$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: gdxH0FWnYLH3Rk1QovKinLyAO1aTpmcTl7MuqJKFILw= Subject key identifier: 4C:01:CE:E0:84:24:DC:67:A9:8F:72:C1:75:0F:AC:C1:CA:2B:EB:D1 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 01A1611FAA6CE4E6CD3224714ABD0D46DB71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 1862 Signing time: Thu 22 Oct 2026 01:00:27 +0000 Manifest this update: Thu 22 Oct 2026 01:00:27 +0000 Manifest next update: Fri 23 Oct 2026 01:00:27 +0000 Files and hashes: 1: 1kKPv2wUltItuWIjU1ilVcX9VLE.roa (hash: il+uT7sf8sbrAGYBj61G15BD0mwhGRvyVxYl0y6GFnU=) 2: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (hash: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE=) 3: 8eTvO2TZdJIMeT5I77o8e5hLDyI.roa (hash: RW0q4KTs9SZCv80GUyltUUK1ZfZgWc4IG8Rp/qHyA3g=) 4: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 5: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 6: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 7: JWwcCyO1rTwTxLjbz3l2SouJTAA.roa (hash: AgH3qdVNL3CHi6p+2Mst499KFQUzntafoYHZrzYZW8s=) 8: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 9: Lmglx6k3OhVfB6qXrSYWY-3n7wU.roa (hash: jOlTc86u7s0cDJRLkmCFCCAUXlp7wxNhr83b5DVvky8=) 10: WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa (hash: uW36/EhLhyw8heI0tUnFU6wiInPtS+CcO/PTS29AqYY=) 11: XjjwvZsrXx6sUtsiWwMw-1uwefI.roa (hash: RD/89w2/8ZIshxnP3ME483+xP0ONXiXxPqHiP1Ie+hY=) 12: bV3Qg5HtML1zUsJYAwV_qsAoITg.roa (hash: ZhHWbujHVFO1260mH7gJeRdvHPIcZ7THBcA3XZdsUfs=) 13: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 14: cOMhRxduLw18TIe2EJANKourNbc.roa (hash: vRamlKR5R5SmfC3d0sMnuMWhFKCo/1NfKoqnzL94OGM=) 15: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: UvHQaU/igqeZd+DXkmgmSA/hQ9paYvP7qRhHTyxF+08=) 16: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 17: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 18: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) 19: yhFaGf2_vHhBZgwwXE8xm1OTXQE.roa (hash: 3+krivSCZ6wgsfWjmVU3sW4pnSZcLq6UgbbbbMppVNI=) 20: zKma2lZxd28aMOIa5GKySj7K3F4.roa (hash: z2dVlW8SWBq0rqcswBgsfVdqo5mJ3Cgdk6gd4jQUscA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Oct 2026 01:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:61:1f:aa:6c:e4:e6:cd:32:24:71:4a:bd:0d:46:db:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Oct 22 01:00:27 2026 GMT Not After : Oct 23 01:00:27 2026 GMT Subject: CN=4c01cee08424dc67a98f72c1750facc1ca2bebd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:19:d4:4a:bc:72:2a:a9:a0:95:dd:61:c6:36: ee:53:bb:44:72:53:09:d0:a1:c6:a9:fb:86:33:99: c0:37:0b:f7:b2:31:5d:8a:f9:9c:c9:1b:54:67:94: 02:b6:25:ac:5a:89:2a:69:f1:0c:59:84:10:98:e1: d6:63:53:94:23:64:6a:a4:7b:ab:96:0b:b5:2f:9f: 78:3f:db:f6:29:30:a7:5b:da:55:a1:13:c2:27:58: ff:b1:fe:41:5c:44:cc:de:d6:50:56:33:a2:13:b0: 27:95:dd:e2:31:0b:96:5c:59:17:6f:6b:28:9a:d5: e7:92:b8:21:0b:76:51:64:8b:1f:6d:31:09:87:99: 61:d3:7e:f1:66:5c:d6:ee:33:b2:fd:4c:ac:8f:bf: 3e:08:d4:64:83:95:44:d9:c1:3e:7a:dc:6b:dc:dd: 41:9e:73:a6:97:f5:94:df:e2:9c:f1:77:fc:29:96: ef:3b:db:92:c9:ef:e3:0d:57:f1:87:3b:88:7c:a1: e4:89:cf:5c:fe:7e:93:fb:bd:7e:92:15:f4:9a:af: d7:2d:6f:be:f3:01:da:92:67:d2:37:85:7d:82:94: dc:db:1d:a7:43:ae:e4:10:81:91:c4:60:5e:a3:39: 6e:d3:4b:b3:89:cf:c4:f6:c4:8a:9d:82:03:51:17: 33:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:01:CE:E0:84:24:DC:67:A9:8F:72:C1:75:0F:AC:C1:CA:2B:EB:D1 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b1:32:46:af:12:a8:82:dc:36:89:a3:73:e2:90:f1:97:42: f1:c6:3c:27:6f:56:cf:17:d0:4d:eb:19:c4:f2:39:01:1c:41: 0e:c2:45:6f:5e:9e:88:3b:b7:bf:88:ce:84:41:c8:d3:3d:d6: 5e:fb:d1:08:e3:3b:c0:7e:c5:e0:8a:61:33:dd:73:d3:f8:e6: 64:13:89:d5:d2:7f:b4:71:ce:d9:a4:0a:f8:f7:3e:d8:8e:90: f3:b8:8b:47:d3:ee:8c:ad:00:0e:ca:3f:37:45:d0:20:cb:6c: d7:09:cb:70:5e:e3:6d:f6:44:96:19:51:d4:10:0b:ea:b8:bf: d1:d5:90:54:90:ed:0f:99:fd:21:2f:64:e0:f2:77:4b:81:c2: 24:0d:b4:39:1b:1c:21:ec:3c:f0:16:ee:3f:80:d8:de:93:51: 85:24:c0:58:55:e1:1f:37:f9:c4:d3:ca:3c:f5:91:3b:08:7b: 1f:48:61:2a:b0:d8:a5:62:8f:28:b9:a3:4b:4f:ce:26:38:72: 58:dc:c3:70:2c:28:69:81:9a:2c:b7:5b:a0:d3:7b:df:e4:63: 84:17:f5:4c:6c:1c:49:17:28:20:62:fb:fe:48:3e:2c:33:97: 6f:86:cf:cd:ad:57:37:22:41:62:53:99:2e:50:52:59:37:16: 12:4a:2b:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFhH6ps5ObNMiRxSr0NRttxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYxMDIyMDEwMDI3WhcNMjYxMDIzMDEwMDI3WjAzMTEwLwYDVQQD Eyg0YzAxY2VlMDg0MjRkYzY3YTk4ZjcyYzE3NTBmYWNjMWNhMmJlYmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xnUSrxyKqmgld1hxjbuU7tEclMJ 0KHGqfuGM5nANwv3sjFdivmcyRtUZ5QCtiWsWokqafEMWYQQmOHWY1OUI2RqpHur lgu1L594P9v2KTCnW9pVoRPCJ1j/sf5BXETM3tZQVjOiE7Anld3iMQuWXFkXb2so mtXnkrghC3ZRZIsfbTEJh5lh037xZlzW7jOy/Uysj78+CNRkg5VE2cE+etxr3N1B nnOml/WU3+Kc8Xf8KZbvO9uSye/jDVfxhzuIfKHkic9c/n6T+71+khX0mq/XLW++ 8wHakmfSN4V9gpTc2x2nQ67kEIGRxGBeozlu00uzic/E9sSKnYIDURczewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwBzuCEJNxnqY9ywXUPrMHKK+vRMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLEyRq8S qILcNomjc+KQ8ZdC8cY8J29WzxfQTesZxPI5ARxBDsJFb16eiDu3v4jOhEHI0z3W XvvRCOM7wH7F4IphM91z0/jmZBOJ1dJ/tHHO2aQK+Pc+2I6Q87iLR9PujK0ADso/ N0XQIMts1wnLcF7jbfZElhlR1BAL6ri/0dWQVJDtD5n9IS9k4PJ3S4HCJA20ORsc Iew88BbuP4DY3pNRhSTAWFXhHzf5xNPKPPWROwh7H0hhKrDYpWKPKLmjS0/OJjhy WNzDcCwoaYGaLLdboNN73+RjhBf1TGwcSRcoIGL7/kg+LDOXb4bPza1XNyJBYlOZ LlBSWTcWEkorYg== -----END CERTIFICATE-----Generated at Thu Oct 22 13:06:52 2026 by rpki-client