$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft File: evUSKXc6-RV-MXFg-dyADzgeCys.mft (raw, json) Hash identifier: MzXTTtJ8vkR8M1McFX7bBL6XaEtUPQ/EYT7XZKJ5V0E= Subject key identifier: 25:27:1F:46:A6:90:50:62:F5:93:0D:5F:F1:AC:71:BA:C7:3B:D8:3C Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B Certificate issuer: /CN=7af51229773af9157e317160f9dc800f381e0b2b Certificate serial: 01A1DBA609E5CD9D48E8071194AABA7C3223 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft Manifest number: 03A4 Signing time: Sat 14 Nov 2026 20:00:54 +0000 Manifest this update: Sat 14 Nov 2026 20:00:54 +0000 Manifest next update: Sun 15 Nov 2026 20:00:54 +0000 Files and hashes: 1: 0JXzPsfQiwnhkAPuwUcoZ4TksqU.roa (hash: PLw1g8tEdu8DohzHWXzHrIGYzVNggXd55nUqO0fw1fA=) 2: HLXrwT45MTMa_mhCV00Hv0aHA2k.roa (hash: rkZE6mPZWfH9GMHGmnUqFvkyHWkjWIxlqyhyBnTw+1k=) 3: Kv2Ob7_hFEbgI_ftySsGnX4M3XQ.roa (hash: s+/q4sVi5Ud8SeTEnpw7PXXetnDgzT/C+VQ7Whvxsmw=) 4: LvZoa6Dyn3b8TsOgucX2IIHA2DU.roa (hash: txHAgVDu8eC+tRA2fpR62W+UF+dAIZZl7YAt2C2To5c=) 5: QcxSXFyqidHUk327u_nSMoqZheg.roa (hash: 4xwfEjK2GS0Bj8Odb8CMpXnbw4DAt7dP8ep7zLWLlyw=) 6: TGFfC8MsVtioSptjBohz0xvP3A0.roa (hash: Mv1j9mh4sO8DAuKoAT6/I6dcEMRxG28gweD0Pzi0ZKQ=) 7: VBa7pmCn8ime4P1CWdu0-bHF6pU.roa (hash: Zu7orNKKN0lHI4UfSn3mVOtovclqiBwC91Fgfm2M6m8=) 8: bGG4QXxgUzwoqqwAgB5WAK-Uxto.roa (hash: TEYIeaNaWOf9ouUEps9+2mmWqssPfLKwLjfKOLn+W1s=) 9: evUSKXc6-RV-MXFg-dyADzgeCys.crl (hash: jiy2d7NkobJAF/CD4oprW1w5/kRQ1oEbpR8LWGJF5yg=) 10: r-_3l2QQDk49Rp0j80drAiEu4kU.roa (hash: 0nT9J9nUi2CAiLfvcK69CvCos9Ne+xvHeMLkDsNE+kg=) 11: vcGQBCURbj2L-uTMuaODdad6bpM.roa (hash: 8edgli6gjAqsAbbauaZPwf+GB5AGSQnsq/FwGpi7vQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:a6:09:e5:cd:9d:48:e8:07:11:94:aa:ba:7c:32:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b Validity Not Before: Nov 14 20:00:54 2026 GMT Not After : Nov 15 20:00:54 2026 GMT Subject: CN=25271f46a6905062f5930d5ff1ac71bac73bd83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:d3:7d:4c:30:57:da:67:a5:f4:5e:c3:dd: 28:8e:64:6f:9c:ab:8f:33:3a:f1:49:88:c1:1d:ba: b6:09:d7:ef:32:e4:68:85:ea:ec:85:6a:dd:ec:a0: 8d:41:80:a7:0b:6a:8d:13:1f:93:b7:b2:58:97:26: 7e:fb:cc:68:6c:fe:de:1f:cd:fe:2e:59:78:82:0b: ab:bf:73:16:ef:48:4d:9e:04:d9:f3:8b:af:9e:78: 6b:a8:1d:b1:dc:a4:8c:fb:eb:61:85:b7:3f:ac:e6: 6b:e4:7b:af:b0:8f:29:76:91:98:a5:fd:31:38:57: f4:fd:56:c6:cc:99:65:44:6d:08:a9:c6:2d:68:7f: e8:24:ea:d0:03:56:08:67:3c:a1:5c:75:bc:98:e6: 9a:10:b3:92:8e:34:19:7a:67:cf:b7:e3:8b:fe:3c: 44:0c:4d:db:a8:7f:f7:12:18:3c:08:5b:ff:68:b7: 32:7b:e7:20:c5:32:5c:9c:ea:2c:54:72:47:0b:14: be:3a:4f:8e:dc:09:98:9b:c4:6e:f6:9e:26:30:52: a2:e2:79:90:2a:f6:a3:85:63:4f:2c:88:c9:22:a1: ec:5e:cb:74:9c:d2:56:d0:d6:ad:46:63:7e:94:b8: 51:94:76:2e:9c:26:aa:2f:e1:13:c9:93:ac:ac:c6: c7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:27:1F:46:A6:90:50:62:F5:93:0D:5F:F1:AC:71:BA:C7:3B:D8:3C X509v3 Authority Key Identifier: keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:10:c3:ec:ad:f9:2a:cd:62:2a:bf:2b:42:31:a8:04:c1:e5: 51:84:e5:b2:1d:16:11:88:2a:f1:54:68:5c:08:46:54:79:23: 3c:b5:4f:ca:e6:9d:02:2a:b1:77:3f:45:60:48:8e:70:ce:30: 5f:a5:ea:f1:2d:1a:c4:b6:6b:ab:d9:0a:5c:4b:e1:8c:6f:00: ce:cc:96:14:b4:38:30:2f:6f:76:70:ae:1a:6c:f6:39:19:48: fc:52:90:cd:28:42:43:6d:4d:41:2d:f1:7d:4b:7a:f6:b8:0b: ad:16:5a:c7:eb:eb:97:4d:60:0f:e5:66:16:7a:a6:6a:6f:4e: 77:61:be:db:dd:9c:2b:d4:99:27:d9:d2:ed:04:86:e6:0f:56: 97:3d:82:2c:b8:85:e4:9e:47:06:79:2e:b4:47:d4:a1:cc:1f: 04:4a:c8:d1:65:be:88:fa:ac:f9:6c:8b:e5:21:10:46:6a:9e: 89:38:e0:c6:9c:fd:af:20:b3:3e:7b:27:86:d2:7b:64:cc:05: 37:e5:23:b7:db:95:86:7e:90:c8:be:8b:eb:12:f8:84:12:53: 35:9b:ad:5c:c7:8a:cc:38:c4:73:10:34:1c:34:90:c9:34:4b: 33:59:12:48:49:01:40:e4:51:4a:e4:0e:03:6a:21:58:d4:5a: 19:21:d2:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbpgnlzZ1I6AcRlKq6fDIjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZjUxMjI5NzczYWY5MTU3ZTMxNzE2MGY5ZGM4MDBmMzgx ZTBiMmIwHhcNMjYxMTE0MjAwMDU0WhcNMjYxMTE1MjAwMDU0WjAzMTEwLwYDVQQD EygyNTI3MWY0NmE2OTA1MDYyZjU5MzBkNWZmMWFjNzFiYWM3M2JkODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfnTfUwwV9pnpfRew90ojmRvnKuP MzrxSYjBHbq2CdfvMuRohershWrd7KCNQYCnC2qNEx+Tt7JYlyZ++8xobP7eH83+ Lll4ggurv3MW70hNngTZ84uvnnhrqB2x3KSM++thhbc/rOZr5HuvsI8pdpGYpf0x OFf0/VbGzJllRG0IqcYtaH/oJOrQA1YIZzyhXHW8mOaaELOSjjQZemfPt+OL/jxE DE3bqH/3Ehg8CFv/aLcye+cgxTJcnOosVHJHCxS+Ok+O3AmYm8Ru9p4mMFKi4nmQ KvajhWNPLIjJIqHsXst0nNJW0NatRmN+lLhRlHYunCaqL+ETyZOsrMbHlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUnH0amkFBi9ZMNX/GscbrHO9g8MB8GA1UdIwQY MBaAFHr1Eil3OvkVfjFxYPncgA84HgsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjIt ZWUxZWE2MzZlZDRmLzEvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjItZWUxZWE2MzZlZDRm LzEvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhDD7K35 Ks1iKr8rQjGoBMHlUYTlsh0WEYgq8VRoXAhGVHkjPLVPyuadAiqxdz9FYEiOcM4w X6Xq8S0axLZrq9kKXEvhjG8AzsyWFLQ4MC9vdnCuGmz2ORlI/FKQzShCQ21NQS3x fUt69rgLrRZax+vrl01gD+VmFnqmam9Od2G+292cK9SZJ9nS7QSG5g9Wlz2CLLiF 5J5HBnkutEfUocwfBErI0WW+iPqs+WyL5SEQRmqeiTjgxpz9ryCzPnsnhtJ7ZMwF N+Ujt9uVhn6QyL6L6xL4hBJTNZutXMeKzDjEcxA0HDSQyTRLM1kSSEkBQORRSuQO A2ohWNRaGSHSCA== -----END CERTIFICATE-----Generated at Sun Nov 15 01:15:57 2026 by rpki-client