$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft File: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft (raw, json) Hash identifier: 5LVF9DDuRfKUOhE/5/Wli2hOXbCyMHqS5J1akyC9GjU= Subject key identifier: 8E:A3:19:AC:57:79:8D:31:4F:B8:8D:C2:86:EC:5F:D1:AB:1F:4B:EA Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1 Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1 Certificate serial: 01A0CA467240ABBCE944FD2FAD8BE980D004 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft Manifest number: 0254 Signing time: Tue 22 Sep 2026 18:00:09 +0000 Manifest this update: Tue 22 Sep 2026 18:00:09 +0000 Manifest next update: Wed 23 Sep 2026 18:00:09 +0000 Files and hashes: 1: 0PwBP1m5V8tHPFCHGGYOau0rRTc.roa (hash: M0W/FLJbKezFVRY+boZRSGO4f4RhltYple/V23X0j4c=) 2: 1vK1T7KdFH0hBpOuHuKe8W_luZE.roa (hash: qhZOYXpVTc+RHC0IfCFs2RzEIVYZAgoD6YvTFLHwFmE=) 3: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl (hash: iuY3+uN8iX+Kokn+nme9uhaacr0DLjZ9MpuLj/Q413A=) 4: JcePCXWu8_9ZZzjxfVygKM8dWzw.roa (hash: 0S4YgLpuoSBRqOUxV6YpZdqEiuMF4cz82gQj2otpNQw=) 5: Md-o3lGIoXUo9ynVTwQnDQUNyzM.roa (hash: AWCf1DkAv4fQq3K+BQw40VyMuDn4MGmNjixx31UPhmA=) 6: Nd6V0QCloRDIZfwDcQtVL1w6Z0A.roa (hash: TIjs2IbFM1v00nTvmxBW2uHZechx9jNZhQSCyvBAeP8=) 7: O9sJ-_TKMq6bS7__E1UX2XB1imA.roa (hash: +Z6Yn/3PglFToHJ9MMw/pkkVUwEYwsRd5WZO7o88I9I=) 8: QEGryiURhVI85Y_iwFPpO1kjb3E.roa (hash: f7QZn8PJdOvgT/DCDoEpmb1SfJG64+IFdudonB3DpJU=) 9: S64PRp6HfgfeBA5dqF_nm378oSE.roa (hash: KH+IlbpUNkPXeoQclXeI5i/KLaVnfhqbd5izf4u4qTc=) 10: SHnHAD4XActufnWbDbBuCezR5sk.roa (hash: nenlz/3VAG7POjOi6mcs6RNeMaF2/86fDvCTf+cSRc4=) 11: Sq_qOTsf7wVB0vwgreS3nB_jIPk.roa (hash: OK/CHpHTM2yPPc6litBPMbap80Y0eTVdGYncN8WvmXg=) 12: VTvDdxCNdn_BPeZovGaO3zvHn-c.roa (hash: /82kfcvdmxFyaaXRLhtB6elmf3XA4bQBsOc05JD7WPw=) 13: XZAVpeao-MzWMM0T1IBuo6mJOhw.roa (hash: 4OhzlwI1uDhgkruwa46Ix7LBdf/mbvESkAg3CQYlmdQ=) 14: bGTHKMCwmJVzyHYU3KNYDg0jpi4.roa (hash: t9eEDkdFYwdSvb8hr3A4ec+b83VLHsVFWQATSd2+69k=) 15: bTLlcnL0Fm_nCJarfemQWZlQvug.asa (hash: +U6OavydfvrqqdI9vdtdZM6LAnVLXxOVl7v9NGcpnyo=) 16: fYhnGLcy2_Ou27KADH18mycTzz4.roa (hash: sP66OdJ/+I0oQxB3kcnMaYSOI2OOAjekthsNq69mxkE=) 17: g9eBBErf7cGntKTfm3PnpI6Ysa8.roa (hash: L1Y5INt4k++fXqtaolFcZdxOvA8W927R6H65T4L/Fcg=) 18: vSXSp5A3lM38ZHU363V73iY2sOY.roa (hash: OEc0FstKUDyge4yjj89lJISWQxLtMasQvdcX8uQFwbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ca:46:72:40:ab:bc:e9:44:fd:2f:ad:8b:e9:80:d0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1 Validity Not Before: Sep 22 18:00:09 2026 GMT Not After : Sep 23 18:00:09 2026 GMT Subject: CN=8ea319ac57798d314fb88dc286ec5fd1ab1f4bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d3:e8:76:f7:9c:03:28:64:8e:af:a6:1f:c2: 81:c4:21:ee:33:bd:7f:ea:fe:37:aa:f5:ad:e9:f2: 8d:1f:6a:74:22:09:4f:c0:b0:93:12:23:03:c9:ad: c8:98:16:ad:c3:4d:eb:32:f0:41:69:d0:33:a3:6f: 4e:0f:62:8e:19:ec:a7:19:76:d0:16:28:0a:57:59: 24:7e:7f:09:85:88:05:81:8a:85:80:8c:91:f7:af: 53:7a:28:f5:db:c9:6d:61:20:86:f7:0f:61:07:04: 3c:1d:45:67:ff:f7:09:f6:e5:a7:42:cc:8b:c3:a0: 2c:b9:69:ce:83:fb:6e:6d:8b:3e:30:c3:24:24:fc: fd:3a:32:7b:e1:41:af:9b:cc:08:85:68:d0:2a:c9: 7d:f7:8d:2e:7f:73:4b:72:fb:73:af:61:aa:a5:15: 23:61:50:66:df:7c:73:46:69:2a:70:21:e2:22:77: 99:51:9e:fe:b5:76:46:a2:d0:4c:43:fc:21:32:cd: 96:aa:bc:49:81:69:bf:d1:2f:c7:ed:c8:2c:dd:73: 3d:fc:37:63:fc:44:35:c7:52:ee:ad:da:73:fd:e7: 1c:12:c2:2f:4a:25:a3:9c:85:9a:c6:e0:5c:9c:c5: 95:42:75:8c:36:3d:a1:60:a7:c8:37:0e:44:ee:f7: 27:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A3:19:AC:57:79:8D:31:4F:B8:8D:C2:86:EC:5F:D1:AB:1F:4B:EA X509v3 Authority Key Identifier: keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:5f:d5:52:73:3a:30:89:90:aa:cf:a8:04:07:e5:16:a2:f4: e3:30:b7:02:57:0a:9b:1c:ee:30:92:65:a7:60:ff:66:1f:7d: 7c:d3:88:b3:20:db:6c:8f:85:85:d3:a3:30:f6:b6:e9:ff:9b: e9:52:38:d8:de:4d:fc:21:fa:11:25:dc:ac:c7:32:e5:41:d5: 5c:1d:a6:f6:3e:f2:c5:74:b5:d1:16:79:d6:23:3f:b5:cb:ab: bd:89:03:3c:36:ac:72:71:91:d0:36:db:10:cd:4d:02:e2:28: 73:a3:92:e2:2d:77:63:0c:ae:a2:29:73:d2:d1:c9:d5:39:c1: 20:20:64:f2:84:1c:c0:47:2f:29:04:3b:fb:42:78:b5:07:70: 49:94:4b:8e:4e:f1:84:7e:e3:39:fb:73:b1:d6:52:d5:a2:15: 87:56:36:b9:b0:bb:e5:6e:21:7b:9a:48:a8:ca:80:83:a7:a4: 2b:b8:02:ca:2c:77:c4:4b:71:6d:d5:21:e8:d7:c3:a1:cd:a3: 45:64:04:18:8c:68:5f:c2:b2:92:c9:cf:42:98:88:cb:22:ab: 20:13:37:c6:ce:d8:47:c9:58:32:97:9c:4c:cd:50:d0:83:d7: 20:b1:0e:96:e8:45:82:fa:5e:21:1a:21:a7:74:d2:0b:fe:53: 8c:a9:0c:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDKRnJAq7zpRP0vrYvpgNAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMGJkY2M0NDQxNzNmNTk5NGRlMzRhM2JmNjNmM2FkOTc2 NGM2ZDEwHhcNMjYwOTIyMTgwMDA5WhcNMjYwOTIzMTgwMDA5WjAzMTEwLwYDVQQD Eyg4ZWEzMTlhYzU3Nzk4ZDMxNGZiODhkYzI4NmVjNWZkMWFiMWY0YmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtPodvecAyhkjq+mH8KBxCHuM71/ 6v43qvWt6fKNH2p0IglPwLCTEiMDya3ImBatw03rMvBBadAzo29OD2KOGeynGXbQ FigKV1kkfn8JhYgFgYqFgIyR969Teij128ltYSCG9w9hBwQ8HUVn//cJ9uWnQsyL w6AsuWnOg/tubYs+MMMkJPz9OjJ74UGvm8wIhWjQKsl9940uf3NLcvtzr2GqpRUj YVBm33xzRmkqcCHiIneZUZ7+tXZGotBMQ/whMs2WqrxJgWm/0S/H7cgs3XM9/Ddj /EQ1x1Lurdpz/eccEsIvSiWjnIWaxuBcnMWVQnWMNj2hYKfINw5E7vcnUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6jGaxXeY0xT7iNwobsX9GrH0vqMB8GA1UdIwQY MBaAFPAL3MREFz9ZlN40o79j862XZMbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYt Y2ZhNWE0Yjg5ODZiLzEvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYtY2ZhNWE0Yjg5ODZi LzEvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAV/VUnM6 MImQqs+oBAflFqL04zC3AlcKmxzuMJJlp2D/Zh99fNOIsyDbbI+FhdOjMPa26f+b 6VI42N5N/CH6ESXcrMcy5UHVXB2m9j7yxXS10RZ51iM/tcurvYkDPDascnGR0Dbb EM1NAuIoc6OS4i13Ywyuoilz0tHJ1TnBICBk8oQcwEcvKQQ7+0J4tQdwSZRLjk7x hH7jOftzsdZS1aIVh1Y2ubC75W4he5pIqMqAg6ekK7gCyix3xEtxbdUh6NfDoc2j RWQEGIxoX8KyksnPQpiIyyKrIBM3xs7YR8lYMpecTM1Q0IPXILEOluhFgvpeIRoh p3TSC/5TjKkM2A== -----END CERTIFICATE-----Generated at Wed Sep 23 03:38:32 2026 by rpki-client