$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json) Hash identifier: xH9ZPiEeVH/CpDQDCSsLZniagx9d9IZRrimjYLHvTWo= Subject key identifier: EA:80:BE:61:BA:2E:71:DF:AA:6C:BB:D6:C1:92:7E:C2:5B:D4:3E:84 Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019FA82B8A6F42C2A7AC1221E169746681BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft Manifest number: 1997 Signing time: Tue 28 Jul 2026 10:00:53 +0000 Manifest this update: Tue 28 Jul 2026 10:00:53 +0000 Manifest next update: Wed 29 Jul 2026 10:00:53 +0000 Files and hashes: 1: 82ufesd9jM_-UcwHl9xDd28w7bc.roa (hash: gm9W00xGdkpnPbgGYol+dd436lsvUg6lbjX2PP6ojh8=) 2: 85Rvc3_9ZASD2vobCL9t5-c1aU4.roa (hash: vTKkBjgSvXm0Sbl7IC7WJ5hSm/4pkOxSRKg6DOoQUAQ=) 3: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: IOqaaq4V6gzBB8V8fGL1Wd46euJhuqRGkfKtihxqrCc=) 4: 9RcFiPDd3R3zQqDhd_LItb-oDTA.roa (hash: AC0BWwsNFcYLQdYfVVpkxBC/1xIK6znU8uU1YFKJpGM=) 5: ALPiTkZxPDTnbdpPpErdvl97Wc8.roa (hash: Nf4+/SkcOD5qP7AwraGXa6vQHuKG0gARaAPpiziJKcQ=) 6: DY3LJ9rpgUEoEYblIPLq2JAi2Kg.roa (hash: l616iMZGtt3jwaHjNLEard9F/X5woUP9jyhBneyax3A=) 7: Ha68w6QiFH0a19bRsN7VKHOmArA.roa (hash: Jmj2H9NopKmp/RZPRAfw4d/aDmmbdfv4gl5rsbtGGVA=) 8: PpcjLkaCEav2jbz8j1nD5cpwd6U.roa (hash: lXMFd5+g5o/TuUWdFdfYKjE6xxAsVlkE3kE7tXj8LIU=) 9: VzRDRUhOPTiPlaXOeGXg7YkPjGY.roa (hash: ZiS8xAZ8WIWo3rD54IGCFbmBSzYShJeiuytFXk2sEEo=) 10: ptZzsFfw-Utp22LquE9NZ-hV8F8.roa (hash: 0M7mylADFNmeJz5+Yqyyhe39fhx1CPljZIC5k0P+74k=) 11: vcGlDl5Ct_NiM8YzttTek7TQKfQ.roa (hash: BnX/CYwHVszSwePzYMqQFPXrCzJ9oUgTdB3TWSa3h4A=) 12: yiMg7ZQH4FHBD9YZKg_pUWu_Ev4.roa (hash: AIchpJMxJjIRdk7/i7zLscbwRaKVTsnK2jEupzwufmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:2b:8a:6f:42:c2:a7:ac:12:21:e1:69:74:66:81:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Jul 28 10:00:53 2026 GMT Not After : Jul 29 10:00:53 2026 GMT Subject: CN=ea80be61ba2e71dfaa6cbbd6c1927ec25bd43e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:91:1a:81:5f:74:78:3e:eb:00:bf:51:10: 57:78:05:fb:cb:c4:8d:55:13:ee:b6:57:c0:20:14: c7:28:45:53:db:03:01:22:ff:98:27:f0:2a:72:d7: f8:42:3c:56:3b:2a:f4:f8:04:ea:8d:49:63:17:e9: 25:f0:24:4d:c2:cf:d6:44:6f:f0:bf:d3:04:8d:2e: a9:9b:4d:a9:a0:88:41:1b:4a:f6:a8:d1:53:4e:e6: 43:8e:18:bd:39:51:ec:8b:19:06:ab:75:ec:3d:bf: 2d:f6:8f:b2:17:2f:25:3c:ce:0f:f8:61:6a:0b:fe: 36:31:e9:cd:35:6f:86:ca:13:c3:57:31:cf:a8:14: 5c:98:96:33:9e:59:be:56:a3:99:96:49:2b:a2:58: ae:d1:9f:f1:c4:2a:a0:d7:22:d2:8d:43:64:b5:72: 39:0a:3d:e2:ce:e7:fe:e2:85:ab:02:fb:f6:7e:b3: a7:29:c5:1e:4b:6d:b4:5f:0e:0a:fb:6f:cc:f2:ab: f3:fe:f1:24:aa:3f:ac:85:d8:c4:a2:51:d6:9d:1d: ab:0a:7f:e2:77:07:e7:b7:fd:9e:39:d3:ee:a2:e5: 24:29:bd:3b:0c:ae:ad:d4:d2:ce:1f:8c:ec:9a:fd: d5:56:4f:93:b2:07:67:c7:16:a9:d1:e5:63:99:51: 05:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:80:BE:61:BA:2E:71:DF:AA:6C:BB:D6:C1:92:7E:C2:5B:D4:3E:84 X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:7e:d7:f1:bf:bf:26:07:0e:fc:f9:8f:4b:54:61:12:0f:9b: 4d:66:7a:bb:a9:9b:38:cf:c3:29:60:29:9d:1c:bc:09:58:a1: 0f:8b:a5:1c:8f:20:6a:48:cc:ef:9f:8c:46:1f:61:1f:53:d3: 54:d3:2a:98:bf:4e:c2:5e:b4:4c:43:d7:19:0b:a0:c6:9f:b4: 17:14:12:19:68:29:3c:39:62:e4:21:4a:a3:2e:f2:5b:ed:6f: cd:66:69:39:eb:4c:18:d2:df:be:15:bf:f6:66:e9:51:de:cc: e4:b6:5c:0b:7a:d1:06:8a:04:19:5c:eb:f4:ad:be:f5:67:f4: ad:1d:be:c9:e6:e8:43:d5:1c:17:c1:0c:c8:e5:2b:ac:34:9b: 87:4e:50:b2:8c:7c:e0:2b:cd:7e:61:b4:0b:36:37:1a:2e:6b: fc:ec:bb:14:97:4d:9c:f4:17:be:9c:e5:39:90:19:c0:9c:60: 06:ca:48:8b:65:61:8a:25:62:a2:85:09:4d:6a:00:6a:ae:d6: 75:b3:44:43:dc:0d:91:ce:ab:8e:ba:c7:a5:fd:9e:c7:52:d5: c5:94:e3:4c:ed:cb:6f:9c:6a:21:60:e2:e5:36:97:22:80:c3: a4:75:ce:91:ee:e7:f3:e0:9a:cb:a6:aa:87:e2:4d:d8:31:d7: 8c:48:33:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oK4pvQsKnrBIh4Wl0ZoG/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjYwNzI4MTAwMDUzWhcNMjYwNzI5MTAwMDUzWjAzMTEwLwYDVQQD EyhlYTgwYmU2MWJhMmU3MWRmYWE2Y2JiZDZjMTkyN2VjMjViZDQzZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKyRGoFfdHg+6wC/URBXeAX7y8SN VRPutlfAIBTHKEVT2wMBIv+YJ/Aqctf4QjxWOyr0+ATqjUljF+kl8CRNws/WRG/w v9MEjS6pm02poIhBG0r2qNFTTuZDjhi9OVHsixkGq3XsPb8t9o+yFy8lPM4P+GFq C/42MenNNW+GyhPDVzHPqBRcmJYznlm+VqOZlkkroliu0Z/xxCqg1yLSjUNktXI5 Cj3izuf+4oWrAvv2frOnKcUeS220Xw4K+2/M8qvz/vEkqj+shdjEolHWnR2rCn/i dwfnt/2eOdPuouUkKb07DK6t1NLOH4zsmv3VVk+Tsgdnxxap0eVjmVEFEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqAvmG6LnHfqmy71sGSfsJb1D6EMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhX7X8b+/ JgcO/PmPS1RhEg+bTWZ6u6mbOM/DKWApnRy8CVihD4ulHI8gakjM75+MRh9hH1PT VNMqmL9Owl60TEPXGQugxp+0FxQSGWgpPDli5CFKoy7yW+1vzWZpOetMGNLfvhW/ 9mbpUd7M5LZcC3rRBooEGVzr9K2+9Wf0rR2+yeboQ9UcF8EMyOUrrDSbh05Qsox8 4CvNfmG0CzY3Gi5r/Oy7FJdNnPQXvpzlOZAZwJxgBspIi2VhiiViooUJTWoAaq7W dbNEQ9wNkc6rjrrHpf2ex1LVxZTjTO3Lb5xqIWDi5TaXIoDDpHXOke7n8+Cay6aq h+JN2DHXjEgzHA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:55:42 2026 by rpki-client