$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft File: 5Mhto_SDJGUY02gDS8hhE5BqVaM.mft (raw, json) Hash identifier: +Oq73HWQNeQ2AoToMhfFWaR0OByZwb1VnmfV/RIBZ2U= Subject key identifier: 66:BD:03:8E:C9:99:45:43:B9:BB:8F:06:F2:FE:AD:F9:28:8E:45:EB Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3 Certificate serial: 01A0CB597F61BEBEA17EA5DD5A2551A1F5BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft Manifest number: 1AA4 Signing time: Tue 22 Sep 2026 23:00:35 +0000 Manifest this update: Tue 22 Sep 2026 23:00:35 +0000 Manifest next update: Wed 23 Sep 2026 23:00:35 +0000 Files and hashes: 1: 1-Y1CLeQ-Cjp68gKza_emSXGJ4ZE.roa (hash: jQk1xGsra+mpydHtGmUoEiesMtafIWbafkkUNFl5s5Q=) 2: 1-bDqvi_4Mc-Zt2RhA9DsJLBmruY.roa (hash: KD4TndoP9a8jrSokheVf5gZGM8WkPWsQCaAuWU8HuI8=) 3: 1-ezGqblYU88DYGupfRZt0z0P-c.roa (hash: 3e97e1j/lafVJd2urvOUlhx4dA8czMnXPXhILFMWj/s=) 4: 35SOLMh2Tr_jR_FO2LonZS0Dwzw.roa (hash: cO/Z6F7txV6TpV/V5lfE+W3QYDMUy+GuCUzsuf9Drjg=) 5: 3qqdfy_UnFdVQlDpIxR1zw9DOmI.roa (hash: JXo5pmi2bOioFRZlNCJNAYMl2NAvXPqzIcF0g4BSru0=) 6: 5Mhto_SDJGUY02gDS8hhE5BqVaM.crl (hash: KBx37y/GTmE31sM3TcYbeBEjE4QdC0MTN8p488o1iXQ=) 7: 5WMgeU66FGzAaHuzAP_nWsThRqc.roa (hash: lUxRT/eJDwLqc4eZcIXGzgK/fh+Pzph6tajKJbnIpCE=) 8: 6AphNA0mG7iYn4g9t4CVeYnl-0Y.roa (hash: ES2CFvY9/aMMP3GdeYDhO1AlVTq0AbKmFVcT86x0bsU=) 9: 6lOwRaS0jN4zE9_KZa0CdvRSz4o.roa (hash: uLU3acN0iYUF5dRWhtfEa0vcmmnr9MryuMMnpNiMQss=) 10: AP29ZUhTpSq5v5F29RLmfRluGGg.roa (hash: Srhc1Pf/7fMSsd5MEwDg1pq9CSvUw5bMKTeun0cG0k0=) 11: BR6ncsWkhB2qv0oqp59JLRJ22t8.roa (hash: Sr6aWOFkIZvhFz7mwZ8Ee2XNqfnohzUvlNMsgOtw6Iw=) 12: RC_GkxlNqDGelGLhmGSuHpzh8YY.roa (hash: zmoFdcBbJpm89sGvucYAsXD3aYu3UDBB8FNuuO1sZ5s=) 13: Ror4-CfLmWcTaTyHA0iJv7ATKKc.roa (hash: Tw7JWISrLHQ/oL9q+UlKj39hw8rBBywNyF5smzbvEWM=) 14: S9uiecJ_V_rH09OQWGxwMdpwZbI.roa (hash: nUYADl7mzytkkU8x/rVrDEkyWr72tHMtYDmNMTGmu14=) 15: dJeU2d3NWjx1lsl1DJGshHnRCGI.roa (hash: Ej+gk8v3uPhQQghNflw4x1l6EEeEieQHfKZUGqRTvJ8=) 16: h37Ma_jDL67Y4SGxQzdtg6FsgA4.roa (hash: GKjbwNQvNj09wzTdJDEoXyV8IVLp5NDpGRUuVbT5bO0=) 17: mrnDtphbbgZwZf-CuWUesDzm0Js.roa (hash: FQbSBlNPLvVWSO5m3FdDSPJ6IZIyXy0Skqvm1LkWdOc=) 18: oaD-F61J8uFaQOVs_EMDy2GWPFM.roa (hash: oRDRlDLCwINYWsifpUB1J8rOuM3NUJ7WcDPWCCey5hM=) 19: ot2MPHy_GeaUM9wSJOhNeqX_r1E.roa (hash: 0UBBGz5BJKAD5JttzPp2bQOm6I+FL3ciNri0MZme80k=) 20: s_jNQyIiTuwbGKzqZChjnXQ8yXk.roa (hash: BigSrB3O/lITzhT7Tp1a0ccxKTegNHB+OKmJdIYz9ak=) 21: vKIb2AE14yY-zbZotXkuL_BM0MM.roa (hash: +pvpv/ZGTt0SvSQldP36Ool8kiRsiBWcnVSVmde5ir8=) 22: wInMghm11FcLBqJT2EV9FM0ZiVY.roa (hash: UusTkTJUi8H8e/4BJF3uND4xQVZ//M68retdZEwQKm0=) 23: wvLOi-n9BkPXu49eSdLibW1rXgM.roa (hash: E28Ur4xLJI4knd7wx2DTfEuXgfZDFGTcpyO+1eE4Rkk=) 24: yEeFE1BE-DNpvAclSGDenGcedhE.roa (hash: 4PqQWG6eTCsvExahCduBeRzlqVfOdZNkHjkhLWhXCdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 22:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cb:59:7f:61:be:be:a1:7e:a5:dd:5a:25:51:a1:f5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3 Validity Not Before: Sep 22 23:00:35 2026 GMT Not After : Sep 23 23:00:35 2026 GMT Subject: CN=66bd038ec9994543b9bb8f06f2feadf9288e45eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ff:82:1e:8e:b4:a8:38:c4:b2:58:0e:4f:91: d7:69:18:43:a3:de:0e:aa:41:87:b8:ed:04:d9:9e: df:4a:1a:20:32:21:8b:ff:e6:29:3b:bc:3f:8a:21: b2:11:06:10:2b:50:81:c1:6b:d7:0d:dd:9a:86:16: 7d:aa:8f:15:16:51:2d:a9:b6:53:4f:f8:35:64:55: c6:72:d3:27:a5:54:b0:58:4f:6d:88:8a:3e:d1:60: 7f:22:96:21:a9:6c:9e:4f:2a:c6:b2:d7:d5:5c:93: 8c:5b:22:61:24:49:de:46:c1:b1:fb:7a:3a:98:7f: 40:76:77:ee:b2:7d:e0:28:34:ae:6f:6b:c7:32:f1: 9c:92:9a:51:3b:97:5e:d5:cc:0a:0f:76:a2:f9:72: 71:8a:fa:d1:3b:0b:c0:81:87:11:c8:43:c1:05:c8: 4d:f8:05:bb:46:dc:6b:40:56:40:72:1b:38:63:d8: 96:4c:0c:09:30:d5:4b:5d:5f:57:03:95:38:49:0d: e5:2e:71:6c:0b:69:17:c5:b9:53:2e:1a:b6:11:09: ef:8c:dc:1b:70:82:67:20:07:c6:37:ee:e3:de:ac: 18:a5:e3:b1:18:c4:72:9a:55:90:df:2b:83:fa:f1: 1d:da:86:3f:b6:54:c9:5f:bc:99:33:db:83:cc:d5: 3c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BD:03:8E:C9:99:45:43:B9:BB:8F:06:F2:FE:AD:F9:28:8E:45:EB X509v3 Authority Key Identifier: keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c7:d5:8b:ba:ba:6f:5b:ce:59:87:fa:ec:fb:22:98:23:71: 7d:9e:2a:a2:7b:18:06:fa:f1:24:56:1f:97:4a:a7:dd:bb:f1: d1:de:02:58:e8:be:70:cc:0a:1d:37:33:b9:0b:4c:b1:a6:be: 2a:92:e5:2d:a8:e9:d6:df:d8:d3:e3:9a:3a:14:cd:ad:54:29: 19:91:5c:f8:03:02:68:fd:b1:40:92:22:d5:76:86:f9:9f:5c: 94:30:be:db:2f:8d:11:1c:8e:68:66:55:27:25:77:8e:89:18: 29:3e:04:51:b2:1b:ce:65:48:29:ba:a2:c8:7d:9e:5f:b3:49: 30:f4:ef:59:b9:dd:82:97:24:b7:07:2a:b4:00:31:b8:46:8c: 1c:c3:bd:bf:4f:e2:eb:73:ba:54:4b:02:49:1b:33:11:f3:e4: 54:3e:57:9e:59:05:f1:55:da:bb:4f:ef:eb:a9:b3:c1:53:77: 3e:f1:61:f6:59:53:62:04:53:be:97:78:51:0b:86:ae:32:e9: 09:59:14:04:6a:97:e9:2e:28:5a:e7:2f:0a:eb:ca:91:b7:f8: 41:bc:3e:b0:71:1d:ff:4d:1f:6f:79:32:1a:0d:a4:2f:b3:d5: c0:47:fa:9b:74:b9:28:de:43:04:6a:8c:ea:a0:ec:25:e3:eb: ff:9b:b0:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDLWX9hvr6hfqXdWiVRofW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2 YTU1YTMwHhcNMjYwOTIyMjMwMDM1WhcNMjYwOTIzMjMwMDM1WjAzMTEwLwYDVQQD Eyg2NmJkMDM4ZWM5OTk0NTQzYjliYjhmMDZmMmZlYWRmOTI4OGU0NWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf+CHo60qDjEslgOT5HXaRhDo94O qkGHuO0E2Z7fShogMiGL/+YpO7w/iiGyEQYQK1CBwWvXDd2ahhZ9qo8VFlEtqbZT T/g1ZFXGctMnpVSwWE9tiIo+0WB/IpYhqWyeTyrGstfVXJOMWyJhJEneRsGx+3o6 mH9Adnfusn3gKDSub2vHMvGckppRO5de1cwKD3ai+XJxivrROwvAgYcRyEPBBchN +AW7RtxrQFZAchs4Y9iWTAwJMNVLXV9XA5U4SQ3lLnFsC2kXxblTLhq2EQnvjNwb cIJnIAfGN+7j3qwYpeOxGMRymlWQ3yuD+vEd2oY/tlTJX7yZM9uDzNU8iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGa9A47JmUVDubuPBvL+rfkojkXrMB8GA1UdIwQY MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct YzUxMWEzZTkxMmI2LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2 LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMfVi7q6 b1vOWYf67PsimCNxfZ4qonsYBvrxJFYfl0qn3bvx0d4CWOi+cMwKHTczuQtMsaa+ KpLlLajp1t/Y0+OaOhTNrVQpGZFc+AMCaP2xQJIi1XaG+Z9clDC+2y+NERyOaGZV JyV3jokYKT4EUbIbzmVIKbqiyH2eX7NJMPTvWbndgpcktwcqtAAxuEaMHMO9v0/i 63O6VEsCSRszEfPkVD5XnlkF8VXau0/v66mzwVN3PvFh9llTYgRTvpd4UQuGrjLp CVkUBGqX6S4oWucvCuvKkbf4Qbw+sHEd/00fb3kyGg2kL7PVwEf6m3S5KN5DBGqM 6qDsJePr/5uwcQ== -----END CERTIFICATE-----Generated at Wed Sep 23 09:25:08 2026 by rpki-client