$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: hmMapIF9fqYDjCT3rCWsF3BM1vFYjxjAW/5zawP3iFY= Subject key identifier: B6:B9:6F:73:7A:4E:E7:9D:06:AC:6A:0B:4B:27:69:78:15:86:1A:80 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 01A0C21F1BB6644176594405A2066B96CF8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 1A7A Signing time: Mon 21 Sep 2026 04:00:13 +0000 Manifest this update: Mon 21 Sep 2026 04:00:13 +0000 Manifest next update: Tue 22 Sep 2026 04:00:13 +0000 Files and hashes: 1: 6EiFZKIQWAEn8OFVy62rq2hePVc.roa (hash: QqaEwKcSsaYt3wwf9x5zbgaPoA6qxMBDNuqLJjfSh3E=) 2: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: ZuWABsvqmDaXYtjQCdqVIziRhG4QuTn6cLjrqKvs34A=) 3: 8nyc8D2U6ZLNC1jg1xTgLIB5O08.roa (hash: UjE3wubUY3p3vPXEL528/Y/zzZrPn9j4CkCZh6HPAm8=) 4: D8drYTgqt32Cqf3EAiV6kDEeJmQ.roa (hash: z2zUysrNuxBIuhiC3z6/alcclEfX1JrDjmY7TAheY/g=) 5: FutR1Anwjf0YPYgj24VkOnnpOKo.roa (hash: B1PUo1d5o9i7GHA7LLQ+U0epYNN9/13TWk0w7UgND6Y=) 6: HrEvCC8IhGVeGnzBd0VRZALtork.roa (hash: O2TX3efNC8L1kVYPj9yl6qN6Xg9peYzVQTc557TbA/U=) 7: Kpq8EZf55_gV3FvEsn5mjf_dpBU.roa (hash: 2nhGvk06IqlLqxKExuqHomEp9VHs4mN4Vn/X8wYfMBo=) 8: U_LfKCv5kJDOuObeAwMorX4Nmc4.roa (hash: ecSv+ahB4B19FetdtS+R40A/h+b9mvwFfb6awkKuwag=) 9: _x6aIQIYgxoNnvNtpDTT6-qH5fs.roa (hash: j+sPJji49saMlwCW4eBAQImk7LYRvTzCGkaTq0ojLDo=) 10: cCLQDT_9t51iKlaGarf8PuI7ZuE.roa (hash: p225RnWWY7l8rkaX7oOrNPhwDG+u+RY9z5HJIbVDWT8=) 11: iM98sbe2k1VYrTYz4i_WKVQpI3M.roa (hash: 03SHJ8O0TtLrq1IoptZOUrbF4kDjXLjaj0+w7qMBEN8=) 12: o1nTmEm1gCstJMw7wpnSZMxMONQ.roa (hash: pg0A+jsUZK8QeY09ViiYP2qIWGZZ0uwQp9do9UnjuSo=) 13: wYnNwRf0L8-7zAlQ9eMsEnpatqU.roa (hash: vGGDkEQtDcGYvJgapMsj38d8WJqbdN5ZD4U4q0HVb6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 04:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c2:1f:1b:b6:64:41:76:59:44:05:a2:06:6b:96:cf:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Sep 21 04:00:13 2026 GMT Not After : Sep 22 04:00:13 2026 GMT Subject: CN=b6b96f737a4ee79d06ac6a0b4b27697815861a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:e3:e9:48:ab:bf:c7:3e:92:ba:0e:a8:c3: bc:5f:9b:f7:99:30:e3:b9:36:74:7c:4a:d7:ea:db: ca:54:01:d8:69:6e:35:6d:a6:69:50:f7:21:e5:f9: ff:a7:78:f3:dd:a0:94:b0:61:c2:37:e1:72:94:b2: 35:e9:ba:58:d7:10:31:30:84:05:c0:9e:17:dd:f3: f3:8e:38:35:9b:a2:b0:77:06:61:12:43:e1:9a:9e: 59:b0:15:25:74:0f:f5:5c:cc:f7:36:3d:e3:3a:50: ea:35:e8:87:6d:fd:3a:2a:82:82:1f:3f:82:98:b5: 18:5d:40:53:da:b8:c3:f2:5e:16:ef:9c:c9:f9:ee: b2:a6:16:7f:84:67:f7:60:f6:47:d4:f5:07:a2:8e: ba:51:1e:26:c8:eb:ca:c5:e5:55:f2:6e:94:c5:be: 21:91:7b:34:9e:6a:3c:e2:da:26:94:61:34:ff:af: e6:1c:a8:53:7e:22:02:47:b8:5b:58:50:ad:3f:a1: f2:e3:c4:88:a2:4d:ea:de:da:86:81:13:fc:01:71: 2f:ce:54:c1:63:9e:9c:34:ec:6f:5a:27:49:1d:3c: a8:9d:e5:3e:78:60:c3:1e:f8:0b:c4:b0:68:8b:96: fb:38:4a:26:8a:b2:a3:3b:e1:14:b1:08:89:44:3e: e2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B9:6F:73:7A:4E:E7:9D:06:AC:6A:0B:4B:27:69:78:15:86:1A:80 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:b5:54:27:ca:65:9a:38:90:ad:c6:02:8a:80:aa:b1:01:93: b2:be:8e:be:03:64:48:c3:5b:ec:e3:f8:dd:26:89:97:3d:3d: 27:6a:fd:01:49:76:0c:c0:9e:96:98:68:66:e2:61:11:7a:e5: 4a:82:06:3c:8c:cf:76:1a:0d:b8:48:66:16:68:2e:71:32:e5: 10:e1:60:f0:b8:2b:a4:41:61:30:68:58:c5:21:97:26:3a:29: e0:ec:cc:ab:a9:d7:78:5c:7a:c4:9e:71:94:ae:2b:8d:bc:10: 11:e6:47:ea:48:80:3f:49:b2:dd:ad:0f:e9:d5:b9:5f:5e:d8: cd:bc:29:cc:1e:3b:13:37:1f:4b:73:28:69:74:a2:c3:02:a1: 42:b6:bc:2c:7d:17:0f:cd:6e:50:58:10:e4:0f:13:54:d1:88: 35:15:7a:25:2f:3a:d4:aa:a0:62:20:56:99:14:04:9d:59:77: 58:9c:f0:82:7a:46:c6:b2:cf:3b:65:5f:57:f1:04:d0:66:b9: 5b:56:bb:ae:ef:71:04:7f:f0:ec:41:2c:10:9c:7f:f7:50:82: 50:91:13:b4:1e:3d:e5:95:de:74:ae:0b:fb:0f:97:1a:1a:47: 26:90:b7:09:2f:27:53:7e:72:87:7a:3d:f0:d3:bb:ae:d9:27: 73:51:d0:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDCHxu2ZEF2WUQFogZrls+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwOTIxMDQwMDEzWhcNMjYwOTIyMDQwMDEzWjAzMTEwLwYDVQQD EyhiNmI5NmY3MzdhNGVlNzlkMDZhYzZhMGI0YjI3Njk3ODE1ODYxYTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrfj6Uirv8c+kroOqMO8X5v3mTDj uTZ0fErX6tvKVAHYaW41baZpUPch5fn/p3jz3aCUsGHCN+FylLI16bpY1xAxMIQF wJ4X3fPzjjg1m6KwdwZhEkPhmp5ZsBUldA/1XMz3Nj3jOlDqNeiHbf06KoKCHz+C mLUYXUBT2rjD8l4W75zJ+e6yphZ/hGf3YPZH1PUHoo66UR4myOvKxeVV8m6Uxb4h kXs0nmo84tomlGE0/6/mHKhTfiICR7hbWFCtP6Hy48SIok3q3tqGgRP8AXEvzlTB Y56cNOxvWidJHTyoneU+eGDDHvgLxLBoi5b7OEomirKjO+EUsQiJRD7iBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLa5b3N6TuedBqxqC0snaXgVhhqAMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULVUJ8pl mjiQrcYCioCqsQGTsr6OvgNkSMNb7OP43SaJlz09J2r9AUl2DMCelphoZuJhEXrl SoIGPIzPdhoNuEhmFmgucTLlEOFg8LgrpEFhMGhYxSGXJjop4OzMq6nXeFx6xJ5x lK4rjbwQEeZH6kiAP0my3a0P6dW5X17YzbwpzB47EzcfS3MoaXSiwwKhQra8LH0X D81uUFgQ5A8TVNGINRV6JS861KqgYiBWmRQEnVl3WJzwgnpGxrLPO2VfV/EE0Ga5 W1a7ru9xBH/w7EEsEJx/91CCUJETtB495ZXedK4L+w+XGhpHJpC3CS8nU35yh3o9 8NO7rtknc1HQ+A== -----END CERTIFICATE-----Generated at Mon Sep 21 14:29:42 2026 by rpki-client