$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: E1jfImSSVeShdsI91eKaqUTKd5jRESWRXX1oaSvo3RY= Subject key identifier: 0B:70:88:61:24:18:61:69:11:32:91:5F:C2:A1:85:C0:31:0F:C6:2F Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 01A0E098F28673A917F02BFC50FB3D3EC972 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 140F Signing time: Sun 27 Sep 2026 02:01:54 +0000 Manifest this update: Sun 27 Sep 2026 02:01:54 +0000 Manifest next update: Mon 28 Sep 2026 02:01:54 +0000 Files and hashes: 1: 1zdYV17WT7I3TXSQzHhVO7RGIDE.roa (hash: ic+QDZW/iaOfXxz3MlR5QNaF9pen8QrjZ3oMD7NWMNg=) 2: 6KeP-P2YiDRBc8Akhy6ituIKntI.roa (hash: QPV9vkggM21uC76MAD8nuqdtIbxQKxxWYl0nwXgymo4=) 3: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=) 4: E2xtWZV4AV3kjahi3ya1WwpYjn8.roa (hash: eiCt2qdwFMu87Um/GEdb7fiVQB0BZPI+XYBSTsuRYnE=) 5: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=) 6: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=) 7: Zj4CimCazX5aQkiTy0v6Bth5jY0.roa (hash: LI2qWr9NKIdpnEssjh+tl7eWkcbWzEM25rITA+Kd1d0=) 8: Zl7668QzqgpWXy6sh2FJjPCuQUA.roa (hash: 2zmfb9kNRpLa+/F5r/g7AhSNh6Z8kYBICxLEIcI8yZM=) 9: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=) 10: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=) 11: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: 6xV/Xqejd6lGR7f9mjz13iYCXnEtJU5ZeF1vbURO6RY=) 12: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 19:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e0:98:f2:86:73:a9:17:f0:2b:fc:50:fb:3d:3e:c9:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Sep 27 02:01:54 2026 GMT Not After : Sep 28 02:01:54 2026 GMT Subject: CN=0b708861241861691132915fc2a185c0310fc62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:35:f6:1d:76:c0:04:89:bb:df:9c:5b:34: 61:03:64:c4:64:e3:70:a9:52:26:a5:63:1b:bc:9f: de:01:3c:22:74:58:9e:9c:e2:8e:ca:15:56:17:6f: b1:56:7e:da:6e:7e:85:fe:27:3c:54:de:f1:46:14: 35:e3:91:30:02:44:27:71:41:dc:ac:4a:8a:bf:ea: 79:70:bf:e4:7f:08:8d:9b:ed:2c:f7:d2:0d:6a:5a: 7d:d2:0e:e5:2a:5f:2e:9c:6a:cf:99:ac:c9:43:2d: 60:f9:81:80:07:9e:67:7c:c6:d7:fc:df:81:ca:3d: d4:90:25:b7:c6:d9:2d:6b:50:fd:14:6c:d3:5c:0a: ed:e1:ba:71:96:c1:57:fa:2d:7d:16:39:e2:9f:51: ff:0f:16:d8:af:a3:b3:b4:67:50:a0:bc:43:e9:71: 29:72:ba:53:02:2b:3f:ad:12:e7:d7:af:d1:27:34: 39:67:a2:d8:90:af:2e:f8:9c:e3:cb:9e:60:e3:4b: ba:c5:a8:11:5e:c9:a0:c7:cd:6a:39:a0:02:76:1a: 14:c3:b1:aa:02:cc:7b:55:a4:d4:bb:e6:e6:27:6b: f2:1c:29:28:bc:4c:ef:e9:1d:81:4d:d2:23:22:a2: ca:e5:fe:f5:93:d5:d5:25:ac:e6:2c:bb:2f:33:6a: 8e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:70:88:61:24:18:61:69:11:32:91:5F:C2:A1:85:C0:31:0F:C6:2F X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:0e:e2:7d:29:5f:41:dc:6b:85:71:41:c4:54:88:f7:33:b7: 96:00:66:e7:1b:47:ba:da:38:3f:62:0e:c7:68:a3:a3:a4:dd: a6:f4:30:5d:cf:59:8c:16:c9:70:f1:6c:e7:0b:19:11:b6:45: 91:91:3f:69:a8:58:af:7b:9c:46:39:bc:a6:98:c4:5a:19:e3: 1c:65:af:ee:56:f3:90:31:d0:7a:d9:3b:22:4a:01:20:4a:55: ee:4f:f3:b7:c3:fa:6f:7a:c3:49:c8:15:93:16:5a:e5:54:02: 54:77:35:db:68:11:da:5f:16:8e:01:f4:cf:5e:d7:36:be:e1: d4:14:5f:a1:90:21:19:ff:80:39:4e:ae:45:a5:29:39:26:40: 57:d8:44:d2:df:2e:d0:77:3c:fb:88:a0:0f:94:f2:a3:0b:c5: 61:3d:09:3a:71:99:73:9a:bc:e9:b0:c2:81:bf:48:e8:78:f0: 06:04:62:85:5e:7b:99:88:c2:79:cf:6b:ea:ad:08:d1:b7:4d: d6:a2:c9:58:c9:30:af:39:a8:d1:db:2c:d2:1a:5d:30:0e:eb: 7d:92:85:48:12:d9:ea:60:48:55:11:d9:b6:25:b1:01:a6:4d: 83:97:23:14:25:09:d8:43:50:f7:af:5d:98:ee:2c:79:24:95: b0:b6:36:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDgmPKGc6kX8Cv8UPs9PslyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYwOTI3MDIwMTU0WhcNMjYwOTI4MDIwMTU0WjAzMTEwLwYDVQQD EygwYjcwODg2MTI0MTg2MTY5MTEzMjkxNWZjMmExODVjMDMxMGZjNjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQo19h12wASJu9+cWzRhA2TEZONw qVImpWMbvJ/eATwidFienOKOyhVWF2+xVn7abn6F/ic8VN7xRhQ145EwAkQncUHc rEqKv+p5cL/kfwiNm+0s99INalp90g7lKl8unGrPmazJQy1g+YGAB55nfMbX/N+B yj3UkCW3xtkta1D9FGzTXArt4bpxlsFX+i19Fjnin1H/DxbYr6OztGdQoLxD6XEp crpTAis/rRLn16/RJzQ5Z6LYkK8u+Jzjy55g40u6xagRXsmgx81qOaACdhoUw7Gq Asx7VaTUu+bmJ2vyHCkovEzv6R2BTdIjIqLK5f71k9XVJazmLLsvM2qOyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtwiGEkGGFpETKRX8KhhcAxD8YvMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgg7ifSlf QdxrhXFBxFSI9zO3lgBm5xtHuto4P2IOx2ijo6TdpvQwXc9ZjBbJcPFs5wsZEbZF kZE/aahYr3ucRjm8ppjEWhnjHGWv7lbzkDHQetk7IkoBIEpV7k/zt8P6b3rDScgV kxZa5VQCVHc122gR2l8WjgH0z17XNr7h1BRfoZAhGf+AOU6uRaUpOSZAV9hE0t8u 0Hc8+4igD5TyowvFYT0JOnGZc5q86bDCgb9I6HjwBgRihV57mYjCec9r6q0I0bdN 1qLJWMkwrzmo0dss0hpdMA7rfZKFSBLZ6mBIVRHZtiWxAaZNg5cjFCUJ2ENQ969d mO4seSSVsLY2Cg== -----END CERTIFICATE-----Generated at Sun Sep 27 05:51:19 2026 by rpki-client