$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft File: 8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft (raw, json) Hash identifier: u6jfxWTbA+bNXJ2G0l0Q++Z/4NRH98sp3dYJAzjn6TQ= Subject key identifier: A1:9F:F4:B5:B1:B0:77:88:9C:0F:8E:B2:1E:9F:05:17:95:F2:42:EC Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74 Certificate issuer: /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974 Certificate serial: 01A1754BE34FA97A5BB012409B92488A1862 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft Manifest number: 0146 Signing time: Sun 25 Oct 2026 23:01:10 +0000 Manifest this update: Sun 25 Oct 2026 23:01:10 +0000 Manifest next update: Mon 26 Oct 2026 23:01:10 +0000 Files and hashes: 1: 1-amM62GeyiqIA7h6L1VIqXMpg_k.roa (hash: e3ELaeWiUzpv6kgXisd23pTHNP7qazPkpsbKCjsJosQ=) 2: 2sSeFgoeXeBnPC_ZpPZnrMNe_Yw.roa (hash: jh3bfylqCqw9M7hfFZ/h577WyCqH+ANDZeqpwYgqSgo=) 3: 3f-YZ_gZlvXel0INTsX8PYHYwkM.roa (hash: tYd4+MLEesSD8GAgr16MDLhnq93BfcFvnbdolUayoJA=) 4: 8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl (hash: 7IfYpaQXlhMkBRs+6ryTe3TCvxx7LSa29RYbYZ1KNV0=) 5: 8faSSn0wrld6TiH-z71PXz4fvGY.roa (hash: Jr/vj1qvsFEz2pv7w2BBw4Ox99TbjM4GLFqCKURwvk4=) 6: ESleWbcySUnTxTcWeNigzmbbsuY.roa (hash: QTUEU0Zs7X8PSlH1r4bAKO3r4cdd8SMgkPqxuyZUVSM=) 7: JRQBdP7ope_PtzqtZeZHn9Bvtyo.roa (hash: mlXuFbiUkqJMpJ3gsU4Ys2bpdMZx0bolGvQ5xQgh3BA=) 8: KIZz9DPTnXnVw9NdjWPUo-TLo-o.roa (hash: PnaduGApsvPabzpzYKthmRcBCdXMG0jb8OHAbeuAnHM=) 9: MrWmH_MbABsdkBqCFs3M8fCwO6k.roa (hash: PV4gzaqHFzi+Hhp8rNjt2QZxGgJeNB9fPcuuG+pb/N0=) 10: MtpEto0-9RDZdJKLup0JfMMPGIE.roa (hash: SGYo5LM15qsG5Z/kxlP88G54S0Ys+UdLIr7hVGjbpUE=) 11: oouIMRn5xmavfg3BN45yaJQjQgA.roa (hash: xx3DuD/kVyuMAI2tXLfzol9FrLR5V1fuLfH+vvapSKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:75:4b:e3:4f:a9:7a:5b:b0:12:40:9b:92:48:8a:18:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974 Validity Not Before: Oct 25 23:01:10 2026 GMT Not After : Oct 26 23:01:10 2026 GMT Subject: CN=a19ff4b5b1b077889c0f8eb21e9f051795f242ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:57:ae:6f:59:e4:e2:15:6d:e5:b6:01:3f:2c: 99:39:a9:92:8b:e3:e5:8f:9c:0e:15:31:65:14:75: 91:fb:81:c3:59:90:12:01:e1:49:6a:72:a7:a3:de: 25:c8:9c:8e:6a:09:2f:7e:e5:99:79:ac:4b:2c:33: 20:39:7e:60:b4:fd:46:c5:fe:dd:90:f4:10:fa:78: 15:35:cc:38:7a:4b:5b:f4:48:3c:12:04:8a:ff:bd: e4:a7:9c:27:93:fc:e3:46:b8:ee:e7:76:c2:c0:73: 4a:4e:51:71:b5:4b:4e:7a:db:f6:64:cf:4c:93:bb: f7:bd:b0:46:9d:80:bd:10:9e:80:91:03:42:d6:09: 6f:79:33:ce:13:fc:c5:20:9c:02:4c:b5:31:89:e9: 09:14:2e:46:d7:eb:6b:33:0d:71:4a:0c:6b:fb:6e: b4:c2:5b:ac:9a:7f:4c:68:a0:9e:c9:9c:91:f9:8e: c5:06:c8:4f:b2:76:f4:58:77:77:57:20:de:9c:6b: e1:db:2b:69:c7:98:22:94:87:fe:f9:5d:fa:32:93: 08:88:c5:55:15:e9:07:09:9d:1a:a4:ad:70:fa:67: 1b:fe:71:aa:73:98:62:ce:ac:aa:fc:d7:a9:cf:58: bf:7a:b0:f9:2f:84:a2:67:84:cc:46:cb:51:97:0a: 9e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9F:F4:B5:B1:B0:77:88:9C:0F:8E:B2:1E:9F:05:17:95:F2:42:EC X509v3 Authority Key Identifier: keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:9a:31:be:4f:54:a2:a4:1f:0c:31:48:b4:c9:8e:19:56:66: d8:1f:52:9b:c4:15:19:f7:a3:60:17:d3:03:4e:2f:14:30:08: 86:7e:56:13:25:ad:bf:8d:1c:3d:58:4e:67:d2:d3:70:04:3c: aa:05:b7:a8:1c:b1:02:4f:58:da:50:b9:9f:cd:f0:b1:e0:54: b5:d3:38:6d:24:7b:fb:5b:28:b4:1d:ab:01:d7:fb:e3:8a:7c: 48:05:61:44:69:df:b0:41:d1:62:84:b3:64:0f:3c:d0:9b:5a: 19:0c:88:6d:65:7f:a9:a1:68:4f:b2:0b:4c:31:ed:72:73:e8: 6f:60:6a:f9:d2:2b:94:10:7d:20:15:00:2f:f7:2c:fe:be:bb: 8d:f6:08:23:b8:1c:84:15:19:7a:13:50:58:18:71:8d:21:12: e8:89:53:2e:0d:77:8a:49:59:42:80:e0:ab:40:36:7b:3c:9d: 71:6e:34:5a:23:db:71:06:b5:1c:d7:a8:e5:57:99:1f:98:ba: 99:16:24:4d:36:9f:da:38:9c:03:4c:89:66:e2:a5:27:9a:16: 31:0a:4b:b0:92:15:bd:3c:1e:73:73:36:e8:e1:ea:2b:7b:4b: c4:61:7a:99:3a:29:ce:f6:a0:08:80:76:3b:07:ce:16:b7:d2: 1d:ac:b2:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF1S+NPqXpbsBJAm5JIihhiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZGEzMTU4ZWIxYmM2YTBhOTAyN2NmNTllNjAzNjg3ZDZk M2U5NzQwHhcNMjYxMDI1MjMwMTEwWhcNMjYxMDI2MjMwMTEwWjAzMTEwLwYDVQQD EyhhMTlmZjRiNWIxYjA3Nzg4OWMwZjhlYjIxZTlmMDUxNzk1ZjI0MmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFeub1nk4hVt5bYBPyyZOamSi+Pl j5wOFTFlFHWR+4HDWZASAeFJanKno94lyJyOagkvfuWZeaxLLDMgOX5gtP1Gxf7d kPQQ+ngVNcw4ektb9Eg8EgSK/73kp5wnk/zjRrju53bCwHNKTlFxtUtOetv2ZM9M k7v3vbBGnYC9EJ6AkQNC1glveTPOE/zFIJwCTLUxiekJFC5G1+trMw1xSgxr+260 wlusmn9MaKCeyZyR+Y7FBshPsnb0WHd3VyDenGvh2ytpx5gilIf++V36MpMIiMVV FekHCZ0apK1w+mcb/nGqc5hizqyq/Nepz1i/erD5L4SiZ4TMRstRlwqepwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGf9LWxsHeInA+Osh6fBReV8kLsMB8GA1UdIwQY MBaAFPHaMVjrG8agqQJ89Z5gNofW0+l0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iODg0N2EtYjBmNS00YWZmLTk5ZGMt YTllOThiNzNiNTU2LzEvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iODg0N2EtYjBmNS00YWZmLTk5ZGMtYTllOThiNzNiNTU2 LzEvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpoxvk9U oqQfDDFItMmOGVZm2B9Sm8QVGfejYBfTA04vFDAIhn5WEyWtv40cPVhOZ9LTcAQ8 qgW3qByxAk9Y2lC5n83wseBUtdM4bSR7+1sotB2rAdf744p8SAVhRGnfsEHRYoSz ZA880JtaGQyIbWV/qaFoT7ILTDHtcnPob2Bq+dIrlBB9IBUAL/cs/r67jfYII7gc hBUZehNQWBhxjSES6IlTLg13iklZQoDgq0A2ezydcW40WiPbcQa1HNeo5VeZH5i6 mRYkTTaf2jicA0yJZuKlJ5oWMQpLsJIVvTwec3M26OHqK3tLxGF6mTopzvagCIB2 OwfOFrfSHayy3A== -----END CERTIFICATE-----Generated at Mon Oct 26 08:45:58 2026 by rpki-client