$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: 2OXMKpSm/cq5WicGYgyhee7SeNWmmvgwQ0dCH/8Z+WE= Subject key identifier: DE:6A:A1:06:C5:AA:9B:D4:7E:CC:94:57:A4:39:37:EF:E9:51:E4:FD Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 01A12CFBB25D91777C4A21B0CEC1B05E3838 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: 0289 Signing time: Sun 11 Oct 2026 22:00:55 +0000 Manifest this update: Sun 11 Oct 2026 22:00:55 +0000 Manifest next update: Mon 12 Oct 2026 22:00:55 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: GyQl/lBAU0YXfcVgea7lJkJGtWbMOyCUpR8qDYGhw8E=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:2c:fb:b2:5d:91:77:7c:4a:21:b0:ce:c1:b0:5e:38:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: Oct 11 22:00:55 2026 GMT Not After : Oct 12 22:00:55 2026 GMT Subject: CN=de6aa106c5aa9bd47ecc9457a43937efe951e4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0b:db:6c:05:50:0c:31:d3:af:aa:d6:c1:bd: 3f:8e:8a:62:93:5d:02:f3:26:69:64:d4:f5:07:10: 5c:90:69:63:7e:f8:c7:f8:e6:42:f6:b4:fc:7c:17: da:cb:59:51:a3:39:60:d4:1d:3e:81:d1:3d:b9:c7: a2:cb:16:7a:10:75:68:27:19:af:42:7a:8a:6a:1d: de:b2:7f:b6:e1:d0:92:5e:af:a7:1e:c9:01:9e:5c: 81:ac:66:b9:a6:93:3e:4c:36:ca:6b:5a:d3:df:ec: fa:7d:10:96:72:90:f1:70:20:eb:0c:dc:1b:f8:00: ab:ec:95:d9:65:77:d8:9a:1f:81:8a:3f:e3:27:51: ec:64:f3:00:05:c7:20:73:4f:78:50:b0:c4:fe:0a: 87:27:79:df:3b:89:bd:1b:51:cf:1d:62:a2:99:39: a5:00:83:f2:10:7e:22:85:e9:fa:b8:52:45:52:0d: 21:d9:35:c2:9d:5b:18:ca:54:2a:72:2d:8b:50:2f: 99:d1:40:74:3f:2d:aa:dd:ad:80:ea:fe:91:f7:6f: 38:fc:8d:a3:83:33:3d:19:f2:c2:cd:ad:df:66:c1: 6b:9e:bb:35:2d:80:9b:77:82:ba:c3:0b:7f:b2:77: 33:ea:d1:67:00:7b:f6:59:f0:c2:32:11:9a:97:f5: 6b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6A:A1:06:C5:AA:9B:D4:7E:CC:94:57:A4:39:37:EF:E9:51:E4:FD X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:7e:a0:97:31:75:4b:3c:f8:90:c5:bd:bc:b2:72:97:a6:b2: 03:bd:20:0c:be:da:51:80:21:81:fa:77:f9:10:ce:a2:a2:d1: 1e:bd:6f:5f:cd:cf:45:6d:6c:5d:f6:e6:61:a1:8b:a8:3c:c9: 82:b2:8a:0f:6d:99:cf:f3:bd:ef:16:76:6a:02:f1:17:11:7c: b2:b5:1e:18:6e:a2:82:db:a1:00:d8:3b:20:e3:93:89:87:65: a1:a0:b8:f8:c6:38:1a:fd:0a:b4:94:cd:d2:ae:04:51:69:df: 30:f3:14:11:e8:25:a8:8a:9a:5a:a9:de:1a:62:2e:2c:24:54: aa:fd:7e:e4:92:aa:0f:b0:89:ac:a8:03:3c:b9:f7:82:fa:74: 7d:19:32:44:5c:ac:06:b9:cd:39:2c:56:a8:af:6a:8f:66:45: 20:a8:4a:12:55:55:e4:c8:5b:fd:ad:85:04:e0:3d:da:1e:b1: 5a:87:25:12:a9:e5:64:37:50:8f:ec:39:9f:b8:d7:95:27:f7: 4c:d9:a0:b6:a5:d0:33:4a:d4:d3:18:ee:25:7c:cf:37:b5:fe: 8b:ae:25:30:99:03:f9:c8:50:50:d5:c6:59:fd:69:77:7b:2c: c6:2e:b9:f1:fb:e4:3c:d5:d8:59:c6:a7:a3:f1:f4:96:8d:0d: d8:48:66:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEs+7JdkXd8SiGwzsGwXjg4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYxMDExMjIwMDU1WhcNMjYxMDEyMjIwMDU1WjAzMTEwLwYDVQQD EyhkZTZhYTEwNmM1YWE5YmQ0N2VjYzk0NTdhNDM5MzdlZmU5NTFlNGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQvbbAVQDDHTr6rWwb0/jopik10C 8yZpZNT1BxBckGljfvjH+OZC9rT8fBfay1lRozlg1B0+gdE9uceiyxZ6EHVoJxmv QnqKah3esn+24dCSXq+nHskBnlyBrGa5ppM+TDbKa1rT3+z6fRCWcpDxcCDrDNwb +ACr7JXZZXfYmh+Bij/jJ1HsZPMABccgc094ULDE/gqHJ3nfO4m9G1HPHWKimTml AIPyEH4ihen6uFJFUg0h2TXCnVsYylQqci2LUC+Z0UB0Py2q3a2A6v6R9284/I2j gzM9GfLCza3fZsFrnrs1LYCbd4K6wwt/sncz6tFnAHv2WfDCMhGal/VrSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5qoQbFqpvUfsyUV6Q5N+/pUeT9MB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKX6glzF1 Szz4kMW9vLJyl6ayA70gDL7aUYAhgfp3+RDOoqLRHr1vX83PRW1sXfbmYaGLqDzJ grKKD22Zz/O97xZ2agLxFxF8srUeGG6igtuhANg7IOOTiYdloaC4+MY4Gv0KtJTN 0q4EUWnfMPMUEeglqIqaWqneGmIuLCRUqv1+5JKqD7CJrKgDPLn3gvp0fRkyRFys BrnNOSxWqK9qj2ZFIKhKElVV5Mhb/a2FBOA92h6xWoclEqnlZDdQj+w5n7jXlSf3 TNmgtqXQM0rU0xjuJXzPN7X+i64lMJkD+chQUNXGWf1pd3ssxi658fvkPNXYWcan o/H0lo0N2Ehmaw== -----END CERTIFICATE-----Generated at Mon Oct 12 00:49:09 2026 by rpki-client