$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft File: UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft (raw, json) Hash identifier: 9SwNnmcAkHslnlmudJbKtOhRqqGtPUFEcfoCt2DqEns= Subject key identifier: F2:5A:9B:E4:10:30:A0:95:94:FE:52:56:D3:4D:DE:7D:C3:63:4B:23 Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e Certificate serial: 01A026C592F028F68A8D9601DB634BABC567 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft Manifest number: 153E Signing time: Sat 22 Aug 2026 00:01:17 +0000 Manifest this update: Sat 22 Aug 2026 00:01:17 +0000 Manifest next update: Sun 23 Aug 2026 00:01:17 +0000 Files and hashes: 1: 5LP1tFsYxrSifJx4g3QCwnwqEE0.roa (hash: KN3CpVDHemmKFo5Hvty6pP9rTH9gXzF1gwHa0T5DRaI=) 2: 9okxpKR53j_wPBq5poJcbcWbCuU.roa (hash: g6ME8XCY/1PYlaKndRMLOkvVq06aR4XG5jU3acn3n1Q=) 3: NEN0LXaSfRY1LnULdkJtj6mRNJQ.roa (hash: 3VMJ8FAcJtXYQQFiElHCi0MUd/IBCd2Oo6ayYD6ZuQI=) 4: UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl (hash: 7BBD50ZQ0yVO89XCPnIr3dnvc4TU7LIFz8DIBMDpLrc=) 5: Vvg_eRMXx1wM0ykfa7tuZT2JbiU.roa (hash: y54xWJIZgynMkSzzpbyHXRwEQLJEaYo5XZHrl4z8vdo=) 6: aF8HdNDR8v9GbRHA9AUlpw1JBio.roa (hash: D5TksZpwG3SQ7rtD3PvQaY0VIClKXUQssfssM3S6CMo=) 7: c72wk2piK98wT4mJw8_ZtS1RplA.roa (hash: sWf1C2L00m53zAy7UBc4ltRNb1KloYEQlgh8zb6I1Tg=) 8: q5ijRhsoQMXQqvexZ__tLFhWfbE.roa (hash: RKODKNUK1hXqxPnqoVYe1vULFOrntBOl4JYsmeK1KQ4=) 9: vqgsCdnQjdwb8knW65OqR5JZyMQ.roa (hash: vaE98kS/d3xxz0YZliXnz/1dmO+QWIKwmXrkaJQJaCI=) 10: xyPRxt8gyN4UvPVCARX1LVhRpNY.roa (hash: 6Z0OEqU5ZvJLP8MHSq0j/bl+XSlDKyhwlrMFSdH8iSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Aug 2026 19:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:26:c5:92:f0:28:f6:8a:8d:96:01:db:63:4b:ab:c5:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e Validity Not Before: Aug 22 00:01:17 2026 GMT Not After : Aug 23 00:01:17 2026 GMT Subject: CN=f25a9be41030a09594fe5256d34dde7dc3634b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0c:63:fe:b6:4b:f2:d7:03:32:1f:c8:77:d7: d6:fc:55:e7:be:f5:a9:01:df:6b:ab:6f:87:0b:d0: ad:17:99:62:92:bd:8b:1e:a2:ec:07:77:2e:96:eb: 8e:d4:27:fd:bd:96:e5:f4:a9:4e:b8:e0:52:24:c8: a5:85:39:5d:ea:c3:90:fd:cd:12:35:3d:25:b4:05: bd:59:d7:55:fd:49:f8:6a:d8:e3:dd:e3:38:09:c1: 04:1e:05:ef:72:ac:02:c3:6a:9d:64:11:c3:f9:d5: 84:07:d6:f0:fe:74:50:de:73:3a:76:6e:31:c8:0a: dc:72:c9:dc:f3:ec:00:58:9c:28:35:16:cd:a5:fd: e6:3f:8c:f4:c2:c9:ba:31:2e:6e:b4:2c:b8:63:89: 34:2b:4f:4d:5e:b6:c2:d3:01:62:a2:2e:0d:89:9b: ee:ee:c3:ab:46:0e:74:be:87:3d:cb:7f:82:fd:09: fe:16:65:69:88:a7:e6:53:a5:5e:90:17:d1:34:27: 64:9e:fa:67:9b:f0:72:60:91:4e:13:e9:9d:81:db: fa:d0:7a:50:ac:5d:b4:f8:c8:ba:f0:99:b6:60:31: f9:dd:d1:92:76:c5:63:1b:ec:b8:d7:ab:37:ec:8c: 26:40:63:3a:b4:f3:ad:4b:5c:90:f6:81:b2:b9:ef: ac:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5A:9B:E4:10:30:A0:95:94:FE:52:56:D3:4D:DE:7D:C3:63:4B:23 X509v3 Authority Key Identifier: keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:11:29:6c:de:fa:7d:71:a3:ec:1c:4e:e5:6d:e7:b1:2d:32: 24:fa:ce:0a:41:f9:19:81:33:8a:b6:a7:fe:e6:5c:ad:c8:dc: 6e:88:0b:2b:59:0c:1e:95:83:75:75:07:b3:a4:00:13:a2:26: 81:41:22:52:b3:85:3c:79:ee:6c:d3:68:a6:3a:67:df:eb:26: 6a:00:14:02:ef:c9:b1:08:4a:30:37:28:b2:33:0f:fa:f4:f1: 3e:f5:84:9a:30:cd:1f:71:5d:9e:83:5e:cb:63:b0:0f:c1:bc: 32:7f:20:d4:50:0b:c7:61:e3:57:39:92:fe:3e:dc:cd:06:07: d6:6d:c0:13:81:cd:1f:6c:7a:30:8f:ff:c0:3f:fc:5b:2c:f0: d7:b4:53:27:3b:78:91:e0:d1:8a:98:09:9d:56:da:6d:e1:96: 54:f3:b2:24:6b:2c:67:4f:02:06:0d:c8:f7:18:c1:b0:ee:9b: 27:fb:c7:74:53:e2:1d:95:6d:a6:5e:95:41:6b:a9:bf:89:42: f0:68:fc:55:1c:53:9b:4e:6c:77:23:d1:4e:98:f5:9d:df:27: 88:26:a7:11:b9:34:66:0c:64:d1:a5:37:37:3c:71:03:b7:ce: d3:17:17:89:ba:e7:d8:91:3b:05:6f:76:8e:96:55:ac:94:18: a0:c4:5d:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAmxZLwKPaKjZYB22NLq8VnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMGI0MTlmMGMxN2I0YzhiZTIxN2Y2NDM4OGQyNjhkMTRk YzI2MWUwHhcNMjYwODIyMDAwMTE3WhcNMjYwODIzMDAwMTE3WjAzMTEwLwYDVQQD EyhmMjVhOWJlNDEwMzBhMDk1OTRmZTUyNTZkMzRkZGU3ZGMzNjM0YjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgxj/rZL8tcDMh/Id9fW/FXnvvWp Ad9rq2+HC9CtF5likr2LHqLsB3culuuO1Cf9vZbl9KlOuOBSJMilhTld6sOQ/c0S NT0ltAW9WddV/Un4atjj3eM4CcEEHgXvcqwCw2qdZBHD+dWEB9bw/nRQ3nM6dm4x yArccsnc8+wAWJwoNRbNpf3mP4z0wsm6MS5utCy4Y4k0K09NXrbC0wFioi4NiZvu 7sOrRg50voc9y3+C/Qn+FmVpiKfmU6VekBfRNCdknvpnm/ByYJFOE+mdgdv60HpQ rF20+Mi68Jm2YDH53dGSdsVjG+y416s37IwmQGM6tPOtS1yQ9oGyue+sRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJam+QQMKCVlP5SVtNN3n3DY0sjMB8GA1UdIwQY MBaAFFELQZ8MF7TIviF/ZDiNJo0U3CYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYt MTRhMDk5OTNkNjcxLzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYtMTRhMDk5OTNkNjcx LzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxEpbN76 fXGj7BxO5W3nsS0yJPrOCkH5GYEziran/uZcrcjcbogLK1kMHpWDdXUHs6QAE6Im gUEiUrOFPHnubNNopjpn3+smagAUAu/JsQhKMDcosjMP+vTxPvWEmjDNH3FdnoNe y2OwD8G8Mn8g1FALx2HjVzmS/j7czQYH1m3AE4HNH2x6MI//wD/8Wyzw17RTJzt4 keDRipgJnVbabeGWVPOyJGssZ08CBg3I9xjBsO6bJ/vHdFPiHZVtpl6VQWupv4lC 8Gj8VRxTm05sdyPRTpj1nd8niCanEbk0Zgxk0aU3NzxxA7fO0xcXibrn2JE7BW92 jpZVrJQYoMRduw== -----END CERTIFICATE-----Generated at Sat Aug 22 05:54:39 2026 by rpki-client