$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: ZgMyCtbGoHyx4ob+Xf5YsXjINDudtp4iEuhtK7Z9MN8= Subject key identifier: 83:4E:48:B7:66:9B:80:16:DE:52:AD:BB:0C:7C:24:07:A9:D1:70:F9 Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019F921107C6E941109F3C5CB0FF4DAEBD99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 1A09 Signing time: Fri 24 Jul 2026 03:00:17 +0000 Manifest this update: Fri 24 Jul 2026 03:00:17 +0000 Manifest next update: Sat 25 Jul 2026 03:00:17 +0000 Files and hashes: 1: Dv8Xj573URhelnbmcJLlhmPDGD4.roa (hash: qlnvjr9BaLF0/kBmFp/g12eWnCcKOHwXVrBxaeJlhqI=) 2: GokOnLgcwEKBfp_sk2MIuuQ-_TY.roa (hash: zQRRa9NS4gIwYEiBt9K5iRhHmWoyu+BxEByrxS3tpEY=) 3: S-2u1gBJMJZerxMcphe152Mw_t4.roa (hash: zY+Kfzo1VDj/zBVAcDyYT3GL5KZN/lStcMsxxkbN2e8=) 4: V66mUyeO5X_O6JGUAL_LInwhpW0.roa (hash: WTpJ/+xyEsdWBV9e8DfdpDEOxLLOMxmk9zRPy8of4Nw=) 5: WAFGlC69-0ob11MbBQG2gcGKWnk.roa (hash: fs3/LEyDskuqCQv30OKbL6do/sufFAX29xlb3wrGuaA=) 6: b4JEVE3QPzkNygQLlI0iBGroxU0.roa (hash: GbTRuy5jkEUqjUNqE8oi/B2zDg7qLzkinV68BhIMhV0=) 7: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: ag0wiS7Zn09z1cznpzp3f8TH4sz3i/NhL7h+JdkkEXo=) 8: fX3KuGbBaSgozBC8VJSKif-SJWQ.roa (hash: YvJvbJ8D5DpHd4D9ZPHBQEllNbujWBnvbGsXVYfxrbQ=) 9: hS05mveN2aMKs32vgPN62OxZyU4.roa (hash: ppIsNge7NuGGbn+pU/a2PkG/ZsHka3x0Ag4o3/gijLY=) 10: iLauOm2qK9XnqY9ztUU9moKfnvg.roa (hash: MD/6ZVmSej56cLCXyFeTYzesox6xFljqFiihcyr2blE=) 11: mOIM-oZXOhPXcspDNu9QRUce9wI.roa (hash: TX23tkqgD+PXYsu3SvaWNxNHNfg0oQahFUpEkkPiqP0=) 12: maoDBiTq7OlnZavgCrqS2PNJzVg.roa (hash: 5lnUQuuOEn9crnGLrQz+sL2Asrk/3K0SqWLzxdWxHuc=) 13: rKU1mC3UrxRCEsXb-l25oaEBhJw.roa (hash: 4jepadulIWtRtacZBukRLsOXuyzRr5YeactatRKpnlE=) 14: wCrdreEenBFJr40kfhAiXxXP4VE.roa (hash: 1w9FYdnTnijOy22xqaq4vC9r9i/Zq/2AJnQG0P3/L0g=) 15: y8I8zTQVg4GxjAasyf6R5JPcs7Q.roa (hash: oJbh60u2N8b9deVtLXSwbxA5m+GH3O/bjqhIgiz7mV0=) 16: yX_yhv_jUUfVVPMPnlpzUI5cFxs.roa (hash: bg6ibEfMDVCBPduOQFB/gGWqEjD+qw8SCbixEdu1S7Q=) 17: zyjvREkWFF6X7pbwt-H3M-ZqZks.roa (hash: HtAgtb461giJt36H40FvVS9Xbx1kevgnUEyHwD9fYBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:11:07:c6:e9:41:10:9f:3c:5c:b0:ff:4d:ae:bd:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Jul 24 03:00:17 2026 GMT Not After : Jul 25 03:00:17 2026 GMT Subject: CN=834e48b7669b8016de52adbb0c7c2407a9d170f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:4d:be:98:ff:f0:04:6b:4d:9a:bf:da:44: 78:ba:a3:b2:aa:9d:00:91:b5:8f:22:db:2a:e1:15: f6:88:8b:15:83:2b:67:a2:66:ec:94:c5:64:a2:3e: 08:9c:f7:2b:09:0b:99:66:0d:33:f1:d7:4f:41:eb: 73:a1:66:b9:95:e1:56:9d:02:71:32:9a:a7:ce:3e: 39:03:b1:b3:b8:7d:ff:7b:48:e8:2b:55:65:58:e7: bf:01:ca:f6:06:97:d3:c0:b5:38:95:b8:1d:7d:7a: 1c:d4:a9:a9:bb:a7:c1:fc:b4:2b:ee:46:d4:5a:c1: 3c:90:a4:ef:42:dd:d0:5f:aa:33:98:68:d3:77:ff: 2c:47:b1:c8:2f:8c:08:a9:fe:db:b0:58:79:22:df: e3:c7:11:b8:05:e0:ff:2f:19:3f:77:70:8e:6c:a6: 67:9c:07:18:85:4a:23:54:97:3b:b8:f8:29:b0:ba: 9f:ab:7c:56:58:4a:f7:91:4f:f5:1f:f7:05:2d:03: 05:90:98:f6:6b:5f:36:c1:10:e3:41:9b:13:08:e1: 15:ee:56:b6:80:f4:2c:78:29:8f:11:4c:a4:cd:ec: ad:28:26:7a:55:2f:4d:52:47:76:fa:44:a4:27:13: 2e:75:5c:04:f4:c2:d5:a2:61:17:ff:7f:7e:30:f5: 2f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4E:48:B7:66:9B:80:16:DE:52:AD:BB:0C:7C:24:07:A9:D1:70:F9 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b7:d9:61:1e:8f:42:6f:94:ec:01:18:a2:03:8c:2c:fe:31: 56:00:8d:95:fb:75:60:15:88:17:24:0f:6b:cd:01:e9:f9:0f: 65:b0:29:c1:8b:6d:dc:78:b5:3c:d3:c6:ae:88:62:2c:9d:5e: 33:8c:5f:d1:bc:26:66:38:23:72:a5:59:e4:ae:3d:bd:5b:99: 8a:1f:ad:df:fb:69:ee:f3:8a:42:09:ce:08:e0:ce:4a:df:88: 41:6f:32:00:96:34:7b:46:12:96:1c:19:66:02:02:18:58:20: 60:98:c1:ea:e5:79:34:de:9e:02:6a:35:4b:f1:4c:cc:01:7a: 9b:14:29:d7:2b:ca:88:3b:d3:ac:01:b3:f0:3a:3a:c9:14:ad: 5f:45:cb:5d:4b:c1:a1:57:b7:4f:88:98:47:3f:8b:bf:59:ab: 82:8f:c5:09:e3:7e:65:8f:86:ce:fe:83:aa:f2:76:e6:f7:a6: 4d:7d:9d:14:92:87:82:79:fc:87:4d:9f:4d:71:af:d0:3c:82: 01:2f:76:93:8c:c2:1b:12:fa:9c:e3:0d:fa:63:92:b2:2b:88: fe:19:3c:e1:16:f6:5d:0b:19:e6:98:c4:4e:2e:b0:bc:95:f3: bc:39:9f:bc:75:ca:30:3d:49:e4:36:3d:38:6e:f9:b4:37:ab: 69:86:ac:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SEQfG6UEQnzxcsP9Nrr2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYwNzI0MDMwMDE3WhcNMjYwNzI1MDMwMDE3WjAzMTEwLwYDVQQD Eyg4MzRlNDhiNzY2OWI4MDE2ZGU1MmFkYmIwYzdjMjQwN2E5ZDE3MGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWFNvpj/8ARrTZq/2kR4uqOyqp0A kbWPItsq4RX2iIsVgytnombslMVkoj4InPcrCQuZZg0z8ddPQetzoWa5leFWnQJx Mpqnzj45A7GzuH3/e0joK1VlWOe/Acr2BpfTwLU4lbgdfXoc1Kmpu6fB/LQr7kbU WsE8kKTvQt3QX6ozmGjTd/8sR7HIL4wIqf7bsFh5It/jxxG4BeD/Lxk/d3CObKZn nAcYhUojVJc7uPgpsLqfq3xWWEr3kU/1H/cFLQMFkJj2a182wRDjQZsTCOEV7la2 gPQseCmPEUykzeytKCZ6VS9NUkd2+kSkJxMudVwE9MLVomEX/39+MPUvMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINOSLdmm4AW3lKtuwx8JAep0XD5MB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArfZYR6P Qm+U7AEYogOMLP4xVgCNlft1YBWIFyQPa80B6fkPZbApwYtt3Hi1PNPGrohiLJ1e M4xf0bwmZjgjcqVZ5K49vVuZih+t3/tp7vOKQgnOCODOSt+IQW8yAJY0e0YSlhwZ ZgICGFggYJjB6uV5NN6eAmo1S/FMzAF6mxQp1yvKiDvTrAGz8Do6yRStX0XLXUvB oVe3T4iYRz+Lv1mrgo/FCeN+ZY+Gzv6DqvJ25vemTX2dFJKHgnn8h02fTXGv0DyC AS92k4zCGxL6nOMN+mOSsiuI/hk84Rb2XQsZ5pjETi6wvJXzvDmfvHXKMD1J5DY9 OG75tDeraYasPA== -----END CERTIFICATE-----Generated at Fri Jul 24 05:05:57 2026 by rpki-client