$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: jeXnzHrGjZFPaueM10rLmHq+YQdzmyx4K9HkqDRp0so= Subject key identifier: 5A:7F:59:93:1F:EC:A2:3F:79:C5:52:97:B0:D2:2A:04:56:9A:65:ED Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019E1DC70AAD2577094324DF3213E4B408D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 190F Signing time: Tue 12 May 2026 20:00:44 +0000 Manifest this update: Tue 12 May 2026 20:00:44 +0000 Manifest next update: Wed 13 May 2026 20:00:44 +0000 Files and hashes: 1: 6EiFZKIQWAEn8OFVy62rq2hePVc.roa (hash: QqaEwKcSsaYt3wwf9x5zbgaPoA6qxMBDNuqLJjfSh3E=) 2: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: cbcAdD4szr1vrutNSO+RLYJKPfZAwnuNbcx3jBAryjo=) 3: 8nyc8D2U6ZLNC1jg1xTgLIB5O08.roa (hash: UjE3wubUY3p3vPXEL528/Y/zzZrPn9j4CkCZh6HPAm8=) 4: D8drYTgqt32Cqf3EAiV6kDEeJmQ.roa (hash: z2zUysrNuxBIuhiC3z6/alcclEfX1JrDjmY7TAheY/g=) 5: FutR1Anwjf0YPYgj24VkOnnpOKo.roa (hash: B1PUo1d5o9i7GHA7LLQ+U0epYNN9/13TWk0w7UgND6Y=) 6: HrEvCC8IhGVeGnzBd0VRZALtork.roa (hash: O2TX3efNC8L1kVYPj9yl6qN6Xg9peYzVQTc557TbA/U=) 7: Kpq8EZf55_gV3FvEsn5mjf_dpBU.roa (hash: 2nhGvk06IqlLqxKExuqHomEp9VHs4mN4Vn/X8wYfMBo=) 8: U_LfKCv5kJDOuObeAwMorX4Nmc4.roa (hash: ecSv+ahB4B19FetdtS+R40A/h+b9mvwFfb6awkKuwag=) 9: _x6aIQIYgxoNnvNtpDTT6-qH5fs.roa (hash: j+sPJji49saMlwCW4eBAQImk7LYRvTzCGkaTq0ojLDo=) 10: cCLQDT_9t51iKlaGarf8PuI7ZuE.roa (hash: p225RnWWY7l8rkaX7oOrNPhwDG+u+RY9z5HJIbVDWT8=) 11: dOGEvxWz_zQwe0ywxB_yohVohyM.roa (hash: mrA0JieT5fE1JYF+wUVSCw2S+TnNb/74IV4H+fC+v3w=) 12: wYnNwRf0L8-7zAlQ9eMsEnpatqU.roa (hash: vGGDkEQtDcGYvJgapMsj38d8WJqbdN5ZD4U4q0HVb6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:c7:0a:ad:25:77:09:43:24:df:32:13:e4:b4:08:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: May 12 20:00:44 2026 GMT Not After : May 13 20:00:44 2026 GMT Subject: CN=5a7f59931feca23f79c55297b0d22a04569a65ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:5b:72:bb:7c:b8:ef:fa:ba:25:a2:96:51: b1:3e:ef:4c:13:90:9a:3d:93:bc:25:02:9a:77:69: fc:f7:35:3d:e9:ef:f6:5e:1c:49:d4:f0:20:26:d4: ee:33:99:b6:e9:e5:51:1b:65:4f:e8:ed:41:83:0f: e7:14:d6:7e:ae:e7:c2:1b:ec:b4:83:16:c9:9f:0e: f5:ae:a2:9e:8f:ef:9e:ab:73:fb:3c:11:7a:0a:74: 37:5a:53:ac:ff:a5:cc:b8:53:ae:91:24:26:ca:67: 75:f7:fb:ed:1d:a8:d9:ab:8e:97:82:22:e7:f1:b3: 40:0e:7e:22:3c:e4:c1:3c:b6:26:72:8c:39:6d:fb: 09:f9:1c:fc:20:a0:35:0f:cb:00:fc:41:93:69:4f: b9:c4:e6:a4:35:a1:27:69:fe:99:2d:ed:05:ee:c6: cd:b7:c1:13:e3:16:af:e2:4b:fd:23:99:d5:f8:67: f0:55:d1:f6:09:bb:57:3a:b5:5d:07:49:cb:43:fa: 32:a5:aa:2d:7b:c4:7c:4e:ac:3a:f0:aa:4f:5b:25: 48:39:d4:cd:a4:26:e3:00:77:dc:68:a8:c2:a9:75: f3:cc:34:bd:f4:77:51:d1:0d:38:b1:4d:30:6b:ae: cb:9a:e4:73:85:19:b2:b6:fd:1c:44:29:04:c3:0e: 8f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7F:59:93:1F:EC:A2:3F:79:C5:52:97:B0:D2:2A:04:56:9A:65:ED X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:83:ac:d7:19:dd:fb:6f:ba:69:5f:19:cb:18:3c:f6:67:5a: 81:6e:2e:df:b2:2a:b6:36:ba:5e:d6:e9:dd:a2:35:1c:ba:2a: 3b:77:d5:86:03:c0:f5:a0:31:00:91:8f:8a:0b:71:47:36:7b: f1:4d:1a:a0:39:43:18:92:80:c7:3b:15:4a:2f:8d:20:07:4d: cc:77:13:36:6a:4b:17:93:16:b8:c2:0e:97:17:22:f6:67:38: d3:22:47:81:54:f9:75:98:89:01:30:25:cf:68:b4:53:8f:13: 19:c7:a4:c5:af:34:a0:19:7e:9b:e0:a6:ff:f0:9b:bf:5b:d6: a7:7b:1a:0e:e1:dd:dc:16:13:a1:fd:e8:71:22:8b:c5:b1:66: 82:c7:e6:b8:44:1c:53:c3:c6:da:33:53:f1:f8:a6:17:5a:48: 7e:05:d8:70:9a:14:eb:36:43:17:b3:44:1d:9f:df:63:5f:e3: df:20:b5:a0:e1:03:92:c0:ae:b8:9e:91:db:78:09:ec:9f:0f: e2:14:db:bb:5d:32:ed:81:8e:ec:00:c2:1c:62:ef:09:03:26: 39:d9:e0:f7:ad:3e:00:99:80:32:36:e0:ec:81:79:c4:9e:d8: 15:5f:f1:25:5a:2e:55:a1:0c:d9:88:18:8b:fc:9b:b0:e2:2f: 80:be:3f:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dxwqtJXcJQyTfMhPktAjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwNTEyMjAwMDQ0WhcNMjYwNTEzMjAwMDQ0WjAzMTEwLwYDVQQD Eyg1YTdmNTk5MzFmZWNhMjNmNzljNTUyOTdiMGQyMmEwNDU2OWE2NWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv19bcrt8uO/6uiWillGxPu9ME5Ca PZO8JQKad2n89zU96e/2XhxJ1PAgJtTuM5m26eVRG2VP6O1Bgw/nFNZ+rufCG+y0 gxbJnw71rqKej++eq3P7PBF6CnQ3WlOs/6XMuFOukSQmymd19/vtHajZq46XgiLn 8bNADn4iPOTBPLYmcow5bfsJ+Rz8IKA1D8sA/EGTaU+5xOakNaEnaf6ZLe0F7sbN t8ET4xav4kv9I5nV+GfwVdH2CbtXOrVdB0nLQ/oypaote8R8Tqw68KpPWyVIOdTN pCbjAHfcaKjCqXXzzDS99HdR0Q04sU0wa67LmuRzhRmytv0cRCkEww6PiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFp/WZMf7KI/ecVSl7DSKgRWmmXtMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYOs1xnd +2+6aV8Zyxg89mdagW4u37Iqtja6Xtbp3aI1HLoqO3fVhgPA9aAxAJGPigtxRzZ7 8U0aoDlDGJKAxzsVSi+NIAdNzHcTNmpLF5MWuMIOlxci9mc40yJHgVT5dZiJATAl z2i0U48TGcekxa80oBl+m+Cm//Cbv1vWp3saDuHd3BYTof3ocSKLxbFmgsfmuEQc U8PG2jNT8fimF1pIfgXYcJoU6zZDF7NEHZ/fY1/j3yC1oOEDksCuuJ6R23gJ7J8P 4hTbu10y7YGO7ADCHGLvCQMmOdng960+AJmAMjbg7IF5xJ7YFV/xJVouVaEM2YgY i/ybsOIvgL4/PQ== -----END CERTIFICATE-----Generated at Wed May 13 03:12:59 2026 by rpki-client