$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: leMZBa27OeDO+gi0VFjqXAryDkTDQKfgGzKJ+MKEp+4= Subject key identifier: CA:B7:2F:0C:F4:AF:BE:E6:43:24:B6:14:48:EB:1C:BA:0E:54:BC:FF Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019D28846FA522D0955CB53F82A3D9E11F11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 1890 Signing time: Thu 26 Mar 2026 05:01:01 +0000 Manifest this update: Thu 26 Mar 2026 05:01:01 +0000 Manifest next update: Fri 27 Mar 2026 05:01:01 +0000 Files and hashes: 1: 6EiFZKIQWAEn8OFVy62rq2hePVc.roa (hash: QqaEwKcSsaYt3wwf9x5zbgaPoA6qxMBDNuqLJjfSh3E=) 2: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: cN3uWlBAK304PG8gnr8TnD3QXctm6sdbmoeelqOA2jc=) 3: 8nyc8D2U6ZLNC1jg1xTgLIB5O08.roa (hash: UjE3wubUY3p3vPXEL528/Y/zzZrPn9j4CkCZh6HPAm8=) 4: D8drYTgqt32Cqf3EAiV6kDEeJmQ.roa (hash: z2zUysrNuxBIuhiC3z6/alcclEfX1JrDjmY7TAheY/g=) 5: FutR1Anwjf0YPYgj24VkOnnpOKo.roa (hash: B1PUo1d5o9i7GHA7LLQ+U0epYNN9/13TWk0w7UgND6Y=) 6: HrEvCC8IhGVeGnzBd0VRZALtork.roa (hash: O2TX3efNC8L1kVYPj9yl6qN6Xg9peYzVQTc557TbA/U=) 7: Kpq8EZf55_gV3FvEsn5mjf_dpBU.roa (hash: 2nhGvk06IqlLqxKExuqHomEp9VHs4mN4Vn/X8wYfMBo=) 8: U_LfKCv5kJDOuObeAwMorX4Nmc4.roa (hash: ecSv+ahB4B19FetdtS+R40A/h+b9mvwFfb6awkKuwag=) 9: _x6aIQIYgxoNnvNtpDTT6-qH5fs.roa (hash: j+sPJji49saMlwCW4eBAQImk7LYRvTzCGkaTq0ojLDo=) 10: cCLQDT_9t51iKlaGarf8PuI7ZuE.roa (hash: p225RnWWY7l8rkaX7oOrNPhwDG+u+RY9z5HJIbVDWT8=) 11: dOGEvxWz_zQwe0ywxB_yohVohyM.roa (hash: mrA0JieT5fE1JYF+wUVSCw2S+TnNb/74IV4H+fC+v3w=) 12: wYnNwRf0L8-7zAlQ9eMsEnpatqU.roa (hash: vGGDkEQtDcGYvJgapMsj38d8WJqbdN5ZD4U4q0HVb6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 05:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:84:6f:a5:22:d0:95:5c:b5:3f:82:a3:d9:e1:1f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Mar 26 05:01:01 2026 GMT Not After : Mar 27 05:01:01 2026 GMT Subject: CN=cab72f0cf4afbee64324b61448eb1cba0e54bcff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:e8:37:db:8a:8b:74:f5:1e:c8:2a:d4:d8: 7a:7e:d6:bc:d5:40:b3:60:07:c1:ea:8e:91:97:fd: 41:26:32:1b:88:ea:83:37:ff:ac:92:8d:da:ba:35: bf:4e:72:e0:c0:08:d6:18:aa:3b:a9:27:1b:0b:34: dc:7c:9a:19:ef:02:c6:ec:46:db:bc:8d:51:04:ba: 17:33:e2:f2:40:92:e5:87:24:8e:c4:6f:13:f3:5b: ba:57:92:7c:e5:74:f3:76:47:d7:f5:6e:06:1c:95: 7c:f8:ff:18:d0:25:cb:5d:79:7b:48:58:e6:17:dd: 92:9f:a2:06:41:65:05:82:af:c9:9c:15:09:86:01: 51:05:c3:11:64:34:53:b3:b1:00:e3:58:15:a2:c1: 1f:16:9b:35:90:05:e5:10:50:ca:f1:ce:4d:e0:77: 75:b2:13:e6:28:be:d6:53:a6:81:da:f9:3a:86:e1: c7:b3:74:42:7c:a8:3d:10:c0:c9:25:a0:9c:67:bd: 39:3e:8e:25:2d:4f:7e:46:90:f3:a9:55:47:8d:ef: e0:13:e3:78:12:af:73:04:42:e4:84:df:e9:fb:1b: 32:05:4d:6c:1a:f9:c1:57:de:a8:b1:8f:51:6f:e3: 48:24:76:76:3d:cc:94:a5:bf:2c:a2:e2:69:31:34: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B7:2F:0C:F4:AF:BE:E6:43:24:B6:14:48:EB:1C:BA:0E:54:BC:FF X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:30:69:c7:31:b4:5a:5f:f6:d5:c1:dd:cb:19:1b:77:85:b9: 1d:8d:27:5e:98:2d:d2:98:79:42:7b:fc:2f:0e:b6:cb:60:d3: 41:c8:fa:53:b1:9c:fe:02:e3:51:72:f0:64:63:43:2a:f1:6c: a1:d8:01:96:6b:8a:98:fd:b0:c2:93:e0:9b:48:36:ad:38:6f: f5:e3:26:86:4d:9d:98:3c:bc:6d:a0:98:33:b2:09:8c:05:f0: 2a:3c:f3:07:01:f2:46:fa:51:9d:6b:82:ac:4b:e0:80:f9:c4: 3f:d3:78:6b:b4:2a:39:1b:d6:52:9b:63:84:ad:c1:9e:a3:01: 59:84:e9:27:fe:a1:b7:fd:56:e0:25:ca:a2:66:1d:5d:af:7a: 64:ec:3d:08:ce:9a:86:e8:3c:8d:61:3f:ba:a1:01:fd:b7:b9: 3b:97:b4:c6:c7:c2:4f:5f:96:19:8e:dc:5c:03:1c:08:25:ea: 37:19:69:0b:16:73:ee:5f:d6:a4:ba:fd:6a:a3:fe:cd:54:e3: 4a:e3:03:04:3c:f9:6b:be:48:77:2e:d5:78:45:5c:89:b9:d1: 4c:9b:ff:01:e9:e1:60:57:4f:ef:94:87:fd:ab:1c:66:12:f9: 35:bd:c2:45:07:30:48:cd:b5:fd:30:fe:0f:1a:c1:2d:2c:59: 91:a0:34:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ohG+lItCVXLU/gqPZ4R8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwMzI2MDUwMTAxWhcNMjYwMzI3MDUwMTAxWjAzMTEwLwYDVQQD EyhjYWI3MmYwY2Y0YWZiZWU2NDMyNGI2MTQ0OGViMWNiYTBlNTRiY2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgvoN9uKi3T1Hsgq1Nh6fta81UCz YAfB6o6Rl/1BJjIbiOqDN/+sko3aujW/TnLgwAjWGKo7qScbCzTcfJoZ7wLG7Ebb vI1RBLoXM+LyQJLlhySOxG8T81u6V5J85XTzdkfX9W4GHJV8+P8Y0CXLXXl7SFjm F92Sn6IGQWUFgq/JnBUJhgFRBcMRZDRTs7EA41gVosEfFps1kAXlEFDK8c5N4Hd1 shPmKL7WU6aB2vk6huHHs3RCfKg9EMDJJaCcZ705Po4lLU9+RpDzqVVHje/gE+N4 Eq9zBELkhN/p+xsyBU1sGvnBV96osY9Rb+NIJHZ2PcyUpb8souJpMTTHpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMq3Lwz0r77mQyS2FEjrHLoOVLz/MB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTBpxzG0 Wl/21cHdyxkbd4W5HY0nXpgt0ph5Qnv8Lw62y2DTQcj6U7Gc/gLjUXLwZGNDKvFs odgBlmuKmP2wwpPgm0g2rThv9eMmhk2dmDy8baCYM7IJjAXwKjzzBwHyRvpRnWuC rEvggPnEP9N4a7QqORvWUptjhK3BnqMBWYTpJ/6ht/1W4CXKomYdXa96ZOw9CM6a hug8jWE/uqEB/be5O5e0xsfCT1+WGY7cXAMcCCXqNxlpCxZz7l/WpLr9aqP+zVTj SuMDBDz5a75Idy7VeEVcibnRTJv/AenhYFdP75SH/ascZhL5Nb3CRQcwSM21/TD+ DxrBLSxZkaA09A== -----END CERTIFICATE-----Generated at Thu Mar 26 12:38:27 2026 by rpki-client