$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json) Hash identifier: F1l5KAPi2G+SdkImftBxGerbxT3QKONEvYpWgrpc1Ts= Subject key identifier: C6:0D:D0:44:28:B5:79:0C:C3:7F:2C:7D:56:C4:94:2F:2B:FA:78:46 Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 01A1DC828485504656992F716E86AB4EA0DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft Manifest number: 1B18 Signing time: Sun 15 Nov 2026 00:01:43 +0000 Manifest this update: Sun 15 Nov 2026 00:01:43 +0000 Manifest next update: Mon 16 Nov 2026 00:01:43 +0000 Files and hashes: 1: 20sKUViZ_Hjr1_tKwt6E16rEi4A.asa (hash: +8vZKz+2gviXypf2joFi3QZPabFG5GEATLlv5LqXS4o=) 2: CvSQt69yariNUKKDqC1XPhdiuj8.roa (hash: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4=) 3: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (hash: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME=) 4: QOv9AtzM59S_WNU7KUIEWRfJl68.asa (hash: 6O0jKZ/+i/G9w5+oF5K0c5UTn7UqPYc3SNDvmBucH+4=) 5: a4kSWXHUjeJ3UXaQ-vc8USD7130.asa (hash: lbgYBLK33JoEr+PhrlEn3no20wzVFGeWMxTDLDLfyNY=) 6: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (hash: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs=) 7: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: 1SiVgJzsDuoP+9Hpq1v4eq5jZZ0SLabzt9WeMEMUJOY=) 8: lzH2Yov3fiWBugwfQkPr-CbQzZA.roa (hash: SIbu8bqMFOSObFqDqe0pz8FZIm/OkR2EQDfzdHEYrkM=) 9: rcmHaxoTWcNTxZe_mPx7kxySOCM.asa (hash: O6qjpwATHjg2d599LQuSUGaHIPpnCna32+4L4kHdkpE=) 10: s6yVUAmV4-mOF-duMQCYR1UyGIg.roa (hash: s42/lXry+QgyFMd63oGPEQ8IfqkpzCT53ph9km2DlbQ=) 11: xywW8VsvtWulmUgX-o54Ju69bE8.roa (hash: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64=) 12: ySYmxIeXbtlQ0EKDQns7hqKSE-s.asa (hash: blxcwlk8lzgMxwUTUWlxHQoF9BtoCE8VEQCb2+IlMjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 00:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:82:84:85:50:46:56:99:2f:71:6e:86:ab:4e:a0:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Nov 15 00:01:43 2026 GMT Not After : Nov 16 00:01:43 2026 GMT Subject: CN=c60dd04428b5790cc37f2c7d56c4942f2bfa7846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:fb:e7:2b:fd:3e:c2:3f:b6:01:b1:6f:1f: 15:0c:86:2d:d3:d8:1c:21:5b:99:bc:68:61:73:15: 0d:ad:3c:c5:55:57:81:5e:dd:d7:d3:4a:75:f9:33: 13:a3:3b:69:a1:54:4d:bc:d3:96:14:7f:67:2e:33: 51:36:c3:99:36:6e:75:2e:72:b0:a2:6c:92:8c:57: ac:86:3a:0e:38:05:39:56:89:f9:e8:35:9e:d5:a3: d6:75:f0:d5:35:2c:f0:d3:b7:fd:27:19:3c:81:2b: 31:38:b6:e0:31:32:65:5a:f2:c8:5f:69:f6:f8:8d: e7:10:66:26:a6:bd:3c:54:37:1c:0f:a8:6c:ad:20: 6b:b7:cf:e6:0a:ce:3c:d8:1e:48:46:f0:52:b8:31: a6:9a:79:c6:6f:a5:56:0d:59:ed:e9:38:e4:73:e6: 8d:f8:5f:a9:4f:d1:5f:71:03:ac:3b:93:b4:0e:b1: a3:87:74:a0:d6:04:7d:99:b0:61:68:07:40:16:b5: 7a:23:08:88:4f:97:64:f8:b9:aa:ed:ef:38:a5:65: b9:ca:09:7c:dd:d9:82:8c:54:89:b5:2f:a0:94:fc: df:60:91:51:b7:07:69:e2:e2:e9:ae:18:46:4b:1d: f4:4e:fb:10:23:6a:3b:26:56:7a:a9:94:1e:14:b4: fe:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0D:D0:44:28:B5:79:0C:C3:7F:2C:7D:56:C4:94:2F:2B:FA:78:46 X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e8:60:ce:b9:11:29:03:8a:ee:1e:78:e3:7f:19:32:09:cd: 91:a6:c2:fd:5c:6c:77:a6:1a:ac:27:85:e1:57:1b:21:73:80: c2:0e:b8:70:83:17:30:9a:d3:ed:13:88:77:5a:d9:08:5e:4b: 66:15:b3:b1:0d:c7:9a:e6:c0:d6:58:b9:2c:15:a5:74:c0:ac: 2f:eb:97:5e:5f:46:c2:6b:98:96:b3:16:bc:d7:2b:a7:b0:73: 87:7a:68:2c:b8:6a:ba:42:2f:41:3f:53:2d:04:59:b9:2e:ac: 82:fa:3a:bc:87:9c:ab:1e:b5:fa:f0:1f:56:bd:cb:8c:96:f6: 20:4d:08:f5:87:79:8a:9e:39:f7:76:37:7e:7b:9c:e6:80:08: 0e:ef:b5:0c:83:f1:8e:58:55:cf:0e:aa:b5:b3:bd:3c:a5:3b: e4:48:c9:77:8b:48:5e:f5:f2:4d:99:49:18:22:c2:70:7f:47: ef:6b:20:1b:0c:71:d0:fb:af:ba:1b:5f:2f:70:35:f2:f5:25: 7a:18:51:2f:78:df:58:98:c2:66:57:a3:c5:ba:5d:99:75:73: da:0a:d0:0d:82:52:a8:23:d0:24:94:ad:c1:65:7f:99:01:82: df:3b:ca:b6:52:34:68:78:fd:78:c7:a4:e6:9c:33:17:ab:b7: 71:45:0f:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHcgoSFUEZWmS9xboarTqDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYxMTE1MDAwMTQzWhcNMjYxMTE2MDAwMTQzWjAzMTEwLwYDVQQD EyhjNjBkZDA0NDI4YjU3OTBjYzM3ZjJjN2Q1NmM0OTQyZjJiZmE3ODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucz75yv9PsI/tgGxbx8VDIYt09gc IVuZvGhhcxUNrTzFVVeBXt3X00p1+TMToztpoVRNvNOWFH9nLjNRNsOZNm51LnKw omySjFeshjoOOAU5Von56DWe1aPWdfDVNSzw07f9Jxk8gSsxOLbgMTJlWvLIX2n2 +I3nEGYmpr08VDccD6hsrSBrt8/mCs482B5IRvBSuDGmmnnGb6VWDVnt6Tjkc+aN +F+pT9FfcQOsO5O0DrGjh3Sg1gR9mbBhaAdAFrV6IwiIT5dk+Lmq7e84pWW5ygl8 3dmCjFSJtS+glPzfYJFRtwdp4uLprhhGSx30TvsQI2o7JlZ6qZQeFLT+DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYN0EQotXkMw38sfVbElC8r+nhGMB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+hgzrkR KQOK7h54438ZMgnNkabC/Vxsd6YarCeF4VcbIXOAwg64cIMXMJrT7ROId1rZCF5L ZhWzsQ3HmubA1li5LBWldMCsL+uXXl9GwmuYlrMWvNcrp7Bzh3poLLhqukIvQT9T LQRZuS6sgvo6vIecqx61+vAfVr3LjJb2IE0I9Yd5ip4593Y3fnuc5oAIDu+1DIPx jlhVzw6qtbO9PKU75EjJd4tIXvXyTZlJGCLCcH9H72sgGwxx0PuvuhtfL3A18vUl ehhRL3jfWJjCZlejxbpdmXVz2grQDYJSqCPQJJStwWV/mQGC3zvKtlI0aHj9eMek 5pwzF6u3cUUPBQ== -----END CERTIFICATE-----Generated at Sun Nov 15 10:29:59 2026 by rpki-client