$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: ZIhaW1+aIoVxFwfvXzYdc/jg/y/D8UxYhUGDqxt3FO4= Subject key identifier: 40:F3:A8:1F:33:46:F7:03:0F:A0:FC:4A:C2:0E:C9:C7:38:F7:52:C6 Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 01A03F727BEE626078235EB8760BDA6F5AA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: 020E Signing time: Wed 26 Aug 2026 19:01:02 +0000 Manifest this update: Wed 26 Aug 2026 19:01:02 +0000 Manifest next update: Thu 27 Aug 2026 19:01:02 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: kW3M2gQPCg2HQ7RHUSncFu5Vi0Qlqf2LM5pegbMw3Zw=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 14:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:3f:72:7b:ee:62:60:78:23:5e:b8:76:0b:da:6f:5a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: Aug 26 19:01:02 2026 GMT Not After : Aug 27 19:01:02 2026 GMT Subject: CN=40f3a81f3346f7030fa0fc4ac20ec9c738f752c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3d:80:57:c6:4a:62:e5:5a:79:db:6c:75:01: b4:56:5e:37:31:db:42:ae:70:c0:1d:c9:ee:0c:2d: c8:50:99:1b:5c:d2:ba:6f:cb:5d:19:1b:60:01:59: 5d:70:b9:8d:e1:0e:86:30:de:f2:38:de:1a:b7:75: b0:68:3e:44:f9:74:84:e1:06:81:ee:3d:f6:79:09: ea:ab:11:21:cd:dc:a2:48:ae:20:f3:a5:50:ae:97: 72:b7:08:8a:b0:e1:17:66:d9:b5:4f:ff:ed:9f:37: 05:e8:11:95:f8:1a:c6:29:51:36:9c:65:3a:97:bd: 7f:d1:1b:ad:af:5e:e8:45:53:7a:79:40:25:84:b6: ed:5d:b0:1f:99:cd:e4:02:2d:5f:13:72:25:91:99: 5e:87:40:a3:67:e0:52:f7:af:ca:22:bf:e4:55:77: 8e:b9:55:1f:59:cd:76:22:46:87:8d:02:20:b1:ae: 01:ae:64:bb:85:39:fe:ab:7f:45:6d:13:da:cc:a8: 48:a5:c8:b4:b1:55:55:98:1c:2a:94:87:19:5a:ad: d4:f1:b4:09:c3:fb:05:6a:69:0b:d8:ea:bf:b0:56: a7:ed:d7:41:23:d6:ce:79:09:bc:70:a0:ff:c1:25: d9:d0:48:20:05:b7:68:b3:55:4b:dc:0b:b0:79:eb: 26:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F3:A8:1F:33:46:F7:03:0F:A0:FC:4A:C2:0E:C9:C7:38:F7:52:C6 X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:84:e7:f3:cc:8e:3b:8f:cb:1d:23:ee:17:dc:fb:a0:a6:49: 55:dd:2a:bc:99:77:96:f7:49:c5:2a:45:b1:02:f5:fe:e9:ec: e6:45:c3:95:c2:f5:49:44:9f:7a:b3:fb:78:e2:53:93:97:03: c3:7a:d0:ac:3d:2b:a4:dc:18:ac:1e:61:49:58:38:e1:d0:af: db:cf:c5:d3:6b:e5:84:d7:a9:9f:d3:ea:76:fc:6c:29:cc:13: 28:18:fd:cc:f7:63:01:ae:a8:f7:6f:74:6c:b9:bb:cc:e9:2b: bf:a0:b5:83:02:fe:55:00:40:ac:fc:62:61:03:02:08:53:66: 62:80:2a:db:26:5d:0e:b9:0d:8d:d1:42:c2:aa:30:6b:1b:90: b1:8c:80:0d:36:03:96:ab:dd:ef:b2:f5:0b:8d:58:64:de:a3: 55:65:fe:33:37:b7:39:4d:14:a1:17:37:22:1d:d8:65:a4:c5: ad:9e:b2:5d:ef:06:86:b0:6d:7b:8d:b2:95:55:da:c9:8e:cf: ce:db:6f:8e:92:da:a3:8d:84:81:ed:51:9f:c6:a7:60:7d:36: 98:33:f7:8b:41:6f:7e:f2:df:9d:a4:35:ab:8a:37:26:18:cf: 30:d4:1f:e7:b2:5f:5a:12:d7:78:16:1f:55:15:ca:18:37:07: bd:ff:56:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaA/cnvuYmB4I164dgvab1qlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYwODI2MTkwMTAyWhcNMjYwODI3MTkwMTAyWjAzMTEwLwYDVQQD Eyg0MGYzYTgxZjMzNDZmNzAzMGZhMGZjNGFjMjBlYzljNzM4Zjc1MmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj2AV8ZKYuVaedtsdQG0Vl43MdtC rnDAHcnuDC3IUJkbXNK6b8tdGRtgAVldcLmN4Q6GMN7yON4at3WwaD5E+XSE4QaB 7j32eQnqqxEhzdyiSK4g86VQrpdytwiKsOEXZtm1T//tnzcF6BGV+BrGKVE2nGU6 l71/0Rutr17oRVN6eUAlhLbtXbAfmc3kAi1fE3IlkZleh0CjZ+BS96/KIr/kVXeO uVUfWc12IkaHjQIgsa4BrmS7hTn+q39FbRPazKhIpci0sVVVmBwqlIcZWq3U8bQJ w/sFamkL2Oq/sFan7ddBI9bOeQm8cKD/wSXZ0EggBbdos1VL3AuweesmRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDzqB8zRvcDD6D8SsIOycc491LGMB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkITn88yO O4/LHSPuF9z7oKZJVd0qvJl3lvdJxSpFsQL1/uns5kXDlcL1SUSferP7eOJTk5cD w3rQrD0rpNwYrB5hSVg44dCv28/F02vlhNepn9PqdvxsKcwTKBj9zPdjAa6o9290 bLm7zOkrv6C1gwL+VQBArPxiYQMCCFNmYoAq2yZdDrkNjdFCwqowaxuQsYyADTYD lqvd77L1C41YZN6jVWX+Mze3OU0UoRc3Ih3YZaTFrZ6yXe8GhrBte42ylVXayY7P zttvjpLao42Ege1Rn8anYH02mDP3i0FvfvLfnaQ1q4o3JhjPMNQf57JfWhLXeBYf VRXKGDcHvf9W0A== -----END CERTIFICATE-----Generated at Thu Aug 27 00:03:31 2026 by rpki-client