$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: 2K15ziu7ErMorkXoYG9p0bQkj/LVICHhbXLiRZ+XG2c= Subject key identifier: 8F:39:CA:E5:D4:86:12:5C:A1:9C:1D:63:23:D6:C0:20:E2:33:21:CF Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 01A1DACAB700A321B77260CED8E83AE6C63F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: 02E3 Signing time: Sat 14 Nov 2026 16:01:20 +0000 Manifest this update: Sat 14 Nov 2026 16:01:20 +0000 Manifest next update: Sun 15 Nov 2026 16:01:20 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: f+lcQEC0D8rfAZdkQD6AIlV/NvQM2CKWndVdMixcacQ=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:da:ca:b7:00:a3:21:b7:72:60:ce:d8:e8:3a:e6:c6:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: Nov 14 16:01:20 2026 GMT Not After : Nov 15 16:01:20 2026 GMT Subject: CN=8f39cae5d486125ca19c1d6323d6c020e23321cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cc:ef:ea:2a:43:b2:be:62:9c:cc:5c:38:69: 3f:19:1e:43:59:9c:0e:a9:15:8c:48:b1:a9:cb:a9: 75:cb:e2:46:f8:8e:37:59:e6:bf:14:9d:dc:65:0c: 69:29:1b:b1:25:89:54:b1:11:5c:35:8c:cb:d4:57: 5f:79:7c:ae:c7:b7:98:a8:b0:38:2c:43:3a:43:76: 6f:9a:b1:f8:b7:a5:71:5a:ba:ee:79:9e:1f:9c:c5: fe:0b:1a:e4:ff:94:1f:9a:fe:e3:1c:05:58:4b:d8: 67:77:b5:99:bb:5d:67:4e:a5:cc:84:23:22:36:5c: 28:22:81:f1:e1:2c:cb:12:ba:7a:9e:68:d9:42:42: 29:7a:96:7e:c7:d5:30:6d:64:99:1b:fa:e1:aa:ae: dd:a1:e6:de:f9:26:51:de:41:19:32:8b:8f:6d:bb: 6e:99:7a:7a:53:89:76:9f:39:09:04:92:a9:94:25: a3:15:66:d6:dd:15:cc:df:d5:52:11:5c:41:0d:ef: 83:8c:36:19:4c:aa:e7:5d:a4:4d:d5:1f:51:03:e7: 30:df:67:64:d3:09:1c:16:9c:bb:6b:2a:54:08:f0: c9:3c:be:f8:92:3e:98:f3:27:92:b9:38:5a:44:d1: cf:33:9d:73:79:15:e6:d5:29:27:03:34:8d:0a:32: e1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:39:CA:E5:D4:86:12:5C:A1:9C:1D:63:23:D6:C0:20:E2:33:21:CF X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:33:bc:eb:9b:8f:6d:dc:7e:b6:b4:fe:de:e0:86:1c:c7:e2: 86:06:25:d8:ac:fe:fc:77:6d:bb:fc:4e:e7:81:bc:c4:84:4c: 81:c9:f1:ee:c1:a6:e5:1b:59:d3:fe:a6:17:10:02:d7:ef:29: e9:85:5e:be:2e:9b:1a:3f:4b:8b:47:f2:d1:f5:15:56:fd:5d: b7:c5:98:ac:16:1c:50:98:38:97:4c:2a:43:7e:45:19:87:df: ba:62:2c:dd:68:1f:b2:24:73:b4:65:e8:60:f3:8c:83:73:24: e0:2d:81:2c:d3:a7:5c:81:93:74:6b:9b:76:88:8c:cb:54:5a: de:4f:c7:9b:6e:e9:a8:cc:35:68:c7:c2:34:49:53:da:57:2e: 6a:10:d3:01:c1:af:fb:f4:e7:87:83:68:ae:5c:82:7c:32:a7: a7:99:02:5d:f0:9e:ee:74:e1:4c:1a:05:53:da:c6:74:9c:f1: 45:4d:82:3e:5e:a8:bc:98:05:9e:2d:2e:ab:3f:c3:5f:61:44: 84:7b:1e:e6:9d:90:dd:6c:bc:e6:a1:27:79:0e:0c:e0:3e:4e: 55:13:51:1a:77:8e:bd:30:36:d7:7b:bd:38:bc:cb:00:21:e2: e3:6b:61:c4:ed:16:e6:a7:75:f3:61:ac:be:89:0f:ae:4a:eb: 8e:6d:81:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHayrcAoyG3cmDO2Og65sY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYxMTE0MTYwMTIwWhcNMjYxMTE1MTYwMTIwWjAzMTEwLwYDVQQD Eyg4ZjM5Y2FlNWQ0ODYxMjVjYTE5YzFkNjMyM2Q2YzAyMGUyMzMyMWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMzv6ipDsr5inMxcOGk/GR5DWZwO qRWMSLGpy6l1y+JG+I43Wea/FJ3cZQxpKRuxJYlUsRFcNYzL1FdfeXyux7eYqLA4 LEM6Q3ZvmrH4t6VxWrrueZ4fnMX+Cxrk/5Qfmv7jHAVYS9hnd7WZu11nTqXMhCMi NlwoIoHx4SzLErp6nmjZQkIpepZ+x9UwbWSZG/rhqq7doebe+SZR3kEZMouPbbtu mXp6U4l2nzkJBJKplCWjFWbW3RXM39VSEVxBDe+DjDYZTKrnXaRN1R9RA+cw32dk 0wkcFpy7aypUCPDJPL74kj6Y8yeSuThaRNHPM51zeRXm1SknAzSNCjLhHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI85yuXUhhJcoZwdYyPWwCDiMyHPMB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDO865uP bdx+trT+3uCGHMfihgYl2Kz+/Hdtu/xO54G8xIRMgcnx7sGm5RtZ0/6mFxAC1+8p 6YVevi6bGj9Li0fy0fUVVv1dt8WYrBYcUJg4l0wqQ35FGYffumIs3WgfsiRztGXo YPOMg3Mk4C2BLNOnXIGTdGubdoiMy1Ra3k/Hm27pqMw1aMfCNElT2lcuahDTAcGv +/Tnh4NorlyCfDKnp5kCXfCe7nThTBoFU9rGdJzxRU2CPl6ovJgFni0uqz/DX2FE hHse5p2Q3Wy85qEneQ4M4D5OVRNRGneOvTA213u9OLzLACHi42thxO0W5qd182Gs vokPrkrrjm2B7A== -----END CERTIFICATE-----Generated at Sat Nov 14 21:37:18 2026 by rpki-client