$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft File: s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json) Hash identifier: hV3fMow4qIGhM6YMTRfqBdAicufWIcaSrGkoRNtI13E= Subject key identifier: F6:C8:CE:3C:4F:3F:53:E9:94:C4:F9:25:9B:E8:A0:E5:07:03:99:70 Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 01A0C70EA3438625A169BC812B1853D8D640 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft Manifest number: 1A7C Signing time: Tue 22 Sep 2026 03:00:20 +0000 Manifest this update: Tue 22 Sep 2026 03:00:20 +0000 Manifest next update: Wed 23 Sep 2026 03:00:20 +0000 Files and hashes: 1: 0SfcrueR4QFb8tc3xCE9ChZKK7I.roa (hash: IdDOQHOx8rCnzoVeUvZ2P/Vc0fq61+r5BuBjfqgD4w8=) 2: 2-9TE0hGien7uJimnUsiIL-slx4.roa (hash: ITBjj6tI+9B/OwJk2K8Dzw0Ey9IFfvrN1KI8kY4JXFU=) 3: 4yoK_eJAZQm-WbM5DBSju_S_g9Y.roa (hash: lgK4wDh2/dU2RT27074ZUCpZTP9aGuib0EW4Skf9pnw=) 4: 5wHePNmHiLxtlCYvlaGW1MyLNGY.roa (hash: 19szNpHnnm6pkaW4TlJOhu+0nXLMQC+WoPm1n3sfLvM=) 5: 60zN1G8HfzYuFPygt3H-4b18ytU.roa (hash: ZIesJxWGT7Q67L0RiBjzfL/tP6joKKOh3GhApUIGf8w=) 6: KplJ3LduqB8fju8Cp8wVC5kYaEw.roa (hash: 1HTgbzS5o5VYiYxgpRXb60MFv/qXACweKzDFgHcjSQo=) 7: T2XlEh6k8oXA5m_Hmkc7Jeq872U.roa (hash: /9TV0tPt7Hezx8nofCt10e+R7phZBTBRrAT2/hbBfq0=) 8: XD3CHImTefD8FuenptmC1xt8ItM.asa (hash: zINZ70P1S66UVaG5a/xPv//b9AHB0SJycGjf91yrXwY=) 9: a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa (hash: YrbotmHDUF9LRM1RQzShBPkq+JRfuxMVJgnz/gexBZA=) 10: cH5VUqUcKkt9HSVAYge0hus4RzQ.roa (hash: wbhN9oe6hbcxDEr+Ij32oivB3HfT5mVhEID8dWUc5rw=) 11: dIGZhkcQjwXD6TRRSDLTBNo_khY.roa (hash: iHaZdF9YmqdeJqR3BWg40wlZURcExcqa9x9g9e5Q+Sw=) 12: e7AhsDGyXnglWGP4F2vWjFKoYe0.roa (hash: e/toQQVnqhq4qPJ3Y8N1Xo0D5ymFTKzkV6/84IOgDm4=) 13: esK7vUUmoe40XTn02C1nePqnmu4.roa (hash: OEIBdY80QQKHjWxchlaPmmZgXh8xpcGsK6uCERu5/OA=) 14: micpmXuBXJ3dOE45zxgN5f1tySY.roa (hash: timEpEuW2bJbH8o0L2R6fxPkiFxXOpRncmuh270Cg8o=) 15: qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa (hash: H4C9ry+5IfYnCURh7FDnZSYaZWLRwKVBeS8DaqAWsew=) 16: qtDoqnaV9ZZGBUq4tRSN1Fvz-j0.roa (hash: GSE9R+oyIw7xMTL0Ep+U9AxHVf7kythML3j+Y7ovTM8=) 17: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: 527DfUr+hBuQBPIAJRmsB9+d4z9Sm1MOk4H1KkbD5es=) 18: xwR5dZkRnrr1skSXQMNYngkeNa8.roa (hash: hOBraH+aXlwWcJU3uccn3dhXaJ0+izS/UP4kbWzbnEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c7:0e:a3:43:86:25:a1:69:bc:81:2b:18:53:d8:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Sep 22 03:00:20 2026 GMT Not After : Sep 23 03:00:20 2026 GMT Subject: CN=f6c8ce3c4f3f53e994c4f9259be8a0e507039970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:78:ce:c4:af:ad:39:ab:7a:ed:02:66:e1: d7:53:30:16:02:ed:b7:5a:a5:60:cb:79:26:d8:5b: d4:b3:25:df:e3:2a:e4:fa:c6:dd:69:a7:79:bf:16: 12:98:a5:e4:2d:a3:11:3b:63:ad:97:3b:c1:0e:1c: 08:5a:c7:3f:94:9e:c7:a3:ab:de:95:dc:7e:f6:11: 1b:4d:88:61:15:4b:88:d7:f8:96:75:07:12:84:fa: af:58:bf:19:e2:c6:7c:dd:b8:9d:17:2a:bf:ae:38: ba:72:ca:83:63:da:76:a9:5f:ea:ff:59:2d:3b:ba: 46:e3:39:d8:bd:fe:6e:32:af:26:b6:c1:b9:18:d1: 08:ec:83:8d:ad:4e:8a:23:d9:ec:d1:01:80:ba:b7: ff:c7:18:02:6a:26:a7:92:9a:df:c3:8c:8e:5c:46: fa:d4:44:c3:f9:94:48:04:ba:5f:d9:b1:0d:8a:e8: 31:b7:1e:38:67:a8:d5:4e:31:05:cf:ac:8a:41:2d: 93:50:5c:c1:2d:70:42:a1:57:b6:61:17:01:77:b3: d9:dd:32:cc:d7:e4:df:48:9c:c8:e4:b0:2d:74:a6: eb:40:cc:77:f1:f8:5c:1f:ed:f3:8c:cc:22:11:f1: fb:e5:2c:8b:dd:02:37:2d:63:0d:53:fe:dc:b3:32: 88:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C8:CE:3C:4F:3F:53:E9:94:C4:F9:25:9B:E8:A0:E5:07:03:99:70 X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3c:39:cf:00:1b:d0:fb:a2:c9:76:f2:ca:55:40:a6:de:b1: fd:a1:75:9d:d7:c6:ba:72:3e:35:0e:62:db:2e:be:5b:fc:33: 53:37:06:21:23:fa:d6:a1:ba:0c:23:e7:c9:da:b7:55:0c:99: 4d:33:01:09:08:44:e3:b6:80:21:bb:42:f4:e9:99:c3:52:11: d1:14:ae:51:8c:df:73:38:d2:94:fe:32:4d:f6:5b:17:45:d4: 2b:43:44:2a:6a:33:76:81:56:4b:88:a8:57:42:fd:6e:59:f1: 39:18:03:45:7a:81:f8:52:bb:13:ec:b6:65:f1:f9:93:c0:7f: 7b:f2:26:6b:71:0a:76:1c:aa:62:ec:6a:32:a1:59:57:8e:a8: b8:47:0d:79:70:2d:0b:57:5d:cd:29:a9:43:49:2a:3c:9b:4f: e9:93:5a:95:55:5e:d9:67:0d:ff:e9:a9:80:de:a1:82:61:ba: 51:82:fc:a5:2d:b4:db:de:b6:a6:32:9e:70:77:7f:9c:b4:04: 67:2d:e5:1f:e9:73:13:86:f1:bd:ed:55:6f:45:71:9a:9b:c7: 19:ac:72:bd:6a:ea:79:d0:9f:5e:90:9b:32:df:36:db:4d:54: 6e:e1:88:80:49:55:fa:29:c0:60:9d:b2:a9:c0:4e:bc:9b:cc: 11:5f:ca:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDHDqNDhiWhabyBKxhT2NZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjYwOTIyMDMwMDIwWhcNMjYwOTIzMDMwMDIwWjAzMTEwLwYDVQQD EyhmNmM4Y2UzYzRmM2Y1M2U5OTRjNGY5MjU5YmU4YTBlNTA3MDM5OTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+F4zsSvrTmreu0CZuHXUzAWAu23 WqVgy3km2FvUsyXf4yrk+sbdaad5vxYSmKXkLaMRO2OtlzvBDhwIWsc/lJ7Ho6ve ldx+9hEbTYhhFUuI1/iWdQcShPqvWL8Z4sZ83bidFyq/rji6csqDY9p2qV/q/1kt O7pG4znYvf5uMq8mtsG5GNEI7IONrU6KI9ns0QGAurf/xxgCaiankprfw4yOXEb6 1ETD+ZRIBLpf2bENiugxtx44Z6jVTjEFz6yKQS2TUFzBLXBCoVe2YRcBd7PZ3TLM 1+TfSJzI5LAtdKbrQMx38fhcH+3zjMwiEfH75SyL3QI3LWMNU/7cszKIGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbIzjxPP1PplMT5JZvooOUHA5lwMB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTw5zwAb 0PuiyXbyylVApt6x/aF1ndfGunI+NQ5i2y6+W/wzUzcGISP61qG6DCPnydq3VQyZ TTMBCQhE47aAIbtC9OmZw1IR0RSuUYzfczjSlP4yTfZbF0XUK0NEKmozdoFWS4io V0L9blnxORgDRXqB+FK7E+y2ZfH5k8B/e/Ima3EKdhyqYuxqMqFZV46ouEcNeXAt C1ddzSmpQ0kqPJtP6ZNalVVe2WcN/+mpgN6hgmG6UYL8pS202962pjKecHd/nLQE Zy3lH+lzE4bxve1Vb0VxmpvHGaxyvWrqedCfXpCbMt82201UbuGIgElV+inAYJ2y qcBOvJvMEV/Kdg== -----END CERTIFICATE-----Generated at Tue Sep 22 07:11:28 2026 by rpki-client