$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: W6oUPJPfVIr2VeYymifVvjCLJn5eJzRfW9/v+vyOrJA= Subject key identifier: 44:6B:B0:35:20:A6:40:D2:47:40:AB:DC:FD:FA:11:D8:A2:A2:80:7E Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 01A1DB3863BF2B4CB3FECE7DC51FC38B37B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 0E61 Signing time: Sat 14 Nov 2026 18:01:08 +0000 Manifest this update: Sat 14 Nov 2026 18:01:08 +0000 Manifest next update: Sun 15 Nov 2026 18:01:08 +0000 Files and hashes: 1: 0jPQz2jIHrU0FvHsrF-XRZUhtzs.roa (hash: W/W8DjgReH/V+5pe/5+3BKwvc8dz5PRxxtmAIvZ373s=) 2: 3h4R6YLSiEPNhWmPNTd7KLX1X3U.roa (hash: LjFP5plUCIY5Si52J4E1UiGHvt4F3YfbtrTK+AdpPww=) 3: 4KvJgvy2XStKYtJJOpbEVTBzZw4.roa (hash: UxGz8+D3h9BshJC4Ilt30+nk4vqr8A7pyX0HwKltMxI=) 4: 5-J1fvpVb5dSg5m7dEENTI_oJOo.roa (hash: Bf76p0mhCDufIxhGH9tYyhZ/kCkHidGNBcKyGnHkKdg=) 5: AD3DllK0spDacTrZOzUoNjsaEXY.roa (hash: E0XWVs3lhPoRvEa16ZsuDhIGmQin6DlhoQyYSbyhShU=) 6: GjPVQb4kXTSvkfi7RIf8VINvr0I.roa (hash: IEYuHwwge+E1Azg2p77WeZYvh7BllQ5PwJDFCZ3eVLU=) 7: HVCa9r5thWjsE4kAoaBRSlvTvK4.roa (hash: QayBo0rlXlFxr86ACWyOG/yDe9UFq1WxBL/y2YeNVL4=) 8: RHDQQEmbcOrqTmjc99mQ-Eu0900.roa (hash: x+3xhE8Ho8gzcy+Ei5kfiLpvFaz62BymEv0joq6kEPs=) 9: ScPX6tqlw5o1ZcCYpkNMnCrj72U.roa (hash: OWPE9KkCxV1y82ynMwT7Wfz+7H4kVGPyxV8fArKWLm0=) 10: WdQ6he_P5F-cOEeRR1TiPU-zU-s.roa (hash: vQjmo6B5bhn28fdIrHICw7DprEul1mU/rEs6H7jrIrc=) 11: n6eR2WfCXImcpQbWii3OXMfT1io.roa (hash: 9i7i+fHrN+OULt3g7OjkSiNbFJDZzaQ5rh/6y0F1XFE=) 12: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: oURFRWptPmqkxB21qYpdKsWENRo2MpDLt9aoiFAUdlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 18:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:38:63:bf:2b:4c:b3:fe:ce:7d:c5:1f:c3:8b:37:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Nov 14 18:01:08 2026 GMT Not After : Nov 15 18:01:08 2026 GMT Subject: CN=446bb03520a640d24740abdcfdfa11d8a2a2807e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8a:80:a6:41:16:48:e1:b1:a6:d2:bd:d2:d7: 56:38:b9:ec:b3:a6:fe:1e:a1:69:40:92:97:b0:43: 02:01:b9:37:1a:6a:e5:24:b4:1a:47:fb:21:aa:b0: d9:17:fa:7f:67:2f:83:74:5d:50:c5:17:1c:20:1f: 36:0a:e3:8f:0b:3a:10:e3:9e:1e:c1:42:f4:d2:e0: ee:eb:c2:1a:f5:e6:4b:41:8c:2c:ef:de:d2:21:fc: 28:60:14:19:db:c5:7b:76:5a:40:62:38:11:6b:34: c7:7b:20:e1:21:64:d1:08:e6:e6:82:2c:71:75:d2: fa:15:fe:31:6e:83:10:4f:a4:44:7c:75:8c:e8:1e: 24:87:bc:67:78:d5:e4:ab:4a:64:92:de:f6:00:be: 71:1c:29:5b:32:b4:0f:cf:85:35:b9:77:05:47:58: 8f:40:fb:c9:06:35:6b:ed:b5:cb:60:7c:b3:20:d2: db:45:e9:6b:f7:3f:5a:6d:59:c1:af:e3:78:13:8a: ed:9b:02:e5:2a:85:a9:3e:4f:c8:56:88:a4:cc:5e: 1a:ba:6f:79:41:96:20:4c:53:46:1f:26:df:29:35: c0:23:07:5e:c7:8f:a0:ab:f7:1e:34:c9:83:2b:b0: cf:eb:a2:2f:34:a8:f8:4b:6a:22:0e:e0:ca:8e:d6: d3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6B:B0:35:20:A6:40:D2:47:40:AB:DC:FD:FA:11:D8:A2:A2:80:7E X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c9:8e:46:57:98:9c:6c:70:c7:b5:50:0e:50:e2:c9:80:59: 28:e7:1d:45:7f:bf:73:ca:73:15:fd:43:7e:67:88:8b:86:4c: 88:bf:9a:0f:7b:12:77:52:0b:32:15:3d:45:89:a9:69:88:1b: 92:c3:17:a2:30:e8:73:5e:ca:19:f1:5a:3c:18:fa:e6:29:c0: 9a:7e:77:ad:04:0a:93:7c:a3:c0:60:1a:dd:a6:e1:a7:d9:90: cc:25:03:a0:82:4e:12:7c:d1:35:20:fe:6e:76:5e:8c:8b:07: 1c:6a:ad:54:67:e4:11:b5:0a:4a:e1:b3:e1:7b:bf:e7:4d:7f: cf:d3:76:99:e8:22:38:ba:1e:d1:b0:7a:1f:d6:83:46:06:71: 73:38:9e:9e:da:db:fd:ab:13:e5:a5:5c:fd:ca:59:a1:2d:29: 87:4d:ac:74:b9:e8:0d:7d:c6:a8:fa:d5:ec:ce:4a:aa:c1:fa: 99:7d:2f:16:81:15:18:f5:b7:ef:b5:1a:28:47:eb:d7:12:ad: 7d:87:d9:db:54:9f:29:30:23:8f:b3:12:65:31:08:42:81:b8: 45:04:fe:d3:51:b4:15:2c:37:9e:84:d0:98:cb:91:c1:d8:60: c6:c0:88:a5:04:fa:60:3f:f6:e9:63:4e:14:5c:b9:07:2f:ae: 58:71:ce:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbOGO/K0yz/s59xR/Dize2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYxMTE0MTgwMTA4WhcNMjYxMTE1MTgwMTA4WjAzMTEwLwYDVQQD Eyg0NDZiYjAzNTIwYTY0MGQyNDc0MGFiZGNmZGZhMTFkOGEyYTI4MDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIqApkEWSOGxptK90tdWOLnss6b+ HqFpQJKXsEMCAbk3GmrlJLQaR/shqrDZF/p/Zy+DdF1QxRccIB82CuOPCzoQ454e wUL00uDu68Ia9eZLQYws797SIfwoYBQZ28V7dlpAYjgRazTHeyDhIWTRCObmgixx ddL6Ff4xboMQT6REfHWM6B4kh7xneNXkq0pkkt72AL5xHClbMrQPz4U1uXcFR1iP QPvJBjVr7bXLYHyzINLbRelr9z9abVnBr+N4E4rtmwLlKoWpPk/IVoikzF4aum95 QZYgTFNGHybfKTXAIwdex4+gq/ceNMmDK7DP66IvNKj4S2oiDuDKjtbTPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERrsDUgpkDSR0Cr3P36EdiiooB+MB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsmORleY nGxwx7VQDlDiyYBZKOcdRX+/c8pzFf1DfmeIi4ZMiL+aD3sSd1ILMhU9RYmpaYgb ksMXojDoc17KGfFaPBj65inAmn53rQQKk3yjwGAa3abhp9mQzCUDoIJOEnzRNSD+ bnZejIsHHGqtVGfkEbUKSuGz4Xu/501/z9N2megiOLoe0bB6H9aDRgZxczientrb /asT5aVc/cpZoS0ph02sdLnoDX3GqPrV7M5KqsH6mX0vFoEVGPW377UaKEfr1xKt fYfZ21SfKTAjj7MSZTEIQoG4RQT+01G0FSw3noTQmMuRwdhgxsCIpQT6YD/26WNO FFy5By+uWHHO/A== -----END CERTIFICATE-----Generated at Sun Nov 15 01:08:39 2026 by rpki-client