$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json) Hash identifier: A5BcNiOk4trPK5HHaIPYxNcIfCGm0TMCeEX6n/77Ag0= Subject key identifier: 18:9B:8A:1B:CC:5B:75:5E:DB:F2:87:70:F2:1E:3D:99:F0:86:E2:CD Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 01A0F042B3EF4AA6F4BAD73DC35F9A9D3B13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft Manifest number: 1A9D Signing time: Wed 30 Sep 2026 03:01:38 +0000 Manifest this update: Wed 30 Sep 2026 03:01:38 +0000 Manifest next update: Thu 01 Oct 2026 03:01:38 +0000 Files and hashes: 1: 20sKUViZ_Hjr1_tKwt6E16rEi4A.asa (hash: +8vZKz+2gviXypf2joFi3QZPabFG5GEATLlv5LqXS4o=) 2: CvSQt69yariNUKKDqC1XPhdiuj8.roa (hash: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4=) 3: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (hash: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME=) 4: Nc8mzlcMXDBsY7O6ihHQFG1WCgU.asa (hash: iQmoFJHZkfRHhMs5YGfVosqhKZChubT5bE16CXVlGGg=) 5: QOv9AtzM59S_WNU7KUIEWRfJl68.asa (hash: 6O0jKZ/+i/G9w5+oF5K0c5UTn7UqPYc3SNDvmBucH+4=) 6: ZwaHHkAxYbCALztUHzr9t910LSE.roa (hash: awAUeIPVKxbZycfV9eBB6aIDe26Y/5AYawVHPNK3iBw=) 7: a4kSWXHUjeJ3UXaQ-vc8USD7130.asa (hash: lbgYBLK33JoEr+PhrlEn3no20wzVFGeWMxTDLDLfyNY=) 8: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (hash: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs=) 9: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: 8WYr35kqPGMHwie788s3nIsJKuVsvFV/d6qWArhvCVs=) 10: rcmHaxoTWcNTxZe_mPx7kxySOCM.asa (hash: O6qjpwATHjg2d599LQuSUGaHIPpnCna32+4L4kHdkpE=) 11: s6yVUAmV4-mOF-duMQCYR1UyGIg.roa (hash: s42/lXry+QgyFMd63oGPEQ8IfqkpzCT53ph9km2DlbQ=) 12: xywW8VsvtWulmUgX-o54Ju69bE8.roa (hash: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:f0:42:b3:ef:4a:a6:f4:ba:d7:3d:c3:5f:9a:9d:3b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Sep 30 03:01:38 2026 GMT Not After : Oct 1 03:01:38 2026 GMT Subject: CN=189b8a1bcc5b755edbf28770f21e3d99f086e2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:05:0b:bf:31:8b:a4:0b:88:17:8f:99:a8:47: 95:23:bd:75:32:b5:c7:e3:c0:fb:dd:3f:57:46:89: 70:39:d2:f9:36:c8:18:60:d2:8e:5c:39:b3:f7:65: fa:8f:21:61:0c:5a:b8:97:29:2c:8c:21:82:fc:eb: e0:b0:3a:09:0b:4c:bd:cc:8a:ba:2d:52:90:7e:06: 9d:35:71:ca:52:2b:85:91:a7:c5:41:26:e5:39:ef: ca:95:ac:aa:ce:f3:42:99:87:42:be:eb:bd:e4:70: 1f:61:05:0f:cd:4c:1f:f4:34:d4:74:21:f9:17:8d: 28:51:47:ab:e6:0f:38:07:7c:f2:4a:a1:c4:d2:d1: a5:62:d0:3d:36:7b:0f:2a:49:51:90:fb:6f:cb:bf: 55:78:1a:8d:45:f4:bf:85:9a:6c:1a:04:9b:d8:9a: fe:98:02:98:1f:92:bc:c7:0a:a8:39:a1:20:73:bc: bf:dd:9d:9f:e8:ba:d6:b2:bb:db:e8:c5:b1:35:c7: 35:6d:df:87:8d:c5:8a:51:55:f9:63:9f:94:81:8b: 85:f6:85:f1:ba:1e:f9:7a:8f:ec:24:7f:1c:23:30: 9d:59:c3:d4:3f:e4:7f:3f:48:3b:75:a6:ee:8b:d5: 91:d8:43:ef:81:a3:4b:59:ba:6d:7b:ca:2e:0b:35: 96:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9B:8A:1B:CC:5B:75:5E:DB:F2:87:70:F2:1E:3D:99:F0:86:E2:CD X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:0c:86:ad:93:5d:6a:62:48:60:ac:d1:f0:9b:46:10:b7:6a: 81:48:67:96:95:45:2b:64:ed:51:e6:7b:30:9e:90:e7:29:ab: 9b:22:6b:e1:63:50:2a:b5:ce:0e:d0:17:a2:f8:bf:e5:06:69: 82:7f:e7:1c:5b:fa:21:a7:fa:0e:ec:a5:e8:ce:2f:53:b5:f3: 08:ee:46:99:a6:5b:99:ee:fc:cc:1f:55:e5:ab:84:c7:ca:9f: 94:29:fb:5a:b6:1c:25:69:74:27:71:e8:87:79:3e:a3:d4:b9: a4:ae:cb:67:c4:7b:b4:a8:6d:60:16:15:4c:b5:b7:dd:af:55: 2a:54:23:9c:6d:be:9c:0b:f6:e8:79:d9:4c:3c:da:9c:59:1d: 91:3d:ee:da:1e:4b:c7:8c:d1:29:a5:bd:0a:c5:42:c2:7d:d7: a0:bf:25:ac:0d:ed:24:46:e8:d3:46:fb:ad:9e:e7:15:fe:fd: ea:b1:23:8e:bb:6c:f6:d5:92:01:93:94:f4:40:34:c3:e1:d8: 87:64:9f:95:a1:d2:61:3d:e1:7f:ab:56:0a:1b:09:dc:c1:e4: 9d:86:5f:47:d2:76:a5:6a:5f:a6:7c:62:f4:e8:72:5f:a5:c4: 55:2d:4a:b5:75:5a:a4:b5:1d:cd:38:38:1d:d1:f6:c0:94:df: dd:f7:c1:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDwQrPvSqb0utc9w1+anTsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYwOTMwMDMwMTM4WhcNMjYxMDAxMDMwMTM4WjAzMTEwLwYDVQQD EygxODliOGExYmNjNWI3NTVlZGJmMjg3NzBmMjFlM2Q5OWYwODZlMmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwULvzGLpAuIF4+ZqEeVI711MrXH 48D73T9XRolwOdL5NsgYYNKOXDmz92X6jyFhDFq4lyksjCGC/OvgsDoJC0y9zIq6 LVKQfgadNXHKUiuFkafFQSblOe/KlayqzvNCmYdCvuu95HAfYQUPzUwf9DTUdCH5 F40oUUer5g84B3zySqHE0tGlYtA9NnsPKklRkPtvy79VeBqNRfS/hZpsGgSb2Jr+ mAKYH5K8xwqoOaEgc7y/3Z2f6LrWsrvb6MWxNcc1bd+HjcWKUVX5Y5+UgYuF9oXx uh75eo/sJH8cIzCdWcPUP+R/P0g7dabui9WR2EPvgaNLWbpte8ouCzWWXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBibihvMW3Ve2/KHcPIePZnwhuLNMB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgyGrZNd amJIYKzR8JtGELdqgUhnlpVFK2TtUeZ7MJ6Q5ymrmyJr4WNQKrXODtAXovi/5QZp gn/nHFv6Iaf6Duyl6M4vU7XzCO5GmaZbme78zB9V5auEx8qflCn7WrYcJWl0J3Ho h3k+o9S5pK7LZ8R7tKhtYBYVTLW33a9VKlQjnG2+nAv26HnZTDzanFkdkT3u2h5L x4zRKaW9CsVCwn3XoL8lrA3tJEbo00b7rZ7nFf796rEjjrts9tWSAZOU9EA0w+HY h2SflaHSYT3hf6tWChsJ3MHknYZfR9J2pWpfpnxi9OhyX6XEVS1KtXVapLUdzTg4 HdH2wJTf3ffBrQ== -----END CERTIFICATE-----Generated at Wed Sep 30 07:29:23 2026 by rpki-client