$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json) Hash identifier: 0547fLwDz4U1RMf3cdePhxIHEvUD2dP/igzUmD0ECjQ= Subject key identifier: 1F:B1:A4:44:44:B0:63:4A:66:14:ED:F1:82:FA:6A:B3:98:7E:8D:3A Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 01A0D91773EBA143445D9277F242A04D75ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft Manifest number: 1A91 Signing time: Fri 25 Sep 2026 15:03:07 +0000 Manifest this update: Fri 25 Sep 2026 15:03:07 +0000 Manifest next update: Sat 26 Sep 2026 15:03:07 +0000 Files and hashes: 1: 20sKUViZ_Hjr1_tKwt6E16rEi4A.asa (hash: +8vZKz+2gviXypf2joFi3QZPabFG5GEATLlv5LqXS4o=) 2: CvSQt69yariNUKKDqC1XPhdiuj8.roa (hash: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4=) 3: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (hash: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME=) 4: Nc8mzlcMXDBsY7O6ihHQFG1WCgU.asa (hash: iQmoFJHZkfRHhMs5YGfVosqhKZChubT5bE16CXVlGGg=) 5: QOv9AtzM59S_WNU7KUIEWRfJl68.asa (hash: 6O0jKZ/+i/G9w5+oF5K0c5UTn7UqPYc3SNDvmBucH+4=) 6: ZwaHHkAxYbCALztUHzr9t910LSE.roa (hash: awAUeIPVKxbZycfV9eBB6aIDe26Y/5AYawVHPNK3iBw=) 7: a4kSWXHUjeJ3UXaQ-vc8USD7130.asa (hash: lbgYBLK33JoEr+PhrlEn3no20wzVFGeWMxTDLDLfyNY=) 8: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (hash: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs=) 9: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: 22npMFDTkYMUnGkq+D989xCnRTpHSlL6t8Ja+QmFBX0=) 10: rcmHaxoTWcNTxZe_mPx7kxySOCM.asa (hash: O6qjpwATHjg2d599LQuSUGaHIPpnCna32+4L4kHdkpE=) 11: s6yVUAmV4-mOF-duMQCYR1UyGIg.roa (hash: s42/lXry+QgyFMd63oGPEQ8IfqkpzCT53ph9km2DlbQ=) 12: xywW8VsvtWulmUgX-o54Ju69bE8.roa (hash: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d9:17:73:eb:a1:43:44:5d:92:77:f2:42:a0:4d:75:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Sep 25 15:03:07 2026 GMT Not After : Sep 26 15:03:07 2026 GMT Subject: CN=1fb1a44444b0634a6614edf182fa6ab3987e8d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:ba:70:34:65:c2:a7:b2:8e:96:75:be:5e: 23:bb:65:6c:e3:6a:50:6d:72:cb:af:46:f3:9a:5a: a2:86:43:6b:55:e0:32:17:b2:1f:b6:f7:15:95:63: a1:dc:06:29:b3:4a:84:88:59:eb:34:99:ee:66:89: 39:29:c6:1d:3e:c7:5e:87:cf:b5:cf:53:82:0b:39: bb:64:40:c4:b4:0e:96:27:a2:16:37:0b:1b:b7:2f: 5b:34:b4:25:99:99:cf:91:27:c4:3e:6a:33:5b:68: bf:f3:73:d0:ca:37:f6:ea:c9:29:bf:17:ed:f9:17: 7a:78:97:8b:0b:18:c6:08:a0:25:aa:92:cc:af:56: f3:78:1b:48:27:98:83:5c:cb:25:d4:23:cb:9f:bd: 94:1f:c9:71:29:10:ac:a7:c1:41:9d:ef:fc:c4:db: 80:14:3d:0a:4d:b2:9c:bd:06:46:a3:96:95:76:03: 2f:b6:5a:1f:35:ca:39:b5:27:cd:a7:da:d5:15:bd: d3:aa:67:4f:fc:52:21:06:37:60:f9:f0:2c:9d:50: 5f:d0:f5:ce:a8:2f:83:12:34:61:a5:7e:49:bd:f1: 5d:0f:a9:b5:8f:78:2f:74:72:71:7e:42:d5:0d:7e: 29:54:84:72:ea:46:0a:8a:8c:b2:4c:3d:35:36:ac: c2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B1:A4:44:44:B0:63:4A:66:14:ED:F1:82:FA:6A:B3:98:7E:8D:3A X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ae:67:42:38:cb:09:bb:d3:81:ac:5d:62:9e:61:0e:d6:b2: 3f:24:31:5e:02:15:be:65:9d:1e:2e:96:b1:9d:ee:c3:22:aa: 39:bd:ab:a3:5d:0d:2a:0a:d3:9b:17:73:03:1e:bd:bb:50:94: 54:ba:01:fa:2b:e8:27:12:dd:0d:8b:35:9e:af:a0:02:1d:dd: 7a:7a:c9:56:41:58:c3:d5:b6:5f:28:d1:71:42:ea:c3:fc:2d: 61:44:51:62:1b:28:9b:67:6c:92:d2:35:d4:99:4b:cd:e7:d7: 17:19:a1:c3:6e:9a:5b:34:26:c1:a3:a4:8f:81:dd:c8:31:6d: aa:68:72:e1:62:58:ca:2b:3a:ac:8c:8f:a0:24:5e:4b:a9:39: cb:f5:a0:0f:1b:ea:29:38:14:c2:5a:91:51:66:eb:8d:ff:f6: a9:3f:88:fd:5c:30:81:09:8b:dd:67:d7:17:ff:a6:bd:6c:c4: eb:a4:8b:97:a1:c0:24:45:01:f4:49:d2:fc:99:f2:ac:ac:14: f7:26:11:1a:17:65:bd:de:e8:5a:16:70:91:61:9c:52:4b:4c: ac:ca:9c:61:d6:3a:6e:21:6f:cc:79:09:8e:c8:91:1c:2c:b9: a1:f6:a5:58:1a:62:94:f0:55:f2:62:c1:2d:2b:71:f8:3b:b0: d9:f3:fa:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDZF3ProUNEXZJ38kKgTXXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYwOTI1MTUwMzA3WhcNMjYwOTI2MTUwMzA3WjAzMTEwLwYDVQQD EygxZmIxYTQ0NDQ0YjA2MzRhNjYxNGVkZjE4MmZhNmFiMzk4N2U4ZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYC6cDRlwqeyjpZ1vl4ju2Vs42pQ bXLLr0bzmlqihkNrVeAyF7IftvcVlWOh3AYps0qEiFnrNJnuZok5KcYdPsdeh8+1 z1OCCzm7ZEDEtA6WJ6IWNwsbty9bNLQlmZnPkSfEPmozW2i/83PQyjf26skpvxft +Rd6eJeLCxjGCKAlqpLMr1bzeBtIJ5iDXMsl1CPLn72UH8lxKRCsp8FBne/8xNuA FD0KTbKcvQZGo5aVdgMvtlofNco5tSfNp9rVFb3TqmdP/FIhBjdg+fAsnVBf0PXO qC+DEjRhpX5JvfFdD6m1j3gvdHJxfkLVDX4pVIRy6kYKioyyTD01NqzCzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+xpEREsGNKZhTt8YL6arOYfo06MB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD65nQjjL CbvTgaxdYp5hDtayPyQxXgIVvmWdHi6WsZ3uwyKqOb2ro10NKgrTmxdzAx69u1CU VLoB+ivoJxLdDYs1nq+gAh3denrJVkFYw9W2XyjRcULqw/wtYURRYhsom2dsktI1 1JlLzefXFxmhw26aWzQmwaOkj4HdyDFtqmhy4WJYyis6rIyPoCReS6k5y/WgDxvq KTgUwlqRUWbrjf/2qT+I/VwwgQmL3WfXF/+mvWzE66SLl6HAJEUB9EnS/JnyrKwU 9yYRGhdlvd7oWhZwkWGcUktMrMqcYdY6biFvzHkJjsiRHCy5ofalWBpilPBV8mLB LStx+Duw2fP6WQ== -----END CERTIFICATE-----Generated at Fri Sep 25 19:07:26 2026 by rpki-client