$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: +KnTXdgwaAyOVl8I1kPyfx458N3LLM4t+FGklzaOmY0= Subject key identifier: D1:07:DB:0D:28:81:E6:13:EA:ED:FF:69:FC:9F:CF:D4:59:1B:F4:C4 Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 01A11372E7CFD78FFBE432E3ABA3FDD8FC27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 142A Signing time: Tue 06 Oct 2026 23:00:59 +0000 Manifest this update: Tue 06 Oct 2026 23:00:59 +0000 Manifest next update: Wed 07 Oct 2026 23:00:59 +0000 Files and hashes: 1: 1zdYV17WT7I3TXSQzHhVO7RGIDE.roa (hash: ic+QDZW/iaOfXxz3MlR5QNaF9pen8QrjZ3oMD7NWMNg=) 2: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=) 3: E2xtWZV4AV3kjahi3ya1WwpYjn8.roa (hash: eiCt2qdwFMu87Um/GEdb7fiVQB0BZPI+XYBSTsuRYnE=) 4: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=) 5: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=) 6: Zj4CimCazX5aQkiTy0v6Bth5jY0.roa (hash: LI2qWr9NKIdpnEssjh+tl7eWkcbWzEM25rITA+Kd1d0=) 7: Zl7668QzqgpWXy6sh2FJjPCuQUA.roa (hash: 2zmfb9kNRpLa+/F5r/g7AhSNh6Z8kYBICxLEIcI8yZM=) 8: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=) 9: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=) 10: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: 3oXPIoV0xetf/AEOz6kfVbvFr4ireBvVzLvcdrZzNUc=) 11: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=) 12: n02-ZYJ9m5SZhrBqWk_1khgF-c4.roa (hash: 5LLo9UejeR5e6s24U5EcKRFzvnsIV1B+TelnGxofLbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Oct 2026 22:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:13:72:e7:cf:d7:8f:fb:e4:32:e3:ab:a3:fd:d8:fc:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Oct 6 23:00:59 2026 GMT Not After : Oct 7 23:00:59 2026 GMT Subject: CN=d107db0d2881e613eaedff69fc9fcfd4591bf4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c5:14:fc:b2:dc:88:c7:2f:79:5e:ae:da:c0: f3:8f:f7:ed:7a:f0:ba:b5:4f:20:d0:cc:bc:f5:ec: d3:36:56:8a:bd:44:6c:12:0f:db:5c:2c:cd:95:6b: 94:34:51:0f:9f:6e:77:13:52:96:c2:58:0e:ce:c3: 19:ba:ff:69:b9:f6:33:d4:63:b0:00:45:51:0c:65: a0:c8:af:73:f9:3d:35:56:dc:66:64:e5:00:5d:c1: fe:1d:26:64:be:57:8a:eb:1e:57:57:18:9e:93:98: a2:87:55:32:6a:d4:4d:36:57:f2:b8:b0:b2:21:7a: b7:e9:ee:ea:46:ff:2d:b1:88:03:d2:3e:86:44:26: 26:46:45:fa:27:26:85:4e:ee:b7:d4:cf:58:26:20: cf:0c:2b:45:c8:8d:f0:0e:9a:3a:39:ef:15:fd:be: f2:89:a5:2e:4b:8f:f8:07:26:06:15:e9:f5:88:08: 57:fe:30:75:0a:80:1c:fb:34:27:e1:36:d1:0f:de: 42:09:ee:fa:d0:fa:52:ea:6b:62:35:61:f3:4d:be: 4a:d8:28:d9:7a:dc:42:d6:58:af:86:fb:d7:39:31: ec:44:91:73:43:2e:a6:e6:db:ff:37:66:da:ee:7e: 8b:d6:8e:83:de:cd:bd:b5:9d:2d:1b:14:0f:4c:3b: 69:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:07:DB:0D:28:81:E6:13:EA:ED:FF:69:FC:9F:CF:D4:59:1B:F4:C4 X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:12:ab:b6:33:49:88:b2:80:32:0e:2c:f0:de:ec:82:6d:89: f9:55:df:6a:e1:f5:0c:38:24:c8:a2:a8:30:00:64:fc:2c:b2: 18:78:0b:53:63:a1:17:1a:f0:c1:9a:c7:d7:32:17:40:c4:11: f7:b3:0e:8a:4d:8d:bc:5c:10:30:5b:c9:ab:a5:45:1e:7a:16: 80:ee:2d:be:56:13:14:2c:18:bd:c4:d3:12:4d:00:23:e2:6f: 9e:f1:1f:c9:19:1e:97:09:ca:90:0b:62:6b:b1:6b:8e:4d:a0: d9:84:5c:78:41:9f:80:f2:32:95:56:83:66:78:e6:79:11:61: a6:c0:a4:6b:70:d2:4a:8d:9e:5a:6f:a6:54:69:69:fc:61:bb: 05:fa:51:ac:6d:13:2c:b0:b8:06:3a:30:e6:3d:a0:6a:18:9f: 15:69:5b:90:dd:0b:3b:b7:02:57:55:60:00:83:05:38:6f:e9: 30:1e:dd:00:97:f0:e6:35:c1:f4:5f:bf:34:5f:9d:bf:a7:76: 89:55:da:fc:a2:22:a4:73:96:61:ac:be:5a:b2:08:e3:6b:bf: 87:53:9b:34:74:fe:0e:73:55:a0:d0:08:81:58:cd:fa:be:76: 88:4f:1c:fc:25:e7:16:3e:95:c5:3d:8e:3b:f2:d9:e4:76:36: 3a:35:e2:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaETcufP14/75DLjq6P92PwnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYxMDA2MjMwMDU5WhcNMjYxMDA3MjMwMDU5WjAzMTEwLwYDVQQD EyhkMTA3ZGIwZDI4ODFlNjEzZWFlZGZmNjlmYzlmY2ZkNDU5MWJmNGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMUU/LLciMcveV6u2sDzj/ftevC6 tU8g0My89ezTNlaKvURsEg/bXCzNlWuUNFEPn253E1KWwlgOzsMZuv9pufYz1GOw AEVRDGWgyK9z+T01VtxmZOUAXcH+HSZkvleK6x5XVxiek5iih1UyatRNNlfyuLCy IXq36e7qRv8tsYgD0j6GRCYmRkX6JyaFTu631M9YJiDPDCtFyI3wDpo6Oe8V/b7y iaUuS4/4ByYGFen1iAhX/jB1CoAc+zQn4TbRD95CCe760PpS6mtiNWHzTb5K2CjZ etxC1livhvvXOTHsRJFzQy6m5tv/N2ba7n6L1o6D3s29tZ0tGxQPTDtpsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEH2w0ogeYT6u3/afyfz9RZG/TEMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBKrtjNJ iLKAMg4s8N7sgm2J+VXfauH1DDgkyKKoMABk/CyyGHgLU2OhFxrwwZrH1zIXQMQR 97MOik2NvFwQMFvJq6VFHnoWgO4tvlYTFCwYvcTTEk0AI+JvnvEfyRkelwnKkAti a7Frjk2g2YRceEGfgPIylVaDZnjmeRFhpsCka3DSSo2eWm+mVGlp/GG7BfpRrG0T LLC4Bjow5j2gahifFWlbkN0LO7cCV1VgAIMFOG/pMB7dAJfw5jXB9F+/NF+dv6d2 iVXa/KIipHOWYay+WrII42u/h1ObNHT+DnNVoNAIgVjN+r52iE8c/CXnFj6VxT2O O/LZ5HY2OjXiuQ== -----END CERTIFICATE-----Generated at Wed Oct 7 07:25:04 2026 by rpki-client