$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft File: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft (raw, json) Hash identifier: eyyHXtD7VDG0u5K4swt/2Bqovcw/lYrAgxcMPxk7ZDc= Subject key identifier: 8E:77:07:F5:55:3F:FF:0C:21:C8:FB:FB:FB:B4:2F:25:00:AE:F3:D2 Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 Certificate issuer: /CN=3eb1788fe220e46434692d1cc437072d792d7888 Certificate serial: 019FF8DA74441742C81A30F7DF41225779B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft Manifest number: 1A03 Signing time: Thu 13 Aug 2026 02:01:33 +0000 Manifest this update: Thu 13 Aug 2026 02:01:33 +0000 Manifest next update: Fri 14 Aug 2026 02:01:33 +0000 Files and hashes: 1: 2MINrSF-904_xnWHt9aLmREzfgM.roa (hash: 2JlxQCyPp6ZuyhE6H5mjVo5s7oH/wwZoUZTFvN2689w=) 2: 5ofwE8fWcu41y5nE1W98Xt08B9U.roa (hash: vBHKAReKnkwdzg96lnBkzkJIhU9wk+NEk4UwhyvZN8M=) 3: 6D7xnslgrR1jYkhOQFOsCCy_Ilo.roa (hash: vZ6+RacR9VxPA5+UlqTbSm8U/9rgsp0IuJGD6MdbbQo=) 4: DXimx1XY9etEzx_enIQDGBa9bm4.roa (hash: PZFvhgHYjMFhesaC5VQQRMgpbART5/jL2VnPsqgnMoo=) 5: J1cLQGWUhIVSfZKk_j_qK7xfNRk.roa (hash: txu0I6tcoeoOCvYRp5YDtz869JeJI1kFO2/j3Mpeh2A=) 6: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl (hash: A5Q1nPHah3Z2op4u2UbcLEon9BLPIr49M20QVGUOiVw=) 7: WzKCG2YANYwDiCPMEDnF3wWEIL4.asa (hash: j0Le2/fYLgItT8RcFxl99L6MkmGjdvtEmpaCnBgE1Nw=) 8: h7z0dcjyEiQrTlWfLJHvO8mytLk.asa (hash: wvs5YngkGWwMTiaT1xG6NC51mWPXd//9JXNAJ/RSeS4=) 9: kOMx0_xNVRgDDoEQ7tlUClFr3ws.asa (hash: 0ziRnXqAEvChx1eTjtol5U+/7UMoVmq7jdKvDvVj9NA=) 10: kjwvRpYiwOhcBYij8xZk0n0qpVs.asa (hash: eLOVHbyXbAmwSoR/i5JEDYllBqHeZO1blxzW1aKtYRM=) 11: taTHP1eAZV5DFgScGmkLmOoYJTk.roa (hash: w4zToqhdyScOj4eQSJZgMvLZqXoAq5qiIOEJ0CUK/zQ=) 12: zh7TzogLebptNJwvcCWZ7OOFbkA.asa (hash: KV2Noq8YepqhgkaIi7JvU21NOnAiECfq1AqTeUrEQYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f8:da:74:44:17:42:c8:1a:30:f7:df:41:22:57:79:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888 Validity Not Before: Aug 13 02:01:33 2026 GMT Not After : Aug 14 02:01:33 2026 GMT Subject: CN=8e7707f5553fff0c21c8fbfbfbb42f2500aef3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:dc:f2:d3:dd:67:57:1d:d5:50:ca:bb:25: 99:e5:bf:a0:2a:db:53:ba:01:86:c0:26:92:da:7e: 65:4a:1e:37:28:04:f9:88:d3:a1:36:a9:1d:67:40: 1e:79:b4:a7:dd:f3:ae:0f:a3:3c:2b:77:fc:9d:4e: ec:5d:29:e2:6d:d6:c6:0e:27:6e:89:92:0a:20:54: f8:51:aa:80:ca:c6:c4:33:7a:03:69:6b:d0:d5:00: dd:c7:07:ad:be:4b:76:38:0a:d1:83:21:4f:e5:be: 1a:75:c0:ad:6c:2b:12:56:62:a9:0d:98:27:be:79: 02:b6:0f:27:37:32:03:7a:d2:fa:bb:e2:1b:64:79: 76:24:08:6e:75:e9:a9:bf:ce:2d:0d:99:c2:b5:f5: 0c:f0:d7:98:40:66:a2:11:a1:82:4d:28:c1:eb:be: f8:38:97:b4:c0:45:34:3c:59:2f:2a:14:16:2c:29: ab:0e:d5:33:e7:62:1a:c7:9d:e5:25:76:76:60:e1: 38:13:da:4d:bc:18:76:77:ae:bc:4e:36:c1:03:07: 0e:61:fa:1c:5a:14:50:b2:52:9f:ea:13:2c:ba:5c: 77:bd:96:23:db:9e:52:69:c7:da:37:6e:cd:f0:4f: 4d:38:89:b2:e4:87:45:bf:1e:22:49:66:c4:bd:55: 7a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:77:07:F5:55:3F:FF:0C:21:C8:FB:FB:FB:B4:2F:25:00:AE:F3:D2 X509v3 Authority Key Identifier: keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:7a:2e:39:38:f7:37:4b:68:18:dc:69:19:7f:1c:5e:2d:d7: 2b:37:cb:8f:eb:68:72:06:43:88:c4:3d:2e:aa:f9:8d:25:6d: 3a:ed:57:00:6c:68:23:a7:c1:ee:35:e1:97:37:af:f6:da:a6: 1f:c9:28:3d:4f:14:48:64:bd:86:16:e5:38:5e:1f:d4:61:e6: 35:cc:1a:0a:e7:fa:b2:63:fb:78:d6:77:33:9a:74:42:ea:72: 36:7d:10:94:63:89:f2:8f:07:dc:e1:5e:e7:cf:fe:a1:5c:66: 96:dc:80:a4:42:c9:43:05:62:fa:83:72:0f:55:03:08:65:e4: 75:a4:e1:d2:4e:fa:31:72:b2:3f:fa:c4:07:7b:4c:ca:de:a1: 83:9b:f2:64:64:c9:6c:22:7b:58:3e:d0:db:5a:df:f0:5c:9c: be:a4:4c:a2:4b:05:de:50:d1:92:46:cc:67:14:86:86:06:bc: 5f:fb:1e:b2:2b:10:a1:25:d4:78:2c:64:21:08:a7:34:e9:22: e6:de:14:94:9f:1f:2e:1e:e0:bb:9b:db:da:a9:cc:64:f8:ce: d4:27:7c:c6:54:12:01:3f:6b:9d:b7:92:7a:87:9c:29:60:b1: 00:5a:c5:bd:db:e0:c9:50:45:58:17:81:6b:d5:1a:3d:b8:9b: 0e:35:a4:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/42nREF0LIGjD330EiV3mzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjE3ODhmZTIyMGU0NjQzNDY5MmQxY2M0MzcwNzJkNzky ZDc4ODgwHhcNMjYwODEzMDIwMTMzWhcNMjYwODE0MDIwMTMzWjAzMTEwLwYDVQQD Eyg4ZTc3MDdmNTU1M2ZmZjBjMjFjOGZiZmJmYmI0MmYyNTAwYWVmM2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfjc8tPdZ1cd1VDKuyWZ5b+gKttT ugGGwCaS2n5lSh43KAT5iNOhNqkdZ0AeebSn3fOuD6M8K3f8nU7sXSnibdbGDidu iZIKIFT4UaqAysbEM3oDaWvQ1QDdxwetvkt2OArRgyFP5b4adcCtbCsSVmKpDZgn vnkCtg8nNzIDetL6u+IbZHl2JAhudempv84tDZnCtfUM8NeYQGaiEaGCTSjB6774 OJe0wEU0PFkvKhQWLCmrDtUz52Iax53lJXZ2YOE4E9pNvBh2d668TjbBAwcOYfoc WhRQslKf6hMsulx3vZYj255SacfaN27N8E9NOImy5IdFvx4iSWbEvVV6lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI53B/VVP/8MIcj7+/u0LyUArvPSMB8GA1UdIwQY MBaAFD6xeI/iIORkNGktHMQ3By15LXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAt ZDk1MDk0NzMwNzJjLzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAtZDk1MDk0NzMwNzJj LzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXouOTj3 N0toGNxpGX8cXi3XKzfLj+tocgZDiMQ9Lqr5jSVtOu1XAGxoI6fB7jXhlzev9tqm H8koPU8USGS9hhblOF4f1GHmNcwaCuf6smP7eNZ3M5p0QupyNn0QlGOJ8o8H3OFe 58/+oVxmltyApELJQwVi+oNyD1UDCGXkdaTh0k76MXKyP/rEB3tMyt6hg5vyZGTJ bCJ7WD7Q21rf8FycvqRMoksF3lDRkkbMZxSGhga8X/sesisQoSXUeCxkIQinNOki 5t4UlJ8fLh7gu5vb2qnMZPjO1Cd8xlQSAT9rnbeSeoecKWCxAFrFvdvgyVBFWBeB a9UaPbibDjWkhA== -----END CERTIFICATE-----Generated at Thu Aug 13 07:49:44 2026 by rpki-client