$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: 5GGu7mmwQIVD03zWUn4KFkwjxBzitAHTHnGyltZFBqc= Subject key identifier: 62:7B:F1:6A:1E:69:B1:01:83:56:87:17:D1:53:1B:F9:11:23:0A:77 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019FA0E03BEEE1C70C0C088E2E1D9693927F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 19E4 Signing time: Mon 27 Jul 2026 00:01:17 +0000 Manifest this update: Mon 27 Jul 2026 00:01:17 +0000 Manifest next update: Tue 28 Jul 2026 00:01:17 +0000 Files and hashes: 1: 6EiFZKIQWAEn8OFVy62rq2hePVc.roa (hash: QqaEwKcSsaYt3wwf9x5zbgaPoA6qxMBDNuqLJjfSh3E=) 2: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: RiPmrCmCtaaMno+9X+R7t6cNj3xfABRHEa8d87Ns1Lg=) 3: 8nyc8D2U6ZLNC1jg1xTgLIB5O08.roa (hash: UjE3wubUY3p3vPXEL528/Y/zzZrPn9j4CkCZh6HPAm8=) 4: D8drYTgqt32Cqf3EAiV6kDEeJmQ.roa (hash: z2zUysrNuxBIuhiC3z6/alcclEfX1JrDjmY7TAheY/g=) 5: FutR1Anwjf0YPYgj24VkOnnpOKo.roa (hash: B1PUo1d5o9i7GHA7LLQ+U0epYNN9/13TWk0w7UgND6Y=) 6: HrEvCC8IhGVeGnzBd0VRZALtork.roa (hash: O2TX3efNC8L1kVYPj9yl6qN6Xg9peYzVQTc557TbA/U=) 7: Kpq8EZf55_gV3FvEsn5mjf_dpBU.roa (hash: 2nhGvk06IqlLqxKExuqHomEp9VHs4mN4Vn/X8wYfMBo=) 8: U_LfKCv5kJDOuObeAwMorX4Nmc4.roa (hash: ecSv+ahB4B19FetdtS+R40A/h+b9mvwFfb6awkKuwag=) 9: _x6aIQIYgxoNnvNtpDTT6-qH5fs.roa (hash: j+sPJji49saMlwCW4eBAQImk7LYRvTzCGkaTq0ojLDo=) 10: cCLQDT_9t51iKlaGarf8PuI7ZuE.roa (hash: p225RnWWY7l8rkaX7oOrNPhwDG+u+RY9z5HJIbVDWT8=) 11: iM98sbe2k1VYrTYz4i_WKVQpI3M.roa (hash: 03SHJ8O0TtLrq1IoptZOUrbF4kDjXLjaj0+w7qMBEN8=) 12: wYnNwRf0L8-7zAlQ9eMsEnpatqU.roa (hash: vGGDkEQtDcGYvJgapMsj38d8WJqbdN5ZD4U4q0HVb6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a0:e0:3b:ee:e1:c7:0c:0c:08:8e:2e:1d:96:93:92:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Jul 27 00:01:17 2026 GMT Not After : Jul 28 00:01:17 2026 GMT Subject: CN=627bf16a1e69b10183568717d1531bf911230a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:36:b9:d4:17:ab:2e:82:85:ad:d3:8e:ab:34: 1f:1e:31:7d:f5:e9:25:2f:a8:10:c5:5b:06:0f:13: 38:cb:91:98:a2:b5:f6:9e:51:6e:0b:d9:db:95:f9: 07:cd:21:32:4e:d5:78:ec:85:a2:98:a1:ea:f6:5c: 38:7e:d4:c0:86:87:00:5a:8a:0b:14:c7:6f:a3:3d: a6:26:4a:f2:2c:26:44:e6:d0:3d:bf:5b:8d:c8:2e: 8a:56:9a:4f:c3:b9:23:7d:a9:04:8e:44:24:a7:b4: fe:b1:cc:52:ad:6d:64:a7:bb:fc:0e:a3:12:75:e4: 9a:01:69:5a:ab:2b:c9:63:89:db:01:7c:e5:fc:62: db:bf:90:57:53:65:5c:55:58:79:00:16:44:ef:9e: 88:f7:72:a6:76:81:fd:31:20:36:69:36:7b:da:ae: 77:85:dd:40:5d:75:53:dc:54:30:6a:da:ab:06:18: c6:23:22:08:e4:fc:56:c5:2d:73:84:a4:5e:59:2b: 6f:f5:6a:c1:00:37:f8:8f:40:1f:a4:52:4d:36:87: 63:72:29:bc:2e:2f:bb:f8:5e:9a:44:20:b3:5f:92: a1:09:d6:5a:5b:d2:e1:bb:c8:dc:b8:3e:be:73:31: d3:c4:d7:b7:77:77:4d:a7:20:57:26:29:76:6f:f9: 17:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7B:F1:6A:1E:69:B1:01:83:56:87:17:D1:53:1B:F9:11:23:0A:77 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:13:9f:d0:82:3c:90:d0:48:df:0d:85:9f:3a:0e:04:9e:b0: 69:f2:b1:d3:a5:6a:97:87:d6:9f:3a:d8:87:ab:2a:28:7f:e8: 3d:2b:ec:53:c5:ea:94:54:43:d1:79:11:db:01:b8:3d:42:8a: e5:74:51:a0:67:89:a9:b4:0a:f0:b0:92:dd:56:38:55:ab:21: 82:27:17:34:a6:59:49:ef:a1:f4:1f:bf:00:de:88:1b:08:d2: c1:f1:4e:b2:4e:23:59:23:bf:52:3e:95:4e:8f:96:80:24:89: 30:19:73:13:bf:05:b7:9c:e6:f7:f9:0b:dd:ed:11:56:14:41: b4:11:db:f8:09:af:3f:33:87:c3:93:f2:45:53:06:26:27:b3: 8b:df:a4:d7:51:4c:b6:72:fe:48:19:da:f2:cd:7c:3e:f2:fe: b7:de:3a:f0:43:84:79:10:3a:89:6c:5c:d2:8e:1f:27:58:5b: 95:db:9d:9b:b2:9b:21:bd:fb:53:d7:62:47:2d:bd:9c:96:b8: bb:91:c9:a0:19:e9:f8:0e:73:45:a7:2e:87:e1:db:67:ba:ac: b0:84:51:ff:c7:aa:b7:53:09:74:82:a3:56:e3:41:72:a4:cc: 1b:97:d1:b4:04:6a:25:4c:91:af:47:e2:16:85:fb:7d:ff:15: 29:f3:1b:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+g4Dvu4ccMDAiOLh2Wk5J/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwNzI3MDAwMTE3WhcNMjYwNzI4MDAwMTE3WjAzMTEwLwYDVQQD Eyg2MjdiZjE2YTFlNjliMTAxODM1Njg3MTdkMTUzMWJmOTExMjMwYTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0za51BerLoKFrdOOqzQfHjF99ekl L6gQxVsGDxM4y5GYorX2nlFuC9nblfkHzSEyTtV47IWimKHq9lw4ftTAhocAWooL FMdvoz2mJkryLCZE5tA9v1uNyC6KVppPw7kjfakEjkQkp7T+scxSrW1kp7v8DqMS deSaAWlaqyvJY4nbAXzl/GLbv5BXU2VcVVh5ABZE756I93KmdoH9MSA2aTZ72q53 hd1AXXVT3FQwatqrBhjGIyII5PxWxS1zhKReWStv9WrBADf4j0AfpFJNNodjcim8 Li+7+F6aRCCzX5KhCdZaW9Lhu8jcuD6+czHTxNe3d3dNpyBXJil2b/kXlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJ78WoeabEBg1aHF9FTG/kRIwp3MB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBOf0II8 kNBI3w2FnzoOBJ6wafKx06Vql4fWnzrYh6sqKH/oPSvsU8XqlFRD0XkR2wG4PUKK 5XRRoGeJqbQK8LCS3VY4VashgicXNKZZSe+h9B+/AN6IGwjSwfFOsk4jWSO/Uj6V To+WgCSJMBlzE78Ft5zm9/kL3e0RVhRBtBHb+AmvPzOHw5PyRVMGJiezi9+k11FM tnL+SBna8s18PvL+t9468EOEeRA6iWxc0o4fJ1hbldudm7KbIb37U9diRy29nJa4 u5HJoBnp+A5zRacuh+HbZ7qssIRR/8eqt1MJdIKjVuNBcqTMG5fRtARqJUyRr0fi FoX7ff8VKfMb1A== -----END CERTIFICATE-----Generated at Mon Jul 27 08:27:28 2026 by rpki-client