$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: eS9wz04TyrMmqwShgQAtqhv57JySubo98q2cB6183LA= Subject key identifier: 10:CD:8A:BA:78:BA:98:D3:A1:06:57:62:D5:2B:25:51:A3:AC:63:DB Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019FF2A0E9B5489C277DBB63A72935D01B77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 15FB Signing time: Tue 11 Aug 2026 21:00:59 +0000 Manifest this update: Tue 11 Aug 2026 21:00:59 +0000 Manifest next update: Wed 12 Aug 2026 21:00:59 +0000 Files and hashes: 1: 8qONZL-zarmB_Y1tqZfwTzYcBJo.roa (hash: uD7uxv7CcmmCwKrR/rRY/falCkFooXd096XuRKXA53M=) 2: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 3: H52_1NjStSe7bo70-a34b3HOvac.roa (hash: HF55nNJHz3uWR//Z7REZtnPpt29LIrDGhY4TPWFKubA=) 4: P1pfIuguwdyriYi_GQFSe-izAhE.roa (hash: NKnyRGmEF3rjLPF+lRBevLDxlcCGJDG1k5PVPHODwso=) 5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 8: bdiVopGRMa8RC0mEnWv6wm6w_-0.roa (hash: WzAENNvVjV1DRRjD7yBjtCDo9tO1r/3BMLbac/ZE6p0=) 9: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 10: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 11: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 12: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 13: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: uRwK8EjqHzZucDhjNq0MwBLDzDM5eW6v/Pc/GOx2tXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Aug 2026 21:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f2:a0:e9:b5:48:9c:27:7d:bb:63:a7:29:35:d0:1b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Aug 11 21:00:59 2026 GMT Not After : Aug 12 21:00:59 2026 GMT Subject: CN=10cd8aba78ba98d3a1065762d52b2551a3ac63db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2b:e5:43:07:e4:1d:d0:7a:c3:8d:e4:f4:64: ea:e4:05:7b:f3:a6:8a:79:5f:f5:6c:5e:cb:5e:e6: 3a:ec:06:4b:4f:61:1f:f1:b4:a8:87:69:35:13:f7: 2a:b9:9b:f2:84:d7:5b:4f:bc:05:ed:dd:cf:ec:16: 86:08:65:d9:ba:df:d4:60:d0:69:34:f8:e6:07:31: 67:73:9f:5d:20:21:91:86:39:63:a6:eb:4d:f7:0a: 4b:59:ae:b0:25:50:69:26:97:ea:f8:cb:ca:58:73: 67:02:0a:14:27:48:0e:06:f7:da:58:14:2f:c4:62: 68:ea:63:84:1f:56:58:a1:fd:df:9e:55:58:96:f7: 44:45:d9:41:7c:b8:66:c8:54:59:bc:32:13:82:8b: d7:30:d5:28:66:4e:9b:a7:90:36:99:40:60:04:3d: 3e:f0:70:f3:2b:dd:06:7a:29:21:64:2e:52:0a:26: 68:a2:55:74:e3:fb:f2:28:2b:37:66:e4:ce:b0:e3: 7d:22:57:3f:85:63:b7:bf:33:0b:7c:72:aa:89:6e: d6:d7:5f:d4:ef:65:48:d1:79:0f:db:56:6d:5f:c6: ee:60:51:62:97:2b:6b:c9:3d:d9:dc:de:4e:74:38: 65:ce:bd:e5:87:9e:9c:28:66:9a:8b:e3:cc:67:c0: a3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CD:8A:BA:78:BA:98:D3:A1:06:57:62:D5:2B:25:51:A3:AC:63:DB X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:3a:1e:a3:55:04:65:cc:4b:ca:9c:88:84:fa:a4:76:1d:f8: ed:51:e9:23:cb:da:0d:05:23:9b:3e:e6:36:1e:ee:e0:94:e6: 31:0d:92:fd:71:37:eb:e5:57:09:35:75:b1:a9:15:24:09:d4: 19:a4:39:b6:36:e9:1f:b4:0e:40:32:0d:7b:56:eb:1c:76:8b: b7:ef:22:0f:9e:68:f1:c1:03:f3:73:e3:60:04:5c:2b:41:dd: 20:ad:ee:b8:78:69:33:7f:4e:0d:8c:10:3e:ab:c7:d1:5f:9c: 7d:36:88:e2:19:91:9c:bb:69:92:0a:e3:f4:a8:32:f6:ab:1b: cf:8b:c5:73:85:f3:48:00:8e:0c:7d:9f:a4:26:dd:d3:71:a9: ad:09:b7:77:83:1c:cd:18:a4:9e:e1:d0:93:29:8e:18:d6:5d: 00:35:86:0e:2c:97:80:a4:1a:c6:bf:d1:8e:76:8e:5a:6e:21: 48:7f:7d:80:f8:ac:2c:4e:44:cb:94:da:72:bf:4c:cc:29:ce: 30:c2:10:4e:9e:01:45:8c:17:4e:87:63:39:82:5b:d0:ac:c6: 8f:9c:6d:1a:85:72:68:67:de:6b:29:bc:e3:54:d5:ca:bc:53: 6b:e3:b4:64:5b:a2:98:72:fd:6c:54:3b:c9:25:bc:96:fb:7a: 9e:37:c3:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/yoOm1SJwnfbtjpyk10Bt3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwODExMjEwMDU5WhcNMjYwODEyMjEwMDU5WjAzMTEwLwYDVQQD EygxMGNkOGFiYTc4YmE5OGQzYTEwNjU3NjJkNTJiMjU1MWEzYWM2M2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyvlQwfkHdB6w43k9GTq5AV786aK eV/1bF7LXuY67AZLT2Ef8bSoh2k1E/cquZvyhNdbT7wF7d3P7BaGCGXZut/UYNBp NPjmBzFnc59dICGRhjljputN9wpLWa6wJVBpJpfq+MvKWHNnAgoUJ0gOBvfaWBQv xGJo6mOEH1ZYof3fnlVYlvdERdlBfLhmyFRZvDITgovXMNUoZk6bp5A2mUBgBD0+ 8HDzK90GeikhZC5SCiZoolV04/vyKCs3ZuTOsON9Ilc/hWO3vzMLfHKqiW7W11/U 72VI0XkP21ZtX8buYFFilytryT3Z3N5OdDhlzr3lh56cKGaai+PMZ8Cj3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDNirp4upjToQZXYtUrJVGjrGPbMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDoeo1UE ZcxLypyIhPqkdh347VHpI8vaDQUjmz7mNh7u4JTmMQ2S/XE36+VXCTV1sakVJAnU GaQ5tjbpH7QOQDINe1brHHaLt+8iD55o8cED83PjYARcK0HdIK3uuHhpM39ODYwQ PqvH0V+cfTaI4hmRnLtpkgrj9Kgy9qsbz4vFc4XzSACODH2fpCbd03GprQm3d4Mc zRiknuHQkymOGNZdADWGDiyXgKQaxr/RjnaOWm4hSH99gPisLE5Ey5Tacr9MzCnO MMIQTp4BRYwXTodjOYJb0KzGj5xtGoVyaGfeaym841TVyrxTa+O0ZFuimHL9bFQ7 ySW8lvt6njfD4Q== -----END CERTIFICATE-----Generated at Wed Aug 12 07:25:40 2026 by rpki-client