$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft File: BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json) Hash identifier: QKmmv4FthLIPd3gWJLsD8dzecPxqxF6kx1A4nIF50Q0= Subject key identifier: 42:4B:A0:73:31:D7:0B:3B:81:4E:76:30:0F:4D:AF:1A:D3:11:A3:B3 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 01A17927E8D5C38014AAB2496690FB574810 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft Manifest number: 1924 Signing time: Mon 26 Oct 2026 17:00:21 +0000 Manifest this update: Mon 26 Oct 2026 17:00:21 +0000 Manifest next update: Tue 27 Oct 2026 17:00:21 +0000 Files and hashes: 1: 10dcNCG_-MDba38nWmOg4-lXn6k.roa (hash: qCJHM+Bc84ondhlGxroPFWE37OgXYxlzfthfFUOO7WQ=) 2: 2Bz-26WJXsOdub2NFv0tQ13PdRE.roa (hash: QF8IxA/E4ZZtbvv05FsyZ1FueR1nYjHpOtKqqYrP72o=) 3: 3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa (hash: mbq8Pr8PdKSRq7yIi7vQcXKq7HeKQhJfSwx0LhWnGCo=) 4: 5DciNWvtD44nvmowaEInWwk8YZA.roa (hash: 4oBae1cQkYxE+N4xYsBQQveSBxypTMY0DWM/AkkENtk=) 5: 5JKLYCytnUKhdyTa14LHQIEKdFE.roa (hash: eArX0/lwmj4LvmBl8JgKR0ALNuxr1zRBSWvGWN5uFfI=) 6: 5i-KLJS79COzLV51bb0tfcQ1uQQ.roa (hash: PnQ0h19PE6J2No2E8613gpettIVTQSAHkgDKgMMgppQ=) 7: 6XFljtVK2V0PF6GXRVQaEjH3Eoo.roa (hash: JvGvYE3ny1jx3z80vidwb1suh41eSZYf4UKZ7JMDcio=) 8: 8Gf4ilOOHDPy8ShRA6DADyswUBw.roa (hash: Gg3fjKtbtCo3yrbVLuhlxWrBwdUSi5rHbyxOcOG2L30=) 9: 8HWIcI9N3AE2x8zYy673Vd_4kfo.roa (hash: LN2KpWeg+Ys04Rwx9lWA0rODgISnXB2tF8WbAfHw9WY=) 10: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: lPB/xJ6lq+VzJncXy/YUCoPdZxQJHjbRF2Vi1fcWO1Y=) 11: C7ABxIBMFqY6WGHp-m3XASsH6n0.roa (hash: TZooGN1msR75BsEyRl0jLlYrZ8Y6P2v4AI3VUVqOn3U=) 12: CdcIcZHeB0GsHSds771hQUpQ7D8.roa (hash: YpLVoBlHUKYqmx9AhANgdWKDLZYZ8nUhqGpu7awPbPs=) 13: DMF7_LfD1ucYhDO0ohFJTTXvNDA.roa (hash: Cy/e5SaBm31dnw0xEGtIe3MOgTmE56seaObi9TTZpSI=) 14: D_yFeSNCNOPeNuhYpJ8Sj6yMqrw.roa (hash: dRua2mdx0T28GkQVz9QSWEzbAac9dJJsdOTGdnj90kk=) 15: FOLsAunRL-qwRUPITmX7DmjtTVo.roa (hash: 87JXVGkuJmGjpwYzfj6Y+tqb44jgW/uD+mWua5302PI=) 16: IYvPR6-UnbcPyQYUJJWwmHE7NK8.roa (hash: P03T/DLhEWvqxS/8YYp/V2MwoFNKYQGAgYeLfjxTL/Q=) 17: JdeaeLKAu5GEjINGKfvIKWcq3o4.roa (hash: a/heKXP0NtGbMelLoYKvGg/fN+ZyDqH56Dk+P1/eR2g=) 18: Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa (hash: qaufeqdeipVE1r+9GyOAZSAG0hMF1qh7wENk1s7zB2A=) 19: LXr6C48Lxn5qLALMmRCp0Zvklfc.roa (hash: xyDipUJK+J0EWyFs8iYbI4e4T5NfmKMOryR8EWn2OIs=) 20: OjeVFAg212uWEJPR4j0wAB5XdcE.roa (hash: NgMhCybIfen0bwNj/HLLxxGGd68yCqKlN9cakd8bl48=) 21: Ppvy7LfSl_8veNKT3PCYySGa_xM.roa (hash: KAldC7Ag1Jpktoi15FEM8qa7XkOMpiKNKU124uNCHgU=) 22: e4ScI9UDTbjinOVrH-HzMhxxYaQ.roa (hash: z4aixSBMgxj9VOGw7h6LRSs/oKtO4+/kMkfuz35WEDU=) 23: eBOwN9hT4zejM0AoU4iSaIEjz9s.roa (hash: fKITe0XHXVAprxbNBR9M8OQ9t4GQsguRxsVQ9HUhdnE=) 24: hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa (hash: /bY2rtzWMB1/BM4P1MtY/wIJQHWSb2VyMeLJaYe4zIY=) 25: iVkiAHYOg3HtM_uWUc76kLqrONs.roa (hash: XlSThvg6yDDSVBDMohDGUs845WGTZEUqqZulw7z2Ytg=) 26: iwqxgJYL8mBv3G61SG6QzZnZo_k.roa (hash: 3GX+FmWsXoIqZRfY2WtjR43yzm9CJ2GngD6fPIfSxPg=) 27: mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa (hash: W9XfH8Uvi+taIP3eFXkn/Sc4OUtrs4EPnOFSG+QrLlE=) 28: n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa (hash: 12jqzpGaLihSKEn4m7KQUtKkmWE3dp9k5ig5SAQQ3hM=) 29: rc3l3yce_wnaIAhkm-MVLQ6MlQs.roa (hash: nGpl03qXwZbg5LYiikckCucykULVlnfBwTrh22E2cqw=) 30: tPWk-AfReXdc60ikE9-d-q2ml5k.roa (hash: fuXAhmrSQOQKR0hkXAvHwO1y6kpzsA61B3meXSwM1d0=) 31: ugwrkIpRq29-B9wfVBIteF2KEoM.roa (hash: ukdyYgg1YHtbbV6wUaA9eMuBYuW9pmY61DiHuvFC67g=) 32: zV1fCAaJzxxoyfA0WcdFKJrp2R0.roa (hash: pb1m9M8yHzsPn9L4wFpH1jeHHft9SKcGVcBcOUgBDEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:79:27:e8:d5:c3:80:14:aa:b2:49:66:90:fb:57:48:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Oct 26 17:00:21 2026 GMT Not After : Oct 27 17:00:21 2026 GMT Subject: CN=424ba07331d70b3b814e76300f4daf1ad311a3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f6:e3:2b:86:8f:03:09:bb:bb:d2:94:15:97: 3f:d0:ad:c2:eb:c5:5f:49:30:9e:0b:d2:26:a7:88: 16:9c:7d:5c:3b:6f:b9:10:b1:36:0f:11:7f:0b:fe: 36:77:6f:3a:bc:6b:5c:76:c9:08:5d:40:3d:9e:57: 0b:0c:d5:b4:2a:84:48:66:47:2d:fc:46:b9:0e:a7: 2b:20:4b:02:9c:80:bf:c6:b7:39:bf:ad:38:6e:31: bb:0e:4a:e8:3f:32:ad:8a:7e:c2:35:4f:4c:b4:74: a1:0b:ca:54:40:c0:8d:a6:2c:ee:bf:48:21:9f:f9: 98:04:97:35:da:0c:85:41:a6:15:8a:a5:c6:23:69: 55:95:e8:82:ab:b7:d0:b2:55:b5:66:95:c2:ba:b3: c2:e2:36:b2:65:42:00:38:aa:0b:33:f7:b7:ce:3c: 9a:70:3b:34:68:aa:b9:d5:13:16:22:b9:f9:a7:d4: 7a:bf:83:aa:e0:65:12:e5:a4:65:b6:97:9c:ab:e4: be:01:40:11:98:4f:de:88:10:cb:22:72:8a:55:e9: 32:8d:0a:84:53:9d:28:56:2d:09:ff:b4:5c:66:0b: c5:ee:38:38:c7:37:f7:16:c6:ec:84:91:6e:22:fd: 12:bc:c8:4f:43:05:39:89:ec:5b:14:4e:9a:b6:74: bc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4B:A0:73:31:D7:0B:3B:81:4E:76:30:0F:4D:AF:1A:D3:11:A3:B3 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:59:91:c7:06:20:a9:2f:5c:b5:1a:a2:53:03:59:0f:a1:22: a8:54:75:66:78:71:cb:e7:20:ba:88:cb:44:18:da:6d:15:aa: 6e:a4:e9:dc:95:91:28:3d:17:5c:ad:c3:51:e4:22:9d:bb:d3: bb:03:cd:e6:71:e1:58:48:3d:70:0b:dc:31:fd:58:f3:dd:3d: 6a:38:2b:c7:e4:54:42:4c:15:7f:00:0e:c2:f5:70:cc:48:ac: 18:8a:ab:8b:9e:ff:e4:8f:8b:e3:92:2c:f0:4b:6c:6e:bd:9c: 8b:09:b2:21:e5:86:29:03:62:c9:b6:fd:36:98:79:38:cb:70: 40:52:dc:32:aa:0c:77:ec:a2:ed:83:3c:1d:87:24:a9:e1:69: 5b:dd:2b:d3:8c:02:4b:fe:fc:66:21:33:cc:6f:d0:7c:0f:0e: 59:5c:55:88:e4:9d:dd:c3:26:bf:2e:85:14:32:ac:12:73:85: ff:67:4e:1b:c8:ae:c2:12:0d:c8:77:16:9f:d4:89:b3:b4:88: ae:da:22:f4:6a:46:21:2b:02:62:e3:c1:c4:4f:ef:19:3b:b7: d6:fe:bf:c7:64:53:23:dc:d3:d7:af:b7:d3:0c:66:ff:93:f5: 21:d0:9d:f0:d3:6f:5d:bf:94:55:5b:9c:31:36:73:ba:bc:83: 33:01:30:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF5J+jVw4AUqrJJZpD7V0gQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYxMDI2MTcwMDIxWhcNMjYxMDI3MTcwMDIxWjAzMTEwLwYDVQQD Eyg0MjRiYTA3MzMxZDcwYjNiODE0ZTc2MzAwZjRkYWYxYWQzMTFhM2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/bjK4aPAwm7u9KUFZc/0K3C68Vf STCeC9Imp4gWnH1cO2+5ELE2DxF/C/42d286vGtcdskIXUA9nlcLDNW0KoRIZkct /Ea5DqcrIEsCnIC/xrc5v604bjG7DkroPzKtin7CNU9MtHShC8pUQMCNpizuv0gh n/mYBJc12gyFQaYViqXGI2lVleiCq7fQslW1ZpXCurPC4jayZUIAOKoLM/e3zjya cDs0aKq51RMWIrn5p9R6v4Oq4GUS5aRltpecq+S+AUARmE/eiBDLInKKVekyjQqE U50oVi0J/7RcZgvF7jg4xzf3FsbshJFuIv0SvMhPQwU5iexbFE6atnS8bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJLoHMx1ws7gU52MA9NrxrTEaOzMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlmRxwYg qS9ctRqiUwNZD6EiqFR1Znhxy+cguojLRBjabRWqbqTp3JWRKD0XXK3DUeQinbvT uwPN5nHhWEg9cAvcMf1Y8909ajgrx+RUQkwVfwAOwvVwzEisGIqri57/5I+L45Is 8Etsbr2ciwmyIeWGKQNiybb9Nph5OMtwQFLcMqoMd+yi7YM8HYckqeFpW90r04wC S/78ZiEzzG/QfA8OWVxViOSd3cMmvy6FFDKsEnOF/2dOG8iuwhINyHcWn9SJs7SI rtoi9GpGISsCYuPBxE/vGTu31v6/x2RTI9zT16+30wxm/5P1IdCd8NNvXb+UVVuc MTZzuryDMwEw5g== -----END CERTIFICATE-----Generated at Mon Oct 26 23:53:34 2026 by rpki-client