$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: M+P0r7nsCnRl7kdW9bWwsTd+wccGOTdGtYUWCJJR3n0= Subject key identifier: 6E:EF:8A:F4:92:4E:8C:0F:26:91:F0:A5:08:08:5A:08:BC:7D:BC:A0 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019E1D5978D91E4D10DBDCA0438FB3C3B029 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 1508 Signing time: Tue 12 May 2026 18:01:03 +0000 Manifest this update: Tue 12 May 2026 18:01:03 +0000 Manifest next update: Wed 13 May 2026 18:01:03 +0000 Files and hashes: 1: 8qONZL-zarmB_Y1tqZfwTzYcBJo.roa (hash: uD7uxv7CcmmCwKrR/rRY/falCkFooXd096XuRKXA53M=) 2: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 3: H52_1NjStSe7bo70-a34b3HOvac.roa (hash: HF55nNJHz3uWR//Z7REZtnPpt29LIrDGhY4TPWFKubA=) 4: P1pfIuguwdyriYi_GQFSe-izAhE.roa (hash: NKnyRGmEF3rjLPF+lRBevLDxlcCGJDG1k5PVPHODwso=) 5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 8: bdiVopGRMa8RC0mEnWv6wm6w_-0.roa (hash: WzAENNvVjV1DRRjD7yBjtCDo9tO1r/3BMLbac/ZE6p0=) 9: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 10: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 11: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 12: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 13: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: 7uNpa3Y5Ww872yj+3ttNsG0j8PTrn10sccrqQviYYjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:78:d9:1e:4d:10:db:dc:a0:43:8f:b3:c3:b0:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: May 12 18:01:03 2026 GMT Not After : May 13 18:01:03 2026 GMT Subject: CN=6eef8af4924e8c0f2691f0a508085a08bc7dbca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:e5:21:4d:e9:2d:51:5c:4c:0c:f0:6a:14: 98:8a:ff:6a:69:26:c7:85:16:06:7a:0f:c0:18:43: 19:4e:c2:72:8a:20:c3:d8:ff:0f:96:ee:51:5e:47: b1:1d:91:16:4c:67:9d:86:66:e5:83:7b:8b:4b:16: d5:8e:09:bb:0e:ec:7e:ff:ba:b6:33:61:7f:17:3e: dc:1f:b7:a1:bd:d8:09:e4:06:38:d6:76:5b:0f:f2: e3:bd:5e:f0:66:dd:f0:d7:2d:a4:22:18:c6:ae:79: 58:1b:d7:a4:73:a9:39:a7:3d:58:e5:2d:27:48:68: 8f:18:af:09:41:c9:3b:0c:70:2e:3d:f1:12:f3:29: 8d:f6:ea:63:cd:bb:27:16:0d:d8:ee:45:20:5c:42: 08:86:74:24:b1:8e:a0:24:d9:3a:e2:55:ae:c5:26: db:37:bd:9a:19:0e:49:a7:f7:aa:69:ac:7a:d9:8e: 66:7b:93:9b:b6:5a:f8:da:7c:41:e6:fa:14:32:1b: 00:75:0c:c4:4c:5c:35:62:1e:76:29:45:24:db:73: 8c:19:80:bf:cd:bb:6c:4d:d9:91:bb:a4:9a:0d:8f: 2d:65:ae:22:23:c7:b4:51:cf:1c:62:84:a4:eb:b2: f8:fd:d9:47:c9:2d:b4:1e:61:d4:92:b1:74:4d:e2: bc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EF:8A:F4:92:4E:8C:0F:26:91:F0:A5:08:08:5A:08:BC:7D:BC:A0 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1a:b3:a5:86:1b:c3:7f:b0:f9:54:8b:97:1b:51:ec:f3:ba: 58:dd:48:37:4c:26:08:05:75:8b:1d:a9:da:37:ec:20:c5:22: 3b:ed:3e:20:97:79:62:c5:c6:7a:7e:ec:f0:ef:08:f2:ef:4b: 4d:d6:ef:c4:5a:1d:3d:4a:50:54:2d:01:1e:2a:c3:0e:c6:4a: 1d:c6:8d:03:54:67:11:40:b0:c3:bc:77:5d:16:e3:1d:69:43: df:a4:6d:3a:00:80:f5:f4:9c:f9:00:47:97:cd:65:49:2a:14: 25:71:19:43:0a:c6:5c:fc:1b:12:b3:2b:b0:b7:8e:93:3f:de: 78:b5:e8:0f:41:da:cb:8f:0a:28:16:91:1c:d0:82:69:96:2d: 77:e1:4e:94:81:d4:dd:b9:43:54:6a:00:c1:e7:d7:5f:45:b4: 4c:5d:b6:b5:c4:e5:42:b2:34:7b:02:44:b8:41:e7:62:c2:21: 65:2f:a1:9e:50:be:e2:59:c2:9d:e3:d3:7a:f8:88:de:09:29: 7f:e7:55:f1:08:a4:0d:97:55:90:d3:f6:11:fa:59:0c:cb:d7: a1:fc:ac:a7:49:a6:49:6b:6b:f4:d0:3a:9b:fd:2e:f6:fa:fe: c3:25:1c:7c:fe:b3:30:13:ed:43:c8:38:f7:1b:7f:20:f8:40: 5e:b9:5e:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWXjZHk0Q29ygQ4+zw7ApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwNTEyMTgwMTAzWhcNMjYwNTEzMTgwMTAzWjAzMTEwLwYDVQQD Eyg2ZWVmOGFmNDkyNGU4YzBmMjY5MWYwYTUwODA4NWEwOGJjN2RiY2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKHlIU3pLVFcTAzwahSYiv9qaSbH hRYGeg/AGEMZTsJyiiDD2P8Plu5RXkexHZEWTGedhmblg3uLSxbVjgm7Dux+/7q2 M2F/Fz7cH7ehvdgJ5AY41nZbD/LjvV7wZt3w1y2kIhjGrnlYG9ekc6k5pz1Y5S0n SGiPGK8JQck7DHAuPfES8ymN9upjzbsnFg3Y7kUgXEIIhnQksY6gJNk64lWuxSbb N72aGQ5Jp/eqaax62Y5me5Obtlr42nxB5voUMhsAdQzETFw1Yh52KUUk23OMGYC/ zbtsTdmRu6SaDY8tZa4iI8e0Uc8cYoSk67L4/dlHyS20HmHUkrF0TeK83wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7vivSSTowPJpHwpQgIWgi8fbygMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihqzpYYb w3+w+VSLlxtR7PO6WN1IN0wmCAV1ix2p2jfsIMUiO+0+IJd5YsXGen7s8O8I8u9L TdbvxFodPUpQVC0BHirDDsZKHcaNA1RnEUCww7x3XRbjHWlD36RtOgCA9fSc+QBH l81lSSoUJXEZQwrGXPwbErMrsLeOkz/eeLXoD0Hay48KKBaRHNCCaZYtd+FOlIHU 3blDVGoAwefXX0W0TF22tcTlQrI0ewJEuEHnYsIhZS+hnlC+4lnCnePTeviI3gkp f+dV8QikDZdVkNP2EfpZDMvXofysp0mmSWtr9NA6m/0u9vr+wyUcfP6zMBPtQ8g4 9xt/IPhAXrleUg== -----END CERTIFICATE-----Generated at Wed May 13 03:54:38 2026 by rpki-client