$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json) Hash identifier: 6AW4kUxSonXJNlPaIbB43idDGTkLdbVjZCaryBLQHKs= Subject key identifier: E9:C0:5E:BC:17:89:E7:F3:1F:6A:83:10:DB:7C:E1:49:F7:77:C2:EA Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019E1DFEC38A5A894B2BFC67BBEB3161F9A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft Manifest number: 18C1 Signing time: Tue 12 May 2026 21:01:35 +0000 Manifest this update: Tue 12 May 2026 21:01:35 +0000 Manifest next update: Wed 13 May 2026 21:01:35 +0000 Files and hashes: 1: 2nDiBaC4EkoA5IpokADTZHJ3ZU0.roa (hash: f+ZQUnaX+ZUTEwgkC4X7B5uVZ6rymlt6mA9APiH1krM=) 2: 7crBnHONDEiQfrWIPlw00C8QSKw.roa (hash: Px9bgNmN3CkGROuLFLneuCSVLL0NNlCF94jN/U/6nWk=) 3: 82ufesd9jM_-UcwHl9xDd28w7bc.roa (hash: gm9W00xGdkpnPbgGYol+dd436lsvUg6lbjX2PP6ojh8=) 4: 85Rvc3_9ZASD2vobCL9t5-c1aU4.roa (hash: vTKkBjgSvXm0Sbl7IC7WJ5hSm/4pkOxSRKg6DOoQUAQ=) 5: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: nJ3V5eadS5iqtLhy/yshZkUOeeEtX3AkHE5JeSqIYRA=) 6: 9RcFiPDd3R3zQqDhd_LItb-oDTA.roa (hash: AC0BWwsNFcYLQdYfVVpkxBC/1xIK6znU8uU1YFKJpGM=) 7: ALPiTkZxPDTnbdpPpErdvl97Wc8.roa (hash: Nf4+/SkcOD5qP7AwraGXa6vQHuKG0gARaAPpiziJKcQ=) 8: Ha68w6QiFH0a19bRsN7VKHOmArA.roa (hash: Jmj2H9NopKmp/RZPRAfw4d/aDmmbdfv4gl5rsbtGGVA=) 9: N6OWCaSvi_ZHuSy8GyCZ1crewYY.roa (hash: +k0vccqKDaiaugpKblu02NDVY2W8K0g7euK40VhBg1g=) 10: VzRDRUhOPTiPlaXOeGXg7YkPjGY.roa (hash: ZiS8xAZ8WIWo3rD54IGCFbmBSzYShJeiuytFXk2sEEo=) 11: vcGlDl5Ct_NiM8YzttTek7TQKfQ.roa (hash: BnX/CYwHVszSwePzYMqQFPXrCzJ9oUgTdB3TWSa3h4A=) 12: yiMg7ZQH4FHBD9YZKg_pUWu_Ev4.roa (hash: AIchpJMxJjIRdk7/i7zLscbwRaKVTsnK2jEupzwufmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 21:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:c3:8a:5a:89:4b:2b:fc:67:bb:eb:31:61:f9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: May 12 21:01:35 2026 GMT Not After : May 13 21:01:35 2026 GMT Subject: CN=e9c05ebc1789e7f31f6a8310db7ce149f777c2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:bf:7c:6b:af:09:6d:19:d6:88:93:03:81: dd:fd:c9:20:14:41:ad:66:ec:ff:51:54:3f:6e:ed: 88:c1:0c:c9:96:b6:65:dd:15:51:f3:88:14:ee:70: 19:11:8c:01:74:aa:4a:40:2e:d9:6e:ac:68:d7:90: d9:d6:59:e1:e9:12:39:c0:69:71:89:cd:28:21:67: 07:ca:40:f7:0b:6c:69:7b:d3:43:98:3d:b6:73:07: 68:35:ed:d7:3a:a4:d3:d8:d8:eb:a2:d5:e1:35:ba: 00:d5:a5:1a:02:fd:cc:1d:69:aa:64:43:4e:64:67: 12:03:ef:93:14:3b:2e:5d:2b:50:1a:81:35:aa:92: 16:7b:00:b6:45:32:37:f2:e1:d3:03:a2:82:74:31: 5b:65:f8:60:65:65:d0:15:4d:22:f8:53:14:c4:ac: ed:56:c9:1e:59:e4:fc:3c:63:9f:b7:39:f1:07:18: e1:6c:62:f0:8e:ec:d5:75:f4:8b:51:ce:f6:c5:e7: 5a:89:cb:1e:ac:f4:4c:32:ff:ed:c2:10:16:5b:1f: 2e:18:78:b8:80:c2:68:38:7e:f4:a9:5d:55:28:92: 5f:8a:1a:d9:51:fe:29:60:b8:8b:99:7a:b1:e6:42: b8:f7:94:32:37:0b:13:a7:14:a1:24:53:89:80:c6: 69:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C0:5E:BC:17:89:E7:F3:1F:6A:83:10:DB:7C:E1:49:F7:77:C2:EA X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8e:e0:24:fc:a4:c5:74:47:bb:4a:b4:50:64:84:ba:70:f8: 52:6d:2b:36:5a:d9:24:94:63:90:50:f9:32:c7:9a:15:e0:53: c6:11:fc:a3:3c:ae:11:ff:7f:d4:95:14:9a:77:bd:a9:b8:d5: 07:3e:df:c5:5f:00:68:35:86:02:7d:b6:e4:91:c7:53:f5:4d: 87:2e:0d:55:83:61:c7:09:fb:6e:4f:4f:e5:68:40:87:e7:0d: 19:cd:91:ba:fe:af:d7:d4:57:11:c9:f8:28:45:e1:29:89:09: 00:ce:96:f9:bb:69:c5:3a:39:4d:ac:79:d9:3a:6b:26:93:44: a9:34:73:8a:fd:43:10:8f:ff:52:91:5f:b1:fd:c0:79:8f:9c: f6:fc:c1:ed:a6:86:d2:13:a5:e7:05:7d:e6:ab:69:65:97:ff: ab:c6:d6:99:04:a3:eb:a7:6b:14:80:e3:67:1d:99:24:b6:30: da:da:09:fa:ed:8e:7e:da:d6:ba:42:0a:a5:d8:94:dc:a4:a2: 2c:7f:95:23:2d:f6:46:55:95:a4:0f:e7:16:c0:86:29:66:63: 46:46:ec:4d:e7:51:49:b1:04:11:89:47:31:92:62:ce:57:d2: 16:cf:63:bd:80:51:1f:b1:f9:c9:ba:3d:9f:b2:c3:d2:79:15: e2:ff:e1:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/sOKWolLK/xnu+sxYfmgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjYwNTEyMjEwMTM1WhcNMjYwNTEzMjEwMTM1WjAzMTEwLwYDVQQD EyhlOWMwNWViYzE3ODllN2YzMWY2YTgzMTBkYjdjZTE0OWY3NzdjMmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh+/fGuvCW0Z1oiTA4Hd/ckgFEGt Zuz/UVQ/bu2IwQzJlrZl3RVR84gU7nAZEYwBdKpKQC7Zbqxo15DZ1lnh6RI5wGlx ic0oIWcHykD3C2xpe9NDmD22cwdoNe3XOqTT2NjrotXhNboA1aUaAv3MHWmqZENO ZGcSA++TFDsuXStQGoE1qpIWewC2RTI38uHTA6KCdDFbZfhgZWXQFU0i+FMUxKzt VskeWeT8PGOftznxBxjhbGLwjuzVdfSLUc72xedaicserPRMMv/twhAWWx8uGHi4 gMJoOH70qV1VKJJfihrZUf4pYLiLmXqx5kK495QyNwsTpxShJFOJgMZpKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnAXrwXiefzH2qDENt84Un3d8LqMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbI7gJPyk xXRHu0q0UGSEunD4Um0rNlrZJJRjkFD5MseaFeBTxhH8ozyuEf9/1JUUmne9qbjV Bz7fxV8AaDWGAn225JHHU/VNhy4NVYNhxwn7bk9P5WhAh+cNGc2Ruv6v19RXEcn4 KEXhKYkJAM6W+btpxTo5Tax52TprJpNEqTRziv1DEI//UpFfsf3AeY+c9vzB7aaG 0hOl5wV95qtpZZf/q8bWmQSj66drFIDjZx2ZJLYw2toJ+u2OftrWukIKpdiU3KSi LH+VIy32RlWVpA/nFsCGKWZjRkbsTedRSbEEEYlHMZJizlfSFs9jvYBRH7H5ybo9 n7LD0nkV4v/hWA== -----END CERTIFICATE-----Generated at Wed May 13 09:24:40 2026 by rpki-client