$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json) Hash identifier: 1LDN1AeHWL+mVFa1GX8E+Q2UlVAGq5I6b4EYljvnn0M= Subject key identifier: 7F:EE:AE:08:AB:A4:2A:21:3A:84:6F:5B:4C:6F:83:F5:0C:21:4A:8D Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 01A0E2F48CC09546EF77249DF405B536B176 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft Manifest number: 1A9B Signing time: Sun 27 Sep 2026 13:01:12 +0000 Manifest this update: Sun 27 Sep 2026 13:01:12 +0000 Manifest next update: Mon 28 Sep 2026 13:01:12 +0000 Files and hashes: 1: 1vioh8WBBr0buk8B9XgCVmy0V3o.roa (hash: lVxYMENWKDi2+Xm9/q5pj8wEEX5duZBJRp4Rcletd04=) 2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: 0PM6Bp1cJchBIBX0nxTap87Zp62UQRdEmRkiqOe3WV4=) 3: 7YSwmmnczm-7IoOuL55xSYq-HHI.roa (hash: vmDduHs9ZG5F5GFKgvuSm+LC37gRA2woLVlUVZydjb0=) 4: 9vE-oLNEkTWomT9KtfRKYgQbe4M.roa (hash: LQb4UezprdlbrPADEMd/FMMoJXKoReBOeeaZW2IdkYc=) 5: JEJwDGH6tSVjpBY1h8WbveXmdw8.roa (hash: icAiQJA6CuQCxFfr68wlBhAPrBN1YQOmgCNH/yLz47M=) 6: Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa (hash: /wKLPFXDpkj0IH9BXQz2t3Z6Zu30xSfrRgv+F7NNrik=) 7: POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa (hash: XEgu/Zx2opS3gJcwoKfkscKC5ZLEdb/Tzp9gunYfHco=) 8: fIwE913q7Z06naykIoTvGwGkXuY.roa (hash: EmEG00KHS79oeuuGgXEcyv9se/C+NigaZ2i4jZMNHk4=) 9: l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa (hash: krROF8fyVawsHQ+SK0aUD/ZdvI6BJ/t4uCdSw1pg/M0=) 10: oFDIJtDDBoVGAzKTE9KXRuqWpB4.roa (hash: D3iuhxVPgcaDAoR/HDppm/vmbt+iyscdjkgBVPTDmTU=) 11: qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa (hash: B/LBg8C9uAjoyAk0cD2HRSSI43uSzwvpTqbFgZE/UJc=) 12: rfbJWPwhcMsIzguwyYnSDhcHedA.roa (hash: So+ZZqhyNdhg6nOLV4bqBYBtp42ztDDW9ObzW5Rvhbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e2:f4:8c:c0:95:46:ef:77:24:9d:f4:05:b5:36:b1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Sep 27 13:01:12 2026 GMT Not After : Sep 28 13:01:12 2026 GMT Subject: CN=7feeae08aba42a213a846f5b4c6f83f50c214a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9b:9e:91:d8:23:bb:be:fc:c4:da:af:ed:07: 01:2b:68:63:a0:f3:da:ba:b9:93:4b:4e:d0:81:8d: 54:fd:31:bf:66:5a:19:17:37:13:f7:18:54:7e:48: 63:a1:dc:82:60:b5:9c:7d:af:9e:a9:7e:15:70:a2: 83:5b:b6:2b:b5:12:9b:b8:2c:08:5b:21:4b:aa:10: 32:49:42:a5:56:f9:c0:4a:1f:6a:40:de:09:ef:12: e5:0a:09:3b:27:c6:2f:0b:eb:a1:71:81:d0:66:bc: 77:6c:b6:44:5b:28:45:2d:20:4c:f2:49:90:72:c9: bb:bd:6d:c4:ff:ec:66:4e:5a:7f:9e:6d:3f:cc:71: 67:0c:ad:49:d3:84:80:76:58:72:aa:cb:c1:98:c9: c6:06:9f:56:9b:c8:fb:41:08:d7:ee:e6:61:28:ac: 32:ba:bd:eb:9d:48:69:40:84:f8:9b:da:ee:8a:a4: d0:bf:f5:c4:de:7e:eb:bc:ee:21:3d:3b:6a:dd:79: 0a:8f:1c:a0:59:75:c8:cd:da:7b:f2:26:6d:d7:d0: cd:1b:1f:76:12:eb:42:38:fc:94:4f:f6:72:ff:b3: d8:9d:12:eb:c7:89:22:9d:1c:0c:71:4f:a1:34:3d: eb:61:5f:81:4c:10:59:0b:14:37:9c:0b:50:a9:fd: 51:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EE:AE:08:AB:A4:2A:21:3A:84:6F:5B:4C:6F:83:F5:0C:21:4A:8D X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:36:ff:f8:68:e9:6e:ef:51:7f:c9:f5:09:f9:ce:db:55:d7: 2d:25:59:a1:ce:c7:5d:4d:29:2d:1d:35:a3:d9:11:62:85:c0: 51:5c:e0:13:d0:68:41:85:b0:ff:07:20:de:87:70:62:7a:1f: fa:f2:9e:1f:97:21:30:a4:3d:95:b2:d1:91:74:ed:ad:40:87: a7:06:df:37:7d:23:9c:5e:97:b7:11:67:f1:c8:d1:46:7b:dd: ae:3a:95:57:89:58:b5:25:21:20:b2:8b:0e:d0:b6:40:cb:41: 6d:da:c8:45:96:d5:de:5d:05:36:71:34:de:e6:0c:33:98:06: ad:35:0d:9e:3b:0a:d1:1e:45:cf:f2:34:3e:fb:2e:43:a9:5c: fc:6c:00:61:61:2e:86:cd:49:1f:ba:71:2e:59:26:f5:91:e2: 21:99:b7:52:a1:ef:89:28:b9:bd:5b:da:17:45:88:2c:93:64: 7b:20:5e:85:b9:90:71:cd:99:b5:d3:88:4e:2b:90:39:73:5c: 45:43:78:d8:92:06:16:07:ce:bb:60:61:a1:85:b7:70:ca:35: 72:1d:7e:fd:9d:f3:c7:c0:3a:d9:43:ef:04:c4:79:73:ed:10: d2:0e:dd:31:f3:9a:26:1a:6f:dc:08:f4:2b:8e:3b:61:f5:41: 3a:f9:8f:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDi9IzAlUbvdySd9AW1NrF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjYwOTI3MTMwMTEyWhcNMjYwOTI4MTMwMTEyWjAzMTEwLwYDVQQD Eyg3ZmVlYWUwOGFiYTQyYTIxM2E4NDZmNWI0YzZmODNmNTBjMjE0YThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5uekdgju778xNqv7QcBK2hjoPPa urmTS07QgY1U/TG/ZloZFzcT9xhUfkhjodyCYLWcfa+eqX4VcKKDW7YrtRKbuCwI WyFLqhAySUKlVvnASh9qQN4J7xLlCgk7J8YvC+uhcYHQZrx3bLZEWyhFLSBM8kmQ csm7vW3E/+xmTlp/nm0/zHFnDK1J04SAdlhyqsvBmMnGBp9Wm8j7QQjX7uZhKKwy ur3rnUhpQIT4m9ruiqTQv/XE3n7rvO4hPTtq3XkKjxygWXXIzdp78iZt19DNGx92 EutCOPyUT/Zy/7PYnRLrx4kinRwMcU+hND3rYV+BTBBZCxQ3nAtQqf1RIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/urgirpCohOoRvW0xvg/UMIUqNMB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDb/+Gjp bu9Rf8n1CfnO21XXLSVZoc7HXU0pLR01o9kRYoXAUVzgE9BoQYWw/wcg3odwYnof +vKeH5chMKQ9lbLRkXTtrUCHpwbfN30jnF6XtxFn8cjRRnvdrjqVV4lYtSUhILKL DtC2QMtBbdrIRZbV3l0FNnE03uYMM5gGrTUNnjsK0R5Fz/I0PvsuQ6lc/GwAYWEu hs1JH7pxLlkm9ZHiIZm3UqHviSi5vVvaF0WILJNkeyBehbmQcc2ZtdOITiuQOXNc RUN42JIGFgfOu2BhoYW3cMo1ch1+/Z3zx8A62UPvBMR5c+0Q0g7dMfOaJhpv3Aj0 K447YfVBOvmPaw== -----END CERTIFICATE-----Generated at Sun Sep 27 23:47:19 2026 by rpki-client