$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft File: 4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json) Hash identifier: cIq0Yp2nAAsE83lgqGXcSP3tuGdDqJ8PCpfGiyBGiRc= Subject key identifier: DD:03:18:0B:50:0F:29:91:94:C0:BD:2C:8A:F3:80:31:45:DB:33:D4 Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Certificate serial: 01A0CA46E4EC16FE9B9983BB4147C39DBBA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft Manifest number: 0643 Signing time: Tue 22 Sep 2026 18:00:38 +0000 Manifest this update: Tue 22 Sep 2026 18:00:38 +0000 Manifest next update: Wed 23 Sep 2026 18:00:38 +0000 Files and hashes: 1: 0cS1nbk5Int4JJx8ZFuF4CwEQoo.roa (hash: XeB6K6T8p6c7RwUL3urLh05fa1KeuyMXlU3sgTg6kwI=) 2: 1-mw2G1dqdbLZ8tiyeeAM8rSR6hQ.roa (hash: h7CqqSl2LQjJmhCLF1MeDbbfhgUi7N6nFb/MApYSj04=) 3: 3gai81UGgfLPbQftciy3jGMkOwI.roa (hash: kiaWDVp8FEgRP18QSL61NeSbPNIL/KFNeSuP3Gkl88Q=) 4: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: mbL879LsRWJIKvhfA6o5qhbltRiZKd6SgJnvF5+Yct4=) 5: C6uUnb-GcnQfqIvL7gX32SouFUA.roa (hash: W8gXCQVnHQZj4Fig+/xRtixgdI9dMwYVfKpFVE38sls=) 6: Jzj8iSw0vJ_nKLxrgCvA5r_jCUM.roa (hash: qthe4k3qdM7snNafkTyRsJRCRgLD006FLSrfqpvtf/M=) 7: P2DOHQZk6uadyNsFYKTvp0Yljns.roa (hash: drWm8UAEyYp0gk5pD0pZZGlNfBy4kmJrj0xpKvuccbI=) 8: dUz1_BGuEwa1si0sC79DuRXSTMw.roa (hash: EggvRKKO8J9fQom0RkmSKJQOGfA94V2BXYRDmutG/IA=) 9: jG8u0DdMeVDnzAs9ajzk41GxjYI.roa (hash: 2i9+DbG6rnpNrbDbrTa+vcvNqwfsERMCoNQAt/YdO9A=) 10: pMSYP5P8y8eLfNyDEeXV3zc-nps.roa (hash: enJ6YCYyQ+/wl2mffuOqzFyRpZKc2xjCWdqck8SgcXI=) 11: pPtBVVYGBWOGMkaUXlyUlUlUc8I.roa (hash: 2qg2UMxY9Ne99nZ+znUrMGap65SST+L3iSUILMH/2YQ=) 12: uIa4zkFY4A9vzw58kSKCmfk0DOQ.roa (hash: 5GA0c289K1eM0975vFreXvBAvts4XCEq2R0BlZHe6C4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ca:46:e4:ec:16:fe:9b:99:83:bb:41:47:c3:9d:bb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0 Validity Not Before: Sep 22 18:00:38 2026 GMT Not After : Sep 23 18:00:38 2026 GMT Subject: CN=dd03180b500f299194c0bd2c8af3803145db33d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:56:db:b8:32:60:4e:8e:58:67:30:4e:3e: d8:3e:35:eb:df:e1:bf:99:28:66:f2:90:06:6c:2b: 71:a4:9a:c7:d2:b7:fa:ab:0d:a5:24:4b:9d:f7:89: 7e:32:e9:83:bc:33:03:7b:67:93:6b:38:bf:45:c4: db:c4:0d:f3:e4:61:f2:b9:4d:80:fc:83:fc:22:5f: 33:84:b5:2f:ee:a7:56:42:58:dd:02:56:0e:67:23: 62:f5:36:8b:23:3d:be:92:72:ca:fd:be:b5:62:21: 2f:9b:4f:3d:3f:c0:f2:d4:df:40:2a:67:54:4a:da: 9d:ee:60:01:81:6b:11:a8:60:4f:dc:01:db:38:0c: 66:af:ea:f8:eb:8d:f2:a1:02:dc:e7:01:8e:ff:8e: e5:65:89:1e:c6:df:2c:12:78:b3:24:9a:de:cf:b7: 58:70:a7:46:57:34:53:42:80:09:62:dc:09:8c:0c: 35:80:a9:5b:3b:67:80:b3:7d:2a:f3:3f:9a:24:b9: 80:1e:aa:c9:dc:c7:ae:73:ce:21:2e:96:82:bc:e4: a1:a2:cc:75:22:93:c4:44:94:3c:19:93:19:41:ff: 2e:21:a0:04:62:d4:a6:df:86:70:2e:98:0b:24:79: 4b:d7:d4:53:75:5b:2b:e1:d7:b0:7d:58:92:e7:45: 64:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:03:18:0B:50:0F:29:91:94:C0:BD:2C:8A:F3:80:31:45:DB:33:D4 X509v3 Authority Key Identifier: keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:11:49:5b:9f:91:69:2a:33:de:e0:34:7f:3f:39:9d:0f:d0: 31:b8:d6:50:c1:80:06:33:f1:1f:39:99:7a:55:c9:84:e1:9a: fe:cd:a0:b4:5e:91:13:a9:65:be:3b:d0:f5:af:8c:8d:ff:23: 76:cb:94:0b:15:3f:1f:9e:4c:c0:98:19:ef:43:fb:a8:9d:0c: 09:8a:cc:8f:8b:63:5a:fa:a6:fc:57:38:ac:35:e9:ef:f3:fd: 5d:2a:4a:ae:9a:02:0d:b0:53:a6:01:47:e0:3a:42:5c:07:50: 74:c2:9d:e9:11:7d:3b:bf:b3:29:8d:34:15:37:9a:73:46:8d: d3:11:b6:7a:7b:8d:7a:94:0f:d7:53:21:26:a4:5c:cd:ca:21: d6:41:3a:f8:b2:0c:aa:2c:71:65:5b:fc:cc:64:29:49:f5:fc: 87:d1:d8:1a:95:0d:d6:c2:f7:21:f6:33:01:86:5c:64:a2:4b: ee:b0:62:01:91:ae:00:e8:b0:57:aa:6d:d0:07:1c:60:c3:cc: 0b:ff:5b:40:47:56:ed:22:fe:f1:8e:3d:78:1d:55:92:96:2a: 0c:27:9a:3d:21:34:42:ab:49:17:44:4d:d1:5e:a9:be:ac:96: 02:90:83:84:3a:d3:77:14:11:38:11:ec:94:7c:c8:25:bc:d8: d0:57:89:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDKRuTsFv6bmYO7QUfDnbugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNWI5MGZmZGZhMGFiMjg1NDg1ZTc4NDQ2Yjg3MTk5OGIy NGRjYzAwHhcNMjYwOTIyMTgwMDM4WhcNMjYwOTIzMTgwMDM4WjAzMTEwLwYDVQQD EyhkZDAzMTgwYjUwMGYyOTkxOTRjMGJkMmM4YWYzODAzMTQ1ZGIzM2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXVW27gyYE6OWGcwTj7YPjXr3+G/ mShm8pAGbCtxpJrH0rf6qw2lJEud94l+MumDvDMDe2eTazi/RcTbxA3z5GHyuU2A /IP8Il8zhLUv7qdWQljdAlYOZyNi9TaLIz2+knLK/b61YiEvm089P8Dy1N9AKmdU Stqd7mABgWsRqGBP3AHbOAxmr+r4643yoQLc5wGO/47lZYkext8sEnizJJrez7dY cKdGVzRTQoAJYtwJjAw1gKlbO2eAs30q8z+aJLmAHqrJ3Meuc84hLpaCvOShosx1 IpPERJQ8GZMZQf8uIaAEYtSm34ZwLpgLJHlL19RTdVsr4dewfViS50VkZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0DGAtQDymRlMC9LIrzgDFF2zPUMB8GA1UdIwQY MBaAFOFbkP/foKsoVIXnhEa4cZmLJNzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEt Y2JiZmRhOTI0MTlkLzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEtY2JiZmRhOTI0MTlk LzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRFJW5+R aSoz3uA0fz85nQ/QMbjWUMGABjPxHzmZelXJhOGa/s2gtF6RE6llvjvQ9a+Mjf8j dsuUCxU/H55MwJgZ70P7qJ0MCYrMj4tjWvqm/Fc4rDXp7/P9XSpKrpoCDbBTpgFH 4DpCXAdQdMKd6RF9O7+zKY00FTeac0aN0xG2enuNepQP11MhJqRczcoh1kE6+LIM qixxZVv8zGQpSfX8h9HYGpUN1sL3IfYzAYZcZKJL7rBiAZGuAOiwV6pt0AccYMPM C/9bQEdW7SL+8Y49eB1VkpYqDCeaPSE0QqtJF0RN0V6pvqyWApCDhDrTdxQROBHs lHzIJbzY0FeJ7Q== -----END CERTIFICATE-----Generated at Wed Sep 23 01:26:51 2026 by rpki-client