$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json) Hash identifier: ntV5VVBPyLfH56WYtyVkY74FpGakWYAIgm1zHcZxTIU= Subject key identifier: 18:90:CA:59:14:B1:92:59:2A:18:B9:CA:4C:85:1C:B9:AC:C5:03:C4 Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Certificate serial: 01A0F2314CD4BB7406E12DFF6298F47226EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft Manifest number: 123A Signing time: Wed 30 Sep 2026 12:01:52 +0000 Manifest this update: Wed 30 Sep 2026 12:01:52 +0000 Manifest next update: Thu 01 Oct 2026 12:01:52 +0000 Files and hashes: 1: 03qDd_x5kIQisyJDyHVAhJWRLFM.roa (hash: Bmg2Fe/T2cmfuLkUG6xBLZwUcgZn+z1pedq3EUjKeVA=) 2: 33gU1W_UI1Ae18rle6T32Am_ap0.roa (hash: CtHyr3lbVK0nM4M5V+efOeDGbhPQI4ZIEpY0w9de2vw=) 3: 7d0P9doBZNnco0Uk-uyE95zYsRU.roa (hash: C0smtXlBUg5wv9v0wIvA4FN2yM+ZFAWopSk3eOTxr4A=) 4: BDT11QF-TtgdWALp45xoyYelUsM.roa (hash: mujOfcZnyEUoIqlubLK7erXRFeA189kfqWm71HEHJLA=) 5: EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa (hash: VhRxVbInTPM1O+Ldm/7obKGqKOZ2+6LZ1EZrcIQqOtM=) 6: H9M9hJ2Wf0edu4O6BWjDO8iQCIY.asa (hash: X7hW2mdrTDcdJA7Y5SsLSoNgjMb7M7DnZnmZizxX5K0=) 7: LE0LYSRlSHBlwqkbBS3d-4jQXVI.roa (hash: qNI5ryb9dP4ZDLAtMIMap6nbp3+t9sAW2t3qbIFwYZE=) 8: TXguGT_UTl1GdyDJUiKFRpuOX_o.roa (hash: fAuVLNao9cvO8YJmECjpJXFSsNjlEB4NUGFkoGhsksY=) 9: VZOyRy0tzJ2sfmNYjeH9siUXpok.roa (hash: hg8jPOLxAFpxHffAZVtykZM6KfjDO72SPntESUbpkNs=) 10: eO9gFOF2DFVAaSQC-qU8Cc5tUvk.asa (hash: oREm2BU1au2wLbubTl/7hfGGiO50t8g7O52UFNL9Yd4=) 11: fMPPEhoc1eJ7TtYJwhoTEBEj3u0.roa (hash: TFEzfDo3Zwa4HL59NImWxFGsVixNQrbjisILgLkXLHY=) 12: sPWdnd-6eDj5X9yNO4z9PSISSlQ.roa (hash: agHieGTKdf4veiuZ5e0ZnuSvZ/4cBqOGV3qPQeuYVLw=) 13: uDj2Yyjz9Osyu9dJCu_3OQFz4uA.roa (hash: 3im4Wph6tBomBtiDPxXDGzF9rSSihCEjyLDoawI+nsw=) 14: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: 9hbKnMYpYRLQg7kKLc8lW7myMPWyZ1kalVN9zu2Mzm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 12:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:f2:31:4c:d4:bb:74:06:e1:2d:ff:62:98:f4:72:26:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Validity Not Before: Sep 30 12:01:52 2026 GMT Not After : Oct 1 12:01:52 2026 GMT Subject: CN=1890ca5914b192592a18b9ca4c851cb9acc503c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:38:1b:91:28:94:78:77:92:99:4d:84:12:97: 92:e7:17:85:12:cd:96:2e:ef:71:7b:38:a6:d7:93: 8a:b6:65:a2:6e:56:61:fc:a9:4f:03:f2:b6:77:94: 90:2c:7d:23:96:58:a0:33:42:03:5b:49:42:d4:e6: 22:80:ce:7a:c3:98:67:3c:dc:13:63:90:66:d2:1a: 49:f1:9f:88:f0:e5:1a:41:b4:81:c3:c4:5c:64:b3: 09:2d:15:6a:53:96:a5:c3:14:30:36:a5:16:e6:e4: 7a:44:25:19:24:61:3f:24:30:09:cf:da:c1:4b:59: 5a:cd:3a:5d:05:cd:93:26:86:db:b0:14:a0:fa:28: 51:31:7a:a1:68:0c:0a:44:32:50:25:59:8c:fd:02: df:cb:6b:4d:5a:cd:a7:d1:1b:e7:0c:bc:8a:b9:17: 4b:b0:98:43:95:e2:93:60:ae:bf:fa:2f:16:ef:5b: f6:29:f3:71:d6:40:02:d9:6f:45:12:cd:c5:c5:14: 00:de:d2:f4:18:e7:69:7a:ed:22:65:d5:70:30:4f: 2b:97:e2:87:b6:5f:24:e0:ab:80:1b:60:fd:54:11: e2:ca:be:8e:33:bd:69:6d:25:b3:9a:8e:bd:3e:85: 75:85:55:d9:a3:0a:b7:54:98:41:60:41:15:ee:72: 92:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:90:CA:59:14:B1:92:59:2A:18:B9:CA:4C:85:1C:B9:AC:C5:03:C4 X509v3 Authority Key Identifier: keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:bf:19:ac:26:66:99:a5:04:87:26:23:75:fa:d5:18:03:10: d9:bc:77:e1:9d:92:50:34:b3:30:56:5b:a3:83:90:05:20:01: 19:4d:80:7a:81:40:ef:29:4b:f4:22:9e:bc:38:a9:9f:c4:af: 46:d2:de:51:d3:88:89:4e:ed:e9:4b:60:98:3e:02:5c:40:a4: 05:c7:00:8c:f4:3b:09:c3:35:e8:f4:91:40:34:97:a1:b5:85: 6e:7e:c2:10:a3:b6:5e:fc:c5:c2:fa:88:54:84:a3:1b:48:dd: 93:00:4b:1a:f9:b4:e5:96:b9:b1:ee:22:88:4a:7c:97:3b:a8: 60:ac:a1:27:87:3a:4d:7f:09:9b:58:dd:28:71:3d:8a:83:07: 83:59:ef:79:e8:cb:77:e2:82:59:c6:0d:eb:91:15:80:8a:24: 8c:5c:66:53:0a:5c:99:fa:10:f2:40:a1:33:42:91:bc:ba:f3: c2:4b:2e:91:a4:23:6f:8d:c1:0b:8b:df:b5:5f:bd:bb:8f:7f: 4f:b4:6a:fa:2d:16:ef:f9:6f:a5:a0:f5:77:bd:72:76:cc:08: 39:5e:ae:a8:30:c3:23:e8:36:ac:98:10:8c:af:37:fe:5f:9a: d7:d5:ec:65:4c:bc:c7:52:01:a0:17:ee:7d:5d:48:a6:da:19: 56:29:21:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDyMUzUu3QG4S3/Ypj0cibsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm MTlmN2UwHhcNMjYwOTMwMTIwMTUyWhcNMjYxMDAxMTIwMTUyWjAzMTEwLwYDVQQD EygxODkwY2E1OTE0YjE5MjU5MmExOGI5Y2E0Yzg1MWNiOWFjYzUwM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzgbkSiUeHeSmU2EEpeS5xeFEs2W Lu9xezim15OKtmWiblZh/KlPA/K2d5SQLH0jlligM0IDW0lC1OYigM56w5hnPNwT Y5Bm0hpJ8Z+I8OUaQbSBw8RcZLMJLRVqU5alwxQwNqUW5uR6RCUZJGE/JDAJz9rB S1lazTpdBc2TJobbsBSg+ihRMXqhaAwKRDJQJVmM/QLfy2tNWs2n0RvnDLyKuRdL sJhDleKTYK6/+i8W71v2KfNx1kAC2W9FEs3FxRQA3tL0GOdpeu0iZdVwME8rl+KH tl8k4KuAG2D9VBHiyr6OM71pbSWzmo69PoV1hVXZowq3VJhBYEEV7nKS3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiQylkUsZJZKhi5ykyFHLmsxQPEMB8GA1UdIwQY MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt ZGE0NTM4MDIyYWM3LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3 LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJL8ZrCZm maUEhyYjdfrVGAMQ2bx34Z2SUDSzMFZbo4OQBSABGU2AeoFA7ylL9CKevDipn8Sv RtLeUdOIiU7t6UtgmD4CXECkBccAjPQ7CcM16PSRQDSXobWFbn7CEKO2XvzFwvqI VISjG0jdkwBLGvm05Za5se4iiEp8lzuoYKyhJ4c6TX8Jm1jdKHE9ioMHg1nveejL d+KCWcYN65EVgIokjFxmUwpcmfoQ8kChM0KRvLrzwksukaQjb43BC4vftV+9u49/ T7Rq+i0W7/lvpaD1d71ydswIOV6uqDDDI+g2rJgQjK83/l+a19XsZUy8x1IBoBfu fV1IptoZVikhZg== -----END CERTIFICATE-----Generated at Wed Sep 30 22:54:23 2026 by rpki-client