$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json) Hash identifier: nX7rKc7mwXpvunBdKdDJpVwVgPgpfhzleJm4F+PGsxA= Subject key identifier: E8:93:64:D0:2F:09:6B:70:AD:07:25:54:C2:17:61:DF:3C:7A:DF:FB Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 01A0C5FC0049303A5827C09801F5458043A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft Manifest number: 1A2B Signing time: Mon 21 Sep 2026 22:00:21 +0000 Manifest this update: Mon 21 Sep 2026 22:00:21 +0000 Manifest next update: Tue 22 Sep 2026 22:00:21 +0000 Files and hashes: 1: 82ufesd9jM_-UcwHl9xDd28w7bc.roa (hash: gm9W00xGdkpnPbgGYol+dd436lsvUg6lbjX2PP6ojh8=) 2: 85Rvc3_9ZASD2vobCL9t5-c1aU4.roa (hash: vTKkBjgSvXm0Sbl7IC7WJ5hSm/4pkOxSRKg6DOoQUAQ=) 3: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: 0cueNnTaLto8lF8xON/KlHEcYXUvwS5djjr/EpYrHhg=) 4: 9RcFiPDd3R3zQqDhd_LItb-oDTA.roa (hash: AC0BWwsNFcYLQdYfVVpkxBC/1xIK6znU8uU1YFKJpGM=) 5: ALPiTkZxPDTnbdpPpErdvl97Wc8.roa (hash: Nf4+/SkcOD5qP7AwraGXa6vQHuKG0gARaAPpiziJKcQ=) 6: DY3LJ9rpgUEoEYblIPLq2JAi2Kg.roa (hash: l616iMZGtt3jwaHjNLEard9F/X5woUP9jyhBneyax3A=) 7: Ha68w6QiFH0a19bRsN7VKHOmArA.roa (hash: Jmj2H9NopKmp/RZPRAfw4d/aDmmbdfv4gl5rsbtGGVA=) 8: PpcjLkaCEav2jbz8j1nD5cpwd6U.roa (hash: lXMFd5+g5o/TuUWdFdfYKjE6xxAsVlkE3kE7tXj8LIU=) 9: VzRDRUhOPTiPlaXOeGXg7YkPjGY.roa (hash: ZiS8xAZ8WIWo3rD54IGCFbmBSzYShJeiuytFXk2sEEo=) 10: ptZzsFfw-Utp22LquE9NZ-hV8F8.roa (hash: 0M7mylADFNmeJz5+Yqyyhe39fhx1CPljZIC5k0P+74k=) 11: vcGlDl5Ct_NiM8YzttTek7TQKfQ.roa (hash: BnX/CYwHVszSwePzYMqQFPXrCzJ9oUgTdB3TWSa3h4A=) 12: yiMg7ZQH4FHBD9YZKg_pUWu_Ev4.roa (hash: AIchpJMxJjIRdk7/i7zLscbwRaKVTsnK2jEupzwufmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:fc:00:49:30:3a:58:27:c0:98:01:f5:45:80:43:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Sep 21 22:00:21 2026 GMT Not After : Sep 22 22:00:21 2026 GMT Subject: CN=e89364d02f096b70ad072554c21761df3c7adffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4c:94:71:fc:91:03:1d:ed:5c:83:8c:bf:b1: 64:2d:01:eb:68:45:67:fd:ab:a4:44:49:40:20:b6: e6:a6:4c:1a:af:3d:cc:a1:20:da:93:5e:b2:7b:3d: 99:fe:27:04:8a:ae:5b:63:3b:63:46:62:be:a9:fb: 43:88:af:df:9f:ab:7a:99:b2:e8:4b:bf:a9:64:2f: f4:78:86:9d:1a:6d:e5:71:36:4e:8d:69:9f:b9:80: 8a:b7:56:6d:ad:af:27:e4:e7:11:a2:3d:fb:e9:be: 69:1c:35:19:8d:49:f9:2d:b2:f0:e0:a0:73:d5:2c: 94:95:9c:39:d2:f0:79:2a:d4:ee:71:d1:37:d8:c7: db:1f:e7:f5:97:e1:f5:ca:bd:94:82:e3:c6:62:3b: 61:fd:4c:d2:4a:73:98:5a:18:01:3a:85:fd:e3:b1: 17:87:04:40:3a:7e:ee:0e:23:79:ac:bd:da:53:cf: 90:3e:8a:00:b2:05:65:1d:f6:b6:29:2c:ce:5c:ff: 8c:28:24:22:f8:c9:f7:7e:f6:70:ea:02:ac:0f:1d: ff:2d:fe:13:7c:6b:43:06:bc:db:3d:59:f0:0a:94: 62:fc:78:e0:6d:71:e4:b2:b1:0a:e4:4d:bb:7e:8b: a6:81:4e:73:0e:4d:12:4c:bd:5f:9c:57:12:7b:b2: 1d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:93:64:D0:2F:09:6B:70:AD:07:25:54:C2:17:61:DF:3C:7A:DF:FB X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ed:5a:30:6f:10:46:91:7b:bc:8f:4e:9d:50:8b:25:01:88: cb:4c:c7:16:c3:b5:b1:6c:a4:d4:82:c6:3c:47:20:ac:21:9a: 81:32:05:d9:de:2c:4c:d7:66:86:b4:75:37:1d:e9:76:ed:6c: e7:49:33:5f:4c:e4:d2:15:f9:02:23:93:4a:f0:97:16:91:71: 3b:c9:73:1c:11:0b:aa:12:1a:a5:23:e7:b5:7f:ab:ca:d3:08: a4:49:b3:a1:f4:57:ca:4b:b4:a7:1b:c5:e1:57:2c:42:5f:da: c3:d5:fa:9e:bb:57:ca:1b:02:0d:d0:03:0e:3d:97:64:8d:f7: c5:2f:c8:98:98:85:38:7b:c0:66:b4:97:28:0a:a2:59:f1:2e: f2:2d:29:9b:74:05:28:e7:99:8b:5e:7c:8f:fa:3a:ff:32:ef: b8:79:70:45:b5:d3:0f:04:02:ae:37:9f:6b:f8:da:b2:e5:4b: 2a:5d:23:13:88:a5:84:51:1d:73:3a:c6:69:bb:ff:0f:8b:33: f2:99:61:c3:51:cb:08:08:e9:3c:09:e6:23:b8:7a:4f:75:96: d1:a6:82:32:77:59:a0:23:7f:01:da:5a:49:2e:bc:bc:4c:ff: 19:bb:83:01:8f:6d:7e:6f:b3:f4:ad:d7:18:0c:f0:9c:d3:34: e4:99:1d:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDF/ABJMDpYJ8CYAfVFgEOoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjYwOTIxMjIwMDIxWhcNMjYwOTIyMjIwMDIxWjAzMTEwLwYDVQQD EyhlODkzNjRkMDJmMDk2YjcwYWQwNzI1NTRjMjE3NjFkZjNjN2FkZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkyUcfyRAx3tXIOMv7FkLQHraEVn /aukRElAILbmpkwarz3MoSDak16yez2Z/icEiq5bYztjRmK+qftDiK/fn6t6mbLo S7+pZC/0eIadGm3lcTZOjWmfuYCKt1Ztra8n5OcRoj376b5pHDUZjUn5LbLw4KBz 1SyUlZw50vB5KtTucdE32MfbH+f1l+H1yr2UguPGYjth/UzSSnOYWhgBOoX947EX hwRAOn7uDiN5rL3aU8+QPooAsgVlHfa2KSzOXP+MKCQi+Mn3fvZw6gKsDx3/Lf4T fGtDBrzbPVnwCpRi/HjgbXHksrEK5E27foumgU5zDk0STL1fnFcSe7IdEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiTZNAvCWtwrQclVMIXYd88et/7MB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAge1aMG8Q RpF7vI9OnVCLJQGIy0zHFsO1sWyk1ILGPEcgrCGagTIF2d4sTNdmhrR1Nx3pdu1s 50kzX0zk0hX5AiOTSvCXFpFxO8lzHBELqhIapSPntX+rytMIpEmzofRXyku0pxvF 4VcsQl/aw9X6nrtXyhsCDdADDj2XZI33xS/ImJiFOHvAZrSXKAqiWfEu8i0pm3QF KOeZi158j/o6/zLvuHlwRbXTDwQCrjefa/jasuVLKl0jE4ilhFEdczrGabv/D4sz 8plhw1HLCAjpPAnmI7h6T3WW0aaCMndZoCN/AdpaSS68vEz/GbuDAY9tfm+z9K3X GAzwnNM05Jkdbg== -----END CERTIFICATE-----Generated at Tue Sep 22 06:32:52 2026 by rpki-client