$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json) Hash identifier: 8ionliFdAdEQfdeq876PtNhc/D6T5YBYxTiE1wkWKcM= Subject key identifier: A2:DA:C9:3F:55:5B:B9:1F:BF:29:63:1C:18:AE:E7:7E:E2:01:B0:2D Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Certificate serial: 01A05A0DC47B9699B9D14DF9363BD5DD5776 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft Manifest number: 11EA Signing time: Mon 31 Aug 2026 23:00:46 +0000 Manifest this update: Mon 31 Aug 2026 23:00:46 +0000 Manifest next update: Tue 01 Sep 2026 23:00:46 +0000 Files and hashes: 1: 33gU1W_UI1Ae18rle6T32Am_ap0.roa (hash: CtHyr3lbVK0nM4M5V+efOeDGbhPQI4ZIEpY0w9de2vw=) 2: 7d0P9doBZNnco0Uk-uyE95zYsRU.roa (hash: C0smtXlBUg5wv9v0wIvA4FN2yM+ZFAWopSk3eOTxr4A=) 3: BDT11QF-TtgdWALp45xoyYelUsM.roa (hash: mujOfcZnyEUoIqlubLK7erXRFeA189kfqWm71HEHJLA=) 4: EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa (hash: VhRxVbInTPM1O+Ldm/7obKGqKOZ2+6LZ1EZrcIQqOtM=) 5: H9M9hJ2Wf0edu4O6BWjDO8iQCIY.asa (hash: X7hW2mdrTDcdJA7Y5SsLSoNgjMb7M7DnZnmZizxX5K0=) 6: LE0LYSRlSHBlwqkbBS3d-4jQXVI.roa (hash: qNI5ryb9dP4ZDLAtMIMap6nbp3+t9sAW2t3qbIFwYZE=) 7: VZOyRy0tzJ2sfmNYjeH9siUXpok.roa (hash: hg8jPOLxAFpxHffAZVtykZM6KfjDO72SPntESUbpkNs=) 8: eO9gFOF2DFVAaSQC-qU8Cc5tUvk.asa (hash: oREm2BU1au2wLbubTl/7hfGGiO50t8g7O52UFNL9Yd4=) 9: fMPPEhoc1eJ7TtYJwhoTEBEj3u0.roa (hash: TFEzfDo3Zwa4HL59NImWxFGsVixNQrbjisILgLkXLHY=) 10: sPWdnd-6eDj5X9yNO4z9PSISSlQ.roa (hash: agHieGTKdf4veiuZ5e0ZnuSvZ/4cBqOGV3qPQeuYVLw=) 11: uDj2Yyjz9Osyu9dJCu_3OQFz4uA.roa (hash: 3im4Wph6tBomBtiDPxXDGzF9rSSihCEjyLDoawI+nsw=) 12: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: ZzPCefUt8uakxNhXoAm/0r1b+g3WZEAKAZ9hpTfsWe0=) 13: ygw0avQsrrQ1WzJl2ooWEnEgqaE.roa (hash: RrRHzGLNsUnYr9JyyAHI4qIjDnZ3DEinjGhZIBy7PgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Sep 2026 21:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:5a:0d:c4:7b:96:99:b9:d1:4d:f9:36:3b:d5:dd:57:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Validity Not Before: Aug 31 23:00:46 2026 GMT Not After : Sep 1 23:00:46 2026 GMT Subject: CN=a2dac93f555bb91fbf29631c18aee77ee201b02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:39:87:dd:c7:0d:16:96:72:d3:43:6d:28:60: 63:71:a5:12:86:e5:ab:26:ed:12:92:79:d8:e0:df: f3:8c:85:82:b9:dd:29:87:c9:58:55:77:48:7c:fb: 95:5d:20:24:ec:07:65:74:c8:dc:04:b4:2f:37:14: 85:ba:fe:35:da:b9:61:32:d5:59:dd:4c:86:4b:ff: 1f:bf:b7:04:58:4d:d8:3f:8c:4d:75:cc:1a:84:9d: d6:8e:a0:33:fc:f2:ba:5d:ce:6a:1b:b5:04:8d:82: dd:50:5f:75:ad:ce:d6:6c:d0:48:c8:23:10:54:18: 88:55:ad:3b:d5:c9:1a:79:2a:d4:cc:68:08:78:ea: 81:7f:24:79:cc:1c:d2:29:a2:d3:e5:e4:cc:54:44: 45:fb:9f:d9:a6:16:89:cf:6f:b3:f3:9a:a3:59:01: 42:cf:c8:d2:c0:51:af:43:58:69:72:d3:9a:09:14: 16:f1:66:ad:59:ea:39:1b:4d:98:20:2f:90:ac:1e: 37:f0:57:f8:9d:ed:59:bf:db:4f:fb:c0:14:d8:3f: ec:a5:55:07:b9:45:64:2c:39:b7:be:4e:cd:46:14: 2f:e2:29:11:64:fd:33:5d:01:33:da:50:fb:ff:f6: 7a:74:dc:1a:ad:27:9e:da:a5:ad:8b:82:21:75:89: 49:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DA:C9:3F:55:5B:B9:1F:BF:29:63:1C:18:AE:E7:7E:E2:01:B0:2D X509v3 Authority Key Identifier: keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:be:14:cd:7b:14:a9:9b:a4:62:02:9c:64:7c:a8:a8:fc:ce: 26:e6:5c:27:61:c2:2d:74:12:48:6d:96:b6:a8:8c:f9:83:b1: 09:b3:ff:04:50:43:ca:29:1e:6f:38:43:11:d2:13:d4:19:f7: 2d:bd:cc:af:91:ab:f8:27:1b:e8:73:e6:57:de:b3:9d:c1:fb: 63:66:98:bf:87:80:5c:e6:74:3b:7e:5a:c7:4c:d7:9d:1a:22: 35:dc:a4:a4:7f:88:bb:fc:36:23:7b:b4:8d:7b:ed:e2:9a:92: 12:43:41:08:bb:d4:e9:10:15:26:5b:17:dd:f0:5a:5e:f1:e4: 04:18:51:39:76:24:80:0e:19:15:65:eb:93:17:26:86:2f:48: f8:65:87:fa:dc:1d:c0:9e:5b:35:9e:54:7f:e2:78:0a:74:6b: ac:b9:34:1f:d2:f7:f9:0c:ce:ac:03:b6:85:98:dd:7b:58:4a: 19:72:ff:ed:54:cd:47:e5:74:e1:0a:8b:3b:c3:b2:42:d2:66: d2:5a:64:d5:54:29:1f:03:12:79:f8:7c:72:ee:6a:94:2b:0b: 40:c8:5b:f8:77:af:b8:be:fe:8f:7e:95:5b:63:ca:6c:c4:07: b8:14:14:20:79:1f:b1:7e:6f:90:97:04:9e:ec:28:34:c8:a3: 56:31:74:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBaDcR7lpm50U35NjvV3Vd2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm MTlmN2UwHhcNMjYwODMxMjMwMDQ2WhcNMjYwOTAxMjMwMDQ2WjAzMTEwLwYDVQQD EyhhMmRhYzkzZjU1NWJiOTFmYmYyOTYzMWMxOGFlZTc3ZWUyMDFiMDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TmH3ccNFpZy00NtKGBjcaUShuWr Ju0SknnY4N/zjIWCud0ph8lYVXdIfPuVXSAk7AdldMjcBLQvNxSFuv412rlhMtVZ 3UyGS/8fv7cEWE3YP4xNdcwahJ3WjqAz/PK6Xc5qG7UEjYLdUF91rc7WbNBIyCMQ VBiIVa071ckaeSrUzGgIeOqBfyR5zBzSKaLT5eTMVERF+5/ZphaJz2+z85qjWQFC z8jSwFGvQ1hpctOaCRQW8WatWeo5G02YIC+QrB438Ff4ne1Zv9tP+8AU2D/spVUH uUVkLDm3vk7NRhQv4ikRZP0zXQEz2lD7//Z6dNwarSee2qWti4IhdYlJiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLayT9VW7kfvyljHBiu537iAbAtMB8GA1UdIwQY MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt ZGE0NTM4MDIyYWM3LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3 LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFL4UzXsU qZukYgKcZHyoqPzOJuZcJ2HCLXQSSG2WtqiM+YOxCbP/BFBDyikebzhDEdIT1Bn3 Lb3Mr5Gr+Ccb6HPmV96zncH7Y2aYv4eAXOZ0O35ax0zXnRoiNdykpH+Iu/w2I3u0 jXvt4pqSEkNBCLvU6RAVJlsX3fBaXvHkBBhROXYkgA4ZFWXrkxcmhi9I+GWH+twd wJ5bNZ5Uf+J4CnRrrLk0H9L3+QzOrAO2hZjde1hKGXL/7VTNR+V04QqLO8OyQtJm 0lpk1VQpHwMSefh8cu5qlCsLQMhb+HevuL7+j36VW2PKbMQHuBQUIHkfsX5vkJcE nuwoNMijVjF0uw== -----END CERTIFICATE-----Generated at Tue Sep 1 03:55:51 2026 by rpki-client