$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json) Hash identifier: lG7oCBzC72hDa6QdWQpIhVs7z2yEQbzrXGIs/C0pViA= Subject key identifier: FD:81:B8:CB:61:3B:CA:07:E0:F3:22:D7:1C:A0:0F:0F:E7:BF:1E:57 Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Certificate serial: 019E20912132ABE3C240BCAA9A15BF661271 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft Manifest number: 10B9 Signing time: Wed 13 May 2026 09:00:42 +0000 Manifest this update: Wed 13 May 2026 09:00:42 +0000 Manifest next update: Thu 14 May 2026 09:00:42 +0000 Files and hashes: 1: 0tMr1V2NrZJuowDCZdCx-tCNBkY.roa (hash: 9fKPyx7EXZECo0QhxrhTF/z1f7bEAZhvNl4JyZ6Gf8s=) 2: BDT11QF-TtgdWALp45xoyYelUsM.roa (hash: mujOfcZnyEUoIqlubLK7erXRFeA189kfqWm71HEHJLA=) 3: DRTrzTPHGlYA_dtKXzGTXLxXFVE.asa (hash: AUqyMLZSXseXhShAyL7jvq0DAiPZYPduaEFPG6bp3bs=) 4: EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa (hash: VhRxVbInTPM1O+Ldm/7obKGqKOZ2+6LZ1EZrcIQqOtM=) 5: GTk4_xkEVcCortfUUwlKNErPXJ8.roa (hash: uEhgRh2xa40WAcBKwOTkS5sGlJsngCqmoIk1TCwsS1s=) 6: SM6e5UqBHogNbgt0o12BmkZX2DY.roa (hash: U4nFBrr+xudjO3gD5UENImDfwahddAJuHGHpyaSej5k=) 7: VfkNsJUY9G2_hmqiXxuxgqJesHA.asa (hash: ZLxjPhLn0tBvkeoMK+3pGTiTZClSK8ev8L3TuABDeM4=) 8: fMPPEhoc1eJ7TtYJwhoTEBEj3u0.roa (hash: TFEzfDo3Zwa4HL59NImWxFGsVixNQrbjisILgLkXLHY=) 9: nUgTJPU9nrCII2FLyU_H2qK_pP8.roa (hash: rmb104kxYDootOUIROMu6HqlCFZnw39MmdII1tj3p9Q=) 10: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: I+f+XoJvubkk0t2WKTM/s6Wbt5TlVWMPGLSqsz0dmSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:20:91:21:32:ab:e3:c2:40:bc:aa:9a:15:bf:66:12:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Validity Not Before: May 13 09:00:42 2026 GMT Not After : May 14 09:00:42 2026 GMT Subject: CN=fd81b8cb613bca07e0f322d71ca00f0fe7bf1e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:52:15:31:74:39:26:53:25:89:2f:46:9e:f5: e3:b3:82:26:ce:88:b7:bc:88:3b:f4:06:40:95:88: ec:72:b5:8d:0f:b9:63:44:62:13:2a:4d:6d:84:a0: 11:3c:c6:ad:de:11:38:14:8e:cc:bc:e5:91:c0:e0: 0c:78:50:5e:19:4a:38:ae:25:aa:90:fe:e5:e2:da: 71:9e:d8:c7:13:58:b5:78:d4:7a:ad:5f:2e:85:4b: 6a:22:58:7b:46:df:9d:f7:61:78:f0:62:5b:66:b7: 1e:58:87:96:7c:ca:20:11:0c:3e:be:cf:a7:d5:1d: 66:03:9a:f5:8a:e3:b1:3d:cb:9a:60:4c:90:01:17: c7:da:76:30:c2:b9:51:bd:de:ff:34:da:95:7e:45: 87:03:11:97:7b:1a:6b:3f:0c:6f:c3:d3:39:0c:1c: 99:6d:46:b6:78:72:01:6a:37:14:23:d5:03:ed:c7: aa:f1:79:82:72:90:dc:4c:62:79:fa:f8:23:b3:6d: c3:99:ac:60:d4:83:6d:e6:4d:1c:d7:26:4f:68:dd: 57:7e:63:9a:f2:ff:4f:b5:b1:90:47:8f:75:ff:4c: be:e1:41:73:c3:22:65:2a:fb:c6:22:9e:41:c6:27: 7b:6c:4a:94:33:25:91:54:85:60:d1:74:16:e1:63: 6e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:81:B8:CB:61:3B:CA:07:E0:F3:22:D7:1C:A0:0F:0F:E7:BF:1E:57 X509v3 Authority Key Identifier: keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c7:ea:a2:2f:9e:50:03:44:cc:68:19:0b:65:bd:77:31:5c: 73:ec:49:35:94:f0:a0:b0:4d:99:ad:da:ae:f1:63:0b:09:8f: 10:b1:8c:8c:75:ec:fc:fe:9a:2f:13:60:1f:e8:60:d8:5d:6f: 88:4e:65:6d:7a:4a:f2:72:bf:fc:cc:35:39:59:82:fd:b8:ab: 5b:1c:e0:77:69:fb:43:28:4e:d2:46:65:7b:29:d9:23:8e:e2: 81:38:0b:c4:4f:d2:b7:94:7c:6c:71:83:41:e9:13:60:b9:3e: 70:45:5b:18:00:9e:9c:ae:7f:a6:cb:e4:7f:95:59:fa:9b:e0: 2c:29:d0:ca:ce:0f:46:f8:15:6a:5f:88:55:17:3c:e2:2e:42: b8:bf:d4:3e:ae:3c:a5:d5:9a:e3:3d:b0:fd:d4:d0:8b:0e:30: ec:c0:a5:7a:08:ea:fa:cf:82:80:9f:21:88:0a:01:7a:28:81: 23:9f:7b:e3:f6:5d:b5:ec:53:b3:f3:ed:e9:f3:8d:cc:08:97: 67:d1:27:23:7b:85:a0:ef:a1:2e:17:10:c8:79:dc:9f:40:c9: c3:d5:90:ca:42:59:7e:81:67:77:84:95:33:93:d9:14:83:d6: 3d:a2:52:c6:44:e6:8a:06:8b:5d:ca:81:6e:4f:bd:61:9a:8f: 40:00:7d:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4gkSEyq+PCQLyqmhW/ZhJxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm MTlmN2UwHhcNMjYwNTEzMDkwMDQyWhcNMjYwNTE0MDkwMDQyWjAzMTEwLwYDVQQD EyhmZDgxYjhjYjYxM2JjYTA3ZTBmMzIyZDcxY2EwMGYwZmU3YmYxZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVIVMXQ5JlMliS9GnvXjs4Imzoi3 vIg79AZAlYjscrWND7ljRGITKk1thKARPMat3hE4FI7MvOWRwOAMeFBeGUo4riWq kP7l4tpxntjHE1i1eNR6rV8uhUtqIlh7Rt+d92F48GJbZrceWIeWfMogEQw+vs+n 1R1mA5r1iuOxPcuaYEyQARfH2nYwwrlRvd7/NNqVfkWHAxGXexprPwxvw9M5DByZ bUa2eHIBajcUI9UD7ceq8XmCcpDcTGJ5+vgjs23Dmaxg1INt5k0c1yZPaN1XfmOa 8v9PtbGQR491/0y+4UFzwyJlKvvGIp5Bxid7bEqUMyWRVIVg0XQW4WNuTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2BuMthO8oH4PMi1xygDw/nvx5XMB8GA1UdIwQY MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt ZGE0NTM4MDIyYWM3LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3 LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcfqoi+e UANEzGgZC2W9dzFcc+xJNZTwoLBNma3arvFjCwmPELGMjHXs/P6aLxNgH+hg2F1v iE5lbXpK8nK//Mw1OVmC/birWxzgd2n7QyhO0kZleynZI47igTgLxE/St5R8bHGD QekTYLk+cEVbGACenK5/psvkf5VZ+pvgLCnQys4PRvgVal+IVRc84i5CuL/UPq48 pdWa4z2w/dTQiw4w7MClegjq+s+CgJ8hiAoBeiiBI5974/ZdtexTs/Pt6fONzAiX Z9EnI3uFoO+hLhcQyHncn0DJw9WQykJZfoFnd4SVM5PZFIPWPaJSxkTmigaLXcqB bk+9YZqPQAB9KA== -----END CERTIFICATE-----Generated at Wed May 13 12:45:33 2026 by rpki-client