$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: dlVoDA9XxcR3N5EHLBBkmiJcS7pYU2UcyOe2SoJh16s= Subject key identifier: 1F:36:02:AC:0A:4F:BE:09:D3:F9:E9:78:82:ED:BA:FA:E0:79:74:60 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019D9886BCE11BE38368E8BE6D55AB4196A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 18CA Signing time: Thu 16 Apr 2026 23:01:00 +0000 Manifest this update: Thu 16 Apr 2026 23:01:00 +0000 Manifest next update: Fri 17 Apr 2026 23:01:00 +0000 Files and hashes: 1: 6EiFZKIQWAEn8OFVy62rq2hePVc.roa (hash: QqaEwKcSsaYt3wwf9x5zbgaPoA6qxMBDNuqLJjfSh3E=) 2: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: KI0jlTvX/A2DtkzYp0qVjV1XdKmFn6dsatrJAAjAh10=) 3: 8nyc8D2U6ZLNC1jg1xTgLIB5O08.roa (hash: UjE3wubUY3p3vPXEL528/Y/zzZrPn9j4CkCZh6HPAm8=) 4: D8drYTgqt32Cqf3EAiV6kDEeJmQ.roa (hash: z2zUysrNuxBIuhiC3z6/alcclEfX1JrDjmY7TAheY/g=) 5: FutR1Anwjf0YPYgj24VkOnnpOKo.roa (hash: B1PUo1d5o9i7GHA7LLQ+U0epYNN9/13TWk0w7UgND6Y=) 6: HrEvCC8IhGVeGnzBd0VRZALtork.roa (hash: O2TX3efNC8L1kVYPj9yl6qN6Xg9peYzVQTc557TbA/U=) 7: Kpq8EZf55_gV3FvEsn5mjf_dpBU.roa (hash: 2nhGvk06IqlLqxKExuqHomEp9VHs4mN4Vn/X8wYfMBo=) 8: U_LfKCv5kJDOuObeAwMorX4Nmc4.roa (hash: ecSv+ahB4B19FetdtS+R40A/h+b9mvwFfb6awkKuwag=) 9: _x6aIQIYgxoNnvNtpDTT6-qH5fs.roa (hash: j+sPJji49saMlwCW4eBAQImk7LYRvTzCGkaTq0ojLDo=) 10: cCLQDT_9t51iKlaGarf8PuI7ZuE.roa (hash: p225RnWWY7l8rkaX7oOrNPhwDG+u+RY9z5HJIbVDWT8=) 11: dOGEvxWz_zQwe0ywxB_yohVohyM.roa (hash: mrA0JieT5fE1JYF+wUVSCw2S+TnNb/74IV4H+fC+v3w=) 12: wYnNwRf0L8-7zAlQ9eMsEnpatqU.roa (hash: vGGDkEQtDcGYvJgapMsj38d8WJqbdN5ZD4U4q0HVb6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:86:bc:e1:1b:e3:83:68:e8:be:6d:55:ab:41:96:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Apr 16 23:01:00 2026 GMT Not After : Apr 17 23:01:00 2026 GMT Subject: CN=1f3602ac0a4fbe09d3f9e97882edbafae0797460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:44:f2:07:4c:7d:4c:12:cb:5f:8f:25:eb:01: 00:ce:2a:a3:5f:d7:b7:3e:e7:cf:b5:04:63:c5:a7: 0c:ee:60:8d:3e:ef:76:ad:b9:06:cc:cd:cb:b7:8a: 7e:e7:a0:98:86:97:a8:9b:50:67:d0:ba:31:1b:80: 5d:7b:fd:51:f0:7e:ea:47:d2:f4:0f:5c:88:89:bd: a3:0f:5a:06:7e:59:b3:6a:48:d6:46:e8:33:70:35: d4:5f:96:a4:de:64:30:1a:8a:6e:29:b2:cc:89:89: aa:e4:00:0b:a7:17:cd:a3:23:42:05:5e:1c:93:6e: 80:13:81:da:36:68:e7:8c:1e:81:b3:36:cb:87:68: fe:e7:01:f4:e8:0b:93:e1:de:87:d1:56:b5:5a:31: fe:bf:17:7a:76:67:c3:09:de:31:03:db:97:15:5a: 6e:47:68:2a:76:bc:13:f4:c4:37:9f:f9:6a:8e:2a: a5:25:38:bb:7b:9e:34:a1:ff:1b:e5:34:65:b2:e1: a5:f1:69:94:59:95:fc:2a:95:40:29:b6:56:c9:1a: a3:e6:a0:cd:72:e5:69:11:00:d9:d5:21:f9:f6:d1: 43:d9:6b:ce:2a:59:7c:9b:e9:80:96:39:42:98:14: 24:37:35:d2:fa:af:ff:b6:e5:51:52:2e:47:aa:bf: 31:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:36:02:AC:0A:4F:BE:09:D3:F9:E9:78:82:ED:BA:FA:E0:79:74:60 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:77:b9:0c:f5:a0:b1:fb:fc:36:30:99:0b:b0:ac:8a:91:f6: 36:77:6d:2d:08:b1:83:08:c0:3f:f1:24:cb:45:bd:27:46:ca: e0:df:cb:e5:66:d2:65:6e:fa:42:86:5f:3c:39:bc:ab:68:4d: 0b:08:e2:08:62:c1:43:50:68:62:26:db:82:20:53:9e:79:0b: 45:4c:9f:48:86:e5:79:23:94:5b:02:93:15:20:c2:52:0a:6e: 29:1d:a9:95:86:b6:d6:b8:fe:1e:99:fd:2b:75:d7:0b:78:7a: b3:22:0a:f7:ab:0a:e6:c0:93:02:f5:c7:ed:56:b0:cc:25:c3: 93:ad:c6:93:92:1e:f3:9f:a2:8e:b4:e7:1b:69:8b:a6:7f:a2: b0:65:5e:75:86:58:1e:e1:c8:60:91:9e:06:34:86:d4:af:0c: d3:4c:9d:19:cf:78:26:55:16:8e:33:0e:1c:32:78:46:71:d2: af:c8:ed:6e:b9:1c:2a:5d:ed:85:83:3c:a6:dd:87:dd:3b:88: d0:9d:86:3b:e7:8c:75:ac:04:d6:6f:d0:71:b8:82:39:66:e6: a8:46:4f:d7:a9:3a:f1:b3:6e:72:70:cf:f2:dc:95:5e:31:75: 4d:79:c6:4c:4c:06:02:09:35:6e:ab:f4:7c:85:5c:92:cc:d7: 51:32:96:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YhrzhG+ODaOi+bVWrQZahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwNDE2MjMwMTAwWhcNMjYwNDE3MjMwMTAwWjAzMTEwLwYDVQQD EygxZjM2MDJhYzBhNGZiZTA5ZDNmOWU5Nzg4MmVkYmFmYWUwNzk3NDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlETyB0x9TBLLX48l6wEAziqjX9e3 PufPtQRjxacM7mCNPu92rbkGzM3Lt4p+56CYhpeom1Bn0LoxG4Bde/1R8H7qR9L0 D1yIib2jD1oGflmzakjWRugzcDXUX5ak3mQwGopuKbLMiYmq5AALpxfNoyNCBV4c k26AE4HaNmjnjB6BszbLh2j+5wH06AuT4d6H0Va1WjH+vxd6dmfDCd4xA9uXFVpu R2gqdrwT9MQ3n/lqjiqlJTi7e540of8b5TRlsuGl8WmUWZX8KpVAKbZWyRqj5qDN cuVpEQDZ1SH59tFD2WvOKll8m+mAljlCmBQkNzXS+q//tuVRUi5Hqr8xnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB82AqwKT74J0/npeILtuvrgeXRgMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3e5DPWg sfv8NjCZC7CsipH2NndtLQixgwjAP/Eky0W9J0bK4N/L5WbSZW76QoZfPDm8q2hN CwjiCGLBQ1BoYibbgiBTnnkLRUyfSIbleSOUWwKTFSDCUgpuKR2plYa21rj+Hpn9 K3XXC3h6syIK96sK5sCTAvXH7VawzCXDk63Gk5Ie85+ijrTnG2mLpn+isGVedYZY HuHIYJGeBjSG1K8M00ydGc94JlUWjjMOHDJ4RnHSr8jtbrkcKl3thYM8pt2H3TuI 0J2GO+eMdawE1m/QcbiCOWbmqEZP16k68bNucnDP8tyVXjF1TXnGTEwGAgk1bqv0 fIVckszXUTKW3w== -----END CERTIFICATE-----Generated at Fri Apr 17 03:40:20 2026 by rpki-client