$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json) Hash identifier: 6GtZh/1xvw9xdDxaSLiwyTMQOCqOdkf7jGlgngZ+tJ8= Subject key identifier: B3:22:59:63:3B:E1:50:CC:E7:6F:70:7F:D6:BE:1D:BD:80:A4:16:57 Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Certificate serial: 01A18150AE9539A73F7EC0A850B31086E232 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft Manifest number: 125E Signing time: Wed 28 Oct 2026 07:01:50 +0000 Manifest this update: Wed 28 Oct 2026 07:01:50 +0000 Manifest next update: Thu 29 Oct 2026 07:01:50 +0000 Files and hashes: 1: 1Ml0a3GV05dVKgyQm1AT6O8-qig.roa (hash: vDmeyy3WLO0HE90pdx4TXzv29kbhC6H5/Xm0kajhfQI=) 2: CyqM0bKo_ElRFFbv0AT5aDspxj8.roa (hash: QCCpwbYRSMOO3zc+/f/cjc8LG2FdpSD4/2ESkOJ9QkE=) 3: G2UXryvMWYgvdYG8XaPdE7pZyDM.roa (hash: PdqBjdoKDV3gCJFELA3WohXvGinSd8Rgt/NVk+mMS2g=) 4: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: Vo8fe+SNlFUTE0ED7xIhJ+fJzhmqpKEVCHUKjfMnRp0=) 5: Ix1gtJqQKv2Z_pk2hTiqDc-sy3M.roa (hash: MobBhVq4hyLxQ20aOszGD0QH9pUdXdw1af7wh+y1S9w=) 6: MQdJhE7DJVvNK-iEKOuroe7Wk6U.roa (hash: IDeLEFXV5ONQ6stNDvzS0ZYYqNXXaca6TX0gy7MtJtY=) 7: bR6c5Iui3A2Me6RPgnPPN-v7qhE.roa (hash: KNyqXXbQP8d6nmiYFJtuYs5Cbp0q38PpWcydNq1Wl3E=) 8: e-JA2-bFy7B8BkYmpPYNJ1dxBKc.roa (hash: bcrv+YrD4m4ddUBKigxs47ttA/eUpotZwmXx4eRmeE4=) 9: rM2i7X4i-xTENkByKDGS_394QYY.roa (hash: jSokmetv8aQ+53gcEJLpoqZU+R8uF/gkAzUpvjkIlBM=) 10: wkDhDr_SsN96X9kXV0Y2UXgMRcs.roa (hash: mQK1vBfWGnexoaLq4CHPrdHK3U44AmVelxJeh/WjBCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:81:50:ae:95:39:a7:3f:7e:c0:a8:50:b3:10:86:e2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Validity Not Before: Oct 28 07:01:50 2026 GMT Not After : Oct 29 07:01:50 2026 GMT Subject: CN=b32259633be150cce76f707fd6be1dbd80a41657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cf:17:23:60:92:76:2e:bb:5a:ca:6b:39:34: b3:55:1f:69:02:e4:05:10:94:cd:1b:5e:f1:4e:2b: cc:fe:80:6c:4e:10:fe:a1:7c:92:05:34:7b:2e:4b: ef:fa:40:73:e3:84:07:f4:1c:e3:f4:3b:a6:ff:1d: 72:81:a9:33:45:26:4a:60:5b:9b:22:94:58:d5:c1: f6:18:a6:11:d1:58:00:e5:70:43:3b:6e:9f:78:66: a0:7f:da:fb:63:16:c0:f7:02:60:f7:87:4f:53:f6: a1:2c:9e:3e:4d:bc:b8:44:77:d9:31:cd:e7:5c:01: 4b:47:e7:b9:5c:87:c5:ef:38:f9:e6:49:f7:82:1e: 97:79:1c:5e:1a:60:5a:cf:49:13:83:bc:78:1b:21: ec:5d:2a:8e:f8:c0:5a:55:1f:cf:49:75:6c:6f:56: b8:be:64:93:84:c5:ed:b6:c4:25:6d:64:b7:1c:86: 6f:36:05:0b:a6:42:e4:06:8d:40:b4:29:47:83:0b: db:ba:c4:e2:b1:0b:18:42:82:14:d1:b8:b7:e3:41: fe:8a:0d:de:4e:5e:53:16:23:a5:72:34:e1:85:ad: 0b:3c:4c:64:b8:8b:b7:4a:3b:92:ba:0a:1d:d7:0f: 9d:0c:84:3a:99:33:5d:00:c2:8f:c6:80:e9:41:1f: 21:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:22:59:63:3B:E1:50:CC:E7:6F:70:7F:D6:BE:1D:BD:80:A4:16:57 X509v3 Authority Key Identifier: keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:cf:2f:d1:6a:c9:c7:ea:d3:09:9d:74:a1:d3:12:2a:a0:51: 02:3c:ca:66:50:53:4d:d3:3a:11:64:cd:ee:a3:4d:46:a5:e6: 76:a8:45:e1:26:82:21:3d:8d:3a:13:46:ce:78:fd:b9:ad:4e: 3d:9c:c0:ed:53:f5:6a:39:63:7b:fb:8e:9b:80:92:66:94:1d: e8:15:38:80:14:2d:a7:6e:af:84:f5:11:80:76:73:8c:d6:e7: ed:df:4c:cc:bb:f4:a2:b9:dc:1a:1a:35:f3:c2:d7:f1:07:d5: 17:fd:12:1b:a7:3d:91:a5:6d:75:a7:b7:bf:98:e3:09:49:99: b8:41:d8:5e:2b:39:e3:54:41:6f:63:fa:bc:86:87:ee:ff:f9: 5e:a2:9e:40:3d:a2:de:e6:ab:1b:e6:76:11:83:a8:94:5d:cc: 2f:6c:69:ae:6b:16:c1:52:24:01:8f:44:d8:77:8f:a2:65:e2: 10:44:d2:cf:22:15:8c:03:e8:89:8e:c0:71:f1:57:b4:97:e1: e1:e7:1e:70:7d:b6:8d:02:38:98:05:d8:dd:be:12:b2:37:e3: 7f:c0:28:0f:71:9c:d3:1e:5c:ad:66:86:f8:7c:63:53:94:d4: aa:dd:59:2f:6a:7b:90:4b:01:65:0c:04:5b:de:b9:21:21:3a: 30:ca:1f:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGBUK6VOac/fsCoULMQhuIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODEwY2MzZmQyMjgzMzhkOWI5Njk3MjVkOTViYjMzYzRl NjVhNDgwHhcNMjYxMDI4MDcwMTUwWhcNMjYxMDI5MDcwMTUwWjAzMTEwLwYDVQQD EyhiMzIyNTk2MzNiZTE1MGNjZTc2ZjcwN2ZkNmJlMWRiZDgwYTQxNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx88XI2CSdi67WsprOTSzVR9pAuQF EJTNG17xTivM/oBsThD+oXySBTR7Lkvv+kBz44QH9Bzj9Dum/x1ygakzRSZKYFub IpRY1cH2GKYR0VgA5XBDO26feGagf9r7YxbA9wJg94dPU/ahLJ4+Tby4RHfZMc3n XAFLR+e5XIfF7zj55kn3gh6XeRxeGmBaz0kTg7x4GyHsXSqO+MBaVR/PSXVsb1a4 vmSThMXttsQlbWS3HIZvNgULpkLkBo1AtClHgwvbusTisQsYQoIU0bi340H+ig3e Tl5TFiOlcjThha0LPExkuIu3SjuSugod1w+dDIQ6mTNdAMKPxoDpQR8h+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMiWWM74VDM529wf9a+Hb2ApBZXMB8GA1UdIwQY MBaAFB+BDMP9IoM42blpcl2VuzPE5lpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUt ZjljMTgwYmE0ODAxLzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUtZjljMTgwYmE0ODAx LzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfs8v0WrJ x+rTCZ10odMSKqBRAjzKZlBTTdM6EWTN7qNNRqXmdqhF4SaCIT2NOhNGznj9ua1O PZzA7VP1ajlje/uOm4CSZpQd6BU4gBQtp26vhPURgHZzjNbn7d9MzLv0orncGho1 88LX8QfVF/0SG6c9kaVtdae3v5jjCUmZuEHYXis541RBb2P6vIaH7v/5XqKeQD2i 3uarG+Z2EYOolF3ML2xprmsWwVIkAY9E2HePomXiEETSzyIVjAPoiY7AcfFXtJfh 4ececH22jQI4mAXY3b4Ssjfjf8AoD3Gc0x5crWaG+HxjU5TUqt1ZL2p7kEsBZQwE W965ISE6MMofpA== -----END CERTIFICATE-----Generated at Wed Oct 28 11:19:06 2026 by rpki-client