$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft File: 8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft (raw, json) Hash identifier: nONrdJn6jola95qgwSQWZDhl1CZdgi+LM3q8bNGOIQ8= Subject key identifier: DE:11:CC:42:15:A8:85:27:C7:18:E7:5E:50:94:BB:EB:F3:AF:26:A1 Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74 Certificate issuer: /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974 Certificate serial: 01A15E1F443AC624208A24DB85E93785CE3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft Manifest number: 013A Signing time: Wed 21 Oct 2026 11:01:09 +0000 Manifest this update: Wed 21 Oct 2026 11:01:09 +0000 Manifest next update: Thu 22 Oct 2026 11:01:09 +0000 Files and hashes: 1: 1-amM62GeyiqIA7h6L1VIqXMpg_k.roa (hash: e3ELaeWiUzpv6kgXisd23pTHNP7qazPkpsbKCjsJosQ=) 2: 2sSeFgoeXeBnPC_ZpPZnrMNe_Yw.roa (hash: jh3bfylqCqw9M7hfFZ/h577WyCqH+ANDZeqpwYgqSgo=) 3: 3f-YZ_gZlvXel0INTsX8PYHYwkM.roa (hash: tYd4+MLEesSD8GAgr16MDLhnq93BfcFvnbdolUayoJA=) 4: 8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl (hash: eA/DgGdsis5brUI32p5vz8zkzrlByg5jzJMwnk6tStQ=) 5: 8faSSn0wrld6TiH-z71PXz4fvGY.roa (hash: Jr/vj1qvsFEz2pv7w2BBw4Ox99TbjM4GLFqCKURwvk4=) 6: ESleWbcySUnTxTcWeNigzmbbsuY.roa (hash: QTUEU0Zs7X8PSlH1r4bAKO3r4cdd8SMgkPqxuyZUVSM=) 7: JRQBdP7ope_PtzqtZeZHn9Bvtyo.roa (hash: mlXuFbiUkqJMpJ3gsU4Ys2bpdMZx0bolGvQ5xQgh3BA=) 8: KIZz9DPTnXnVw9NdjWPUo-TLo-o.roa (hash: PnaduGApsvPabzpzYKthmRcBCdXMG0jb8OHAbeuAnHM=) 9: MrWmH_MbABsdkBqCFs3M8fCwO6k.roa (hash: PV4gzaqHFzi+Hhp8rNjt2QZxGgJeNB9fPcuuG+pb/N0=) 10: MtpEto0-9RDZdJKLup0JfMMPGIE.roa (hash: SGYo5LM15qsG5Z/kxlP88G54S0Ys+UdLIr7hVGjbpUE=) 11: oouIMRn5xmavfg3BN45yaJQjQgA.roa (hash: xx3DuD/kVyuMAI2tXLfzol9FrLR5V1fuLfH+vvapSKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 11:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:5e:1f:44:3a:c6:24:20:8a:24:db:85:e9:37:85:ce:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974 Validity Not Before: Oct 21 11:01:09 2026 GMT Not After : Oct 22 11:01:09 2026 GMT Subject: CN=de11cc4215a88527c718e75e5094bbebf3af26a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fa:fa:db:52:f4:63:01:35:1c:23:0c:4a:80: d5:21:cc:76:1f:98:7e:d3:98:cd:a2:9d:6e:23:99: e0:49:a1:47:33:5f:c2:93:53:6a:8e:5a:5d:fb:e6: b9:28:03:85:d1:79:1a:7f:c2:5b:87:4d:84:ee:1b: aa:ad:69:0c:5f:3a:b6:93:c7:60:2c:37:8d:3f:6a: 49:0c:36:34:78:99:92:f3:a7:09:b5:43:b8:f2:e3: 13:9e:e6:17:5b:a2:d5:f3:20:7e:b6:bf:26:74:01: c0:b8:19:b6:38:9c:1f:88:91:e8:eb:e5:d6:61:42: 48:44:bf:ee:78:ba:6a:e6:01:b6:d3:eb:e3:f3:f6: bc:78:b4:12:ae:fc:5f:44:90:d3:38:0e:26:cf:1d: f7:cc:b0:31:49:2b:d2:61:cb:52:68:b7:2c:9e:17: 44:48:84:d7:6d:ab:35:22:a3:89:a4:a3:78:ad:78: b8:b8:75:2a:44:8e:df:d6:01:91:8a:da:1d:0a:9d: bb:f0:c8:59:17:87:57:36:0e:e5:da:8c:10:a9:3a: 02:30:22:b2:9f:97:c9:8f:ef:98:bb:7d:77:6d:c7: a8:7a:81:05:48:61:13:db:69:98:72:df:f2:88:22: 89:f3:dc:8f:38:81:a3:38:fe:c6:39:da:12:c7:29: ea:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:11:CC:42:15:A8:85:27:C7:18:E7:5E:50:94:BB:EB:F3:AF:26:A1 X509v3 Authority Key Identifier: keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:44:73:cf:7c:bb:43:d2:56:a6:cc:56:7a:98:af:ad:c0:6f: 4d:10:f5:59:a6:5a:20:7b:46:8e:b1:15:8b:e3:8b:15:e9:f2: ee:11:dc:32:75:31:0f:1e:8e:0f:eb:ec:25:64:99:4e:08:77: 41:30:bf:cc:48:3c:c0:77:b2:f3:7c:6b:a5:e0:b6:1c:99:96: 96:0b:c7:64:fe:11:31:c6:d5:3d:00:19:f2:af:ee:ca:b1:11: 1e:a2:d7:6c:0f:0d:82:7d:8e:fd:50:a7:62:14:4d:37:e2:43: c6:f2:c2:7c:1d:4f:79:37:51:19:7b:96:11:cc:98:b3:e5:5b: 4f:28:90:29:52:a2:89:c3:89:cc:57:19:79:ac:9f:f7:f8:e9: d6:9f:21:4b:0e:d1:1c:c9:d8:38:fd:8f:70:b6:e0:53:2c:bb: 9a:5f:46:fc:95:70:86:75:c0:f2:08:ae:ac:cb:56:3b:37:0a: 45:87:e5:88:a2:2f:d5:b5:53:42:c2:14:54:c4:12:93:31:15: 3c:d0:61:04:1e:63:6b:2b:c8:85:19:b5:8b:d3:76:be:c1:d4: 46:30:a4:87:ac:f4:b1:f2:d0:e2:27:13:c7:02:88:9f:7f:34: 85:63:96:38:f2:56:70:72:3d:94:6e:1e:9f:68:ef:98:84:a6: bf:8d:4b:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFeH0Q6xiQgiiTbhek3hc47MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZGEzMTU4ZWIxYmM2YTBhOTAyN2NmNTllNjAzNjg3ZDZk M2U5NzQwHhcNMjYxMDIxMTEwMTA5WhcNMjYxMDIyMTEwMTA5WjAzMTEwLwYDVQQD EyhkZTExY2M0MjE1YTg4NTI3YzcxOGU3NWU1MDk0YmJlYmYzYWYyNmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/r621L0YwE1HCMMSoDVIcx2H5h+ 05jNop1uI5ngSaFHM1/Ck1Nqjlpd++a5KAOF0Xkaf8Jbh02E7huqrWkMXzq2k8dg LDeNP2pJDDY0eJmS86cJtUO48uMTnuYXW6LV8yB+tr8mdAHAuBm2OJwfiJHo6+XW YUJIRL/ueLpq5gG20+vj8/a8eLQSrvxfRJDTOA4mzx33zLAxSSvSYctSaLcsnhdE SITXbas1IqOJpKN4rXi4uHUqRI7f1gGRitodCp278MhZF4dXNg7l2owQqToCMCKy n5fJj++Yu313bceoeoEFSGET22mYct/yiCKJ89yPOIGjOP7GOdoSxynqywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4RzEIVqIUnxxjnXlCUu+vzryahMB8GA1UdIwQY MBaAFPHaMVjrG8agqQJ89Z5gNofW0+l0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iODg0N2EtYjBmNS00YWZmLTk5ZGMt YTllOThiNzNiNTU2LzEvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iODg0N2EtYjBmNS00YWZmLTk5ZGMtYTllOThiNzNiNTU2 LzEvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATERzz3y7 Q9JWpsxWepivrcBvTRD1WaZaIHtGjrEVi+OLFeny7hHcMnUxDx6OD+vsJWSZTgh3 QTC/zEg8wHey83xrpeC2HJmWlgvHZP4RMcbVPQAZ8q/uyrERHqLXbA8Ngn2O/VCn YhRNN+JDxvLCfB1PeTdRGXuWEcyYs+VbTyiQKVKiicOJzFcZeayf9/jp1p8hSw7R HMnYOP2PcLbgUyy7ml9G/JVwhnXA8giurMtWOzcKRYfliKIv1bVTQsIUVMQSkzEV PNBhBB5jayvIhRm1i9N2vsHURjCkh6z0sfLQ4icTxwKIn380hWOWOPJWcHI9lG4e n2jvmISmv41L5w== -----END CERTIFICATE-----Generated at Wed Oct 21 14:26:34 2026 by rpki-client