$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: LQ0cv71vcF+pokNLzdXoJgDa7MwGvoIbbd5zURf1Yu0= Subject key identifier: EF:BB:D8:0B:45:ED:01:BC:56:F8:54:92:F1:A1:90:68:6B:BA:C0:9B Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 01A0CE5A79D2D0550C30AC0753B0675CA639 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: 0258 Signing time: Wed 23 Sep 2026 13:00:30 +0000 Manifest this update: Wed 23 Sep 2026 13:00:30 +0000 Manifest next update: Thu 24 Sep 2026 13:00:30 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: o5Gpthl9/K5wE8nUART3fvikRPSn4taFLXmpZgouZb0=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ce:5a:79:d2:d0:55:0c:30:ac:07:53:b0:67:5c:a6:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: Sep 23 13:00:30 2026 GMT Not After : Sep 24 13:00:30 2026 GMT Subject: CN=efbbd80b45ed01bc56f85492f1a190686bbac09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:7e:f2:7b:d1:bd:32:81:22:9f:a9:92:67: f9:21:77:64:98:45:27:61:d5:ff:e7:c6:a9:54:d3: 5d:4b:93:fb:92:cb:51:0e:68:b6:c0:36:16:91:c1: 80:24:56:77:06:b3:7d:ce:b9:bf:e1:cc:29:19:39: b9:cc:75:7c:a8:d2:17:2a:cf:2d:d2:99:64:38:02: 8a:27:69:e2:24:78:dc:75:06:47:91:7b:e7:c2:4a: 1a:30:5d:92:61:57:fc:ba:1d:71:5f:da:1d:07:96: ae:58:af:99:e4:21:89:ea:a0:6a:4f:90:31:aa:6b: 34:c2:1c:82:e3:a8:20:6e:5e:af:81:ae:44:98:41: ea:6e:f2:e5:92:68:8c:20:09:6a:b2:36:16:83:7f: c6:c4:38:89:a1:35:8a:e8:2c:a3:a3:46:7f:26:99: e1:fa:2b:30:16:91:9f:9b:c9:1c:08:07:2a:e2:df: 6e:f3:f1:ef:3c:b9:33:76:7e:9c:dd:83:50:05:e1: 94:f5:13:12:ce:39:fb:9a:90:b0:6f:b5:ad:9e:0d: 50:07:4e:52:b0:c7:c6:54:6b:fc:26:ff:46:8b:bb: 6b:88:ef:3e:a0:02:bd:0c:43:fa:01:dc:f5:85:63: 8b:d4:ae:9c:06:eb:30:de:4b:1c:78:8f:1b:f5:15: 84:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BB:D8:0B:45:ED:01:BC:56:F8:54:92:F1:A1:90:68:6B:BA:C0:9B X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:8f:74:c3:6a:91:81:2f:6e:b4:77:57:23:43:f2:b4:84:59: 98:f5:5f:61:99:b1:41:fa:f7:14:97:a9:dc:65:53:84:ac:20: 2d:44:bd:23:48:52:d7:6f:c2:b0:5d:49:65:f6:85:93:13:2c: 3e:08:9d:e9:cf:9f:fa:25:1e:5f:a9:bd:12:a5:c4:ac:1e:12: ed:0b:ca:44:04:59:b3:01:af:8a:aa:32:72:2a:e2:79:c2:84: f7:d6:7c:53:97:82:79:e9:f9:ab:9f:ed:48:17:c7:cf:c1:df: 79:bc:23:61:b7:7a:c2:8c:21:47:7a:29:fe:7c:be:cc:f1:fb: 2d:c0:e0:d5:02:51:85:a3:00:5d:00:d3:a3:34:1a:bd:dc:6a: 79:e9:c6:f4:54:7c:f3:5f:ee:1f:a9:77:45:f4:4b:af:1e:27: f3:74:e8:8f:92:19:96:2b:98:9c:bf:f2:02:52:81:ae:47:dd: 57:13:97:0e:4b:89:fb:5b:67:a3:34:72:05:0d:d0:e3:46:c3: 59:73:18:fc:88:aa:ae:3e:66:14:dd:89:65:36:fc:ce:c4:28: 58:36:68:cd:a8:93:ee:41:73:c2:b5:3c:d5:7d:2c:a0:7c:90: 27:40:24:8a:ed:a4:fb:26:0e:12:28:fd:d3:d1:bc:b6:2f:ac: 97:b3:e2:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDOWnnS0FUMMKwHU7BnXKY5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYwOTIzMTMwMDMwWhcNMjYwOTI0MTMwMDMwWjAzMTEwLwYDVQQD EyhlZmJiZDgwYjQ1ZWQwMWJjNTZmODU0OTJmMWExOTA2ODZiYmFjMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso5+8nvRvTKBIp+pkmf5IXdkmEUn YdX/58apVNNdS5P7kstRDmi2wDYWkcGAJFZ3BrN9zrm/4cwpGTm5zHV8qNIXKs8t 0plkOAKKJ2niJHjcdQZHkXvnwkoaMF2SYVf8uh1xX9odB5auWK+Z5CGJ6qBqT5Ax qms0whyC46ggbl6vga5EmEHqbvLlkmiMIAlqsjYWg3/GxDiJoTWK6Cyjo0Z/Jpnh +iswFpGfm8kcCAcq4t9u8/HvPLkzdn6c3YNQBeGU9RMSzjn7mpCwb7Wtng1QB05S sMfGVGv8Jv9Gi7triO8+oAK9DEP6Adz1hWOL1K6cBusw3ksceI8b9RWEmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+72AtF7QG8VvhUkvGhkGhrusCbMB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKY90w2qR gS9utHdXI0PytIRZmPVfYZmxQfr3FJep3GVThKwgLUS9I0hS12/CsF1JZfaFkxMs Pgid6c+f+iUeX6m9EqXErB4S7QvKRARZswGviqoyciriecKE99Z8U5eCeen5q5/t SBfHz8HfebwjYbd6wowhR3op/ny+zPH7LcDg1QJRhaMAXQDTozQavdxqeenG9FR8 81/uH6l3RfRLrx4n83Toj5IZliuYnL/yAlKBrkfdVxOXDkuJ+1tnozRyBQ3Q40bD WXMY/Iiqrj5mFN2JZTb8zsQoWDZozaiT7kFzwrU81X0soHyQJ0Akiu2k+yYOEij9 09G8ti+sl7PizQ== -----END CERTIFICATE-----Generated at Wed Sep 23 23:49:00 2026 by rpki-client