$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft File: s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json) Hash identifier: NMUarSZc09EKQyEAMBcqPrEkxDEkmORN4M+iOpUplIQ= Subject key identifier: 4B:DD:61:94:E8:08:42:0D:B2:07:0C:AA:ED:31:AC:7E:3F:68:3C:1E Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 019E1C7DEE133C5055D69FC76A1BF19DAD68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft Manifest number: 1917 Signing time: Tue 12 May 2026 14:01:15 +0000 Manifest this update: Tue 12 May 2026 14:01:15 +0000 Manifest next update: Wed 13 May 2026 14:01:15 +0000 Files and hashes: 1: 0SfcrueR4QFb8tc3xCE9ChZKK7I.roa (hash: IdDOQHOx8rCnzoVeUvZ2P/Vc0fq61+r5BuBjfqgD4w8=) 2: 2-9TE0hGien7uJimnUsiIL-slx4.roa (hash: ITBjj6tI+9B/OwJk2K8Dzw0Ey9IFfvrN1KI8kY4JXFU=) 3: 4yoK_eJAZQm-WbM5DBSju_S_g9Y.roa (hash: lgK4wDh2/dU2RT27074ZUCpZTP9aGuib0EW4Skf9pnw=) 4: 5wHePNmHiLxtlCYvlaGW1MyLNGY.roa (hash: 19szNpHnnm6pkaW4TlJOhu+0nXLMQC+WoPm1n3sfLvM=) 5: 60zN1G8HfzYuFPygt3H-4b18ytU.roa (hash: ZIesJxWGT7Q67L0RiBjzfL/tP6joKKOh3GhApUIGf8w=) 6: XD3CHImTefD8FuenptmC1xt8ItM.asa (hash: zINZ70P1S66UVaG5a/xPv//b9AHB0SJycGjf91yrXwY=) 7: a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa (hash: YrbotmHDUF9LRM1RQzShBPkq+JRfuxMVJgnz/gexBZA=) 8: cH5VUqUcKkt9HSVAYge0hus4RzQ.roa (hash: wbhN9oe6hbcxDEr+Ij32oivB3HfT5mVhEID8dWUc5rw=) 9: dIGZhkcQjwXD6TRRSDLTBNo_khY.roa (hash: iHaZdF9YmqdeJqR3BWg40wlZURcExcqa9x9g9e5Q+Sw=) 10: e7AhsDGyXnglWGP4F2vWjFKoYe0.roa (hash: e/toQQVnqhq4qPJ3Y8N1Xo0D5ymFTKzkV6/84IOgDm4=) 11: esK7vUUmoe40XTn02C1nePqnmu4.roa (hash: OEIBdY80QQKHjWxchlaPmmZgXh8xpcGsK6uCERu5/OA=) 12: fgRbMqN9XRQOyHROi59mKV56wUg.roa (hash: Py8QfC6Me9kljX65ogBUdQo8JbMweZ02w9NGup3yJr4=) 13: micpmXuBXJ3dOE45zxgN5f1tySY.roa (hash: timEpEuW2bJbH8o0L2R6fxPkiFxXOpRncmuh270Cg8o=) 14: qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa (hash: H4C9ry+5IfYnCURh7FDnZSYaZWLRwKVBeS8DaqAWsew=) 15: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: D6gBUBFOWxeY42wRpux/8j4okeCryAcvJx8J85bz9nE=) 16: xwR5dZkRnrr1skSXQMNYngkeNa8.roa (hash: hOBraH+aXlwWcJU3uccn3dhXaJ0+izS/UP4kbWzbnEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:7d:ee:13:3c:50:55:d6:9f:c7:6a:1b:f1:9d:ad:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: May 12 14:01:15 2026 GMT Not After : May 13 14:01:15 2026 GMT Subject: CN=4bdd6194e808420db2070caaed31ac7e3f683c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:e5:91:c3:40:0c:fa:d4:87:74:ee:18:1f: 75:7e:87:10:15:58:49:8b:53:34:62:5b:33:7b:75: 2c:f6:e4:db:53:ba:cd:d1:18:b3:3d:63:0c:6d:da: 85:c6:41:35:d6:ee:e2:9e:f8:11:10:11:8e:21:53: 08:52:30:c0:8d:44:8d:0c:a9:79:9a:f4:78:01:23: ef:61:3e:96:b6:6f:c7:97:c4:43:7b:9a:34:9a:40: d8:03:df:26:9f:53:e3:dd:61:98:5e:a9:e9:e4:40: 0e:1d:1b:5e:94:a5:55:4a:f2:43:43:4f:b8:cf:f5: 8a:08:a0:af:3e:93:ea:53:5d:4d:f8:61:c3:32:30: fc:99:fe:20:7b:d6:d9:c0:96:81:2b:45:a3:9a:dc: f1:12:3e:fa:be:08:db:cf:76:a4:d3:ed:43:b2:92: 54:d1:14:6f:c4:0c:1e:bf:3c:ca:0c:27:f1:8b:3a: 15:22:d6:0a:47:bd:42:4b:d3:83:85:51:57:82:f1: c7:5e:85:20:07:a7:7c:b5:9c:1a:09:91:8c:0d:a0: db:4e:4d:4e:33:4f:dc:4d:fa:02:12:53:8f:dc:9c: a7:12:34:7c:ed:a8:4c:dd:a2:e1:42:e5:bd:dc:4d: 51:c5:b9:13:e6:35:51:5e:a8:5c:c9:6a:72:21:de: 60:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DD:61:94:E8:08:42:0D:B2:07:0C:AA:ED:31:AC:7E:3F:68:3C:1E X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f8:23:77:c5:f3:00:5a:38:ec:ea:4b:9a:5a:e7:7a:60:a9: a6:59:52:f2:fc:8c:76:54:38:b7:7e:65:a2:a1:04:93:71:86: 30:82:f5:ed:2e:4c:6c:6a:ac:70:7b:9e:76:15:b8:3a:07:65: 2e:3d:88:07:ce:5c:0a:ab:9d:b8:e6:e1:4b:a7:c6:a1:a1:96: 92:1f:37:c2:14:c0:1d:fe:dd:bf:71:ca:58:e4:bd:84:0e:bf: 1c:56:49:53:ce:e7:7f:c3:a5:24:07:c9:a8:25:61:f4:b1:14: 2f:75:a7:85:60:08:40:5d:d0:36:9b:cf:2d:40:35:97:b1:96: bd:9b:ef:57:6e:fa:28:f0:2f:88:bc:5d:2a:82:1d:85:48:33: 58:11:10:7a:5b:59:ba:bc:4f:2f:ed:3f:f9:54:c8:8f:50:3b: 55:74:18:38:55:4f:42:7d:4d:9d:6f:da:b3:dd:7c:f5:78:4b: 11:1b:3d:a5:3a:98:0f:87:ee:11:07:8a:b7:fc:9c:f9:25:d2: 34:74:d6:33:96:0e:de:a2:c2:08:c5:04:c6:18:c1:4c:4d:22: ce:d2:b2:01:97:da:f0:2e:ed:d1:6f:1b:f7:1c:b5:0c:eb:c8: b0:cd:f5:47:8d:60:5c:0c:f0:d2:fb:39:03:c9:19:0b:cd:d3: ea:fd:53:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4cfe4TPFBV1p/Hahvxna1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjYwNTEyMTQwMTE1WhcNMjYwNTEzMTQwMTE1WjAzMTEwLwYDVQQD Eyg0YmRkNjE5NGU4MDg0MjBkYjIwNzBjYWFlZDMxYWM3ZTNmNjgzYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0LlkcNADPrUh3TuGB91focQFVhJ i1M0Ylsze3Us9uTbU7rN0RizPWMMbdqFxkE11u7invgREBGOIVMIUjDAjUSNDKl5 mvR4ASPvYT6Wtm/Hl8RDe5o0mkDYA98mn1Pj3WGYXqnp5EAOHRtelKVVSvJDQ0+4 z/WKCKCvPpPqU11N+GHDMjD8mf4ge9bZwJaBK0WjmtzxEj76vgjbz3ak0+1DspJU 0RRvxAwevzzKDCfxizoVItYKR71CS9ODhVFXgvHHXoUgB6d8tZwaCZGMDaDbTk1O M0/cTfoCElOP3JynEjR87ahM3aLhQuW93E1RxbkT5jVRXqhcyWpyId5gDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvdYZToCEINsgcMqu0xrH4/aDweMB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvgjd8Xz AFo47OpLmlrnemCppllS8vyMdlQ4t35loqEEk3GGMIL17S5MbGqscHuedhW4Ogdl Lj2IB85cCquduObhS6fGoaGWkh83whTAHf7dv3HKWOS9hA6/HFZJU87nf8OlJAfJ qCVh9LEUL3WnhWAIQF3QNpvPLUA1l7GWvZvvV276KPAviLxdKoIdhUgzWBEQeltZ urxPL+0/+VTIj1A7VXQYOFVPQn1NnW/as9189XhLERs9pTqYD4fuEQeKt/yc+SXS NHTWM5YO3qLCCMUExhjBTE0iztKyAZfa8C7t0W8b9xy1DOvIsM31R41gXAzw0vs5 A8kZC83T6v1TTw== -----END CERTIFICATE-----Generated at Tue May 12 21:44:25 2026 by rpki-client