$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft File: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft (raw, json) Hash identifier: m3ccWWRX/gz3u/zmQMyW186JchwoFhn0+m8SseMUCU4= Subject key identifier: F2:69:3A:58:D0:96:AC:A4:C8:45:F6:B8:61:0C:CF:C8:32:8D:79:9F Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1 Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1 Certificate serial: 019FA1F2DA0BDBAC5079A86725856A27BFA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft Manifest number: 01B9 Signing time: Mon 27 Jul 2026 05:01:15 +0000 Manifest this update: Mon 27 Jul 2026 05:01:15 +0000 Manifest next update: Tue 28 Jul 2026 05:01:15 +0000 Files and hashes: 1: 0PwBP1m5V8tHPFCHGGYOau0rRTc.roa (hash: M0W/FLJbKezFVRY+boZRSGO4f4RhltYple/V23X0j4c=) 2: 1vK1T7KdFH0hBpOuHuKe8W_luZE.roa (hash: qhZOYXpVTc+RHC0IfCFs2RzEIVYZAgoD6YvTFLHwFmE=) 3: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl (hash: woovCiP9UOUp9Wv7aGKkrnxsXXzjBF/fKTcusCHtzBY=) 4: JcePCXWu8_9ZZzjxfVygKM8dWzw.roa (hash: 0S4YgLpuoSBRqOUxV6YpZdqEiuMF4cz82gQj2otpNQw=) 5: Nd6V0QCloRDIZfwDcQtVL1w6Z0A.roa (hash: TIjs2IbFM1v00nTvmxBW2uHZechx9jNZhQSCyvBAeP8=) 6: O9sJ-_TKMq6bS7__E1UX2XB1imA.roa (hash: +Z6Yn/3PglFToHJ9MMw/pkkVUwEYwsRd5WZO7o88I9I=) 7: QEGryiURhVI85Y_iwFPpO1kjb3E.roa (hash: f7QZn8PJdOvgT/DCDoEpmb1SfJG64+IFdudonB3DpJU=) 8: S64PRp6HfgfeBA5dqF_nm378oSE.roa (hash: KH+IlbpUNkPXeoQclXeI5i/KLaVnfhqbd5izf4u4qTc=) 9: SHnHAD4XActufnWbDbBuCezR5sk.roa (hash: nenlz/3VAG7POjOi6mcs6RNeMaF2/86fDvCTf+cSRc4=) 10: VTvDdxCNdn_BPeZovGaO3zvHn-c.roa (hash: /82kfcvdmxFyaaXRLhtB6elmf3XA4bQBsOc05JD7WPw=) 11: XZAVpeao-MzWMM0T1IBuo6mJOhw.roa (hash: 4OhzlwI1uDhgkruwa46Ix7LBdf/mbvESkAg3CQYlmdQ=) 12: bTLlcnL0Fm_nCJarfemQWZlQvug.asa (hash: +U6OavydfvrqqdI9vdtdZM6LAnVLXxOVl7v9NGcpnyo=) 13: fYhnGLcy2_Ou27KADH18mycTzz4.roa (hash: sP66OdJ/+I0oQxB3kcnMaYSOI2OOAjekthsNq69mxkE=) 14: g9eBBErf7cGntKTfm3PnpI6Ysa8.roa (hash: L1Y5INt4k++fXqtaolFcZdxOvA8W927R6H65T4L/Fcg=) 15: vSXSp5A3lM38ZHU363V73iY2sOY.roa (hash: OEc0FstKUDyge4yjj89lJISWQxLtMasQvdcX8uQFwbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:f2:da:0b:db:ac:50:79:a8:67:25:85:6a:27:bf:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1 Validity Not Before: Jul 27 05:01:15 2026 GMT Not After : Jul 28 05:01:15 2026 GMT Subject: CN=f2693a58d096aca4c845f6b8610ccfc8328d799f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:15:3e:84:45:95:57:88:aa:30:11:ce:a6: db:40:a8:b7:bd:db:2e:b6:56:90:74:44:87:20:2f: 8a:59:0d:e5:b8:28:48:a0:f7:79:21:70:cd:3d:dc: 82:16:69:da:5f:3b:3e:95:5c:e7:85:e3:2e:c8:65: 89:d5:e4:b8:1b:03:88:dc:de:1c:cf:7a:fc:95:68: fb:b3:93:2f:41:ba:63:1e:79:48:03:13:03:82:e5: 3a:f8:50:97:4f:e0:f5:30:35:32:fd:46:b4:e6:00: d7:2c:35:46:52:7d:b9:72:66:74:5e:42:99:51:44: 9b:d4:18:2e:7d:07:21:42:f5:c9:8c:fd:8a:17:d2: 85:8c:c8:c9:5a:2f:03:7c:9f:89:e6:c3:8c:45:a6: 46:59:2c:e9:32:53:c9:6d:0c:78:6f:3a:77:67:9a: 72:84:91:1d:78:04:12:45:31:91:d4:55:91:84:f8: 62:2e:7b:eb:a6:7b:f1:0c:d3:8c:09:da:c1:9c:50: a9:34:1c:b9:94:80:69:15:93:7a:f8:36:1f:cb:12: 89:35:dd:9e:a5:7f:83:43:22:59:e9:e3:39:3e:25: 2f:c3:7a:15:d7:73:2b:a1:2c:3a:32:27:23:6b:52: fd:50:5e:7b:c7:34:13:10:f2:14:e3:6d:94:85:20: ba:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:69:3A:58:D0:96:AC:A4:C8:45:F6:B8:61:0C:CF:C8:32:8D:79:9F X509v3 Authority Key Identifier: keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:8f:b2:db:30:3e:a5:cd:ad:38:dd:d2:bc:0a:0e:19:81:f0: 14:58:3e:e2:82:86:40:cb:9e:71:32:93:a7:cd:08:b3:9a:9e: 8f:d2:a5:bb:be:9b:3c:c4:33:89:5b:e0:fb:d8:7c:a5:64:ff: 54:bf:d9:68:eb:ee:e9:a9:39:5c:88:be:25:f3:83:71:b2:47: 05:c5:e8:fa:e5:04:76:aa:cc:1a:0d:f9:c7:d7:3e:e2:6e:80: 54:eb:32:45:cd:74:d4:49:52:22:ef:e9:97:35:83:36:5f:81: 70:b1:28:14:c0:0f:29:5c:b7:e4:a3:8f:f5:32:91:bc:e4:69: c5:ec:51:14:6c:a8:53:df:45:31:cb:2c:6d:39:3a:63:35:87: 41:ae:6a:6c:7d:37:c0:e7:aa:f9:31:c8:47:0e:dc:79:36:1f: e9:45:98:98:13:ee:4c:8a:8c:b0:db:73:80:01:e0:38:b7:10: fc:9b:61:0f:18:0f:b5:96:ec:89:5f:3c:83:d2:3e:a1:7a:f3: 29:21:e7:ee:5f:48:72:0f:9b:fd:b5:fd:3d:90:92:b5:a1:b4: f6:17:af:b0:38:ce:b2:91:71:fd:e3:f5:9e:bf:3a:3f:31:94: 70:39:06:cb:57:4a:36:80:30:a5:1f:43:5c:0a:c5:b4:74:79: 06:58:63:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+h8toL26xQeahnJYVqJ7+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMGJkY2M0NDQxNzNmNTk5NGRlMzRhM2JmNjNmM2FkOTc2 NGM2ZDEwHhcNMjYwNzI3MDUwMTE1WhcNMjYwNzI4MDUwMTE1WjAzMTEwLwYDVQQD EyhmMjY5M2E1OGQwOTZhY2E0Yzg0NWY2Yjg2MTBjY2ZjODMyOGQ3OTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq74VPoRFlVeIqjARzqbbQKi3vdsu tlaQdESHIC+KWQ3luChIoPd5IXDNPdyCFmnaXzs+lVznheMuyGWJ1eS4GwOI3N4c z3r8lWj7s5MvQbpjHnlIAxMDguU6+FCXT+D1MDUy/Ua05gDXLDVGUn25cmZ0XkKZ UUSb1BgufQchQvXJjP2KF9KFjMjJWi8DfJ+J5sOMRaZGWSzpMlPJbQx4bzp3Z5py hJEdeAQSRTGR1FWRhPhiLnvrpnvxDNOMCdrBnFCpNBy5lIBpFZN6+DYfyxKJNd2e pX+DQyJZ6eM5PiUvw3oV13MroSw6Micja1L9UF57xzQTEPIU422UhSC6SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJpOljQlqykyEX2uGEMz8gyjXmfMB8GA1UdIwQY MBaAFPAL3MREFz9ZlN40o79j862XZMbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYt Y2ZhNWE0Yjg5ODZiLzEvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYtY2ZhNWE0Yjg5ODZi LzEvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMY+y2zA+ pc2tON3SvAoOGYHwFFg+4oKGQMuecTKTp80Is5qej9Klu76bPMQziVvg+9h8pWT/ VL/ZaOvu6ak5XIi+JfODcbJHBcXo+uUEdqrMGg35x9c+4m6AVOsyRc101ElSIu/p lzWDNl+BcLEoFMAPKVy35KOP9TKRvORpxexRFGyoU99FMcssbTk6YzWHQa5qbH03 wOeq+THIRw7ceTYf6UWYmBPuTIqMsNtzgAHgOLcQ/JthDxgPtZbsiV88g9I+oXrz KSHn7l9Icg+b/bX9PZCStaG09hevsDjOspFx/eP1nr86PzGUcDkGy1dKNoAwpR9D XArFtHR5Blhjpw== -----END CERTIFICATE-----Generated at Mon Jul 27 06:49:56 2026 by rpki-client