$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json) Hash identifier: PqJj5lmx/FNkp/hdRsrESpM1WmDvcduzQ1ybKcid7Os= Subject key identifier: 53:F1:58:E5:0D:20:60:14:BC:0C:96:BC:50:C5:F5:22:5D:D6:59:0B Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 01A1822BAFBD96E931FB386AA40B54BC7477 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft Manifest number: 1B08 Signing time: Wed 28 Oct 2026 11:01:03 +0000 Manifest this update: Wed 28 Oct 2026 11:01:03 +0000 Manifest next update: Thu 29 Oct 2026 11:01:03 +0000 Files and hashes: 1: 6cPzePL8SbPhYxlEre30SLCYl-Y.roa (hash: bpE4jQ6I0nBPjXRqOCXt82xgQ0N1iRPYG2gk58BlGfE=) 2: 7qKC_f93I4x5vZAkFd7YPrFcC7k.roa (hash: Fej8whp10bdKNIubAsMMxHxf8nDoH0W086yoYql/4Y0=) 3: AglMX7mwwb3rspJEIopyVPwTx-E.roa (hash: S+AWhAQbQR4GQpkHiPCQOCsaczJj/pHTNHnGM4CmrlA=) 4: ItLnYEbliO9uy4pN2f9Nx-cbnMU.roa (hash: SC8dz/gz97zrc/Tqdl9uM99+iCk/s/X41bIC+YpTYTI=) 5: MNvipI6k91242S53W3jqVcArQhc.roa (hash: 7sDpPYB99HElo2KA5xuF+lvuTcscLhsFKunpulQrN5o=) 6: MiUKM4-anjUIiLLo25o4aW1endE.roa (hash: 8GJk2lpNvqF8G6oHGKOgI8d2pjeWdDUhOm/xZPhFJK8=) 7: U2EVUUWlWvbUAILqaxAgK8pY0KE.roa (hash: P61yHP4ZBPMnRJW1hcXnzx/7WhRn7HOpJpj+yy4Yx4A=) 8: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: XPhQfDyspHX4cn3hjVcoKOITr2OAw+dcA0ThyP4Rfy4=) 9: WFdUi3XXatfTABnfBpngGAHzARo.roa (hash: kKjPRwwZCBaY9u1h1EFLYB9g9DPTFuUTOwPzWAxE6M4=) 10: bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa (hash: LIqVQ9mxztvdOqUbAJcArQV2MAsX+TwnaJ0MIMH4BK4=) 11: dvCXrpuIgKHCZtQqB3diL4N4JNk.roa (hash: fvscbXWy0N/msqi2rtIwXgUHt2kq1AX6g+9LTX7Mfrk=) 12: wiv8BGLIxUUMQwOeROx0j4rSHpg.roa (hash: 0dTxqq6Mcxp0f/baeK9P3ozslv5RRG7NpV1hP4JK7gg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:82:2b:af:bd:96:e9:31:fb:38:6a:a4:0b:54:bc:74:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: Oct 28 11:01:03 2026 GMT Not After : Oct 29 11:01:03 2026 GMT Subject: CN=53f158e50d206014bc0c96bc50c5f5225dd6590b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:89:9b:c9:3f:71:e9:2e:04:67:85:ea:14:99: af:1a:13:66:30:03:f2:35:25:58:ee:52:7b:d4:9f: dc:37:c6:d3:97:48:fd:48:a2:dc:17:8f:d9:70:65: 60:a0:f3:e3:31:0c:e4:28:37:31:c2:ce:ff:e6:6a: 90:50:52:ec:66:31:03:7d:28:11:80:33:91:77:b3: c0:a4:87:4e:e8:cb:fa:a9:54:ef:57:af:a6:1f:3e: 5f:48:f4:90:b1:7f:f7:ec:f8:d1:83:ef:9f:18:40: 63:84:40:31:60:de:fd:c0:2d:cd:1a:e0:1c:71:18: cb:2f:11:b5:93:fe:ad:a2:41:1e:3c:f3:21:89:e4: ff:fd:b8:e1:6a:74:cc:a1:e9:ee:ee:a6:ef:5a:08: 37:aa:52:ee:e1:ac:27:fb:91:3c:62:0c:78:1d:1b: e8:b5:cb:39:33:2e:32:7d:e3:23:ea:53:82:cf:ae: 6e:5f:c9:0a:60:41:31:c5:bd:fc:7c:ef:db:dc:e8: 9d:20:6d:f1:28:22:f4:fc:69:53:b9:38:ec:7c:db: d8:b0:71:0b:13:2e:a4:52:8d:0a:66:3d:30:17:8c: 5d:39:1f:fa:ce:01:b0:ba:c5:b4:83:ac:02:9e:46: 5f:41:5c:e8:27:90:c9:4a:e1:ef:33:eb:41:30:ef: 51:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F1:58:E5:0D:20:60:14:BC:0C:96:BC:50:C5:F5:22:5D:D6:59:0B X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a0:b5:d0:25:6c:90:86:61:1d:f9:83:d9:b2:87:67:d3:cf: de:69:14:6e:2f:22:da:b4:d6:9e:92:bd:b6:d1:d2:39:68:c3: a3:99:d4:14:bb:41:4f:3a:34:9b:eb:7d:ae:ea:bf:88:f1:c8: 8c:2b:e5:f3:19:04:f1:c0:9c:25:80:be:59:fd:bd:32:cd:66: a5:30:19:48:21:0e:e9:82:fc:7a:c2:34:a8:85:7d:a3:fd:9b: f2:b1:74:4b:35:7d:eb:b9:2f:a1:cb:65:90:a0:83:c0:3c:29: 98:44:f2:02:a0:16:38:d9:ec:01:7b:91:25:01:a4:2d:7c:a6: 85:1e:08:f3:08:ba:45:34:50:a7:6f:81:9e:6e:2d:08:32:3f: 0a:6e:44:85:fb:83:f4:91:e7:1f:55:00:7e:a2:97:c3:50:0d: f3:73:0f:c4:d4:16:0b:9c:db:e1:64:17:c6:c7:f8:e6:2c:27: 90:5e:5f:d5:41:ce:00:2e:0e:aa:02:75:dc:33:35:80:16:3c: 3b:2f:a9:f9:d1:eb:83:30:90:b3:ed:a2:c3:ea:6a:10:1e:ca: d7:76:11:21:ca:4b:62:54:f9:7c:62:73:06:cd:9c:a8:3c:19: 3b:d9:57:6f:46:5f:83:4c:58:48:e6:3f:7e:2c:3e:10:bf:73: 2e:8e:86:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGCK6+9lukx+zhqpAtUvHR3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjYxMDI4MTEwMTAzWhcNMjYxMDI5MTEwMTAzWjAzMTEwLwYDVQQD Eyg1M2YxNThlNTBkMjA2MDE0YmMwYzk2YmM1MGM1ZjUyMjVkZDY1OTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlombyT9x6S4EZ4XqFJmvGhNmMAPy NSVY7lJ71J/cN8bTl0j9SKLcF4/ZcGVgoPPjMQzkKDcxws7/5mqQUFLsZjEDfSgR gDORd7PApIdO6Mv6qVTvV6+mHz5fSPSQsX/37PjRg++fGEBjhEAxYN79wC3NGuAc cRjLLxG1k/6tokEePPMhieT//bjhanTMoenu7qbvWgg3qlLu4awn+5E8Ygx4HRvo tcs5My4yfeMj6lOCz65uX8kKYEExxb38fO/b3OidIG3xKCL0/GlTuTjsfNvYsHEL Ey6kUo0KZj0wF4xdOR/6zgGwusW0g6wCnkZfQVzoJ5DJSuHvM+tBMO9R7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPxWOUNIGAUvAyWvFDF9SJd1lkLMB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlaC10CVs kIZhHfmD2bKHZ9PP3mkUbi8i2rTWnpK9ttHSOWjDo5nUFLtBTzo0m+t9ruq/iPHI jCvl8xkE8cCcJYC+Wf29Ms1mpTAZSCEO6YL8esI0qIV9o/2b8rF0SzV967kvoctl kKCDwDwpmETyAqAWONnsAXuRJQGkLXymhR4I8wi6RTRQp2+Bnm4tCDI/Cm5EhfuD 9JHnH1UAfqKXw1AN83MPxNQWC5zb4WQXxsf45iwnkF5f1UHOAC4OqgJ13DM1gBY8 Oy+p+dHrgzCQs+2iw+pqEB7K13YRIcpLYlT5fGJzBs2cqDwZO9lXb0Zfg0xYSOY/ fiw+EL9zLo6GxQ== -----END CERTIFICATE-----Generated at Wed Oct 28 18:16:22 2026 by rpki-client