$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft File: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft (raw, json) Hash identifier: hHk4RE60L9RkFZyIiKo4mVZdgHZUovGU1TRBclOrbLo= Subject key identifier: F8:61:3D:3C:B0:B8:55:39:B2:63:77:0E:BB:6A:38:76:BA:B9:EA:31 Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1 Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1 Certificate serial: 01A0BEB11E6C92A21EB2B6621EA9D9D32618 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft Manifest number: 024E Signing time: Sun 20 Sep 2026 12:01:13 +0000 Manifest this update: Sun 20 Sep 2026 12:01:13 +0000 Manifest next update: Mon 21 Sep 2026 12:01:13 +0000 Files and hashes: 1: 0PwBP1m5V8tHPFCHGGYOau0rRTc.roa (hash: M0W/FLJbKezFVRY+boZRSGO4f4RhltYple/V23X0j4c=) 2: 1vK1T7KdFH0hBpOuHuKe8W_luZE.roa (hash: qhZOYXpVTc+RHC0IfCFs2RzEIVYZAgoD6YvTFLHwFmE=) 3: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl (hash: jbUlwJauHgp+0vf4U036lSA/MPhZxkfNoHCRhA46YEY=) 4: JcePCXWu8_9ZZzjxfVygKM8dWzw.roa (hash: 0S4YgLpuoSBRqOUxV6YpZdqEiuMF4cz82gQj2otpNQw=) 5: Md-o3lGIoXUo9ynVTwQnDQUNyzM.roa (hash: AWCf1DkAv4fQq3K+BQw40VyMuDn4MGmNjixx31UPhmA=) 6: Nd6V0QCloRDIZfwDcQtVL1w6Z0A.roa (hash: TIjs2IbFM1v00nTvmxBW2uHZechx9jNZhQSCyvBAeP8=) 7: O9sJ-_TKMq6bS7__E1UX2XB1imA.roa (hash: +Z6Yn/3PglFToHJ9MMw/pkkVUwEYwsRd5WZO7o88I9I=) 8: QEGryiURhVI85Y_iwFPpO1kjb3E.roa (hash: f7QZn8PJdOvgT/DCDoEpmb1SfJG64+IFdudonB3DpJU=) 9: S64PRp6HfgfeBA5dqF_nm378oSE.roa (hash: KH+IlbpUNkPXeoQclXeI5i/KLaVnfhqbd5izf4u4qTc=) 10: SHnHAD4XActufnWbDbBuCezR5sk.roa (hash: nenlz/3VAG7POjOi6mcs6RNeMaF2/86fDvCTf+cSRc4=) 11: Sq_qOTsf7wVB0vwgreS3nB_jIPk.roa (hash: OK/CHpHTM2yPPc6litBPMbap80Y0eTVdGYncN8WvmXg=) 12: VTvDdxCNdn_BPeZovGaO3zvHn-c.roa (hash: /82kfcvdmxFyaaXRLhtB6elmf3XA4bQBsOc05JD7WPw=) 13: XZAVpeao-MzWMM0T1IBuo6mJOhw.roa (hash: 4OhzlwI1uDhgkruwa46Ix7LBdf/mbvESkAg3CQYlmdQ=) 14: bGTHKMCwmJVzyHYU3KNYDg0jpi4.roa (hash: t9eEDkdFYwdSvb8hr3A4ec+b83VLHsVFWQATSd2+69k=) 15: bTLlcnL0Fm_nCJarfemQWZlQvug.asa (hash: +U6OavydfvrqqdI9vdtdZM6LAnVLXxOVl7v9NGcpnyo=) 16: fYhnGLcy2_Ou27KADH18mycTzz4.roa (hash: sP66OdJ/+I0oQxB3kcnMaYSOI2OOAjekthsNq69mxkE=) 17: g9eBBErf7cGntKTfm3PnpI6Ysa8.roa (hash: L1Y5INt4k++fXqtaolFcZdxOvA8W927R6H65T4L/Fcg=) 18: vSXSp5A3lM38ZHU363V73iY2sOY.roa (hash: OEc0FstKUDyge4yjj89lJISWQxLtMasQvdcX8uQFwbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:b1:1e:6c:92:a2:1e:b2:b6:62:1e:a9:d9:d3:26:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1 Validity Not Before: Sep 20 12:01:13 2026 GMT Not After : Sep 21 12:01:13 2026 GMT Subject: CN=f8613d3cb0b85539b263770ebb6a3876bab9ea31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c8:92:44:2b:e7:ca:76:9c:34:3f:a5:83:fe: 3f:e8:57:68:cd:f5:94:80:32:5b:80:89:76:ec:a9: 67:89:fe:7e:62:dc:65:c6:3a:7b:44:a9:85:43:cb: 0d:e5:e7:fa:9b:96:13:a8:3d:24:28:6a:91:a9:d3: 65:51:2f:35:a9:d8:11:f9:ac:24:19:dd:3f:73:bd: 41:ff:d7:1b:2e:94:c1:1e:d9:9a:79:b7:2e:58:37: d0:2e:3a:d4:cd:3e:43:aa:42:4f:09:87:bf:a0:d1: e6:49:11:b8:1c:4f:c5:64:20:ad:2a:9b:d9:ab:73: 06:0a:f1:c2:b7:5a:66:01:37:cc:77:82:7b:59:c0: a5:74:2a:9c:fb:65:93:40:73:98:0b:a2:2a:ff:10: b7:f0:08:f8:74:1b:9d:30:57:60:94:b6:45:99:52: 5b:05:9e:3f:f1:7c:d6:8e:7e:15:07:09:69:76:45: 10:11:9e:11:cd:89:8f:42:63:07:6b:63:0e:01:40: 20:55:9c:c8:56:11:a1:50:19:f7:93:02:c6:6b:82: 4d:72:08:76:68:27:5e:e5:fd:49:02:27:60:c9:0f: c5:74:40:0a:98:21:03:5f:93:48:8a:37:ca:5c:79: 32:5c:b5:19:02:19:cb:9f:f7:07:23:21:59:9a:ed: 2f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:61:3D:3C:B0:B8:55:39:B2:63:77:0E:BB:6A:38:76:BA:B9:EA:31 X509v3 Authority Key Identifier: keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:82:3f:b5:d1:54:97:2c:a6:5a:04:6d:e3:12:a1:72:24:5d: 16:45:5b:28:c8:cf:97:18:af:ed:60:51:e5:60:83:cd:ec:73: 20:99:28:9e:45:a1:41:f9:a3:96:90:b2:5b:dc:8b:e1:61:38: 40:c4:8e:97:12:f9:ef:4f:6e:83:b5:46:07:c5:88:0c:9e:ad: d2:aa:ec:47:3c:7f:75:72:c9:6c:07:f7:46:32:34:2e:ab:79: ce:3c:68:7e:33:81:37:77:8a:01:f7:bc:98:fb:ca:75:1f:03: 32:77:fb:69:5e:fc:8a:b4:61:e0:bf:6e:a7:da:fd:96:c2:99: 3f:86:33:16:10:5f:76:c2:78:02:9a:f6:10:43:8e:df:06:90: 40:e7:89:df:d3:a2:74:c0:3d:e6:7d:6a:4c:98:37:c9:02:d8: f1:a2:24:3e:0b:8f:58:66:85:ed:3c:03:bb:d6:78:be:44:98: c3:d9:e4:e9:ce:56:fa:2d:c7:09:40:05:c1:4a:5c:08:6f:59: 85:b8:91:72:d2:c7:44:28:07:ff:b1:47:73:bf:3e:e8:67:13: e1:ed:e1:c8:6f:b1:c0:96:0a:87:01:e0:f9:19:e6:ce:45:4f: e0:dc:b5:9b:a1:a1:65:43:e0:78:ae:84:43:cf:20:fe:73:80: c0:41:e5:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+sR5skqIesrZiHqnZ0yYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMGJkY2M0NDQxNzNmNTk5NGRlMzRhM2JmNjNmM2FkOTc2 NGM2ZDEwHhcNMjYwOTIwMTIwMTEzWhcNMjYwOTIxMTIwMTEzWjAzMTEwLwYDVQQD EyhmODYxM2QzY2IwYjg1NTM5YjI2Mzc3MGViYjZhMzg3NmJhYjllYTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8iSRCvnynacND+lg/4/6FdozfWU gDJbgIl27Klnif5+Ytxlxjp7RKmFQ8sN5ef6m5YTqD0kKGqRqdNlUS81qdgR+awk Gd0/c71B/9cbLpTBHtmaebcuWDfQLjrUzT5DqkJPCYe/oNHmSRG4HE/FZCCtKpvZ q3MGCvHCt1pmATfMd4J7WcCldCqc+2WTQHOYC6Iq/xC38Aj4dBudMFdglLZFmVJb BZ4/8XzWjn4VBwlpdkUQEZ4RzYmPQmMHa2MOAUAgVZzIVhGhUBn3kwLGa4JNcgh2 aCde5f1JAidgyQ/FdEAKmCEDX5NIijfKXHkyXLUZAhnLn/cHIyFZmu0vsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhhPTywuFU5smN3DrtqOHa6ueoxMB8GA1UdIwQY MBaAFPAL3MREFz9ZlN40o79j862XZMbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYt Y2ZhNWE0Yjg5ODZiLzEvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYtY2ZhNWE0Yjg5ODZi LzEvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoI/tdFU lyymWgRt4xKhciRdFkVbKMjPlxiv7WBR5WCDzexzIJkonkWhQfmjlpCyW9yL4WE4 QMSOlxL5709ug7VGB8WIDJ6t0qrsRzx/dXLJbAf3RjI0Lqt5zjxofjOBN3eKAfe8 mPvKdR8DMnf7aV78irRh4L9up9r9lsKZP4YzFhBfdsJ4Apr2EEOO3waQQOeJ39Oi dMA95n1qTJg3yQLY8aIkPguPWGaF7TwDu9Z4vkSYw9nk6c5W+i3HCUAFwUpcCG9Z hbiRctLHRCgH/7FHc78+6GcT4e3hyG+xwJYKhwHg+RnmzkVP4Ny1m6GhZUPgeK6E Q88g/nOAwEHlBg== -----END CERTIFICATE-----Generated at Sun Sep 20 18:19:12 2026 by rpki-client