$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json) Hash identifier: k8vkwC64coCTQAqfFcUIyHDSjLSUGkaY5r/B1z9i1QA= Subject key identifier: 4C:04:20:2D:FC:AE:7B:A8:59:A0:6D:04:83:44:7D:4B:CE:E5:00:07 Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Certificate serial: 01A154AE9438C4B1DFF1FFC80794E3C8A2F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft Manifest number: 126D Signing time: Mon 19 Oct 2026 15:01:29 +0000 Manifest this update: Mon 19 Oct 2026 15:01:29 +0000 Manifest next update: Tue 20 Oct 2026 15:01:29 +0000 Files and hashes: 1: 03qDd_x5kIQisyJDyHVAhJWRLFM.roa (hash: Bmg2Fe/T2cmfuLkUG6xBLZwUcgZn+z1pedq3EUjKeVA=) 2: 33gU1W_UI1Ae18rle6T32Am_ap0.roa (hash: CtHyr3lbVK0nM4M5V+efOeDGbhPQI4ZIEpY0w9de2vw=) 3: 7d0P9doBZNnco0Uk-uyE95zYsRU.roa (hash: C0smtXlBUg5wv9v0wIvA4FN2yM+ZFAWopSk3eOTxr4A=) 4: BDT11QF-TtgdWALp45xoyYelUsM.roa (hash: mujOfcZnyEUoIqlubLK7erXRFeA189kfqWm71HEHJLA=) 5: EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa (hash: VhRxVbInTPM1O+Ldm/7obKGqKOZ2+6LZ1EZrcIQqOtM=) 6: H9M9hJ2Wf0edu4O6BWjDO8iQCIY.asa (hash: X7hW2mdrTDcdJA7Y5SsLSoNgjMb7M7DnZnmZizxX5K0=) 7: LE0LYSRlSHBlwqkbBS3d-4jQXVI.roa (hash: qNI5ryb9dP4ZDLAtMIMap6nbp3+t9sAW2t3qbIFwYZE=) 8: TXguGT_UTl1GdyDJUiKFRpuOX_o.roa (hash: fAuVLNao9cvO8YJmECjpJXFSsNjlEB4NUGFkoGhsksY=) 9: VZOyRy0tzJ2sfmNYjeH9siUXpok.roa (hash: hg8jPOLxAFpxHffAZVtykZM6KfjDO72SPntESUbpkNs=) 10: eO9gFOF2DFVAaSQC-qU8Cc5tUvk.asa (hash: oREm2BU1au2wLbubTl/7hfGGiO50t8g7O52UFNL9Yd4=) 11: fMPPEhoc1eJ7TtYJwhoTEBEj3u0.roa (hash: TFEzfDo3Zwa4HL59NImWxFGsVixNQrbjisILgLkXLHY=) 12: sPWdnd-6eDj5X9yNO4z9PSISSlQ.roa (hash: agHieGTKdf4veiuZ5e0ZnuSvZ/4cBqOGV3qPQeuYVLw=) 13: uDj2Yyjz9Osyu9dJCu_3OQFz4uA.roa (hash: 3im4Wph6tBomBtiDPxXDGzF9rSSihCEjyLDoawI+nsw=) 14: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: XumPZ4fwchNqDJwlHvoSKHIkhHKYE0LulgOfYN5v6Lg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 14:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:54:ae:94:38:c4:b1:df:f1:ff:c8:07:94:e3:c8:a2:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Validity Not Before: Oct 19 15:01:29 2026 GMT Not After : Oct 20 15:01:29 2026 GMT Subject: CN=4c04202dfcae7ba859a06d0483447d4bcee50007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:c4:e6:49:d8:90:5f:35:42:4b:91:69:22: 7b:5b:02:6d:3d:dd:f0:95:e0:c8:eb:e0:c2:47:63: ac:62:5b:20:16:b1:df:8a:a8:1f:70:4b:8b:d7:19: 6f:bc:be:dc:5e:d6:53:2e:18:f8:1b:b0:6c:ae:69: 1b:3b:1f:53:f6:cb:ae:90:c4:89:e6:74:d1:03:7b: 39:fc:ce:b2:52:85:2a:a3:00:99:01:f1:62:ae:ef: 08:65:c9:f6:80:59:db:83:97:36:7e:a5:71:6b:78: d7:11:76:c8:90:55:dc:34:90:8e:ec:a8:19:db:59: 6c:25:d1:c2:00:ad:98:47:7c:c6:d5:46:e0:f5:29: e2:d9:f8:e2:55:c7:91:ea:98:7b:b2:0a:77:f7:bc: 31:fd:28:3b:b7:18:7f:0a:d6:7b:ed:28:8b:46:a2: 9b:b6:bb:9a:1c:64:bb:f1:4b:86:04:1e:4f:00:8f: a1:79:a3:59:e6:c7:67:49:32:a0:e5:f2:33:fb:f0: 64:3b:82:6b:f9:77:b5:a7:4c:94:3b:ee:94:81:7e: 15:60:e2:0b:41:6d:86:7a:d3:36:3d:9e:4d:3c:4f: 9f:ac:4b:56:21:c0:26:9b:73:47:2e:c0:85:25:19: 26:58:20:53:90:f4:d6:0d:e2:54:67:8d:36:d8:7c: 21:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:04:20:2D:FC:AE:7B:A8:59:A0:6D:04:83:44:7D:4B:CE:E5:00:07 X509v3 Authority Key Identifier: keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c8:99:07:0e:b1:6a:18:62:78:94:1f:ce:48:e2:89:ea:02: 90:de:c3:11:f2:ab:14:43:bf:59:b8:9b:e8:08:58:ae:3b:b1: d0:77:82:d2:8c:5d:34:5c:bb:cf:59:6a:fa:65:49:ba:e1:9c: 7e:76:f8:4a:fb:58:c0:e2:a2:97:db:d9:38:9a:84:7b:24:7b: 67:bc:c8:91:ef:2a:07:21:06:7d:b4:14:30:3f:2b:f1:4e:6c: 30:e8:d3:a3:65:59:34:49:a0:9f:1a:17:b9:a9:fa:a5:3c:35: 7b:ce:6d:1f:ef:e1:de:f3:62:f4:91:61:0b:d2:52:58:78:79: 8c:76:4c:e2:41:4e:da:bd:65:0a:2a:79:9b:80:20:06:7f:dc: 55:52:e8:b3:c8:d0:f1:d3:4d:d7:21:fc:9b:12:eb:9b:49:10: 5c:b8:dd:84:9b:a6:75:b0:0b:1c:c7:42:46:a8:f1:3c:71:33: bb:38:43:36:aa:97:00:cc:da:b5:3c:51:2b:b3:68:49:e5:a7: f9:41:d7:1c:27:a6:c2:b9:84:b0:c3:89:90:39:fa:b8:ff:18: 38:48:45:16:dc:5a:16:11:e4:0f:ff:e1:25:2f:db:61:73:32: e6:f3:5a:67:12:0b:23:31:b5:1d:dc:e1:94:9b:f2:a3:c4:9a: c7:a8:f4:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFUrpQ4xLHf8f/IB5TjyKLzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm MTlmN2UwHhcNMjYxMDE5MTUwMTI5WhcNMjYxMDIwMTUwMTI5WjAzMTEwLwYDVQQD Eyg0YzA0MjAyZGZjYWU3YmE4NTlhMDZkMDQ4MzQ0N2Q0YmNlZTUwMDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKTE5knYkF81QkuRaSJ7WwJtPd3w leDI6+DCR2OsYlsgFrHfiqgfcEuL1xlvvL7cXtZTLhj4G7BsrmkbOx9T9suukMSJ 5nTRA3s5/M6yUoUqowCZAfFiru8IZcn2gFnbg5c2fqVxa3jXEXbIkFXcNJCO7KgZ 21lsJdHCAK2YR3zG1Ubg9Sni2fjiVceR6ph7sgp397wx/Sg7txh/CtZ77SiLRqKb truaHGS78UuGBB5PAI+heaNZ5sdnSTKg5fIz+/BkO4Jr+Xe1p0yUO+6UgX4VYOIL QW2GetM2PZ5NPE+frEtWIcAmm3NHLsCFJRkmWCBTkPTWDeJUZ4022HwhxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwEIC38rnuoWaBtBINEfUvO5QAHMB8GA1UdIwQY MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt ZGE0NTM4MDIyYWM3LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3 LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8iZBw6x ahhieJQfzkjiieoCkN7DEfKrFEO/Wbib6AhYrjux0HeC0oxdNFy7z1lq+mVJuuGc fnb4SvtYwOKil9vZOJqEeyR7Z7zIke8qByEGfbQUMD8r8U5sMOjTo2VZNEmgnxoX uan6pTw1e85tH+/h3vNi9JFhC9JSWHh5jHZM4kFO2r1lCip5m4AgBn/cVVLos8jQ 8dNN1yH8mxLrm0kQXLjdhJumdbALHMdCRqjxPHEzuzhDNqqXAMzatTxRK7NoSeWn +UHXHCemwrmEsMOJkDn6uP8YOEhFFtxaFhHkD//hJS/bYXMy5vNaZxILIzG1Hdzh lJvyo8Sax6j0DA== -----END CERTIFICATE-----Generated at Mon Oct 19 22:17:18 2026 by rpki-client