$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: yC751QFPO7JzRE3vv3XxTgfzcrwuKKuengA9IOGXuRI= Subject key identifier: 4F:57:E4:6C:D9:8D:41:17:91:CE:B9:D2:E6:8E:E0:9B:5B:48:E8:58 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 01A0D682E7D3A24257CA364E74876B267A2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 1623 Signing time: Fri 25 Sep 2026 03:01:38 +0000 Manifest this update: Fri 25 Sep 2026 03:01:38 +0000 Manifest next update: Sat 26 Sep 2026 03:01:38 +0000 Files and hashes: 1: BK_uZd5RIdvcCcnIrkl91Qf2mFw.roa (hash: wV2RNnXCJX3V+Medw8LdpmAEbR5QwEUgTvufx7pFq14=) 2: FtL8JAR5L3QuiWjveQYYqx5Vysc.roa (hash: TDzblppwWN3R0n7X/3t6Y/QCHzmL0n6aO41HLuZVCKU=) 3: G9O4g34wmhpRqqqyNq64bnjh27k.roa (hash: lYlheaBAaMmywrolWQWx4QnBFOXnz365592aJuQe6Mw=) 4: NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa (hash: edl6dCh63hg4Y8AUvmK5tlCPTiU0Nu0TVS0oTDNYUII=) 5: XppJI7pSNx6BdFrEbdtPboTQL6o.roa (hash: Cty7u06Lt5vOCxE5CLtni9wB/17m9CZOi2zJp+IGXYM=) 6: ZmU2dSStEk_zeXSWwEBaw5tcl0Q.roa (hash: Y1sWpxD5SobS8QA6Ihwhvzg6iQQ+93Pu+DpnTFJR+xM=) 7: hHQPymz7nrurWK651cK6wH1WQB4.roa (hash: dwQ4oAHDFe0oAQKlctscRR06w5cemCjD8MkqMj9iTyk=) 8: hn8HZ87MGm21OeAakwo0L7epBvo.roa (hash: K2tDb7I5NoqsKa5/k7EGMMNhy8l68r1VCX67mnoFnXs=) 9: kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa (hash: lYivRiiWhdQqSTdJmm6RVAol+uwcwmFLCfnYj2bvGyA=) 10: th-tx_kJ7veQ1scNgs5J6K1YnW4.roa (hash: CptKWeu/KjIE3Xe0fo+dZtItTKDZJuUjeV7GErUniCg=) 11: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: A2Y/ncBjlSYOb6ggKNfhLB1OJcgC8L6VmMEzHYMPFB8=) 12: uibhPc4NbRy01honmhOVxxl-SbI.roa (hash: aerci+cgin2TuEzTcnRWk0Cjk81xvvnVy7gKs1IvnLQ=) 13: utkmbyJ1-9TI5Iy29JQnzvwfdgw.roa (hash: MQitkqvZxc85BEfsLrabuKg5Cbpd+JVUjJLsFQDLJCQ=) 14: xxR8mx-20J_lo55Rh1660v5SUI4.roa (hash: 2Y9dBCwd98Bba/rHT3QIRjMGiqefSe3zB38HBIRd3qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 21:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:82:e7:d3:a2:42:57:ca:36:4e:74:87:6b:26:7a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Sep 25 03:01:38 2026 GMT Not After : Sep 26 03:01:38 2026 GMT Subject: CN=4f57e46cd98d411791ceb9d2e68ee09b5b48e858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4d:59:a7:98:61:71:3d:f3:44:1d:83:55:d6: c6:80:59:39:f9:eb:22:7c:99:52:b4:d8:10:55:bd: 02:cf:b6:74:81:78:6e:3d:de:b2:d6:bb:c8:d3:ad: 08:c8:57:5b:d0:1a:b0:3c:81:3d:76:2c:75:d5:56: 52:22:1e:53:82:7b:f2:d0:2f:1a:d9:a5:af:61:c7: 54:8a:9b:e6:98:4c:b0:67:95:8c:65:24:7b:07:30: 22:64:ff:33:a4:41:f3:de:71:75:1c:ce:e5:d4:79: 67:8d:b8:3a:83:f8:49:c9:55:e5:db:d6:e3:9a:cb: 47:9e:82:f3:74:90:94:c1:ff:d4:bb:90:ec:0b:3d: 92:5b:d9:ea:7a:97:85:bc:f8:d1:97:47:62:dc:c6: db:96:53:bb:7f:fe:ba:c0:fd:fa:17:6a:74:17:73: 0e:31:f5:30:08:0e:4e:17:08:c1:ee:bd:6b:d4:85: a6:e7:f4:e1:75:5a:fa:be:26:7e:59:a6:3b:07:2c: b1:02:a8:70:aa:ad:4a:e3:39:51:24:93:7d:84:91: 79:3e:94:a0:15:b1:b7:cb:96:e8:6f:8d:2c:31:37: 05:a8:a8:13:42:f8:de:4a:1f:1f:d2:ff:eb:f3:2e: b5:9c:2f:23:e3:c4:9d:c8:42:43:24:cf:0c:97:c5: f9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:57:E4:6C:D9:8D:41:17:91:CE:B9:D2:E6:8E:E0:9B:5B:48:E8:58 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b8:48:4c:ed:e5:c7:66:b1:0b:17:fc:bc:09:a7:af:2f:5d: a0:3e:9f:63:46:93:b1:47:da:cb:72:bb:7b:b0:4f:b3:4b:07: 6b:92:d9:92:d4:21:2a:67:9a:5a:8e:af:58:03:43:ba:72:d0: 12:4c:95:9e:b1:a7:f5:11:42:e4:6c:ea:a9:15:1e:52:d0:31: d3:5d:6e:7d:55:aa:d3:45:50:28:d2:c2:d9:d1:66:30:91:c1: 17:78:64:2c:5c:8e:44:62:17:c3:ce:17:de:e0:00:be:0b:23: c3:b3:1e:5d:ab:27:fd:8b:a0:33:77:c1:ce:3f:13:ac:f6:86: 7e:9e:52:e0:aa:2a:51:38:97:52:70:14:0a:ad:c7:31:a5:88: 74:81:a7:dc:75:9d:6a:27:dd:ee:b4:73:d3:66:6b:98:cf:4d: 42:c8:8b:8f:22:d9:c4:db:32:f3:49:e1:fb:83:4e:eb:f2:ce: aa:08:ac:40:4e:f2:ab:5f:5e:4c:f4:1c:f9:80:65:b7:b3:3e: 83:d2:4a:96:1c:5f:eb:4c:b6:c1:c5:c3:4d:ed:59:13:8a:2f: 62:09:69:0e:2a:5f:de:37:49:7e:cd:fe:03:e7:1d:65:53:c7: 97:34:04:64:2a:f6:92:6d:77:7f:11:77:75:cf:0c:14:5d:a9: b4:a9:47:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDWgufTokJXyjZOdIdrJnosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwOTI1MDMwMTM4WhcNMjYwOTI2MDMwMTM4WjAzMTEwLwYDVQQD Eyg0ZjU3ZTQ2Y2Q5OGQ0MTE3OTFjZWI5ZDJlNjhlZTA5YjViNDhlODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU1Zp5hhcT3zRB2DVdbGgFk5+esi fJlStNgQVb0Cz7Z0gXhuPd6y1rvI060IyFdb0BqwPIE9dix11VZSIh5Tgnvy0C8a 2aWvYcdUipvmmEywZ5WMZSR7BzAiZP8zpEHz3nF1HM7l1Hlnjbg6g/hJyVXl29bj mstHnoLzdJCUwf/Uu5DsCz2SW9nqepeFvPjRl0di3MbbllO7f/66wP36F2p0F3MO MfUwCA5OFwjB7r1r1IWm5/ThdVr6viZ+WaY7ByyxAqhwqq1K4zlRJJN9hJF5PpSg FbG3y5bob40sMTcFqKgTQvjeSh8f0v/r8y61nC8j48SdyEJDJM8Ml8X5FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9X5GzZjUEXkc650uaO4JtbSOhYMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrhITO3l x2axCxf8vAmnry9doD6fY0aTsUfay3K7e7BPs0sHa5LZktQhKmeaWo6vWANDunLQ EkyVnrGn9RFC5GzqqRUeUtAx011ufVWq00VQKNLC2dFmMJHBF3hkLFyORGIXw84X 3uAAvgsjw7MeXasn/YugM3fBzj8TrPaGfp5S4KoqUTiXUnAUCq3HMaWIdIGn3HWd aifd7rRz02ZrmM9NQsiLjyLZxNsy80nh+4NO6/LOqgisQE7yq19eTPQc+YBlt7M+ g9JKlhxf60y2wcXDTe1ZE4ovYglpDipf3jdJfs3+A+cdZVPHlzQEZCr2km13fxF3 dc8MFF2ptKlHUw== -----END CERTIFICATE-----Generated at Fri Sep 25 07:44:43 2026 by rpki-client