$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft File: 8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft (raw, json) Hash identifier: AMggeMsKZxDux4yDWxcX4WDRol2sN/mxeB3mozsGHcg= Subject key identifier: 1A:7B:60:DA:20:12:FE:9F:87:8D:A1:71:EE:8F:62:96:C9:03:1D:FE Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d Certificate serial: 019E8A913575878B28651ED8E5D1E8B15C89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft Manifest number: FC Signing time: Tue 02 Jun 2026 23:00:32 +0000 Manifest this update: Tue 02 Jun 2026 23:00:32 +0000 Manifest next update: Wed 03 Jun 2026 23:00:32 +0000 Files and hashes: 1: 1hmoXUf_HEidVqAlUNrVMbRe73Q.roa (hash: LNul/HliCFgKtEsh4duhgw+vWs/BKVcWwUv72PAMMxg=) 2: 4NdsewZiCE0tb4461BTcjMI8EEs.roa (hash: 082szJE40NLk4m73R6y2ge9lzv07QZN/ueI5yeyXB9M=) 3: 5pcjEADm1RHiqFq1dxcjeXGxehU.roa (hash: myWAo5bkaIqfmbA3wHG7QfiRigY77Sd9xUJEOjhnP0M=) 4: 8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl (hash: VB/voAZFg2Sf+pnau93rxzagBs88MYs9A4xu4YEPR2s=) 5: Ff6BouTNXT5eNhcKm-QyUQY5mmc.roa (hash: xacRAoEbQASFa3ri0NoVm1BfBttzL7W7adDm9SFCKzI=) 6: LJdfY0nIbyUd50nXVDvOBQ87G-Q.roa (hash: YRUY42yFSuPW4OLZp4glLYxbIuXq5EYQJpaLtc7zjL8=) 7: WgwLxC9Yt1P2PQQqF-IM93F5MTI.roa (hash: S99D2xo8pMLtxvntzLwaL0u806uFQaCV8frsIVvvpqo=) 8: ZJ0j6SFN-jnLsrscuKF9QWHTsZA.roa (hash: V88D2LRQjQXvGz/tB68bfi9WV4LPozPmLLl4cBVFXDg=) 9: bre_st4SWkBxIWi6nz1uzA273U0.roa (hash: qtJtto8czH7VsyXf5Qyg/HORT4zB1rywutdFtmoisQE=) 10: dHQX0Nw27Jfv1xGsD06FXVRHc2w.roa (hash: oo6XHUFrM8HfrLnsL37nHXH48/gFh3gq5GhHvRPTERs=) 11: rh96YEpfSIvPLHfTi_lpKQmnjP8.roa (hash: y2f8KhwFa0vwIyLgbnlcTiZNOJgpzRCsXyp630yvoD8=) 12: sdArx3c5v_I16pfKlN60sOmgvEc.roa (hash: psnoqlbQu6wA8bhaL0BBABmx+if3rta6OgnM7Dh424I=) 13: wsxHxyI7mGxSUjTsm-7L5NO8m7g.roa (hash: prIHWIUUpFVvzMqoym+Q9XjG+cnuXV951tyw6omzzUo=) 14: x0DX-qmkwY2ne6U5848Xz_X8Z1c.roa (hash: qGhVJO7Y1ztL0vvui8XefBJrh+30U6XCKNMNRbueVD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Jun 2026 23:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:8a:91:35:75:87:8b:28:65:1e:d8:e5:d1:e8:b1:5c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d Validity Not Before: Jun 2 23:00:32 2026 GMT Not After : Jun 3 23:00:32 2026 GMT Subject: CN=1a7b60da2012fe9f878da171ee8f6296c9031dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:06:1c:bc:7c:b7:aa:09:a4:5a:81:28:5b: 52:d4:ce:36:78:6c:08:a9:5c:e0:37:ec:44:b5:f6: 15:95:e3:22:29:1f:83:1d:1b:e9:0d:19:8b:04:57: 8d:b8:86:c6:e9:f7:4d:d1:02:0d:d7:b7:54:d8:12: b4:a8:b1:1e:a8:59:49:56:c4:4c:ef:68:81:54:fd: f4:c4:8b:93:3d:ba:a6:70:ab:5a:21:cb:86:cb:45: 95:91:73:80:fa:af:cf:67:54:62:9b:84:6c:fc:fb: 59:30:b6:9c:51:5d:16:08:3e:16:17:2a:e6:0d:de: 03:ef:d9:a5:2e:d0:45:64:ab:bd:b0:34:51:b0:3f: e2:ab:bf:32:da:44:43:06:25:0d:52:e3:88:09:13: 4a:0f:cb:4d:3f:be:b3:34:0d:9c:30:d2:97:1d:9e: 66:af:43:18:9c:18:fb:9b:b9:d3:90:19:af:49:f4: 6f:05:8a:cd:7a:62:6f:22:85:95:5b:e3:8e:26:83: 87:a5:82:39:d1:1d:36:f4:2d:ee:d7:7f:23:ad:ee: ad:fa:a6:91:e3:8a:52:44:69:00:31:42:c2:2b:6b: d2:c4:c9:bf:6a:e6:4c:51:59:23:59:d3:7e:20:91: 19:7d:59:1a:90:02:4e:c4:0a:57:67:32:f1:1d:f2: 6f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7B:60:DA:20:12:FE:9F:87:8D:A1:71:EE:8F:62:96:C9:03:1D:FE X509v3 Authority Key Identifier: keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:aa:a0:a9:2f:ef:38:5a:ae:70:98:24:d6:a3:f1:17:00:2e: 52:f5:08:e5:52:ed:39:5e:41:ac:a2:03:34:18:1e:67:a5:31: 50:81:dc:2c:c3:7f:48:d1:b4:12:6a:33:f4:f1:2f:61:91:f6: 04:69:99:7b:2d:33:77:43:45:1d:21:0e:a8:f9:d3:b6:d5:e5: bd:21:39:26:af:30:78:ef:da:f1:10:98:43:f9:bf:5b:19:67: e3:fb:79:0c:b6:4d:5c:5e:16:a5:85:91:ef:d1:01:5b:3b:d9: bd:17:df:01:05:72:5a:43:1f:4b:cf:e4:03:24:f3:df:c0:06: a4:f3:52:86:6c:71:99:88:92:16:47:c7:8c:16:cf:a2:6d:af: ba:98:35:ba:8e:6a:91:88:ec:f4:5a:f8:f8:13:d9:1e:6d:f3: ec:26:66:13:37:a3:bd:53:26:07:54:01:7e:8e:93:48:96:e1: 6d:5b:cb:d3:e2:4a:4e:ea:93:02:54:a4:39:63:24:e2:ce:95: c8:e2:99:63:b9:2b:ce:77:2f:31:58:ea:42:0c:de:b2:87:34: 86:8e:cb:02:b6:92:83:3d:7e:3a:1e:0d:81:70:82:39:85:e5: fe:49:2f:6c:51:ba:4c:b3:20:29:38:3d:f2:7c:f7:25:21:19: b2:09:46:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6KkTV1h4soZR7Y5dHosVyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMGU0NDUxOTViNjRkNzk5YjgyMmU5OTk0Nzc5MmUwY2Fi MzJiNmQwHhcNMjYwNjAyMjMwMDMyWhcNMjYwNjAzMjMwMDMyWjAzMTEwLwYDVQQD EygxYTdiNjBkYTIwMTJmZTlmODc4ZGExNzFlZThmNjI5NmM5MDMxZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjUGHLx8t6oJpFqBKFtS1M42eGwI qVzgN+xEtfYVleMiKR+DHRvpDRmLBFeNuIbG6fdN0QIN17dU2BK0qLEeqFlJVsRM 72iBVP30xIuTPbqmcKtaIcuGy0WVkXOA+q/PZ1Rim4Rs/PtZMLacUV0WCD4WFyrm Dd4D79mlLtBFZKu9sDRRsD/iq78y2kRDBiUNUuOICRNKD8tNP76zNA2cMNKXHZ5m r0MYnBj7m7nTkBmvSfRvBYrNemJvIoWVW+OOJoOHpYI50R029C3u138jre6t+qaR 44pSRGkAMULCK2vSxMm/auZMUVkjWdN+IJEZfVkakAJOxApXZzLxHfJvdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBp7YNogEv6fh42hce6PYpbJAx3+MB8GA1UdIwQY MBaAFPMORFGVtk15m4IumZR3kuDKsyttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHc1RVVaVzJUWG1iZ2k2WmxIZVM0TXF6SzIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iNTJjNWQtOTViYS00ZGQzLWJiYTgt YjdjYTFmNDcyOGQwLzEvOHc1RVVaVzJUWG1iZ2k2WmxIZVM0TXF6SzIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9iNTJjNWQtOTViYS00ZGQzLWJiYTgtYjdjYTFmNDcyOGQw LzEvOHc1RVVaVzJUWG1iZ2k2WmxIZVM0TXF6SzIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaqgqS/v OFqucJgk1qPxFwAuUvUI5VLtOV5BrKIDNBgeZ6UxUIHcLMN/SNG0Emoz9PEvYZH2 BGmZey0zd0NFHSEOqPnTttXlvSE5Jq8weO/a8RCYQ/m/Wxln4/t5DLZNXF4WpYWR 79EBWzvZvRffAQVyWkMfS8/kAyTz38AGpPNShmxxmYiSFkfHjBbPom2vupg1uo5q kYjs9Fr4+BPZHm3z7CZmEzejvVMmB1QBfo6TSJbhbVvL0+JKTuqTAlSkOWMk4s6V yOKZY7krzncvMVjqQgzesoc0ho7LAraSgz1+Oh4NgXCCOYXl/kkvbFG6TLMgKTg9 8nz3JSEZsglGOg== -----END CERTIFICATE-----Generated at Wed Jun 3 08:55:15 2026 by rpki-client