$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: /v6utwNpqdjh/HxuEOopcdmhZxgcrPGYo6NbnIKlIEk= Subject key identifier: 97:DD:68:78:0E:2B:90:8F:3F:7A:B2:D8:17:6F:EB:D3:BF:20:38:81 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019F916D9AB4AED6B63C4406CC298BD8A053 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 19DC Signing time: Fri 24 Jul 2026 00:01:47 +0000 Manifest this update: Fri 24 Jul 2026 00:01:47 +0000 Manifest next update: Sat 25 Jul 2026 00:01:47 +0000 Files and hashes: 1: 6EiFZKIQWAEn8OFVy62rq2hePVc.roa (hash: QqaEwKcSsaYt3wwf9x5zbgaPoA6qxMBDNuqLJjfSh3E=) 2: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: cv7vcjkNYwAjOBgAVBTRHLWXC+2yjmnJdvAfsLwEtGU=) 3: 8nyc8D2U6ZLNC1jg1xTgLIB5O08.roa (hash: UjE3wubUY3p3vPXEL528/Y/zzZrPn9j4CkCZh6HPAm8=) 4: D8drYTgqt32Cqf3EAiV6kDEeJmQ.roa (hash: z2zUysrNuxBIuhiC3z6/alcclEfX1JrDjmY7TAheY/g=) 5: FutR1Anwjf0YPYgj24VkOnnpOKo.roa (hash: B1PUo1d5o9i7GHA7LLQ+U0epYNN9/13TWk0w7UgND6Y=) 6: HrEvCC8IhGVeGnzBd0VRZALtork.roa (hash: O2TX3efNC8L1kVYPj9yl6qN6Xg9peYzVQTc557TbA/U=) 7: Kpq8EZf55_gV3FvEsn5mjf_dpBU.roa (hash: 2nhGvk06IqlLqxKExuqHomEp9VHs4mN4Vn/X8wYfMBo=) 8: U_LfKCv5kJDOuObeAwMorX4Nmc4.roa (hash: ecSv+ahB4B19FetdtS+R40A/h+b9mvwFfb6awkKuwag=) 9: _x6aIQIYgxoNnvNtpDTT6-qH5fs.roa (hash: j+sPJji49saMlwCW4eBAQImk7LYRvTzCGkaTq0ojLDo=) 10: cCLQDT_9t51iKlaGarf8PuI7ZuE.roa (hash: p225RnWWY7l8rkaX7oOrNPhwDG+u+RY9z5HJIbVDWT8=) 11: iM98sbe2k1VYrTYz4i_WKVQpI3M.roa (hash: 03SHJ8O0TtLrq1IoptZOUrbF4kDjXLjaj0+w7qMBEN8=) 12: wYnNwRf0L8-7zAlQ9eMsEnpatqU.roa (hash: vGGDkEQtDcGYvJgapMsj38d8WJqbdN5ZD4U4q0HVb6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:6d:9a:b4:ae:d6:b6:3c:44:06:cc:29:8b:d8:a0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Jul 24 00:01:47 2026 GMT Not After : Jul 25 00:01:47 2026 GMT Subject: CN=97dd68780e2b908f3f7ab2d8176febd3bf203881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:05:2f:88:84:f1:be:6b:9b:96:3f:eb:77: 1e:6d:0f:a7:c2:d9:fe:e7:d7:4e:b5:a6:bf:62:7b: cb:10:93:ca:12:ea:86:1a:56:cc:fd:0d:02:92:89: 1c:10:be:31:5f:8f:49:52:e5:04:d8:af:e8:87:0b: d4:b1:46:2b:38:40:00:4a:df:79:66:35:a3:69:e2: ad:a2:f8:2f:c8:b5:df:b4:33:da:f7:39:00:b9:0e: 66:03:8d:73:b4:a8:99:19:50:92:6b:86:09:97:10: 9e:43:62:80:a7:68:d5:f0:54:32:d0:09:10:75:6c: c7:46:d3:7f:21:54:6b:d6:e2:6c:36:81:5f:c9:d3: 24:e7:10:7f:eb:5e:79:63:0c:d4:88:1e:76:e0:be: 61:1d:f4:4e:5e:c7:cf:d3:2d:39:38:1a:46:de:9a: d7:ac:42:7e:12:62:8d:54:e1:dd:f0:eb:9b:b9:4a: 40:87:3b:a5:ee:f1:dd:61:99:4a:70:68:03:d1:73: 6b:92:23:9b:21:fd:1f:54:26:a7:8b:fc:7f:c1:d4: 83:86:21:05:6a:0b:a2:90:4a:b9:00:6f:8c:77:a1: c7:68:1a:61:e9:fd:0c:c9:20:c1:e3:80:ec:1f:6c: 9f:23:35:6f:eb:9f:4e:25:2e:64:2b:cd:64:0a:91: 7d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DD:68:78:0E:2B:90:8F:3F:7A:B2:D8:17:6F:EB:D3:BF:20:38:81 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:11:0d:87:0f:0b:88:38:a9:87:8d:30:0e:c4:64:19:df:55: 83:e6:c5:86:67:70:9d:43:0b:4a:73:e0:f7:62:3f:af:28:af: d3:d8:d4:d3:ab:8f:bb:ca:19:7a:cc:23:e1:c7:52:6f:a2:9c: 88:37:16:7c:dc:eb:79:27:3b:d4:9f:68:f1:76:36:19:5f:3e: e8:a5:f8:ea:b4:89:3c:99:cc:51:74:32:ef:a7:6d:e8:09:67: 8e:6d:fa:ef:a0:7d:ea:a2:e4:37:73:c8:6a:24:af:cc:47:41: 9c:71:ba:d9:39:78:63:b4:95:38:4d:a1:7d:36:c3:c3:a8:15: bd:b1:d0:00:37:38:34:a3:3a:2e:1e:bf:0f:ee:53:e1:0e:d8: 5e:e9:73:b3:2a:ac:1f:11:6c:3c:c6:29:39:91:32:a8:a1:4c: ab:8b:8b:b1:ae:28:e2:90:73:bf:92:f0:c8:b2:fb:a1:a3:07: 0d:4f:9a:1f:89:5b:47:54:0d:22:3a:67:ee:85:25:ad:da:e6: 35:2b:cf:61:3e:82:97:45:ea:41:21:69:69:60:d8:48:34:f0: f8:e4:07:4f:28:99:b3:12:2e:73:1d:11:42:84:a2:79:a3:e7: 5f:a5:4b:1f:7b:41:72:c7:82:01:db:b8:b3:f3:0f:ee:e7:fa: 67:bb:f4:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RbZq0rta2PEQGzCmL2KBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwNzI0MDAwMTQ3WhcNMjYwNzI1MDAwMTQ3WjAzMTEwLwYDVQQD Eyg5N2RkNjg3ODBlMmI5MDhmM2Y3YWIyZDgxNzZmZWJkM2JmMjAzODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvAFL4iE8b5rm5Y/63cebQ+nwtn+ 59dOtaa/YnvLEJPKEuqGGlbM/Q0CkokcEL4xX49JUuUE2K/ohwvUsUYrOEAASt95 ZjWjaeKtovgvyLXftDPa9zkAuQ5mA41ztKiZGVCSa4YJlxCeQ2KAp2jV8FQy0AkQ dWzHRtN/IVRr1uJsNoFfydMk5xB/6155YwzUiB524L5hHfROXsfP0y05OBpG3prX rEJ+EmKNVOHd8OubuUpAhzul7vHdYZlKcGgD0XNrkiObIf0fVCani/x/wdSDhiEF aguikEq5AG+Md6HHaBph6f0MySDB44DsH2yfIzVv659OJS5kK81kCpF9sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfdaHgOK5CPP3qy2Bdv69O/IDiBMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBENhw8L iDiph40wDsRkGd9Vg+bFhmdwnUMLSnPg92I/ryiv09jU06uPu8oZeswj4cdSb6Kc iDcWfNzreSc71J9o8XY2GV8+6KX46rSJPJnMUXQy76dt6Alnjm3676B96qLkN3PI aiSvzEdBnHG62Tl4Y7SVOE2hfTbDw6gVvbHQADc4NKM6Lh6/D+5T4Q7YXulzsyqs HxFsPMYpOZEyqKFMq4uLsa4o4pBzv5LwyLL7oaMHDU+aH4lbR1QNIjpn7oUlrdrm NSvPYT6Cl0XqQSFpaWDYSDTw+OQHTyiZsxIucx0RQoSieaPnX6VLH3tBcseCAdu4 s/MP7uf6Z7v0uQ== -----END CERTIFICATE-----Generated at Fri Jul 24 02:41:43 2026 by rpki-client