$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json) Hash identifier: xOyF0ykE6WaZOxpIFl+hL4YOlNORyKCXl+sMz5gwBQA= Subject key identifier: 46:B5:93:2F:44:CA:3E:8E:EF:F1:3D:CA:A7:48:67:54:19:1D:61:67 Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Certificate serial: 019F92ED0636728E4E0A767254C5362FA36D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft Manifest number: 1182 Signing time: Fri 24 Jul 2026 07:00:34 +0000 Manifest this update: Fri 24 Jul 2026 07:00:34 +0000 Manifest next update: Sat 25 Jul 2026 07:00:34 +0000 Files and hashes: 1: 33gU1W_UI1Ae18rle6T32Am_ap0.roa (hash: CtHyr3lbVK0nM4M5V+efOeDGbhPQI4ZIEpY0w9de2vw=) 2: 7d0P9doBZNnco0Uk-uyE95zYsRU.roa (hash: C0smtXlBUg5wv9v0wIvA4FN2yM+ZFAWopSk3eOTxr4A=) 3: BDT11QF-TtgdWALp45xoyYelUsM.roa (hash: mujOfcZnyEUoIqlubLK7erXRFeA189kfqWm71HEHJLA=) 4: EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa (hash: VhRxVbInTPM1O+Ldm/7obKGqKOZ2+6LZ1EZrcIQqOtM=) 5: LE0LYSRlSHBlwqkbBS3d-4jQXVI.roa (hash: qNI5ryb9dP4ZDLAtMIMap6nbp3+t9sAW2t3qbIFwYZE=) 6: Rq_6E29y9FzzDAL1ZxfTgVmFkZs.asa (hash: yI85oGl8VeF8e1P6DlU+1YJp0A0saEK2LwjW5ZnVXF8=) 7: SM6e5UqBHogNbgt0o12BmkZX2DY.roa (hash: U4nFBrr+xudjO3gD5UENImDfwahddAJuHGHpyaSej5k=) 8: VZOyRy0tzJ2sfmNYjeH9siUXpok.roa (hash: hg8jPOLxAFpxHffAZVtykZM6KfjDO72SPntESUbpkNs=) 9: eO9gFOF2DFVAaSQC-qU8Cc5tUvk.asa (hash: oREm2BU1au2wLbubTl/7hfGGiO50t8g7O52UFNL9Yd4=) 10: fMPPEhoc1eJ7TtYJwhoTEBEj3u0.roa (hash: TFEzfDo3Zwa4HL59NImWxFGsVixNQrbjisILgLkXLHY=) 11: sPWdnd-6eDj5X9yNO4z9PSISSlQ.roa (hash: agHieGTKdf4veiuZ5e0ZnuSvZ/4cBqOGV3qPQeuYVLw=) 12: uDj2Yyjz9Osyu9dJCu_3OQFz4uA.roa (hash: 3im4Wph6tBomBtiDPxXDGzF9rSSihCEjyLDoawI+nsw=) 13: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: Rzxl20wPvDXGEzR8lZIN3tnnlbLtgjAXGcRqDH3OcJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 07:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:ed:06:36:72:8e:4e:0a:76:72:54:c5:36:2f:a3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Validity Not Before: Jul 24 07:00:34 2026 GMT Not After : Jul 25 07:00:34 2026 GMT Subject: CN=46b5932f44ca3e8eeff13dcaa7486754191d6167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:88:1a:56:52:0a:00:02:ee:7a:a4:66:7c:52: e4:25:48:eb:92:b7:09:62:4d:e0:6b:cd:47:02:84: d3:c9:36:e8:13:51:e9:aa:ea:44:9a:f8:5a:c3:5c: d0:60:bd:e2:dc:69:74:19:7c:ca:0a:cf:c9:04:96: d5:ca:1b:10:bd:ca:7d:4e:19:98:b8:3b:98:29:51: b7:7b:ab:c2:34:0c:7b:2c:0c:45:a6:f8:80:ad:84: 06:6f:f8:c2:7d:db:7e:38:f4:4f:27:5d:b3:ce:92: 25:ab:1c:7e:88:3b:be:28:e3:b3:aa:2e:64:81:41: be:0d:24:63:e9:f5:03:48:35:6f:57:62:31:2d:5c: fa:a3:ad:72:26:97:19:b4:3c:ab:24:ea:0d:7c:78: f9:72:1d:2a:0b:fb:77:ad:d9:10:91:b9:b5:af:05: 28:e0:c6:bd:0e:e2:ff:a4:00:b4:60:75:ab:97:64: 5c:51:48:90:24:be:9f:dc:0e:56:18:c0:1b:8f:af: d9:a7:b7:da:6f:2a:e9:2e:71:44:24:4b:b3:31:3c: 09:6f:d3:e6:e7:39:47:52:fd:fc:36:e2:2b:fd:14: 9e:9f:11:f9:62:b9:77:ce:ad:8f:e5:4a:23:77:68: 0c:0d:f5:e2:3c:12:39:ca:ec:86:3d:0c:8f:8f:0e: 20:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B5:93:2F:44:CA:3E:8E:EF:F1:3D:CA:A7:48:67:54:19:1D:61:67 X509v3 Authority Key Identifier: keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2f:1d:a4:86:09:71:fb:19:4f:6b:d6:c6:24:b4:74:14:99: 28:56:0d:bf:9a:a4:a3:13:9a:99:b1:40:ff:fc:fe:be:77:17: 18:01:43:98:87:77:02:d2:36:29:f3:e3:46:a7:09:a6:51:d5: 8e:5f:dd:1d:93:2a:b0:29:a6:2e:45:ae:63:9e:f7:c0:cb:68: aa:cf:56:ab:d6:de:03:1a:17:42:f1:2f:21:81:4d:64:c0:0c: af:cd:cc:84:d8:ba:a5:b9:1a:48:61:4f:cc:5c:74:36:88:ed: ee:df:9c:aa:a0:27:7e:40:c2:33:60:c8:4a:c9:16:3b:74:51: 43:0b:bd:cb:82:2f:4c:c5:4a:99:67:57:11:79:86:80:50:c7: 79:f2:2c:13:df:96:e3:c1:d9:16:a8:05:e5:b0:89:fa:a1:ed: 0a:88:7a:0a:9d:4d:80:43:ef:6b:d8:93:89:76:cf:e6:a6:60: 8f:bc:93:03:e8:83:d7:9e:16:54:f0:cc:c8:a8:af:ee:c9:f7: 47:6f:a2:1a:c2:42:61:54:fc:c7:7b:1d:41:c4:9a:35:bd:37: 24:08:24:de:64:dd:4c:93:e3:c9:29:31:b9:93:2e:48:8d:dc: 40:39:36:71:f5:e9:34:9e:87:08:6e:86:85:36:cc:b0:42:e5: 09:7d:bc:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+S7QY2co5OCnZyVMU2L6NtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm MTlmN2UwHhcNMjYwNzI0MDcwMDM0WhcNMjYwNzI1MDcwMDM0WjAzMTEwLwYDVQQD Eyg0NmI1OTMyZjQ0Y2EzZThlZWZmMTNkY2FhNzQ4Njc1NDE5MWQ2MTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4gaVlIKAALueqRmfFLkJUjrkrcJ Yk3ga81HAoTTyTboE1HpqupEmvhaw1zQYL3i3Gl0GXzKCs/JBJbVyhsQvcp9ThmY uDuYKVG3e6vCNAx7LAxFpviArYQGb/jCfdt+OPRPJ12zzpIlqxx+iDu+KOOzqi5k gUG+DSRj6fUDSDVvV2IxLVz6o61yJpcZtDyrJOoNfHj5ch0qC/t3rdkQkbm1rwUo 4Ma9DuL/pAC0YHWrl2RcUUiQJL6f3A5WGMAbj6/Zp7fabyrpLnFEJEuzMTwJb9Pm 5zlHUv38NuIr/RSenxH5Yrl3zq2P5Uojd2gMDfXiPBI5yuyGPQyPjw4gSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEa1ky9Eyj6O7/E9yqdIZ1QZHWFnMB8GA1UdIwQY MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt ZGE0NTM4MDIyYWM3LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3 LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbi8dpIYJ cfsZT2vWxiS0dBSZKFYNv5qkoxOambFA//z+vncXGAFDmId3AtI2KfPjRqcJplHV jl/dHZMqsCmmLkWuY573wMtoqs9Wq9beAxoXQvEvIYFNZMAMr83MhNi6pbkaSGFP zFx0Nojt7t+cqqAnfkDCM2DISskWO3RRQwu9y4IvTMVKmWdXEXmGgFDHefIsE9+W 48HZFqgF5bCJ+qHtCoh6Cp1NgEPva9iTiXbP5qZgj7yTA+iD154WVPDMyKiv7sn3 R2+iGsJCYVT8x3sdQcSaNb03JAgk3mTdTJPjySkxuZMuSI3cQDk2cfXpNJ6HCG6G hTbMsELlCX28Cg== -----END CERTIFICATE-----Generated at Fri Jul 24 11:59:42 2026 by rpki-client