$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft File: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft (raw, json) Hash identifier: +2/0COCzQwscEcZzO1r3rreM5sU1CTnrPCLDGgKWw+0= Subject key identifier: 10:75:B6:25:FE:35:0B:4B:F2:F5:7C:9A:F8:BF:DB:E8:FE:1D:94:79 Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1 Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1 Certificate serial: 019FA7BE0971699D320E59945D0EF18C6C31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft Manifest number: 01BC Signing time: Tue 28 Jul 2026 08:01:16 +0000 Manifest this update: Tue 28 Jul 2026 08:01:16 +0000 Manifest next update: Wed 29 Jul 2026 08:01:16 +0000 Files and hashes: 1: 0PwBP1m5V8tHPFCHGGYOau0rRTc.roa (hash: M0W/FLJbKezFVRY+boZRSGO4f4RhltYple/V23X0j4c=) 2: 1vK1T7KdFH0hBpOuHuKe8W_luZE.roa (hash: qhZOYXpVTc+RHC0IfCFs2RzEIVYZAgoD6YvTFLHwFmE=) 3: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl (hash: bbRdGAl6y4Or/WmmPVd7Dyv/OoEyFC6PPtOLllGEpec=) 4: JcePCXWu8_9ZZzjxfVygKM8dWzw.roa (hash: 0S4YgLpuoSBRqOUxV6YpZdqEiuMF4cz82gQj2otpNQw=) 5: Nd6V0QCloRDIZfwDcQtVL1w6Z0A.roa (hash: TIjs2IbFM1v00nTvmxBW2uHZechx9jNZhQSCyvBAeP8=) 6: O9sJ-_TKMq6bS7__E1UX2XB1imA.roa (hash: +Z6Yn/3PglFToHJ9MMw/pkkVUwEYwsRd5WZO7o88I9I=) 7: QEGryiURhVI85Y_iwFPpO1kjb3E.roa (hash: f7QZn8PJdOvgT/DCDoEpmb1SfJG64+IFdudonB3DpJU=) 8: S64PRp6HfgfeBA5dqF_nm378oSE.roa (hash: KH+IlbpUNkPXeoQclXeI5i/KLaVnfhqbd5izf4u4qTc=) 9: SHnHAD4XActufnWbDbBuCezR5sk.roa (hash: nenlz/3VAG7POjOi6mcs6RNeMaF2/86fDvCTf+cSRc4=) 10: VTvDdxCNdn_BPeZovGaO3zvHn-c.roa (hash: /82kfcvdmxFyaaXRLhtB6elmf3XA4bQBsOc05JD7WPw=) 11: XZAVpeao-MzWMM0T1IBuo6mJOhw.roa (hash: 4OhzlwI1uDhgkruwa46Ix7LBdf/mbvESkAg3CQYlmdQ=) 12: bTLlcnL0Fm_nCJarfemQWZlQvug.asa (hash: +U6OavydfvrqqdI9vdtdZM6LAnVLXxOVl7v9NGcpnyo=) 13: fYhnGLcy2_Ou27KADH18mycTzz4.roa (hash: sP66OdJ/+I0oQxB3kcnMaYSOI2OOAjekthsNq69mxkE=) 14: g9eBBErf7cGntKTfm3PnpI6Ysa8.roa (hash: L1Y5INt4k++fXqtaolFcZdxOvA8W927R6H65T4L/Fcg=) 15: vSXSp5A3lM38ZHU363V73iY2sOY.roa (hash: OEc0FstKUDyge4yjj89lJISWQxLtMasQvdcX8uQFwbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 07:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a7:be:09:71:69:9d:32:0e:59:94:5d:0e:f1:8c:6c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1 Validity Not Before: Jul 28 08:01:16 2026 GMT Not After : Jul 29 08:01:16 2026 GMT Subject: CN=1075b625fe350b4bf2f57c9af8bfdbe8fe1d9479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:07:ec:1b:cb:c3:f9:a5:d5:f4:ed:e5:9d:3a: 4d:d7:8b:3b:2f:ff:03:d4:e4:b8:b3:ef:18:c5:99: 10:04:20:ae:2e:56:69:47:50:c1:b3:48:47:7b:d4: 70:35:91:07:8d:52:12:ec:c8:ec:01:9d:82:c7:10: e9:d9:28:27:6c:24:2c:43:72:e9:66:17:67:1a:87: 82:d7:04:ed:d4:df:f7:ae:16:d4:1b:fd:b2:6f:af: b3:4f:bc:bf:da:5d:02:63:1d:a4:26:21:1d:34:9a: c2:cf:d6:93:69:5f:95:66:91:25:e4:69:ef:92:ed: 4e:89:40:85:75:fa:f2:21:dc:ed:d4:dc:2f:a6:ad: 91:23:54:ac:8a:2c:bb:23:eb:39:b5:44:46:f6:7a: ec:5c:df:40:b3:07:82:37:9d:d2:6c:27:2d:73:a7: 69:a7:80:8e:46:ac:2f:da:b4:fd:6d:66:31:83:0a: d8:cb:3f:1f:b8:80:65:ac:fc:d3:b5:a8:c7:b7:38: fe:bf:94:c3:c1:f2:8a:09:06:e6:88:34:2f:bd:2f: 25:d1:8b:03:aa:ea:31:5b:b8:2b:aa:24:74:fb:47: e8:09:df:bd:84:dc:0f:e0:d3:ed:4b:47:dd:b5:97: c1:58:31:75:90:0d:f4:99:4b:65:55:19:6d:f5:4a: 13:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:75:B6:25:FE:35:0B:4B:F2:F5:7C:9A:F8:BF:DB:E8:FE:1D:94:79 X509v3 Authority Key Identifier: keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e1:02:7c:b9:00:5d:20:ea:02:7a:03:57:f0:ba:9d:b1:a5: fc:4b:d7:3e:8c:12:2b:b7:10:42:d7:e5:85:b8:2d:1c:ba:1f: e0:86:85:ac:6e:6b:b0:cc:b7:14:d5:7b:1e:9d:b2:51:e3:7b: fb:fe:a0:7c:f9:65:96:94:07:c9:dc:29:ce:c6:65:57:8a:dc: 2b:23:31:0e:98:99:94:87:d0:96:ea:3a:da:de:cb:8b:c0:0d: 7b:b3:f2:6a:d5:39:bc:62:04:d9:bf:79:0f:42:c7:1b:39:f8: da:8b:bc:bc:56:d9:c3:a3:ee:bc:23:58:28:4a:70:5e:9f:5c: 11:ea:3a:ec:7c:52:74:77:da:5f:cf:ca:4b:bd:83:c3:5d:a5: ad:2d:6f:37:4a:28:c3:c3:75:ff:16:44:b2:42:2e:26:7e:5d: ae:30:0e:19:ee:07:6d:4a:59:fb:82:43:da:3a:94:88:d1:7a: f3:3d:bf:7f:3f:af:49:c0:ee:53:c3:df:78:71:9e:0e:c1:8d: 58:0b:9e:1f:00:17:ec:af:98:ea:6d:04:26:94:14:73:91:93: 63:ff:92:3c:b7:47:61:cc:84:87:05:46:96:83:10:f2:41:83: 76:4d:f9:59:c7:7f:07:7f:a9:79:87:53:4a:53:c1:33:2f:6f: 4c:c0:e2:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+nvglxaZ0yDlmUXQ7xjGwxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMGJkY2M0NDQxNzNmNTk5NGRlMzRhM2JmNjNmM2FkOTc2 NGM2ZDEwHhcNMjYwNzI4MDgwMTE2WhcNMjYwNzI5MDgwMTE2WjAzMTEwLwYDVQQD EygxMDc1YjYyNWZlMzUwYjRiZjJmNTdjOWFmOGJmZGJlOGZlMWQ5NDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngfsG8vD+aXV9O3lnTpN14s7L/8D 1OS4s+8YxZkQBCCuLlZpR1DBs0hHe9RwNZEHjVIS7MjsAZ2CxxDp2SgnbCQsQ3Lp ZhdnGoeC1wTt1N/3rhbUG/2yb6+zT7y/2l0CYx2kJiEdNJrCz9aTaV+VZpEl5Gnv ku1OiUCFdfryIdzt1Nwvpq2RI1Ssiiy7I+s5tURG9nrsXN9AsweCN53SbCctc6dp p4CORqwv2rT9bWYxgwrYyz8fuIBlrPzTtajHtzj+v5TDwfKKCQbmiDQvvS8l0YsD quoxW7grqiR0+0foCd+9hNwP4NPtS0fdtZfBWDF1kA30mUtlVRlt9UoTtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBB1tiX+NQtL8vV8mvi/2+j+HZR5MB8GA1UdIwQY MBaAFPAL3MREFz9ZlN40o79j862XZMbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYt Y2ZhNWE0Yjg5ODZiLzEvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYtY2ZhNWE0Yjg5ODZi LzEvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOECfLkA XSDqAnoDV/C6nbGl/EvXPowSK7cQQtflhbgtHLof4IaFrG5rsMy3FNV7Hp2yUeN7 +/6gfPlllpQHydwpzsZlV4rcKyMxDpiZlIfQluo62t7Li8ANe7PyatU5vGIE2b95 D0LHGzn42ou8vFbZw6PuvCNYKEpwXp9cEeo67HxSdHfaX8/KS72Dw12lrS1vN0oo w8N1/xZEskIuJn5drjAOGe4HbUpZ+4JD2jqUiNF68z2/fz+vScDuU8PfeHGeDsGN WAueHwAX7K+Y6m0EJpQUc5GTY/+SPLdHYcyEhwVGloMQ8kGDdk35Wcd/B3+peYdT SlPBMy9vTMDivg== -----END CERTIFICATE-----Generated at Tue Jul 28 14:53:30 2026 by rpki-client