$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: /fmti5Cn4XO2PR9UjCBk/rwenW/LJQrye068NxzFeU8= Subject key identifier: AD:4C:A5:3E:32:9C:35:DC:1E:8E:9A:0C:8B:D9:BD:A5:FA:DB:7C:7B Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 01A1DA26601E66DAF1CF3B3C2C5C2B1C844F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 0E5A Signing time: Sat 14 Nov 2026 13:01:50 +0000 Manifest this update: Sat 14 Nov 2026 13:01:50 +0000 Manifest next update: Sun 15 Nov 2026 13:01:50 +0000 Files and hashes: 1: 0-DUuatym4EjrLpEXcW6I4MvGuM.roa (hash: uxv6/KY05jYuEsZLZV3EP7utj37no6k0dC74Q/DN0po=) 2: 0G0rRTu6YWCR1V_Lc199bCBf3eY.roa (hash: ONejcgv+C+EtCtZmR2C80Az2frNnLr2aDGvIHLHpMsw=) 3: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: WV9mmaFWdI09Pb35bIb7qR3DWm/8PiYpPRINQe9koys=) 4: DRWGbkvEcD_bNQTgjUEfobLZ-PA.roa (hash: eZVLmuCp5+bXUFcL2aI3C/aZXJNWqBIZX9DvM7Y7ZFY=) 5: RxPOdCnW7tymnjueSRcA6hs4elk.roa (hash: FCPYguPsplTXs5/9P4PJ+u4lYOZKePLa/u9GPsujen4=) 6: Y-ntuvRTafT1eOZlmfGsaPPEtjE.roa (hash: v4qO0jj2DVZ9xq0w+y70kJel8FoTbySNEx7XDJ9VH/Q=) 7: dJpXPlF_vRyOgX7jQKghLw8pQUQ.roa (hash: E1+cy9PTWiny/1y88hiJPYv+llkKbECfLmkj5G9alPY=) 8: kN69teI4lOPRDRSTeJKcvbg3DVI.roa (hash: 0zY8u4pSs4JdcMd1LnlNAD4f7WGos0AD35DsttS72fg=) 9: lu5yurSkT9e_Taok7SCt_R26FuY.roa (hash: CeXf6vw9DkbZGqczzaPxh8skoxIspZwWkZW0SRU+ELM=) 10: mgliWT245mKPpOJ9J-koUWKPC38.roa (hash: 2leVbMv5cZcWloTjT8tRG7S73gX0MLHEKiLR37iqlKc=) 11: nyqLqit5oB_bMTURFw941vObpAs.roa (hash: YyM6j1YO1pKfOQnOF8zW9g/xPYJJDmuheUmA+y3jAx0=) 12: qHpfpL-iX9xY8GdRHaONTT8pr8Y.roa (hash: +ysYA2z1c9FzjaGNYUk90Ddk4xsZHBpqAK7t8gXQInM=) 13: uf3e_BE2zQVDAEvwnBCYDlW_CRA.roa (hash: pdun+BKUOQ7DoLG0PPskjv1gebPPRcfr5c7Kait8/nk=) 14: xbafFgHngcJFMb2cngm3oN0_3sA.roa (hash: 3QhvTvFkxgvJXVXMTx914Du8ko0OHV0OfDyouPKHYiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:da:26:60:1e:66:da:f1:cf:3b:3c:2c:5c:2b:1c:84:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Nov 14 13:01:50 2026 GMT Not After : Nov 15 13:01:50 2026 GMT Subject: CN=ad4ca53e329c35dc1e8e9a0c8bd9bda5fadb7c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:35:d3:68:c9:09:ff:2f:1a:d3:73:e8:64:52: 99:28:98:af:69:fc:49:ea:c1:6c:3b:36:f1:e6:0b: 31:6c:10:37:8a:f2:6d:b9:55:58:0f:4c:34:4b:aa: 96:e1:98:7b:2e:c8:e3:37:af:40:2f:31:97:e1:74: e7:73:83:41:c2:4e:c0:21:46:64:e0:df:3e:cb:87: 35:f9:a3:9b:a8:e3:e6:d0:ff:43:3d:f3:75:95:33: 5a:d9:da:c6:13:7b:81:36:ee:52:fb:ba:8b:db:bc: e4:b9:2a:06:8d:cc:27:05:43:aa:3f:19:3a:7f:7d: 3c:6e:aa:d2:86:02:39:99:20:5a:78:c9:5f:bb:6b: 0e:18:4d:4b:35:1f:7b:a1:f5:7a:7a:eb:93:e1:a7: 2c:da:e3:fc:ac:08:8b:78:c3:ad:b8:01:2b:a5:b2: aa:1b:df:82:17:6b:f1:ef:ad:c6:b3:20:b8:2a:e6: d6:8e:46:65:19:46:c5:ff:41:01:cc:85:e7:e0:3e: aa:06:06:db:5d:2e:a4:49:75:e6:b2:9a:26:50:55: 09:39:cf:0a:ec:03:7b:24:d0:b6:88:25:d6:3f:f9: 5e:ca:6d:11:a5:5b:e1:e9:af:32:9c:c4:65:dc:7c: 70:9b:48:4a:3f:a1:4d:eb:16:d5:d0:1f:8f:64:61: 6e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4C:A5:3E:32:9C:35:DC:1E:8E:9A:0C:8B:D9:BD:A5:FA:DB:7C:7B X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:fa:38:48:5f:f0:8e:04:68:b4:8f:e2:84:d2:3d:53:5a:7d: 1b:50:99:2a:84:ae:c5:13:02:94:1e:e3:06:bb:38:85:0c:2c: 00:87:48:28:e0:87:f6:9b:f0:f0:5d:89:6e:3c:a4:9f:7f:d6: 24:e3:5f:bc:31:ad:63:bb:e0:01:5d:62:80:e5:48:cc:4f:bc: 98:48:ec:a2:17:35:f6:fa:97:e9:fe:fc:9f:17:b9:14:d1:ff: 38:20:a4:65:5e:3f:3d:35:e6:76:66:f0:18:fa:ab:5e:b9:76: 90:b2:ff:9f:44:94:fc:a7:8a:c5:7c:eb:6d:66:b1:05:8d:bf: 74:d5:23:66:6d:0d:8b:16:5f:96:c2:85:d9:22:af:10:0d:1f: ec:e0:ed:68:54:1b:e1:03:1b:f0:d9:f6:45:fa:46:3a:b4:c3: 90:74:a5:23:f7:20:51:eb:3c:bd:de:91:d0:70:f1:1c:8f:4a: 14:71:8e:9d:13:9a:a3:e6:d7:30:8a:f2:66:82:98:c5:9d:ff: 72:13:60:9d:3b:31:a0:0f:92:e1:8c:d2:8d:26:df:b8:f0:85: 31:fa:af:7d:ed:05:b4:a1:ca:2e:ef:10:3b:e8:99:ac:65:25: 87:d4:8d:53:2d:37:2c:fc:22:a5:d4:20:99:d5:04:dc:e1:46: 74:2d:5b:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHaJmAeZtrxzzs8LFwrHIRPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjYxMTE0MTMwMTUwWhcNMjYxMTE1MTMwMTUwWjAzMTEwLwYDVQQD EyhhZDRjYTUzZTMyOWMzNWRjMWU4ZTlhMGM4YmQ5YmRhNWZhZGI3YzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzXTaMkJ/y8a03PoZFKZKJivafxJ 6sFsOzbx5gsxbBA3ivJtuVVYD0w0S6qW4Zh7LsjjN69ALzGX4XTnc4NBwk7AIUZk 4N8+y4c1+aObqOPm0P9DPfN1lTNa2drGE3uBNu5S+7qL27zkuSoGjcwnBUOqPxk6 f308bqrShgI5mSBaeMlfu2sOGE1LNR97ofV6euuT4acs2uP8rAiLeMOtuAErpbKq G9+CF2vx763GsyC4KubWjkZlGUbF/0EBzIXn4D6qBgbbXS6kSXXmspomUFUJOc8K 7AN7JNC2iCXWP/leym0RpVvh6a8ynMRl3Hxwm0hKP6FN6xbV0B+PZGFugwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1MpT4ynDXcHo6aDIvZvaX623x7MB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/o4SF/w jgRotI/ihNI9U1p9G1CZKoSuxRMClB7jBrs4hQwsAIdIKOCH9pvw8F2Jbjykn3/W JONfvDGtY7vgAV1igOVIzE+8mEjsohc19vqX6f78nxe5FNH/OCCkZV4/PTXmdmbw GPqrXrl2kLL/n0SU/KeKxXzrbWaxBY2/dNUjZm0NixZflsKF2SKvEA0f7ODtaFQb 4QMb8Nn2RfpGOrTDkHSlI/cgUes8vd6R0HDxHI9KFHGOnROao+bXMIryZoKYxZ3/ chNgnTsxoA+S4YzSjSbfuPCFMfqvfe0FtKHKLu8QO+iZrGUlh9SNUy03LPwipdQg mdUE3OFGdC1bJw== -----END CERTIFICATE-----Generated at Sat Nov 14 22:51:29 2026 by rpki-client