$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft File: fmXasjlAyzlPmqpmT-pNb49C4xg.mft (raw, json) Hash identifier: l2obnle+yiUBsM0N9r3CN52ji3ukONAh1qsgL/7FAWg= Subject key identifier: 5D:E6:8A:14:CC:23:09:D3:74:3C:10:34:D8:02:1C:B0:8F:C1:A1:0B Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Certificate serial: 01A17D739E8544BF7109592A0C998F968334 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft Manifest number: 1AD9 Signing time: Tue 27 Oct 2026 13:01:31 +0000 Manifest this update: Tue 27 Oct 2026 13:01:31 +0000 Manifest next update: Wed 28 Oct 2026 13:01:31 +0000 Files and hashes: 1: 5q5ubnYMVDRkzyNHxnu_nVIuH8Q.roa (hash: gL6DKz0ttDjGDqOjSN97aJpmlYSAyuMVOk171iUlWRM=) 2: ATx_EPHk5Vz1v-SpkJd7Yp6y99I.roa (hash: wd0rlsu9n+czEzHQALtAg7xmPAM6xOroSrrnXWF3Lfo=) 3: HYC954OTDUxlzgJW0_84gTMaNZI.roa (hash: 2qPU/JFLc0XCHBKayFD9RxhT6JBfREvLkMlzYOfJmv8=) 4: JO3t4wzj5pMO8pakWAwlzqvqqRM.asa (hash: RPS36XqFSQhGe2AwlqqHc/6mflgEGlaBrX53Fqp34Rw=) 5: U3IMZy1D5zBWCt3QK2mF5n-X2qY.roa (hash: 5ZiutWnvIz69FJnps6BwuT+OeQpLJ6fHB6U2RLmZqhg=) 6: U94b541NpMgAwKP9ouuvvL3DKeY.asa (hash: 3/0upql9LNQyluPXuFCuGStTRhsE9wxGljd6ckKQ/wo=) 7: fX3tPrrAy5l65982bntPZMbTKXM.asa (hash: elpKOW5KwuHELtxjMPO/HnU5rqNl0Ef4AHZpAwWCRy8=) 8: fmXasjlAyzlPmqpmT-pNb49C4xg.crl (hash: 2OqX4kxdFIbkF9Hw1lU94YBaKj4hUvpm+WzeE72hDUs=) 9: p1pAyUX-fSx4X5xlNyO_Vq2ry7w.roa (hash: 4qf1lMGx7tWHDVof2zNBnir3ltwLgCwXuL9BwrRJPhU=) 10: wr5OBu9Kg5fiAynMByNWWanKodQ.roa (hash: xpQiib4Ztk+0sSwtkw/MfpFjKcsKXQPv65ui0X+24sw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7d:73:9e:85:44:bf:71:09:59:2a:0c:99:8f:96:83:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Validity Not Before: Oct 27 13:01:31 2026 GMT Not After : Oct 28 13:01:31 2026 GMT Subject: CN=5de68a14cc2309d3743c1034d8021cb08fc1a10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:57:61:fc:d9:a3:96:5c:58:c6:80:03:f9:92: c2:67:22:a6:cd:2f:d6:1d:25:8d:dd:83:45:0e:98: 8e:5e:1b:ad:26:de:ee:b1:a4:d7:91:1e:3a:1a:63: 80:8f:e2:56:60:98:9b:fb:32:4e:96:1a:2d:3e:dc: c6:5c:ee:06:9f:72:dc:5b:62:49:eb:7d:d3:50:b6: b8:3e:e9:ed:3f:10:cc:f6:0e:55:6d:8a:ed:ea:d6: 7c:98:d2:95:33:4c:07:72:1f:73:c8:c6:ab:2c:1d: 14:b0:ca:7e:3f:1d:3a:33:04:34:32:10:db:16:9a: 88:1f:1e:ba:b2:54:02:d3:a8:7e:b4:21:95:28:fb: 57:b2:6a:6a:d0:aa:6c:d5:92:00:6d:c0:40:c7:a6: 27:a6:9a:8a:2a:89:9c:05:1e:c8:5c:97:91:95:b0: dc:c7:f5:a3:cf:ea:b4:82:8f:3d:dd:a6:c1:f2:91: b0:e2:d9:35:54:67:1d:0a:f6:56:be:20:9a:9d:02: 2d:fe:89:a1:24:3a:05:6e:f5:f7:81:a6:d5:d8:19: f9:24:8c:f6:9a:9d:99:cb:56:de:47:f5:46:5a:9b: 9e:f4:81:8a:98:6d:2c:ab:9e:81:9b:d8:6a:3a:c8: b4:27:77:fa:0f:95:cd:b6:bf:16:de:9e:05:d6:f3: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E6:8A:14:CC:23:09:D3:74:3C:10:34:D8:02:1C:B0:8F:C1:A1:0B X509v3 Authority Key Identifier: keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ed:d5:9a:9e:3d:34:84:9c:a4:77:04:65:82:66:57:5e:8e: 1b:49:53:ad:e9:15:4f:37:3a:98:4e:87:2d:0a:4f:3c:42:fb: 0e:a1:68:a7:e4:74:af:a4:1f:97:d8:a0:84:04:31:b4:0f:03: 23:71:8d:4b:74:74:1f:c3:ea:94:e4:73:10:fb:31:b4:eb:dd: 3b:94:f2:21:b9:87:f3:cd:09:c5:16:7b:4b:3e:79:b6:ca:cb: db:32:64:ac:f1:cd:56:3f:7e:65:dd:05:45:78:de:d8:5c:50: 4c:be:47:09:f5:ec:cf:2a:1d:5d:58:b4:9a:9a:2c:81:ce:d6: 5a:9b:d5:ef:61:5c:09:3c:3b:1f:b4:2b:1b:a2:2c:64:d5:a6: 99:4e:e3:6c:08:6b:3d:94:5d:4f:07:aa:79:65:7a:3c:da:07: db:96:c5:f2:be:e0:eb:21:a9:b2:9d:3a:d1:aa:ee:e4:96:62: f8:d6:a5:46:fa:26:cf:d7:a3:06:a6:92:50:d4:58:de:29:d0: 96:a8:05:62:28:91:75:d2:d6:36:78:c6:a7:0d:41:be:3e:28: 5e:db:9e:a3:d1:ef:ef:5c:f4:16:5e:3b:3d:7d:f1:d3:36:3b: 2a:5a:fa:61:f7:ea:76:28:f5:42:dd:c0:dd:b6:38:a8:eb:96: 98:e0:21:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF9c56FRL9xCVkqDJmPloM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNjVkYWIyMzk0MGNiMzk0ZjlhYWE2NjRmZWE0ZDZmOGY0 MmUzMTgwHhcNMjYxMDI3MTMwMTMxWhcNMjYxMDI4MTMwMTMxWjAzMTEwLwYDVQQD Eyg1ZGU2OGExNGNjMjMwOWQzNzQzYzEwMzRkODAyMWNiMDhmYzFhMTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1dh/NmjllxYxoAD+ZLCZyKmzS/W HSWN3YNFDpiOXhutJt7usaTXkR46GmOAj+JWYJib+zJOlhotPtzGXO4Gn3LcW2JJ 633TULa4PuntPxDM9g5VbYrt6tZ8mNKVM0wHch9zyMarLB0UsMp+Px06MwQ0MhDb FpqIHx66slQC06h+tCGVKPtXsmpq0Kps1ZIAbcBAx6YnppqKKomcBR7IXJeRlbDc x/Wjz+q0go893abB8pGw4tk1VGcdCvZWviCanQIt/omhJDoFbvX3gabV2Bn5JIz2 mp2Zy1beR/VGWpue9IGKmG0sq56Bm9hqOsi0J3f6D5XNtr8W3p4F1vMFjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3mihTMIwnTdDwQNNgCHLCPwaELMB8GA1UdIwQY MBaAFH5l2rI5QMs5T5qqZk/qTW+PQuMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYt ODQ5Y2ZjYWJiNjU3LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYtODQ5Y2ZjYWJiNjU3 LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+3Vmp49 NIScpHcEZYJmV16OG0lTrekVTzc6mE6HLQpPPEL7DqFop+R0r6Qfl9ighAQxtA8D I3GNS3R0H8PqlORzEPsxtOvdO5TyIbmH880JxRZ7Sz55tsrL2zJkrPHNVj9+Zd0F RXje2FxQTL5HCfXszyodXVi0mposgc7WWpvV72FcCTw7H7QrG6IsZNWmmU7jbAhr PZRdTweqeWV6PNoH25bF8r7g6yGpsp060aru5JZi+NalRvomz9ejBqaSUNRY3inQ lqgFYiiRddLWNnjGpw1Bvj4oXtueo9Hv71z0Fl47PX3x0zY7Klr6Yffqdij1Qt3A 3bY4qOuWmOAhuQ== -----END CERTIFICATE-----Generated at Tue Oct 27 22:41:31 2026 by rpki-client