$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: 4e9MrNg3ZueCP9wBYBQGzcsrveIhzEOgLd7mUEKMiFw= Subject key identifier: 4E:5B:FA:1A:77:3A:58:29:DF:D4:B8:8E:BF:CA:35:CF:D1:3C:E2:7E Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019EBFC879FA757234FBBE54ABB5A06AF2CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 1960 Signing time: Sat 13 Jun 2026 07:00:47 +0000 Manifest this update: Sat 13 Jun 2026 07:00:47 +0000 Manifest next update: Sun 14 Jun 2026 07:00:47 +0000 Files and hashes: 1: 5CLXXKkA4JcsyDrUBBM3fxn2kdc.roa (hash: gFWbYqwKSpr3zQtON6eHRCE0iX3y63ZJZklzBNANHsM=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: QjABre1ZynWEtsF17h1Selud15XfncslO1tvbzLUh5w=) 3: DXIDJwT32OV423k4TIWwn2iDwyg.roa (hash: 1DgbvkANX93phDSb+AyRjq7ZFAZDrX3G2DhrbhrdrCY=) 4: Ex4sydFNNb9e9IlWuLzuPazLU44.roa (hash: tuvV0h/eTCcgOOevaItUPifNfonAkWlBsMN+IAbF80I=) 5: F0q3v2kkeTya7vdhm0lzFl3wBAA.roa (hash: BpkEUnq+/w6BrSZ1bTiqPBmMOt7WaZgSwy12/ipsBqo=) 6: GU71SIKDNqtDYi7P5ZGVJfaZ9Ng.roa (hash: 7ZQhqryE0L0rNOAz1gL32gj8EsSrO0yhlKkyCkXl4cc=) 7: PIBmTf3gSYM6zkI7Y8MKCCqkVmM.roa (hash: 5xE+UcziQ9DiquZ2A/57aqh1sjUE876lnNSATCS1lTI=) 8: TXBfEq-bhV4ePw8hLBP6UCEQEtg.roa (hash: gEbc+tVQGYMxTiSiJNGO8DDQrrsZOyqWJhw0Dv/aKqE=) 9: XN9ItxoiVygt3a0qQVsmKKlWk9E.roa (hash: iH4X65Vs6HtOKFxQaLyaQ9nZPsCEbiHQMEBYUWCi4KY=) 10: bba2QTZrp_1uueLnjfHPBxHS3PY.roa (hash: OYrkuz8mezgI3XbKfKRWAwnwwsrmJ+JNJd03sNYC3L8=) 11: djcMZ6pGXyKmA-lIeoWfJvgd_vg.roa (hash: 2V8x5uW66gGIUCrfVlUVt3oOyIC3Jcqdd44dr46xxaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 07:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:c8:79:fa:75:72:34:fb:be:54:ab:b5:a0:6a:f2:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Jun 13 07:00:47 2026 GMT Not After : Jun 14 07:00:47 2026 GMT Subject: CN=4e5bfa1a773a5829dfd4b88ebfca35cfd13ce27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:61:70:89:fe:c1:f4:c7:cc:e3:70:20:05: c5:ea:04:07:47:c1:1d:7b:07:a3:9f:dd:56:a8:4a: 64:98:e3:64:be:7c:ee:53:40:8c:3f:31:4a:dd:eb: 33:9c:00:a1:d9:29:eb:66:9b:a8:9c:dd:3c:66:8c: c9:05:93:be:03:42:c1:f1:18:12:06:61:2b:b8:9e: 25:e1:28:da:75:6d:d9:44:d0:10:5c:25:18:f4:fe: b6:8f:c9:77:f8:ef:4b:5d:8f:08:0b:13:b5:81:50: 32:d7:fe:7b:07:50:ad:96:3f:d3:a0:29:5d:4c:d5: e1:30:de:57:fc:fc:b9:33:cf:5e:26:85:40:e8:fe: bf:b9:88:aa:29:0a:18:75:72:e8:f9:83:ce:f5:49: 36:37:72:54:f6:dd:05:83:b9:15:c7:b7:a0:0f:91: 58:94:06:c4:a6:f9:dd:00:70:59:51:bd:31:25:3d: 45:9e:78:86:10:d1:21:26:f1:b3:36:66:bd:d0:1a: cc:4d:fe:cc:1e:e7:d5:1d:8e:ec:8a:35:91:43:16: 20:35:2e:b9:ee:4d:b2:e3:01:a9:9c:71:ad:08:bb: 3f:45:d5:fc:06:79:e4:ac:54:f7:e3:5b:0c:db:be: 57:34:64:23:89:6b:89:2e:e3:57:a7:6c:3b:d8:0f: 23:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5B:FA:1A:77:3A:58:29:DF:D4:B8:8E:BF:CA:35:CF:D1:3C:E2:7E X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:c6:7d:8a:b6:9b:82:77:c8:92:f4:5b:bc:c0:df:cd:8b:ac: dc:65:e3:8e:f7:57:bf:0a:8d:c8:ea:c8:c9:ca:d3:01:b1:26: f3:ac:71:76:d3:c9:8e:92:05:c2:b8:fe:02:f2:12:01:b0:19: 8a:7d:0e:34:8a:64:e8:1e:9c:f3:23:b7:0f:de:d9:a2:7b:53: fc:ff:ea:5f:8d:f7:34:1a:2e:5c:da:92:ea:80:bd:1a:a3:0c: 0a:45:1f:a7:f2:57:f9:47:c2:9c:51:4f:1a:22:b5:fb:31:9c: 22:e2:8f:94:69:c9:04:5f:37:3b:ee:92:a6:b1:79:49:f6:a6: ee:74:e6:c6:03:fa:90:4e:cf:a3:ef:a4:67:77:58:b1:97:65: 78:02:f1:55:3f:a8:e7:dd:01:cf:da:01:1d:eb:37:f9:ac:9c: f8:07:db:a9:05:52:3b:94:cc:8c:3a:22:95:f2:42:e9:0c:e8: 0b:4b:35:a5:43:10:c0:b3:62:15:ef:74:26:ef:1f:a1:72:44: fb:e7:fe:e4:d6:04:1c:02:55:fe:d9:66:c0:01:f0:ac:b6:dc: 22:04:ac:1a:bd:b7:4a:fd:26:20:b7:e2:4c:66:a0:dd:b3:a7: db:2d:b9:58:de:6f:0f:96:99:e7:5d:92:f2:50:25:28:2f:76: 65:ca:0b:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/yHn6dXI0+75Uq7WgavLNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYwNjEzMDcwMDQ3WhcNMjYwNjE0MDcwMDQ3WjAzMTEwLwYDVQQD Eyg0ZTViZmExYTc3M2E1ODI5ZGZkNGI4OGViZmNhMzVjZmQxM2NlMjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUBhcIn+wfTHzONwIAXF6gQHR8Ed ewejn91WqEpkmONkvnzuU0CMPzFK3esznACh2SnrZpuonN08ZozJBZO+A0LB8RgS BmEruJ4l4SjadW3ZRNAQXCUY9P62j8l3+O9LXY8ICxO1gVAy1/57B1Ctlj/ToCld TNXhMN5X/Py5M89eJoVA6P6/uYiqKQoYdXLo+YPO9Uk2N3JU9t0Fg7kVx7egD5FY lAbEpvndAHBZUb0xJT1FnniGENEhJvGzNma90BrMTf7MHufVHY7sijWRQxYgNS65 7k2y4wGpnHGtCLs/RdX8BnnkrFT341sM275XNGQjiWuJLuNXp2w72A8j1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5b+hp3Olgp39S4jr/KNc/RPOJ+MB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMZ9irab gnfIkvRbvMDfzYus3GXjjvdXvwqNyOrIycrTAbEm86xxdtPJjpIFwrj+AvISAbAZ in0ONIpk6B6c8yO3D97ZontT/P/qX433NBouXNqS6oC9GqMMCkUfp/JX+UfCnFFP GiK1+zGcIuKPlGnJBF83O+6SprF5Sfam7nTmxgP6kE7Po++kZ3dYsZdleALxVT+o 590Bz9oBHes3+ayc+AfbqQVSO5TMjDoilfJC6QzoC0s1pUMQwLNiFe90Ju8foXJE ++f+5NYEHAJV/tlmwAHwrLbcIgSsGr23Sv0mILfiTGag3bOn2y25WN5vD5aZ512S 8lAlKC92ZcoLXA== -----END CERTIFICATE-----Generated at Sat Jun 13 13:34:02 2026 by rpki-client