$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft File: 8uFg8M5eA1rzyyH039BOq56n7lE.mft (raw, json) Hash identifier: iEaVpAa3i+Y+08UWWbv1kVEim6keEzj9XGvY6DpEInY= Subject key identifier: A8:FB:E0:22:F8:3D:EF:C5:95:45:2D:E0:C4:44:85:43:AB:18:75:43 Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Certificate serial: 019D27049221D11AB68181C133EE754671C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft Manifest number: AF Signing time: Wed 25 Mar 2026 22:01:44 +0000 Manifest this update: Wed 25 Mar 2026 22:01:44 +0000 Manifest next update: Thu 26 Mar 2026 22:01:44 +0000 Files and hashes: 1: 8uFg8M5eA1rzyyH039BOq56n7lE.crl (hash: vljuYh8UvOKU0iALZlnJM/KqhLDuTHHTDDI5ZnRnY0Q=) 2: BSsRECuRcbwMW98kdWWK05egVBw.roa (hash: ug6KO2Zk1MrKsNXGJ9omTpAuU0xr+emz7VoOCmkwvpw=) 3: FRRRnwExpXw7a2MuDv5ABSNE0os.roa (hash: 3ZQFCRFjP8UeMQLhH1/qjBrVW66rsV7z4ra4rGbF/Rk=) 4: IYhXGcvuReRwLkKFqkHfMT0xdMQ.roa (hash: P65YHmORj/Qbi7gb1HICB61t5DJTFwQfC/ueE2C3wHQ=) 5: LD4LiJakMnd2fM_muaGzK3OCDm4.roa (hash: 06z+15zWX5rCsS3FhV81kHp2Sa4vXMzL9qdPTiJ9zeM=) 6: W6axFsn-vbQYLWwnDT47_wx3Q3c.roa (hash: Rtry8Utgwi6S+gFf7iEFH1/gJHIzc/FxYDg1Nh4bbns=) 7: WP5VLGI4ulmSbNxBPukglNbdBRA.roa (hash: RpQ3sBuNfVrqecm0+dZDQsCQlQ/PR1NRrFc8o4XUGjw=) 8: Xly4VLCyL4qx8pSp8FuBHSdiGps.roa (hash: jb5/yBQShc5nvMqwZkFvyoehznPlqSgb+AtitziDdAI=) 9: ZZ8EJAvAm0C06wzFaBzSONJZFPk.roa (hash: HIvZs/TkMx+bymwhUhZwvlQVHu6QM24ito4FjiIQX2c=) 10: gDVnbdgyGBxPjaEc46h1SC6bKGc.roa (hash: bRdUEdhFNf/pMvUllLg5PTYpswbssaY0ednf3AqAQx4=) 11: ilqY9c8IbcEKTWk24AXRgSNrWO0.roa (hash: m73bbuMRMSiNr5UeY5P6BQ8Ud8zaXgZ2oA4zOG5Tf2M=) 12: s0HOCx3ToCFGRzZUHm_UV-cLZBI.roa (hash: OKS1HAKlGU2JN5vzskZAI17mKtPa16rejzU50FR3zwM=) 13: sGNYZDKF8s8_UsTeuK9XpTB6Wkw.roa (hash: gaT8D+qDaVi3KbUN95vQ0WglNN0OnaGWaUxlYVphb+c=) 14: xyq2X_f3zC6Xz55IxSXIUgnM5z4.roa (hash: NjWdv7TCmRAiHCp58PtMucOC3ZgidTmZVOahys71z+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:04:92:21:d1:1a:b6:81:81:c1:33:ee:75:46:71:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Validity Not Before: Mar 25 22:01:44 2026 GMT Not After : Mar 26 22:01:44 2026 GMT Subject: CN=a8fbe022f83defc595452de0c4448543ab187543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c1:77:27:1f:6e:f5:ba:72:09:a4:58:a8:89: 3b:7c:ef:66:37:d8:58:5b:75:d4:4c:86:3e:40:c5: ac:44:99:3e:bd:92:93:e8:28:94:83:5b:6d:7d:4f: 12:ba:54:65:3a:19:50:f5:36:de:f1:05:ad:85:35: e8:74:19:2b:de:29:c1:ff:8a:49:0a:9e:e0:4c:58: dc:bc:19:85:1d:f5:65:45:36:85:34:14:db:1a:a9: 1b:a7:b6:1d:1c:30:7c:39:1f:4e:57:df:82:8d:1a: 95:b2:08:25:de:e7:59:07:c4:89:b1:62:21:01:61: 84:78:d0:94:37:7f:53:93:a7:0e:f9:18:9a:02:7d: b7:84:44:ce:bc:f3:7a:3d:4a:0b:6a:76:2e:f2:ea: ee:d6:e8:0c:85:a8:0c:be:89:54:ee:e3:ae:4a:38: 0c:c2:10:48:3b:bb:c5:34:cf:09:f4:56:35:47:3b: bb:78:48:95:d7:61:cf:46:1c:50:bc:d3:a7:80:e5: fa:15:06:9c:00:ea:65:9c:9b:b1:da:10:c0:74:56: 73:d4:9e:8a:1c:38:7e:8b:fb:3d:92:b6:1a:88:55: 56:95:48:54:32:2a:cd:57:79:ce:15:cd:8b:7b:10: 83:cf:ad:aa:f0:7b:ff:52:05:8c:b0:2d:71:bc:a7: 4d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FB:E0:22:F8:3D:EF:C5:95:45:2D:E0:C4:44:85:43:AB:18:75:43 X509v3 Authority Key Identifier: keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ac:22:c5:6d:5c:6d:a1:f8:fd:8f:81:13:1d:77:b0:46:a2: ce:24:e3:69:d3:2d:d5:6f:6a:89:fa:f8:88:6a:15:a5:f9:cc: 97:17:15:33:79:65:9f:7c:4a:52:5d:8d:f2:c4:78:b0:95:c1: 26:32:1f:cd:34:e0:8e:c0:76:85:15:8a:95:f6:09:6b:6c:17: ec:57:6f:47:23:06:ca:24:e1:f4:80:b1:32:ff:6b:69:ff:70: 67:01:14:9f:12:6a:c6:d1:f3:a7:67:0c:a2:d7:87:05:14:3e: 40:f8:69:83:ea:e3:07:52:c0:5a:b1:90:43:95:5f:65:1f:87: 56:c9:59:3a:2d:04:73:63:f2:87:8e:74:e0:cc:ea:c9:66:28: fe:ab:99:50:45:47:7a:f0:ec:75:54:84:98:57:10:6d:9b:e3: 68:65:3e:bb:38:e8:5d:39:c2:e1:3e:4b:ef:64:d2:48:73:00: ee:02:fb:73:94:9f:39:09:31:d9:d2:99:2d:15:1f:6a:da:d7: aa:65:bd:32:24:f9:1b:6d:a5:60:c7:a1:f6:68:7e:e7:04:48: ed:52:dd:9b:8f:83:9d:b7:4e:12:e9:88:4a:03:f0:11:d4:b0: c4:39:e4:05:5f:80:87:7e:29:fd:85:cb:75:9e:b7:7f:4b:c0: 68:52:81:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nBJIh0Rq2gYHBM+51RnHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTE2MGYwY2U1ZTAzNWFmM2NiMjFmNGRmZDA0ZWFiOWVh N2VlNTEwHhcNMjYwMzI1MjIwMTQ0WhcNMjYwMzI2MjIwMTQ0WjAzMTEwLwYDVQQD EyhhOGZiZTAyMmY4M2RlZmM1OTU0NTJkZTBjNDQ0ODU0M2FiMTg3NTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcF3Jx9u9bpyCaRYqIk7fO9mN9hY W3XUTIY+QMWsRJk+vZKT6CiUg1ttfU8SulRlOhlQ9Tbe8QWthTXodBkr3inB/4pJ Cp7gTFjcvBmFHfVlRTaFNBTbGqkbp7YdHDB8OR9OV9+CjRqVsggl3udZB8SJsWIh AWGEeNCUN39Tk6cO+RiaAn23hETOvPN6PUoLanYu8uru1ugMhagMvolU7uOuSjgM whBIO7vFNM8J9FY1Rzu7eEiV12HPRhxQvNOngOX6FQacAOplnJux2hDAdFZz1J6K HDh+i/s9krYaiFVWlUhUMirNV3nOFc2LexCDz62q8Hv/UgWMsC1xvKdNCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKj74CL4Pe/FlUUt4MREhUOrGHVDMB8GA1UdIwQY MBaAFPLhYPDOXgNa88sh9N/QTquep+5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUt ZmNlMjE0YzZmZmRhLzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUtZmNlMjE0YzZmZmRh LzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnawixW1c baH4/Y+BEx13sEaiziTjadMt1W9qifr4iGoVpfnMlxcVM3lln3xKUl2N8sR4sJXB JjIfzTTgjsB2hRWKlfYJa2wX7FdvRyMGyiTh9ICxMv9raf9wZwEUnxJqxtHzp2cM oteHBRQ+QPhpg+rjB1LAWrGQQ5VfZR+HVslZOi0Ec2Pyh4504MzqyWYo/quZUEVH evDsdVSEmFcQbZvjaGU+uzjoXTnC4T5L72TSSHMA7gL7c5SfOQkx2dKZLRUfatrX qmW9MiT5G22lYMeh9mh+5wRI7VLdm4+DnbdOEumISgPwEdSwxDnkBV+Ah34p/YXL dZ63f0vAaFKBUg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:21:22 2026 by rpki-client