$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft File: 8uFg8M5eA1rzyyH039BOq56n7lE.mft (raw, json) Hash identifier: 0FVd1eK77LkZQT2Pbp/O15Nj06CpXxm6kGKZVDh35f8= Subject key identifier: F6:2F:0C:CB:55:12:15:A6:86:49:4A:7E:AE:CA:4B:56:78:54:93:FD Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Certificate serial: 01A1280CD19E49F5A078E0430B2CAB6677F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft Manifest number: 02D8 Signing time: Sat 10 Oct 2026 23:01:31 +0000 Manifest this update: Sat 10 Oct 2026 23:01:31 +0000 Manifest next update: Sun 11 Oct 2026 23:01:31 +0000 Files and hashes: 1: 04GWQbwmgobD06Lv3pwY3XfurdQ.roa (hash: RWe8M5t08UcrE+4pD8aGK2oxIHVHI8ir5iUDM91fMiQ=) 2: 1-BXJvjRZK9EAgxmoIL9zEqtie4U.roa (hash: eIjaA6tFXeGOC8TZxrzK/xbOybNP9upJeQZsoLhhvCc=) 3: 8uFg8M5eA1rzyyH039BOq56n7lE.crl (hash: 1lbcESXHGXPHiu1fjkLmGLr5PTZFi3Y58rY2owV2Rw8=) 4: FRRRnwExpXw7a2MuDv5ABSNE0os.roa (hash: 3ZQFCRFjP8UeMQLhH1/qjBrVW66rsV7z4ra4rGbF/Rk=) 5: G_UPWjhIcvhRhbrsCzFiU4-Xung.roa (hash: 047QljbRvFtkey6qy1tumtUXHbVbw0WiHtNwMdYTktY=) 6: IYhXGcvuReRwLkKFqkHfMT0xdMQ.roa (hash: P65YHmORj/Qbi7gb1HICB61t5DJTFwQfC/ueE2C3wHQ=) 7: LD4LiJakMnd2fM_muaGzK3OCDm4.roa (hash: 06z+15zWX5rCsS3FhV81kHp2Sa4vXMzL9qdPTiJ9zeM=) 8: ZZ8EJAvAm0C06wzFaBzSONJZFPk.roa (hash: HIvZs/TkMx+bymwhUhZwvlQVHu6QM24ito4FjiIQX2c=) 9: ZjMYC0UoF-rr4Yr68ciz53_Avuk.roa (hash: XSFfC2tpTl7pGI7s34smkuOaa4jrXUiaCPuucJLlqxI=) 10: gDVnbdgyGBxPjaEc46h1SC6bKGc.roa (hash: bRdUEdhFNf/pMvUllLg5PTYpswbssaY0ednf3AqAQx4=) 11: hZDY_be1kSFwRaJu_bmjRKYZiBY.roa (hash: JlJ0ot3QRiIyV/kyXdKpPq9UPa6seZ6FnRLu6fR1FZw=) 12: hxVjN4ViTYov07b0DOLl2w6qTEI.roa (hash: 5T+oFS29RJ0l8yQWiVqg0MoWL/i6NlSEWAxcmSYEMqE=) 13: ilqY9c8IbcEKTWk24AXRgSNrWO0.roa (hash: m73bbuMRMSiNr5UeY5P6BQ8Ud8zaXgZ2oA4zOG5Tf2M=) 14: s0HOCx3ToCFGRzZUHm_UV-cLZBI.roa (hash: OKS1HAKlGU2JN5vzskZAI17mKtPa16rejzU50FR3zwM=) 15: sGNYZDKF8s8_UsTeuK9XpTB6Wkw.roa (hash: gaT8D+qDaVi3KbUN95vQ0WglNN0OnaGWaUxlYVphb+c=) 16: v_MCckuvkmHRzh3YWE8nt-ZoR54.roa (hash: FGgmeFbXcFcehxYNJD3aNuzFTZwBgyIrsfMAVTMWYLw=) 17: zykPnjolFt2OKhMEu2SeOAG0N3k.roa (hash: vMmczSDv2P7kmvRApRVGBrOXghKNhAgyXktPnIT3lVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Oct 2026 23:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:28:0c:d1:9e:49:f5:a0:78:e0:43:0b:2c:ab:66:77:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Validity Not Before: Oct 10 23:01:31 2026 GMT Not After : Oct 11 23:01:31 2026 GMT Subject: CN=f62f0ccb551215a686494a7eaeca4b56785493fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a6:f0:73:92:6b:8d:0c:b2:34:6b:0c:b9:5a: b2:5b:7d:29:4a:bf:60:d0:1c:5e:28:73:18:33:58: da:05:6d:11:d6:ab:5b:96:b9:71:d9:14:ec:3f:27: 5a:88:e2:63:c6:36:08:21:90:2d:40:62:2a:d0:dc: be:a6:f6:5a:db:cb:88:fa:8a:63:d4:53:1a:b8:f0: 4a:da:27:ac:a0:76:08:3a:7f:d4:66:85:e6:dd:1c: 5a:7b:fc:7b:ea:56:6b:24:d3:89:30:77:83:76:0f: a9:0d:ae:47:1b:02:4f:e3:eb:30:b0:04:4f:de:b1: b2:1c:8d:b4:c7:ad:ba:42:f2:f5:f7:d9:4d:2d:cd: 38:e8:cf:c4:45:46:e2:06:67:22:f4:d5:16:4d:ed: 35:9f:a2:63:82:e3:8a:fd:8f:ee:65:2c:06:7c:a0: b9:f7:1a:3d:b5:fe:c7:7b:a3:e5:c3:f3:f0:33:cd: 32:27:fd:ab:92:af:ae:0e:4e:80:9e:99:cb:3d:39: 2a:a1:79:d5:05:52:04:92:53:eb:6a:68:6f:f6:31: ec:db:12:61:16:2b:43:c6:f5:50:78:07:e5:10:39: 07:a2:2e:57:6b:01:8e:73:e0:0b:c3:a3:12:9e:5d: d2:46:bb:d5:89:0e:71:42:2b:6b:f8:22:5d:c7:1c: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2F:0C:CB:55:12:15:A6:86:49:4A:7E:AE:CA:4B:56:78:54:93:FD X509v3 Authority Key Identifier: keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:31:50:17:46:dc:e0:26:67:75:30:60:06:ad:2d:67:6e:bb: 86:5b:65:1d:e8:18:b7:68:f4:b3:9e:0f:f3:29:83:68:d1:84: 89:9f:3f:87:53:13:00:cb:e4:80:bc:25:f1:17:18:83:a0:cb: 5a:18:c2:a4:49:29:e7:be:70:06:bf:2c:dd:e6:f7:32:2c:92: d5:fa:d6:a2:a7:02:61:dd:77:d1:af:53:89:e2:db:69:4b:60: e3:77:e8:67:11:71:ec:d4:d2:b2:c8:9b:54:d6:78:09:70:be: 59:08:8f:05:2d:4e:3f:07:9e:dd:3b:1c:6c:37:31:04:c9:64: 4f:1e:ff:22:a1:7d:02:e7:ee:9e:a6:d3:c8:51:2b:fc:cf:0f: 1f:13:cb:5c:d8:0d:7c:2f:e2:c3:56:11:ac:97:04:0f:0a:2d: 79:b4:84:7e:52:ba:d0:00:65:70:c5:48:5d:f4:ec:e7:d9:fd: 19:5e:14:24:6d:3f:1e:ee:b0:95:79:d6:12:83:cb:56:8b:37: ae:54:c7:8d:2e:a1:56:3c:0e:fa:80:9b:fd:09:4d:20:29:5a: 7b:0f:1b:ab:60:d1:31:25:55:6a:47:5f:0a:56:5c:de:de:e4: 06:cf:52:7b:d3:86:63:6f:77:d4:a1:37:50:c1:fa:f3:bc:42: 50:d0:10:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEoDNGeSfWgeOBDCyyrZnf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTE2MGYwY2U1ZTAzNWFmM2NiMjFmNGRmZDA0ZWFiOWVh N2VlNTEwHhcNMjYxMDEwMjMwMTMxWhcNMjYxMDExMjMwMTMxWjAzMTEwLwYDVQQD EyhmNjJmMGNjYjU1MTIxNWE2ODY0OTRhN2VhZWNhNGI1Njc4NTQ5M2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6bwc5JrjQyyNGsMuVqyW30pSr9g 0BxeKHMYM1jaBW0R1qtblrlx2RTsPydaiOJjxjYIIZAtQGIq0Ny+pvZa28uI+opj 1FMauPBK2iesoHYIOn/UZoXm3Rxae/x76lZrJNOJMHeDdg+pDa5HGwJP4+swsARP 3rGyHI20x626QvL199lNLc046M/ERUbiBmci9NUWTe01n6JjguOK/Y/uZSwGfKC5 9xo9tf7He6Plw/PwM80yJ/2rkq+uDk6AnpnLPTkqoXnVBVIEklPramhv9jHs2xJh FitDxvVQeAflEDkHoi5XawGOc+ALw6MSnl3SRrvViQ5xQitr+CJdxxza+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYvDMtVEhWmhklKfq7KS1Z4VJP9MB8GA1UdIwQY MBaAFPLhYPDOXgNa88sh9N/QTquep+5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUt ZmNlMjE0YzZmZmRhLzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUtZmNlMjE0YzZmZmRh LzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzFQF0bc 4CZndTBgBq0tZ267hltlHegYt2j0s54P8ymDaNGEiZ8/h1MTAMvkgLwl8RcYg6DL WhjCpEkp575wBr8s3eb3MiyS1frWoqcCYd130a9TieLbaUtg43foZxFx7NTSssib VNZ4CXC+WQiPBS1OPwee3TscbDcxBMlkTx7/IqF9AufunqbTyFEr/M8PHxPLXNgN fC/iw1YRrJcEDwotebSEflK60ABlcMVIXfTs59n9GV4UJG0/Hu6wlXnWEoPLVos3 rlTHjS6hVjwO+oCb/QlNIClaew8bq2DRMSVVakdfClZc3t7kBs9Se9OGY2931KE3 UMH687xCUNAQoQ== -----END CERTIFICATE-----Generated at Sun Oct 11 07:41:41 2026 by rpki-client