$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json) Hash identifier: lyNtWyU61Q24x+k9rMZzY8uySFvlY+RQJ+IFYZs9r2s= Subject key identifier: 57:0E:56:8D:A0:A1:53:84:0C:94:A5:E1:6D:81:4D:18:E2:02:0E:99 Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 01A0D12446C33047C5BCF84B71732762F968 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft Manifest number: 1AA9 Signing time: Thu 24 Sep 2026 02:00:10 +0000 Manifest this update: Thu 24 Sep 2026 02:00:10 +0000 Manifest next update: Fri 25 Sep 2026 02:00:10 +0000 Files and hashes: 1: 30puVpgFRN4YwWi8xzX_Z-3HoMc.roa (hash: o5oIpcyar+M+5831YpDbcIJBS5S/FPLnrUPDm/0y3l0=) 2: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: hGTlfBz/boZHTjP8VecFmJdorOwaG7u9FS3tWlsAiVA=) 3: 5FnusIit9uaVrldhOS_f_neDWgs.roa (hash: Ipdoz4T//FSaZhmjoZKN6wB6EyXA0tHqJzEOkgjKWOo=) 4: 6VMAkTg85zv_RNH9ZiPNPZuWCW8.roa (hash: Lpm2qdKvSHv1n64+iddb1tvoxMF6Y4LQAfrzqafISLM=) 5: B43PKu9zFU7-_KCXTuxzDe93OU0.roa (hash: friYQXieb4/RtWvPCW9C35Zt9vuRnu7Qsl+CY5jbJEs=) 6: Jmz4FnP7cL-QtALX1djqMHOUM6o.roa (hash: Eo0kFSBPojZrMatbz2kLZgOLTkqJ3viplyIKQqqpV8Q=) 7: QpckzCGCQYLYhpr74LAr4qnTXpU.roa (hash: KyNF1FltPbO/mXuIELm3YgjGIsFSe1HCrIqcFEBwYhc=) 8: V7fO1Dal8JtSLG0LOzVUcF80K-w.asa (hash: ValZt6XlRECidgMBG0dXrQbkDvp8n06Hk4Hd3QapbrA=) 9: ZRTAVRMhZT6cxxsi8He5NfGJ2zQ.roa (hash: puVDaYvy8bu1rAUQ7RQ/VHw6qx5cv46U9IaFuh15FHs=) 10: _43Htt9dzLi8msDz8qcZCkhm86k.roa (hash: YaFteb2dAn9Qn0to17VMsejQKPfSuGZrfXxllZGOY8A=) 11: oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa (hash: V8zyoEs8PVkTEGnh+pD54bvpuIuIO+mSB/TZNau2dBA=) 12: qB7xYjamdywCLSZiE2p-rI4CouM.roa (hash: TrY1f9iLn380hsE1RjYtEKEJFQA9mvO2ASaSr9uTJXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d1:24:46:c3:30:47:c5:bc:f8:4b:71:73:27:62:f9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Sep 24 02:00:10 2026 GMT Not After : Sep 25 02:00:10 2026 GMT Subject: CN=570e568da0a153840c94a5e16d814d18e2020e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:32:df:30:6d:24:02:41:03:32:50:15:e6:0e: cc:f5:b7:a5:9f:1d:86:6e:80:fa:b7:a4:df:03:b7: 26:23:7c:cf:53:1b:ad:57:82:e8:34:a0:8f:93:f4: 0e:55:f3:48:34:e3:9d:16:4b:2d:33:47:c3:22:26: 88:92:d8:0d:46:4e:18:f5:6c:82:41:4b:1e:4d:2c: 74:db:3e:f7:56:3c:3c:84:39:10:85:6e:b3:a5:f4: 11:1c:03:0c:95:58:f5:3f:b7:2b:92:fb:82:d6:61: 48:07:a3:05:43:79:de:e7:a6:56:21:80:f0:6a:e9: b2:31:56:6a:ea:b1:07:3f:07:55:be:66:29:4c:92: 05:f8:2e:12:cd:9a:ac:51:5b:ee:2d:8b:71:ec:ce: c8:1b:f7:a3:3b:a5:4f:e3:10:d7:9f:9b:5d:9b:4b: 6e:0c:4a:ec:62:eb:03:da:14:93:c9:55:26:ac:4d: 0e:1b:a3:11:c8:c8:7d:ea:05:43:a2:9e:fb:30:03: 62:b1:8c:c8:3a:88:5e:ce:d7:3f:8a:c4:1e:18:a3: 8b:76:5f:33:84:88:6b:76:42:9b:c8:f3:40:6c:c1: ef:e9:99:3c:00:85:a4:43:dc:e3:1b:08:7f:54:80: 33:db:46:b6:96:85:5d:e2:59:d8:0a:fe:bc:b6:d6: 8c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0E:56:8D:A0:A1:53:84:0C:94:A5:E1:6D:81:4D:18:E2:02:0E:99 X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c2:be:74:b9:68:44:08:f9:95:a4:03:97:09:f7:21:5c:ce: e8:d4:9c:c1:0d:68:62:ae:06:ae:11:77:a7:6a:85:35:7c:1d: 25:d1:1f:37:27:e0:c8:f7:9b:4f:ef:6d:86:4b:3d:45:e4:85: 72:ef:aa:11:c3:15:0f:bf:a8:6f:e5:a3:2b:e8:32:50:6d:b4: 41:c9:a0:92:e6:c4:d6:42:3a:86:cc:a9:44:4a:a0:ca:57:ae: 59:96:ee:61:97:d8:17:e8:1c:72:29:f1:b4:c1:67:4d:f8:e5: 62:b9:b5:11:3a:e0:0d:bf:e9:b6:20:c3:0b:e6:97:8d:5a:f4: 91:58:53:34:5f:6e:96:8d:4a:21:ff:10:11:bb:2b:43:19:49: 1b:22:83:12:bc:ea:d7:6c:aa:26:6a:0c:05:1d:11:ee:16:82: 69:1a:31:be:69:71:88:44:d2:e9:d8:91:8e:46:fe:26:5b:78: 14:64:6c:da:e3:5e:73:58:29:17:08:90:09:ef:a3:41:05:f5: a2:d9:9f:48:fc:0a:5a:4e:ac:18:bf:5d:dd:11:3d:ed:0e:1f: 40:da:73:53:ca:89:97:10:e2:96:7c:fa:9e:1d:66:1e:27:2b: 1d:aa:d2:be:ab:7f:8b:60:a6:45:49:a9:71:d6:29:d0:cf:93: cf:42:6a:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDRJEbDMEfFvPhLcXMnYvloMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYwOTI0MDIwMDEwWhcNMjYwOTI1MDIwMDEwWjAzMTEwLwYDVQQD Eyg1NzBlNTY4ZGEwYTE1Mzg0MGM5NGE1ZTE2ZDgxNGQxOGUyMDIwZTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTLfMG0kAkEDMlAV5g7M9belnx2G boD6t6TfA7cmI3zPUxutV4LoNKCPk/QOVfNINOOdFkstM0fDIiaIktgNRk4Y9WyC QUseTSx02z73Vjw8hDkQhW6zpfQRHAMMlVj1P7crkvuC1mFIB6MFQ3ne56ZWIYDw aumyMVZq6rEHPwdVvmYpTJIF+C4SzZqsUVvuLYtx7M7IG/ejO6VP4xDXn5tdm0tu DErsYusD2hSTyVUmrE0OG6MRyMh96gVDop77MANisYzIOoheztc/isQeGKOLdl8z hIhrdkKbyPNAbMHv6Zk8AIWkQ9zjGwh/VIAz20a2loVd4lnYCv68ttaM5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcOVo2goVOEDJSl4W2BTRjiAg6ZMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcK+dLlo RAj5laQDlwn3IVzO6NScwQ1oYq4GrhF3p2qFNXwdJdEfNyfgyPebT+9thks9ReSF cu+qEcMVD7+ob+WjK+gyUG20QcmgkubE1kI6hsypREqgyleuWZbuYZfYF+gccinx tMFnTfjlYrm1ETrgDb/ptiDDC+aXjVr0kVhTNF9ulo1KIf8QEbsrQxlJGyKDErzq 12yqJmoMBR0R7haCaRoxvmlxiETS6diRjkb+Jlt4FGRs2uNec1gpFwiQCe+jQQX1 otmfSPwKWk6sGL9d3RE97Q4fQNpzU8qJlxDilnz6nh1mHicrHarSvqt/i2CmRUmp cdYp0M+Tz0JqaQ== -----END CERTIFICATE-----Generated at Thu Sep 24 05:13:27 2026 by rpki-client