$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft File: 4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json) Hash identifier: hsiysSZ8PN74oPQE7cVtQ2f2iNuKBJBbJwDcZLDyQz0= Subject key identifier: 33:73:CC:14:04:29:31:17:DE:EA:2A:2E:8B:41:9D:1A:2F:AE:AE:9B Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Certificate serial: 01A130A15204F6E0D0B33E9607987C8C5DBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft Manifest number: 0678 Signing time: Mon 12 Oct 2026 15:00:40 +0000 Manifest this update: Mon 12 Oct 2026 15:00:40 +0000 Manifest next update: Tue 13 Oct 2026 15:00:40 +0000 Files and hashes: 1: 0cS1nbk5Int4JJx8ZFuF4CwEQoo.roa (hash: XeB6K6T8p6c7RwUL3urLh05fa1KeuyMXlU3sgTg6kwI=) 2: 1-mw2G1dqdbLZ8tiyeeAM8rSR6hQ.roa (hash: h7CqqSl2LQjJmhCLF1MeDbbfhgUi7N6nFb/MApYSj04=) 3: 3gai81UGgfLPbQftciy3jGMkOwI.roa (hash: kiaWDVp8FEgRP18QSL61NeSbPNIL/KFNeSuP3Gkl88Q=) 4: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: k3kvm9CFqV44sJjNe/w8c53hiLXGfk6dQihKyVfQTQY=) 5: C6uUnb-GcnQfqIvL7gX32SouFUA.roa (hash: W8gXCQVnHQZj4Fig+/xRtixgdI9dMwYVfKpFVE38sls=) 6: Jzj8iSw0vJ_nKLxrgCvA5r_jCUM.roa (hash: qthe4k3qdM7snNafkTyRsJRCRgLD006FLSrfqpvtf/M=) 7: P2DOHQZk6uadyNsFYKTvp0Yljns.roa (hash: drWm8UAEyYp0gk5pD0pZZGlNfBy4kmJrj0xpKvuccbI=) 8: dUz1_BGuEwa1si0sC79DuRXSTMw.roa (hash: EggvRKKO8J9fQom0RkmSKJQOGfA94V2BXYRDmutG/IA=) 9: jG8u0DdMeVDnzAs9ajzk41GxjYI.roa (hash: 2i9+DbG6rnpNrbDbrTa+vcvNqwfsERMCoNQAt/YdO9A=) 10: pMSYP5P8y8eLfNyDEeXV3zc-nps.roa (hash: enJ6YCYyQ+/wl2mffuOqzFyRpZKc2xjCWdqck8SgcXI=) 11: pPtBVVYGBWOGMkaUXlyUlUlUc8I.roa (hash: 2qg2UMxY9Ne99nZ+znUrMGap65SST+L3iSUILMH/2YQ=) 12: uIa4zkFY4A9vzw58kSKCmfk0DOQ.roa (hash: 5GA0c289K1eM0975vFreXvBAvts4XCEq2R0BlZHe6C4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Oct 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:30:a1:52:04:f6:e0:d0:b3:3e:96:07:98:7c:8c:5d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Validity Not Before: Oct 12 15:00:40 2026 GMT Not After : Oct 13 15:00:40 2026 GMT Subject: CN=3373cc1404293117deea2a2e8b419d1a2faeae9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:77:39:02:58:ad:67:f5:ca:f3:0f:df:e4: 75:d1:cd:91:0c:c6:00:4d:67:08:fd:1a:a9:c3:41: 96:df:0b:1a:3c:8c:ff:32:1a:bc:bb:ca:0b:ee:d2: 7d:d7:69:4c:69:5e:97:20:6c:e0:21:dc:92:96:a1: d3:2a:d7:25:70:56:84:22:c6:65:cc:c3:07:4c:0f: 3d:71:7c:b6:b3:a4:39:1e:cf:7e:14:53:62:e9:af: e3:10:16:af:e0:0d:5b:05:98:cc:ca:82:63:4a:97: 1e:da:c3:60:b4:39:5b:be:cb:61:d3:e4:31:33:f8: e8:24:3f:23:5a:58:cc:e2:cf:28:d5:5b:87:28:ba: 94:a0:0f:ce:fb:71:34:b9:dd:2e:ad:b1:f5:a3:f2: 7f:14:23:2b:98:91:64:66:b4:82:8d:c0:a7:33:e6: 07:af:a2:91:65:e3:ae:38:98:a6:17:56:ac:9b:02: 8c:28:13:cf:49:f7:1a:55:ac:42:9b:72:c0:8a:dd: 34:52:ff:b1:e2:85:58:9c:81:cb:42:d6:67:1e:83: d8:12:20:33:74:ec:01:76:29:42:1e:f9:fe:ca:41: 70:40:df:2e:50:95:d3:ef:c1:ea:1a:e1:3e:f1:3a: 5e:9c:f8:15:93:5d:ec:55:bb:d1:5f:9d:60:33:be: cc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:73:CC:14:04:29:31:17:DE:EA:2A:2E:8B:41:9D:1A:2F:AE:AE:9B X509v3 Authority Key Identifier: keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:82:89:b4:e6:ef:25:27:67:9e:fd:7b:a7:21:5e:f1:4a:c5: 38:6e:2f:69:a7:3e:d2:36:37:a7:ba:84:a1:29:38:d2:0d:f5: 2a:da:e0:3f:84:e3:c0:ad:86:85:83:58:6f:fe:02:ba:e2:5b: e9:f0:79:82:0f:90:de:71:84:52:60:4e:d4:7f:b8:dd:be:41: 22:ee:17:28:99:e7:22:15:0f:75:fe:6d:de:79:30:9f:98:5d: fe:7a:5d:c7:3e:7e:47:2a:d9:d3:47:17:f4:75:eb:6f:2d:02: cf:40:c8:a7:a8:21:1e:75:5a:d6:9e:11:cc:f5:fa:11:5f:0b: cf:37:74:98:f6:f2:3a:b1:e8:eb:12:3c:e7:40:e1:7d:95:b1: e0:74:13:91:25:ce:5b:c3:c7:ae:f1:51:09:35:37:23:ff:ac: 4d:dd:22:00:1a:07:2c:7d:a7:d7:aa:71:aa:3c:2b:01:3a:e8: 89:63:b4:f1:29:7f:05:17:db:27:c4:16:4b:e8:20:e4:bb:30: a5:c6:56:ca:67:5f:bf:68:d0:1a:49:ce:ea:05:a5:21:f8:15: ee:90:26:10:af:74:33:55:1e:5d:57:c1:6a:1d:3c:43:42:23: 1a:58:95:48:a8:3b:99:cd:a9:39:0d:33:bd:c0:ed:cb:cf:ac: 0c:c7:c8:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEwoVIE9uDQsz6WB5h8jF29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNWI5MGZmZGZhMGFiMjg1NDg1ZTc4NDQ2Yjg3MTk5OGIy NGRjYzAwHhcNMjYxMDEyMTUwMDQwWhcNMjYxMDEzMTUwMDQwWjAzMTEwLwYDVQQD EygzMzczY2MxNDA0MjkzMTE3ZGVlYTJhMmU4YjQxOWQxYTJmYWVhZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUd3OQJYrWf1yvMP3+R10c2RDMYA TWcI/Rqpw0GW3wsaPIz/Mhq8u8oL7tJ912lMaV6XIGzgIdySlqHTKtclcFaEIsZl zMMHTA89cXy2s6Q5Hs9+FFNi6a/jEBav4A1bBZjMyoJjSpce2sNgtDlbvsth0+Qx M/joJD8jWljM4s8o1VuHKLqUoA/O+3E0ud0urbH1o/J/FCMrmJFkZrSCjcCnM+YH r6KRZeOuOJimF1asmwKMKBPPSfcaVaxCm3LAit00Uv+x4oVYnIHLQtZnHoPYEiAz dOwBdilCHvn+ykFwQN8uUJXT78HqGuE+8TpenPgVk13sVbvRX51gM77MZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNzzBQEKTEX3uoqLotBnRovrq6bMB8GA1UdIwQY MBaAFOFbkP/foKsoVIXnhEa4cZmLJNzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEt Y2JiZmRhOTI0MTlkLzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEtY2JiZmRhOTI0MTlk LzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw4KJtObv JSdnnv17pyFe8UrFOG4vaac+0jY3p7qEoSk40g31KtrgP4TjwK2GhYNYb/4CuuJb 6fB5gg+Q3nGEUmBO1H+43b5BIu4XKJnnIhUPdf5t3nkwn5hd/npdxz5+RyrZ00cX 9HXrby0Cz0DIp6ghHnVa1p4RzPX6EV8Lzzd0mPbyOrHo6xI850DhfZWx4HQTkSXO W8PHrvFRCTU3I/+sTd0iABoHLH2n16pxqjwrATroiWO08Sl/BRfbJ8QWS+gg5Lsw pcZWymdfv2jQGknO6gWlIfgV7pAmEK90M1UeXVfBah08Q0IjGliVSKg7mc2pOQ0z vcDty8+sDMfIig== -----END CERTIFICATE-----Generated at Mon Oct 12 22:22:59 2026 by rpki-client