$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft File: u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json) Hash identifier: ZE2ynoFkW3DlnwDpzqjgVRoa/Bvlyg5C4HEOFCzZaW0= Subject key identifier: 22:D2:04:3A:D3:C7:C9:51:7C:7D:A2:C9:25:BD:AE:F3:F0:E2:F0:CC Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Certificate serial: 01A0D26EC7914D3B0D43077983148F99C639 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft Manifest number: 1B2A Signing time: Thu 24 Sep 2026 08:01:10 +0000 Manifest this update: Thu 24 Sep 2026 08:01:10 +0000 Manifest next update: Fri 25 Sep 2026 08:01:10 +0000 Files and hashes: 1: 096oU7e0E8HrowP4gJPAu4Yvq7w.roa (hash: h6GJyY7se9YHyBgaTMbTYiFCIPloa8qIM1tvJFasblQ=) 2: 1PCu_y82us3PwZ3PttaW2oJ-vRQ.roa (hash: PNPZZJdy9cE/t7HWs1vfO4PMv30dxs9HnvIH2s6qgFM=) 3: 7urEzTsKBLxb5onYBj-aFpyop_U.roa (hash: gb459gbapFxHlbK0J2K7Bvt5uguuHwVrigvvlQxP67E=) 4: MKYrJvGzvZyRvU-YTMKw33sMjbA.roa (hash: zitB1QIdSvuwxE4jXL1s8PUZB8yK6i+xpiMCf2djBrI=) 5: MxcZV9q1XM_oLFPhwS7xTgduXcs.roa (hash: lUq9YnS1Sc7e3dppUauYyDheGtMUtzY+2WuoDWvRh1k=) 6: PF5StOvcjBtJpPkWMQC42y_-7lw.roa (hash: +5ZUq1SbcccJBEuKBRND5IHUBd0bwJSPmUEVlNBAa5I=) 7: Pk0nYBXMibYGfeTa8KuAnDZqEJA.roa (hash: hjjTFQRkGi+Q5QO7W0JHJgrLPllKcASVVsrIkHritU0=) 8: TqC5cslAjOBidLHAZI8XGLZ-bAQ.roa (hash: bLuUwhyQVd1VS9DwSq655y43wtPrqbuVYv80UPVmwic=) 9: nAG5lZSxj6V-wheZnmYE_Q6WWfU.roa (hash: tMCGq6CAVBv6m8gzjuzDgfNy/wvlZB8HIzsnhiNlqsg=) 10: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: 3oznFZqphyIMtO4fHsekE87XmVYgu30jQkK/lC4mG7Q=) 11: y4_D6Qio_R6p7o2KXWCnWybEys0.roa (hash: mUX1ZbSigKnFsHWLnR+/SQCMcTKlzqfR36hp2kv3WSg=) 12: zoz2o6V8v-pZ3rm_TVWUy2Mtt38.roa (hash: /e9GDLeuGl688HzU36fMz9iRnDyyAkt0kfM3UnT5a8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 08:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:6e:c7:91:4d:3b:0d:43:07:79:83:14:8f:99:c6:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Validity Not Before: Sep 24 08:01:10 2026 GMT Not After : Sep 25 08:01:10 2026 GMT Subject: CN=22d2043ad3c7c9517c7da2c925bdaef3f0e2f0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3c:06:41:6c:75:0f:85:68:da:d1:1f:5a:db: 81:c3:71:36:b1:c4:b8:56:c0:d7:1d:de:f7:85:bc: a0:dd:c4:e3:1d:01:c0:c9:15:d2:1b:c1:8c:3a:3e: 30:9a:6f:23:16:a9:d7:c6:ba:77:26:30:19:d8:9c: 7e:c3:2e:29:4b:dd:5d:d6:a8:3c:e2:26:ba:46:ca: 73:38:d1:5b:86:6f:dd:7a:68:57:a9:9d:87:ce:fd: d5:6b:64:aa:44:cc:4c:43:42:ec:b6:7b:8f:0f:54: a6:7e:e4:cc:bc:9b:f2:02:4c:04:d0:3b:db:e0:e7: 1a:7e:71:ca:62:eb:8d:5b:5a:62:13:56:2d:db:a1: 25:f6:cf:fc:7b:50:a9:3a:13:83:65:a5:2f:9d:f9: 6d:64:ab:61:0b:e7:02:74:0b:06:90:f5:4b:57:2d: 9c:7d:27:fc:31:06:7c:3d:c2:92:33:01:8f:b1:f3: ee:b7:4e:0f:3b:53:b5:83:e8:d2:10:fa:92:3a:c1: e2:6d:a1:1c:62:05:cf:47:c0:5c:f2:3f:6d:90:6a: 33:8a:f3:2f:17:28:c1:7a:a2:ad:8e:88:ad:ee:76: 63:67:69:a7:13:eb:89:8f:e6:2f:66:fd:e2:a7:42: f1:d6:6b:16:c0:3d:60:69:4a:11:59:fa:3c:de:31: 9f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D2:04:3A:D3:C7:C9:51:7C:7D:A2:C9:25:BD:AE:F3:F0:E2:F0:CC X509v3 Authority Key Identifier: keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d4:e8:5c:67:ed:4b:61:41:d2:5d:0b:b4:a5:5f:f5:5e:69: 7a:3e:d6:31:6b:06:76:23:15:db:b2:a9:2f:07:2c:97:37:ad: 26:82:b8:df:57:9a:34:bc:65:00:e4:c2:76:28:73:1d:df:6c: 4a:87:0e:ac:40:f9:d8:9e:01:01:16:06:95:0d:61:05:9a:82: e3:fc:83:8f:29:fc:61:4a:8d:ca:01:37:89:94:58:bf:a1:ee: 7c:c5:b1:b9:f7:14:3b:8d:c4:51:74:af:ff:5b:78:15:7d:3c: b8:57:0b:18:3f:1a:da:38:89:0b:d8:f6:a2:3a:c8:79:9c:4f: e1:91:01:64:44:95:fb:0e:09:55:5c:2e:35:4f:6f:04:6b:93: 4d:b9:e4:96:d7:fd:14:6e:b2:57:56:11:09:5a:4f:64:6f:e3: 89:39:62:19:17:d5:92:ea:3b:48:42:81:63:f9:f7:b3:47:cf: 91:1d:b2:32:ac:30:b4:f1:11:fc:fe:b8:40:af:94:f7:8c:97: 3a:2e:46:b5:6c:03:d1:fa:61:6c:3c:fe:2b:69:4f:0b:4c:4b: b3:2a:a9:64:f9:3a:74:01:fe:65:09:45:11:27:37:bf:57:7f: 95:f7:ca:71:33:c2:fd:1c:29:58:7e:ce:58:c9:3f:e4:12:5f: 68:2e:75:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDSbseRTTsNQwd5gxSPmcY5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl YWNkNDAwHhcNMjYwOTI0MDgwMTEwWhcNMjYwOTI1MDgwMTEwWjAzMTEwLwYDVQQD EygyMmQyMDQzYWQzYzdjOTUxN2M3ZGEyYzkyNWJkYWVmM2YwZTJmMGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTwGQWx1D4Vo2tEfWtuBw3E2scS4 VsDXHd73hbyg3cTjHQHAyRXSG8GMOj4wmm8jFqnXxrp3JjAZ2Jx+wy4pS91d1qg8 4ia6RspzONFbhm/demhXqZ2Hzv3Va2SqRMxMQ0LstnuPD1SmfuTMvJvyAkwE0Dvb 4OcafnHKYuuNW1piE1Yt26El9s/8e1CpOhODZaUvnfltZKthC+cCdAsGkPVLVy2c fSf8MQZ8PcKSMwGPsfPut04PO1O1g+jSEPqSOsHibaEcYgXPR8Bc8j9tkGozivMv FyjBeqKtjoit7nZjZ2mnE+uJj+YvZv3ip0Lx1msWwD1gaUoRWfo83jGfJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLSBDrTx8lRfH2iySW9rvPw4vDMMB8GA1UdIwQY MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt MTE5ZWZjYmIyMDIzLzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9ToXGft S2FB0l0LtKVf9V5pej7WMWsGdiMV27KpLwcslzetJoK431eaNLxlAOTCdihzHd9s SocOrED52J4BARYGlQ1hBZqC4/yDjyn8YUqNygE3iZRYv6HufMWxufcUO43EUXSv /1t4FX08uFcLGD8a2jiJC9j2ojrIeZxP4ZEBZESV+w4JVVwuNU9vBGuTTbnkltf9 FG6yV1YRCVpPZG/jiTliGRfVkuo7SEKBY/n3s0fPkR2yMqwwtPER/P64QK+U94yX Oi5GtWwD0fphbDz+K2lPC0xLsyqpZPk6dAH+ZQlFESc3v1d/lffKcTPC/RwpWH7O WMk/5BJfaC51vQ== -----END CERTIFICATE-----Generated at Thu Sep 24 18:24:58 2026 by rpki-client