmNWUxZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRnkGeMajS2Yu6QSPoXYg3mSrTvg GMO6dEG+OLBYM3xJCY4TzRxL2aSpM3CHPmEf+6Ozthu8DXBBQFmhk1SQmOo0wF+m MQ65Eou+YiY2DXgCKLg4cW7jGsiQw+1KCqg7K9NHg8N8QRoB5i+5VWBBVs46K67y +/DwRgSMwetl4yZq/idqmQFLPQvPuenKZjDEXxFQOR6x/De/GQxf3OsNFydX90aG aADAPSaAI2IUL7Ol93xTBLUIBzefudbtC4eK70TTNcggOVm/qT0rMS/1GlZ1hz81 o2O5xI/J10UYoPMDRUDuuTRpR71AQ1oiCuCLCJGreOSSIEdMUJuJnEnAaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVa9C1FMBukrbWYroSt6WKvXh7HMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfY0amqad 9g5PZHxi4tqBvSVdB2sIDz5QpX5ym2uAtB6mY8VBO1voXcKnx1+snE2lvnMh2/I6 u/o10eb2yCni/NoHeTXJNMFmjWlui9Ak+Qk+63JALAo4A75ZYhOYG5nGabJnpJiQ kPuHaBJDh89mLBcOvVk21lh1F39CGkjB1/V+up68ASJRj2QIUkuf1Hm45b83lp82 +uwFY5mkptCy6QFBjwtVgT9iRxgC6N7+RRWImR9/vd/BkMNk3glbE/l1P26J+llk J9WXoTGo8/ypJd2JiQV5uNtbqtYqdI5k+yWvyEn1nkfZfMGBjT4l9SrRUTKd06Pp CS59FsZcvO9m7w== -----END CERTIFICATE-----Generated at Tue Oct 27 16:48:38 2026 by rpki-client