$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: tEOY7OsNRjV9Mxie1GnOKWjCaLnsZckY4EyWpJprCMA= Subject key identifier: 4D:1F:C9:DC:6B:DF:0E:5F:2E:4A:02:A3:E4:9E:4B:76:32:23:6D:55 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019CACEBD010EC287BD3F8AB0E837A78FC84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 1850 Signing time: Mon 02 Mar 2026 05:01:01 +0000 Manifest this update: Mon 02 Mar 2026 05:01:01 +0000 Manifest next update: Tue 03 Mar 2026 05:01:01 +0000 Files and hashes: 1: 6EiFZKIQWAEn8OFVy62rq2hePVc.roa (hash: QqaEwKcSsaYt3wwf9x5zbgaPoA6qxMBDNuqLJjfSh3E=) 2: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: Wozepobd6FEFQ4yfXXyR7p1YHJqKuienP+Pk/iy4fGM=) 3: 8nyc8D2U6ZLNC1jg1xTgLIB5O08.roa (hash: UjE3wubUY3p3vPXEL528/Y/zzZrPn9j4CkCZh6HPAm8=) 4: D8drYTgqt32Cqf3EAiV6kDEeJmQ.roa (hash: z2zUysrNuxBIuhiC3z6/alcclEfX1JrDjmY7TAheY/g=) 5: FutR1Anwjf0YPYgj24VkOnnpOKo.roa (hash: B1PUo1d5o9i7GHA7LLQ+U0epYNN9/13TWk0w7UgND6Y=) 6: HrEvCC8IhGVeGnzBd0VRZALtork.roa (hash: O2TX3efNC8L1kVYPj9yl6qN6Xg9peYzVQTc557TbA/U=) 7: Kpq8EZf55_gV3FvEsn5mjf_dpBU.roa (hash: 2nhGvk06IqlLqxKExuqHomEp9VHs4mN4Vn/X8wYfMBo=) 8: U_LfKCv5kJDOuObeAwMorX4Nmc4.roa (hash: ecSv+ahB4B19FetdtS+R40A/h+b9mvwFfb6awkKuwag=) 9: _x6aIQIYgxoNnvNtpDTT6-qH5fs.roa (hash: j+sPJji49saMlwCW4eBAQImk7LYRvTzCGkaTq0ojLDo=) 10: cCLQDT_9t51iKlaGarf8PuI7ZuE.roa (hash: p225RnWWY7l8rkaX7oOrNPhwDG+u+RY9z5HJIbVDWT8=) 11: dOGEvxWz_zQwe0ywxB_yohVohyM.roa (hash: mrA0JieT5fE1JYF+wUVSCw2S+TnNb/74IV4H+fC+v3w=) 12: wYnNwRf0L8-7zAlQ9eMsEnpatqU.roa (hash: vGGDkEQtDcGYvJgapMsj38d8WJqbdN5ZD4U4q0HVb6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:eb:d0:10:ec:28:7b:d3:f8:ab:0e:83:7a:78:fc:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Mar 2 05:01:01 2026 GMT Not After : Mar 3 05:01:01 2026 GMT Subject: CN=4d1fc9dc6bdf0e5f2e4a02a3e49e4b7632236d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:67:eb:0b:8d:3a:ea:5b:eb:b7:2d:5b:64:dd: da:9b:f4:a0:eb:c9:e0:ba:80:e3:07:34:ad:37:1d: 55:7e:49:d0:00:46:c8:af:0f:21:db:3c:95:37:16: ef:c2:91:36:e4:35:32:da:9d:15:ae:91:ef:02:e6: c7:cb:6c:e5:e0:88:97:73:e4:4f:cb:40:30:8b:59: 0f:24:cd:6a:5a:9b:fb:f3:6f:f5:92:d3:88:b9:bc: 0b:ae:db:50:6c:34:ff:3d:78:a5:f3:c6:48:ae:46: ea:7b:8d:7c:7c:20:02:a3:8c:c3:35:cf:63:b4:4f: e7:12:f4:d1:5d:c9:cd:90:af:a9:40:31:eb:98:08: da:ab:96:a6:46:49:d8:a7:6c:1f:aa:5d:6d:c9:06: 37:cc:35:bd:97:75:df:6f:a2:9d:7b:a3:3e:75:aa: 2b:b3:7c:72:5b:5b:94:8c:4d:d1:64:b9:ec:ff:30: 3d:2f:1c:d4:4a:50:21:d0:cb:55:f2:9a:37:dc:6c: 3e:50:0b:6a:ca:ae:61:ec:6e:27:79:23:4b:01:29: 5c:be:d3:06:14:d4:b6:de:c3:4c:b8:bc:27:93:54: 19:e6:21:f6:c0:89:5e:a4:b8:c0:12:db:3f:55:f2: b7:b5:15:e8:78:7a:c5:25:69:92:d2:8f:4a:59:f2: 03:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1F:C9:DC:6B:DF:0E:5F:2E:4A:02:A3:E4:9E:4B:76:32:23:6D:55 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:18:6c:8f:83:f6:dd:e9:74:02:d6:58:b4:b8:21:8e:fe:d0: a8:08:bd:dd:10:33:02:d5:89:26:80:8e:7b:ff:c9:41:36:07: 5e:35:82:0b:82:54:96:d6:a2:e1:d2:30:22:7a:e3:51:6f:85: 87:88:3b:b5:2c:17:17:49:18:94:7b:3a:41:56:be:a3:9f:07: 16:2a:9b:3b:3e:be:e4:5b:3e:7e:94:0c:8d:96:3d:68:73:52: 8c:d9:44:5b:0c:72:80:2a:77:4b:a9:5a:4e:4b:ad:ce:bd:69: f3:72:99:f5:ac:b5:85:ae:82:fa:bb:1e:dd:74:1a:79:06:9e: 47:ca:a2:09:32:6b:7e:1f:3a:45:5e:68:a9:44:ff:3d:76:66: ae:5e:f7:6d:62:b1:ce:b8:ee:af:f9:d0:3f:85:e8:6f:72:28: 81:a6:fc:19:0e:b5:c4:74:db:ea:22:48:ed:8c:08:c2:99:e9: 74:35:79:81:b4:a3:cf:2f:d9:71:aa:16:5c:0c:75:66:56:b6: 0c:67:c2:94:53:62:8f:ce:0a:b9:4e:21:59:3f:c9:bc:6a:ef: 0a:c7:bf:4c:e8:a7:f8:5a:25:7b:37:64:ed:13:70:0e:f9:69: 6d:6a:14:41:30:b7:2b:23:b9:7f:51:25:5d:87:e9:62:5b:21: 0b:a3:9b:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZys69AQ7Ch70/irDoN6ePyEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwMzAyMDUwMTAxWhcNMjYwMzAzMDUwMTAxWjAzMTEwLwYDVQQD Eyg0ZDFmYzlkYzZiZGYwZTVmMmU0YTAyYTNlNDllNGI3NjMyMjM2ZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2frC4066lvrty1bZN3am/Sg68ng uoDjBzStNx1VfknQAEbIrw8h2zyVNxbvwpE25DUy2p0VrpHvAubHy2zl4IiXc+RP y0Awi1kPJM1qWpv782/1ktOIubwLrttQbDT/PXil88ZIrkbqe418fCACo4zDNc9j tE/nEvTRXcnNkK+pQDHrmAjaq5amRknYp2wfql1tyQY3zDW9l3Xfb6Kde6M+daor s3xyW1uUjE3RZLns/zA9LxzUSlAh0MtV8po33Gw+UAtqyq5h7G4neSNLASlcvtMG FNS23sNMuLwnk1QZ5iH2wIlepLjAEts/VfK3tRXoeHrFJWmS0o9KWfIDvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0fydxr3w5fLkoCo+SeS3YyI21VMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBhsj4P2 3el0AtZYtLghjv7QqAi93RAzAtWJJoCOe//JQTYHXjWCC4JUltai4dIwInrjUW+F h4g7tSwXF0kYlHs6QVa+o58HFiqbOz6+5Fs+fpQMjZY9aHNSjNlEWwxygCp3S6la Tkutzr1p83KZ9ay1ha6C+rse3XQaeQaeR8qiCTJrfh86RV5oqUT/PXZmrl73bWKx zrjur/nQP4Xob3Iogab8GQ61xHTb6iJI7YwIwpnpdDV5gbSjzy/ZcaoWXAx1Zla2 DGfClFNij84KuU4hWT/JvGrvCse/TOin+Folezdk7RNwDvlpbWoUQTC3KyO5f1El XYfpYlshC6ObVA== -----END CERTIFICATE-----Generated at Mon Mar 2 07:26:49 2026 by rpki-client