$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: KT+06HRJlEEcly+kQmX6ORDXcetZ2Epif1HZNGnCY3U= Subject key identifier: 56:8C:95:3F:B5:E1:1E:EF:4C:F2:DF:FC:FC:0F:2B:F2:AC:B5:4A:94 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019FF67DBC3B0B5AC4FAA63DDFF2B55B9DD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 15AF Signing time: Wed 12 Aug 2026 15:01:02 +0000 Manifest this update: Wed 12 Aug 2026 15:01:02 +0000 Manifest next update: Thu 13 Aug 2026 15:01:02 +0000 Files and hashes: 1: BK_uZd5RIdvcCcnIrkl91Qf2mFw.roa (hash: wV2RNnXCJX3V+Medw8LdpmAEbR5QwEUgTvufx7pFq14=) 2: FtL8JAR5L3QuiWjveQYYqx5Vysc.roa (hash: TDzblppwWN3R0n7X/3t6Y/QCHzmL0n6aO41HLuZVCKU=) 3: G9O4g34wmhpRqqqyNq64bnjh27k.roa (hash: lYlheaBAaMmywrolWQWx4QnBFOXnz365592aJuQe6Mw=) 4: NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa (hash: edl6dCh63hg4Y8AUvmK5tlCPTiU0Nu0TVS0oTDNYUII=) 5: XppJI7pSNx6BdFrEbdtPboTQL6o.roa (hash: Cty7u06Lt5vOCxE5CLtni9wB/17m9CZOi2zJp+IGXYM=) 6: ZmU2dSStEk_zeXSWwEBaw5tcl0Q.roa (hash: Y1sWpxD5SobS8QA6Ihwhvzg6iQQ+93Pu+DpnTFJR+xM=) 7: hHQPymz7nrurWK651cK6wH1WQB4.roa (hash: dwQ4oAHDFe0oAQKlctscRR06w5cemCjD8MkqMj9iTyk=) 8: hn8HZ87MGm21OeAakwo0L7epBvo.roa (hash: K2tDb7I5NoqsKa5/k7EGMMNhy8l68r1VCX67mnoFnXs=) 9: kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa (hash: lYivRiiWhdQqSTdJmm6RVAol+uwcwmFLCfnYj2bvGyA=) 10: th-tx_kJ7veQ1scNgs5J6K1YnW4.roa (hash: CptKWeu/KjIE3Xe0fo+dZtItTKDZJuUjeV7GErUniCg=) 11: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: jgZZk0+l3/VUf60WFmRo4he/iYpg6IHxYy/VvJ1kw6c=) 12: uibhPc4NbRy01honmhOVxxl-SbI.roa (hash: aerci+cgin2TuEzTcnRWk0Cjk81xvvnVy7gKs1IvnLQ=) 13: utkmbyJ1-9TI5Iy29JQnzvwfdgw.roa (hash: MQitkqvZxc85BEfsLrabuKg5Cbpd+JVUjJLsFQDLJCQ=) 14: xxR8mx-20J_lo55Rh1660v5SUI4.roa (hash: 2Y9dBCwd98Bba/rHT3QIRjMGiqefSe3zB38HBIRd3qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Aug 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f6:7d:bc:3b:0b:5a:c4:fa:a6:3d:df:f2:b5:5b:9d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Aug 12 15:01:02 2026 GMT Not After : Aug 13 15:01:02 2026 GMT Subject: CN=568c953fb5e11eef4cf2dffcfc0f2bf2acb54a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:45:2b:b7:7a:dc:39:42:d4:b6:97:44:51:11: 83:fc:95:af:18:12:d9:8b:b4:62:0b:51:7a:1f:f3: 80:d3:f9:d6:96:2f:66:4f:a5:e7:57:90:58:3b:08: 12:ef:dd:8c:da:e8:5d:ba:70:59:d5:5e:50:7f:e6: 35:a9:53:4e:a9:74:62:05:fe:61:4e:5b:f2:d4:e6: 2a:70:bf:3d:87:c0:9c:f3:61:a6:c8:f3:4b:40:f3: 51:bd:4b:fd:dc:2d:1f:bd:30:c3:f9:74:08:0d:1f: 4a:6e:89:04:04:fd:5d:d5:e7:5b:00:86:79:0b:6c: 57:31:e0:10:64:6a:72:8e:78:a8:cd:24:81:f2:e8: 50:74:a7:a8:0e:60:5d:41:a4:7c:75:e0:18:b8:a4: eb:d4:41:b4:85:ef:88:a0:1c:83:fc:b4:43:7a:b6: d3:82:76:ac:fb:ac:1d:18:30:13:c8:44:ed:98:87: 14:1a:7f:0f:ea:a7:32:7a:45:9a:12:25:82:d5:68: a6:4a:b7:16:8d:bd:91:c9:dc:4a:ed:cf:d3:74:7e: 70:4a:f7:f2:31:11:02:19:ef:65:67:4e:6d:ac:da: c4:d6:91:67:b3:a9:4a:dc:a6:88:9c:91:a7:7d:5a: 93:f5:a4:79:f8:98:99:44:c2:fb:b3:60:3d:db:ae: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8C:95:3F:B5:E1:1E:EF:4C:F2:DF:FC:FC:0F:2B:F2:AC:B5:4A:94 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:6a:10:64:8a:46:e1:4e:2b:7a:99:b6:9b:a1:60:7b:cf:52: 25:81:af:bd:4a:ac:49:44:cf:12:27:08:be:8b:f7:30:54:bd: dc:1f:23:ed:6f:89:42:c0:0a:dd:36:61:57:06:df:21:0e:7c: 11:8c:de:ce:4f:54:8d:3b:ce:6f:33:81:50:59:39:ec:83:2d: e6:a0:1f:73:5a:d7:86:0c:78:02:57:d5:e4:94:90:31:06:ec: 8f:f2:a1:f4:c1:83:cc:c2:2c:44:f0:00:4c:a4:9d:3e:56:c8: 62:59:8c:77:81:29:65:ba:95:62:a4:db:4a:53:c0:71:01:82: c6:ec:57:8a:31:bb:58:56:df:5a:88:fa:7c:5f:f4:ec:79:60: 9d:e4:5f:5d:0d:f2:14:24:02:63:48:c9:4f:71:3e:a1:25:67: 13:35:de:28:ea:90:17:6f:a4:2c:95:55:32:a2:23:17:02:61: cd:f3:4c:95:3d:71:21:60:55:63:2e:c4:5e:e0:2c:5d:2e:e5: 4b:1d:9c:de:8d:0a:bb:77:5a:88:50:f5:a3:98:75:7b:80:4d: aa:ec:72:74:d1:d0:9f:c0:0b:e3:24:b5:fa:04:7a:8a:37:96: da:a3:af:45:6e:c9:04:76:72:87:f5:e0:6f:74:76:dd:cf:1d: 53:04:47:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/2fbw7C1rE+qY93/K1W53ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwODEyMTUwMTAyWhcNMjYwODEzMTUwMTAyWjAzMTEwLwYDVQQD Eyg1NjhjOTUzZmI1ZTExZWVmNGNmMmRmZmNmYzBmMmJmMmFjYjU0YTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70Urt3rcOULUtpdEURGD/JWvGBLZ i7RiC1F6H/OA0/nWli9mT6XnV5BYOwgS792M2uhdunBZ1V5Qf+Y1qVNOqXRiBf5h Tlvy1OYqcL89h8Cc82GmyPNLQPNRvUv93C0fvTDD+XQIDR9KbokEBP1d1edbAIZ5 C2xXMeAQZGpyjniozSSB8uhQdKeoDmBdQaR8deAYuKTr1EG0he+IoByD/LRDerbT gnas+6wdGDATyETtmIcUGn8P6qcyekWaEiWC1WimSrcWjb2RydxK7c/TdH5wSvfy MRECGe9lZ05trNrE1pFns6lK3KaInJGnfVqT9aR5+JiZRML7s2A9267X+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaMlT+14R7vTPLf/PwPK/KstUqUMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWoQZIpG 4U4repm2m6Fge89SJYGvvUqsSUTPEicIvov3MFS93B8j7W+JQsAK3TZhVwbfIQ58 EYzezk9UjTvObzOBUFk57IMt5qAfc1rXhgx4AlfV5JSQMQbsj/Kh9MGDzMIsRPAA TKSdPlbIYlmMd4EpZbqVYqTbSlPAcQGCxuxXijG7WFbfWoj6fF/07HlgneRfXQ3y FCQCY0jJT3E+oSVnEzXeKOqQF2+kLJVVMqIjFwJhzfNMlT1xIWBVYy7EXuAsXS7l Sx2c3o0Ku3daiFD1o5h1e4BNquxydNHQn8AL4yS1+gR6ijeW2qOvRW7JBHZyh/Xg b3R23c8dUwRH2Q== -----END CERTIFICATE-----Generated at Wed Aug 12 18:14:08 2026 by rpki-client