$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: buumANB1RtFSuEoka+6ps/bHiBy+IERMvydYQabPR2E= Subject key identifier: 06:0E:73:15:32:7D:15:21:04:4B:37:19:6D:F9:56:81:C7:28:39:43 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019E31BBEA6845F690A59DE2C9E7E77D597C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 18F2 Signing time: Sat 16 May 2026 17:00:59 +0000 Manifest this update: Sat 16 May 2026 17:00:59 +0000 Manifest next update: Sun 17 May 2026 17:00:59 +0000 Files and hashes: 1: 0kI-1w2SNQehfoRycoNU1Pziv3I.roa (hash: viuJDQhBSgYavhQbluwLnuiQSVTVx0a9HzJyfcAYcOw=) 2: 5DlckLw7-djlSZ1lp36YaxGlvKE.roa (hash: eYIP1EqGYnvhmzjtkEGHQx/0NRgSz/vE0nE/kWbBXzk=) 3: 9lOq7Wh0Dc-TKs_jMnqAjp9qty8.roa (hash: gQsP3f9jY08L6TReTRhgCoFcXcYx56yiIKyEwP5fgis=) 4: B7aE9R9fg8NCdOQeiZzwMIi2ZNw.roa (hash: d1Ep9dN1bkXXcsIWaTx6sw5pJSc2xeGu6SeeEZeK/UM=) 5: H3x0T_83rlo2BTe5d7dbAF2ptxg.roa (hash: PQJVU6JoM83KwjANErOepQ3bz3i1NBfWfLmiBsgEm0c=) 6: KQ8fXNipeYkCVN179So0D0TWljQ.roa (hash: XxbQ5bE5bKEdW9jXnVZEomEiZqEsNztBM796TwnerwI=) 7: Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa (hash: 4kpMa9oce3yLyGOA9Rf9dgs0rQL4kCPs5/HrQzn7jc8=) 8: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: shV6/qYWQ9K9iupgwipNecJ25fgSJB9SdXnAOcXL0L8=) 9: apYOCQON8Q50nYzp4ypso-jbqys.roa (hash: GBiBhZg5+hSaQBI+hKWqc24pEoVUkpkEuUna1OBDqxw=) 10: no_ORyMn9T6-xikFSqLg-Gz96M4.roa (hash: Cp3JrKwrBj3GbQGbhILQy1X/3llVpyj5IPBpaVZnel0=) 11: qkO3HWUjh2SeVz2kOfBJ3fz48jY.roa (hash: /yTAZn/rmLrDKLc8NDsiQRU6zHvgZlDcdPO4KfqzKvE=) 12: se8BvmMQMrcgHtpi_ujjg8KT8CQ.roa (hash: cAQdGWRmSeLyjwmIoEHBdUkwP7QnABnaaE31A7C6720=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 17 May 2026 12:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:31:bb:ea:68:45:f6:90:a5:9d:e2:c9:e7:e7:7d:59:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: May 16 17:00:59 2026 GMT Not After : May 17 17:00:59 2026 GMT Subject: CN=060e7315327d1521044b37196df95681c7283943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:07:4c:33:fc:77:c6:3e:ce:cd:71:f9:7b:d1: 94:cd:0b:bd:30:75:03:45:35:41:1e:26:fd:28:df: 99:96:63:aa:ec:3c:9b:e0:25:92:a9:7d:84:49:32: 33:5e:30:0b:49:70:2a:91:f3:e4:e4:1d:25:9f:19: 88:aa:8a:55:ce:f5:f5:b3:9b:71:8f:21:78:e7:51: 28:88:fa:43:d4:22:c5:02:9c:a4:d5:00:f7:74:e8: 8a:23:5c:b0:11:2f:62:10:7e:90:43:2c:5e:33:16: c1:32:d9:68:72:8e:00:54:cc:14:e9:af:98:2f:d1: 85:6b:9c:56:73:98:67:de:a7:55:d2:3f:78:25:43: 84:f7:29:8a:37:85:4f:bc:7f:b3:76:fe:65:4c:be: 80:5b:af:50:7c:4c:ba:50:7f:52:56:97:5f:5e:fd: 11:20:03:c2:cf:c0:76:2a:a9:c6:a3:52:df:23:f8: d7:10:9d:9b:97:c3:1a:cb:e7:63:1e:3a:09:66:6c: 4b:12:ac:6c:de:4c:27:d3:94:cc:81:9a:bc:99:c1: df:25:de:53:e3:3a:09:83:1c:18:2e:d5:e6:5e:17: 3a:78:bf:9c:f1:6a:72:70:04:e6:67:0a:9b:9e:09: fe:eb:21:59:08:1c:3b:cb:2a:2e:a4:d0:08:29:40: 28:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0E:73:15:32:7D:15:21:04:4B:37:19:6D:F9:56:81:C7:28:39:43 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:50:10:cd:dd:d5:20:80:91:c7:28:64:f8:b0:0a:8e:4b:a0: 12:d0:42:70:5d:1b:5e:7e:ba:a5:e3:9e:dd:5f:b0:90:2f:ef: c8:a7:5c:38:50:5c:7a:96:71:5a:ea:50:c3:4f:7d:97:41:87: bb:71:23:09:5e:44:87:68:e0:1e:c0:4d:c9:93:ec:35:35:f5: 99:c0:c3:d2:e9:7b:00:ca:06:46:55:bd:24:0c:1d:d4:a3:6b: c9:cb:bb:18:3f:57:9f:8d:a8:71:28:19:9d:69:6e:47:5e:ef: 73:7b:c3:41:ff:34:07:83:fc:29:60:fb:9e:cf:6c:85:b9:4e: 22:19:71:d0:7d:8d:4d:dc:58:06:6d:37:b0:c5:d8:32:4d:8f: 0c:dd:38:d0:b3:48:5f:2d:eb:2c:e5:49:c7:38:35:c4:95:f6: 82:7d:01:02:cc:95:0c:d3:ee:2c:56:1a:5a:b5:fe:d7:04:a3: da:c3:e1:70:96:9e:45:ab:e9:a1:81:ac:53:18:26:5f:28:e7: f7:b2:74:e0:8d:c9:8e:fb:aa:7f:08:5d:45:53:49:9b:2f:3a: 34:9b:5d:7b:e0:20:1e:94:df:b0:1e:bf:03:1e:f0:3d:13:8f: cd:e0:fd:9c:29:64:22:3f:e9:26:a4:69:77:75:de:77:42:9a: 10:c5:6c:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4xu+poRfaQpZ3iyefnfVl8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjYwNTE2MTcwMDU5WhcNMjYwNTE3MTcwMDU5WjAzMTEwLwYDVQQD EygwNjBlNzMxNTMyN2QxNTIxMDQ0YjM3MTk2ZGY5NTY4MWM3MjgzOTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AdMM/x3xj7OzXH5e9GUzQu9MHUD RTVBHib9KN+ZlmOq7Dyb4CWSqX2ESTIzXjALSXAqkfPk5B0lnxmIqopVzvX1s5tx jyF451EoiPpD1CLFApyk1QD3dOiKI1ywES9iEH6QQyxeMxbBMtloco4AVMwU6a+Y L9GFa5xWc5hn3qdV0j94JUOE9ymKN4VPvH+zdv5lTL6AW69QfEy6UH9SVpdfXv0R IAPCz8B2KqnGo1LfI/jXEJ2bl8May+djHjoJZmxLEqxs3kwn05TMgZq8mcHfJd5T 4zoJgxwYLtXmXhc6eL+c8WpycATmZwqbngn+6yFZCBw7yyoupNAIKUAoNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYOcxUyfRUhBEs3GW35VoHHKDlDMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVAQzd3V IICRxyhk+LAKjkugEtBCcF0bXn66peOe3V+wkC/vyKdcOFBcepZxWupQw099l0GH u3EjCV5Eh2jgHsBNyZPsNTX1mcDD0ul7AMoGRlW9JAwd1KNrycu7GD9Xn42ocSgZ nWluR17vc3vDQf80B4P8KWD7ns9shblOIhlx0H2NTdxYBm03sMXYMk2PDN040LNI Xy3rLOVJxzg1xJX2gn0BAsyVDNPuLFYaWrX+1wSj2sPhcJaeRavpoYGsUxgmXyjn 97J04I3JjvuqfwhdRVNJmy86NJtde+AgHpTfsB6/Ax7wPROPzeD9nClkIj/pJqRp d3Xed0KaEMVs0w== -----END CERTIFICATE-----Generated at Sat May 16 19:32:32 2026 by rpki-client