$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: sCqOUENKS92fxJxoLYs0f6/O0kl4+W7IPbfLRsKRMAI= Subject key identifier: E0:D5:23:32:DA:FA:32:CE:C7:CF:90:3B:A0:E3:38:8C:CE:6C:32:E7 Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019F9022A88D62CC30D25EE5F196CC139ABB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 1A08 Signing time: Thu 23 Jul 2026 18:00:18 +0000 Manifest this update: Thu 23 Jul 2026 18:00:18 +0000 Manifest next update: Fri 24 Jul 2026 18:00:18 +0000 Files and hashes: 1: Dv8Xj573URhelnbmcJLlhmPDGD4.roa (hash: qlnvjr9BaLF0/kBmFp/g12eWnCcKOHwXVrBxaeJlhqI=) 2: GokOnLgcwEKBfp_sk2MIuuQ-_TY.roa (hash: zQRRa9NS4gIwYEiBt9K5iRhHmWoyu+BxEByrxS3tpEY=) 3: S-2u1gBJMJZerxMcphe152Mw_t4.roa (hash: zY+Kfzo1VDj/zBVAcDyYT3GL5KZN/lStcMsxxkbN2e8=) 4: V66mUyeO5X_O6JGUAL_LInwhpW0.roa (hash: WTpJ/+xyEsdWBV9e8DfdpDEOxLLOMxmk9zRPy8of4Nw=) 5: WAFGlC69-0ob11MbBQG2gcGKWnk.roa (hash: fs3/LEyDskuqCQv30OKbL6do/sufFAX29xlb3wrGuaA=) 6: b4JEVE3QPzkNygQLlI0iBGroxU0.roa (hash: GbTRuy5jkEUqjUNqE8oi/B2zDg7qLzkinV68BhIMhV0=) 7: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: Vn5lXhlm81b1x427XCw6NIqc3IPSpc29nTYR+AkgBgg=) 8: fX3KuGbBaSgozBC8VJSKif-SJWQ.roa (hash: YvJvbJ8D5DpHd4D9ZPHBQEllNbujWBnvbGsXVYfxrbQ=) 9: hS05mveN2aMKs32vgPN62OxZyU4.roa (hash: ppIsNge7NuGGbn+pU/a2PkG/ZsHka3x0Ag4o3/gijLY=) 10: iLauOm2qK9XnqY9ztUU9moKfnvg.roa (hash: MD/6ZVmSej56cLCXyFeTYzesox6xFljqFiihcyr2blE=) 11: mOIM-oZXOhPXcspDNu9QRUce9wI.roa (hash: TX23tkqgD+PXYsu3SvaWNxNHNfg0oQahFUpEkkPiqP0=) 12: maoDBiTq7OlnZavgCrqS2PNJzVg.roa (hash: 5lnUQuuOEn9crnGLrQz+sL2Asrk/3K0SqWLzxdWxHuc=) 13: rKU1mC3UrxRCEsXb-l25oaEBhJw.roa (hash: 4jepadulIWtRtacZBukRLsOXuyzRr5YeactatRKpnlE=) 14: wCrdreEenBFJr40kfhAiXxXP4VE.roa (hash: 1w9FYdnTnijOy22xqaq4vC9r9i/Zq/2AJnQG0P3/L0g=) 15: y8I8zTQVg4GxjAasyf6R5JPcs7Q.roa (hash: oJbh60u2N8b9deVtLXSwbxA5m+GH3O/bjqhIgiz7mV0=) 16: yX_yhv_jUUfVVPMPnlpzUI5cFxs.roa (hash: bg6ibEfMDVCBPduOQFB/gGWqEjD+qw8SCbixEdu1S7Q=) 17: zyjvREkWFF6X7pbwt-H3M-ZqZks.roa (hash: HtAgtb461giJt36H40FvVS9Xbx1kevgnUEyHwD9fYBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 18:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:22:a8:8d:62:cc:30:d2:5e:e5:f1:96:cc:13:9a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Jul 23 18:00:18 2026 GMT Not After : Jul 24 18:00:18 2026 GMT Subject: CN=e0d52332dafa32cec7cf903ba0e3388cce6c32e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:5e:8a:60:d6:3d:4c:2e:8c:1c:88:b8:99: 61:4c:33:59:d8:3d:4e:1b:7a:3f:34:f7:48:5a:aa: 72:5b:a7:2e:e4:80:52:ce:40:cf:06:6c:bb:90:a3: 39:0e:dc:68:4d:44:ea:d9:23:06:60:3f:1e:cf:77: b4:43:54:59:df:97:0a:61:57:fe:28:42:9a:d7:79: c4:af:d0:7c:71:00:85:ce:d7:55:98:7b:89:d5:2b: e5:b1:d8:fa:ca:7c:06:b2:24:66:da:55:6c:15:ca: cc:43:57:ac:5b:3d:2b:ca:48:2b:b5:21:65:c0:58: 8a:c5:0c:e1:bb:f8:b2:97:86:c0:75:b7:a8:ba:37: 26:02:cc:58:8b:c9:b1:64:d0:ca:ba:60:2f:78:41: 02:f7:c0:b1:a7:b1:90:4c:aa:6b:6c:3f:e3:a0:02: ae:31:13:35:a2:ec:3c:73:97:95:3c:2c:1f:5b:4c: 62:5f:e3:8f:34:29:e8:44:7b:14:36:a7:bd:c3:a5: 1e:48:2f:71:1e:0c:e3:e1:64:03:48:a1:e4:2f:b6: 9d:a3:d3:e3:59:c0:b5:4a:18:90:fd:a3:0b:dd:59: 4c:40:8a:0a:a9:66:1b:f6:3a:7d:21:a0:44:ac:73: df:66:32:ca:ed:db:a6:a7:0d:ab:74:c6:a2:16:a6: 46:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D5:23:32:DA:FA:32:CE:C7:CF:90:3B:A0:E3:38:8C:CE:6C:32:E7 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b0:58:4b:03:53:1a:6e:a3:b7:18:de:db:39:8f:cf:33:5d: e4:c8:f5:7f:07:da:24:96:9c:ae:b3:4d:ff:c2:d8:cd:46:23: 24:8d:45:e9:f7:e9:e8:7f:1c:32:04:34:ba:d1:fe:7a:9f:ea: c7:92:4d:59:b4:bd:60:34:e4:4a:20:86:18:4e:3c:db:28:4a: 68:4c:97:60:21:44:65:e7:14:8a:fd:3e:42:4e:cc:b6:f4:5b: f7:da:c8:17:f8:a5:f7:af:85:15:e0:f2:f9:90:e1:9a:59:7c: a6:89:ad:62:92:49:bc:82:03:2b:31:9e:51:b7:87:64:b6:42: 1f:f5:21:49:c4:28:53:d2:e9:7e:b0:fa:6a:5b:9e:d6:67:eb: f7:3a:86:25:c9:f8:99:15:41:74:3f:4b:72:b7:22:e0:52:c0: 9b:a0:27:2d:b2:6c:8c:04:b5:d0:89:2c:26:cb:e7:14:7c:97: 38:30:97:88:d6:88:21:a2:fc:1f:51:75:b0:bc:bd:54:30:0c: 38:89:d7:8b:11:9b:5c:27:26:ef:c3:ec:c8:fe:b4:ad:57:5c: 95:e4:54:f0:2d:04:57:12:42:09:92:ef:1b:6d:d5:3e:b6:de: 4b:b1:a0:a1:c6:53:c7:cd:c5:f9:f7:e9:5d:51:5e:96:1c:f8: 05:63:26:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QIqiNYsww0l7l8ZbME5q7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYwNzIzMTgwMDE4WhcNMjYwNzI0MTgwMDE4WjAzMTEwLwYDVQQD EyhlMGQ1MjMzMmRhZmEzMmNlYzdjZjkwM2JhMGUzMzg4Y2NlNmMzMmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvldeimDWPUwujByIuJlhTDNZ2D1O G3o/NPdIWqpyW6cu5IBSzkDPBmy7kKM5DtxoTUTq2SMGYD8ez3e0Q1RZ35cKYVf+ KEKa13nEr9B8cQCFztdVmHuJ1Svlsdj6ynwGsiRm2lVsFcrMQ1esWz0rykgrtSFl wFiKxQzhu/iyl4bAdbeoujcmAsxYi8mxZNDKumAveEEC98Cxp7GQTKprbD/joAKu MRM1ouw8c5eVPCwfW0xiX+OPNCnoRHsUNqe9w6UeSC9xHgzj4WQDSKHkL7ado9Pj WcC1ShiQ/aML3VlMQIoKqWYb9jp9IaBErHPfZjLK7dumpw2rdMaiFqZGJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODVIzLa+jLOx8+QO6DjOIzObDLnMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7BYSwNT Gm6jtxje2zmPzzNd5Mj1fwfaJJacrrNN/8LYzUYjJI1F6ffp6H8cMgQ0utH+ep/q x5JNWbS9YDTkSiCGGE482yhKaEyXYCFEZecUiv0+Qk7MtvRb99rIF/il96+FFeDy +ZDhmll8pomtYpJJvIIDKzGeUbeHZLZCH/UhScQoU9LpfrD6alue1mfr9zqGJcn4 mRVBdD9Lcrci4FLAm6AnLbJsjAS10IksJsvnFHyXODCXiNaIIaL8H1F1sLy9VDAM OInXixGbXCcm78PsyP60rVdcleRU8C0EVxJCCZLvG23VPrbeS7GgocZTx83F+ffp XVFelhz4BWMmCA== -----END CERTIFICATE-----Generated at Fri Jul 24 04:01:40 2026 by rpki-client