$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: KPOgyPXBHUhQjzwwirVhK/vO6LtBH9Z+O4lbPsSRphA= Subject key identifier: BA:59:F8:30:0C:BE:D9:6B:BA:50:B6:91:05:30:29:9B:2F:EC:02:C7 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019E2135F3D98441690CA464A43EFACCA2BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 150A Signing time: Wed 13 May 2026 12:00:44 +0000 Manifest this update: Wed 13 May 2026 12:00:44 +0000 Manifest next update: Thu 14 May 2026 12:00:44 +0000 Files and hashes: 1: 8qONZL-zarmB_Y1tqZfwTzYcBJo.roa (hash: uD7uxv7CcmmCwKrR/rRY/falCkFooXd096XuRKXA53M=) 2: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 3: H52_1NjStSe7bo70-a34b3HOvac.roa (hash: HF55nNJHz3uWR//Z7REZtnPpt29LIrDGhY4TPWFKubA=) 4: P1pfIuguwdyriYi_GQFSe-izAhE.roa (hash: NKnyRGmEF3rjLPF+lRBevLDxlcCGJDG1k5PVPHODwso=) 5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 8: bdiVopGRMa8RC0mEnWv6wm6w_-0.roa (hash: WzAENNvVjV1DRRjD7yBjtCDo9tO1r/3BMLbac/ZE6p0=) 9: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 10: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 11: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 12: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 13: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: vMhh+sbksqRjwDSVCh3tA/dYlkvvUKIk4Cw1BMaYb7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:21:35:f3:d9:84:41:69:0c:a4:64:a4:3e:fa:cc:a2:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: May 13 12:00:44 2026 GMT Not After : May 14 12:00:44 2026 GMT Subject: CN=ba59f8300cbed96bba50b6910530299b2fec02c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9c:35:54:0c:91:45:96:99:fe:94:8e:df:21: f8:da:8d:a5:5f:87:70:65:da:90:e3:ef:bc:26:70: 96:2b:ca:84:9c:73:11:65:c5:00:45:93:88:91:56: c5:91:b8:e2:2a:fe:f8:bc:97:af:da:60:9d:cb:84: 2a:1f:44:c9:f5:b0:3b:6e:df:2b:fe:86:fc:69:25: 4b:18:7a:1b:39:d2:b3:66:9a:c1:19:8f:74:6b:24: b1:65:d0:ee:59:ca:f5:88:a6:4a:4a:96:b4:94:99: 31:dc:08:d8:dd:fe:6e:16:48:88:16:be:e4:61:d2: be:8e:99:15:1e:81:63:4b:58:ea:8e:5f:38:f1:6c: a4:1b:60:3f:64:e2:aa:64:85:fb:12:ec:28:86:8a: d0:9d:b3:9d:2a:87:7f:a2:b7:f1:cb:bb:94:33:d1: 19:ff:7b:2e:7b:cf:15:96:a2:a0:ab:7e:0e:54:a7: b6:9b:4b:a4:29:62:86:26:79:68:b0:3d:f2:d4:b2: 43:26:9b:ec:98:f3:e0:82:ee:8a:77:6c:c3:e1:1c: 2e:ce:7f:0f:ad:7c:90:fc:11:95:a4:b8:1c:98:8a: 04:99:b6:ae:f8:d2:b3:3b:6b:84:28:fa:70:c3:64: 02:46:85:9a:14:6e:47:d8:94:ef:c6:ef:52:bb:c9: 15:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:59:F8:30:0C:BE:D9:6B:BA:50:B6:91:05:30:29:9B:2F:EC:02:C7 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d7:35:c2:a1:87:3b:1c:06:e0:d3:49:df:11:fa:82:d9:4a: 53:79:fa:11:97:8f:62:85:ab:c2:fa:83:78:82:6b:6b:f3:50: 4a:29:4a:ec:00:92:84:b1:ed:e4:5c:84:65:e8:31:29:31:8b: b3:24:99:af:df:b6:74:57:bf:4d:3f:8d:f8:f8:67:06:c4:b3: 10:54:4e:c4:55:9d:11:eb:7a:a4:9b:b2:93:58:de:cf:ad:7e: 1c:ca:99:e9:73:04:4d:3d:90:22:ae:c9:14:05:10:6c:cb:dc: f7:5e:35:07:d7:d8:e2:1a:b6:de:e7:b9:53:ed:36:79:18:d1: 82:fc:69:93:e4:45:97:87:d4:82:43:06:f2:5f:80:5c:59:bd: df:72:a0:8d:74:91:77:d5:fb:16:a3:e2:03:bf:45:d7:d3:10: 54:45:4a:b2:c3:be:19:4b:1e:ca:78:22:39:04:c7:55:e0:16: b0:c7:ec:b4:47:67:f8:74:9f:c2:c6:ca:18:a4:e9:bd:09:d5: 42:75:38:12:0c:95:df:5a:50:61:77:7b:7b:b1:67:02:d8:13: bb:e2:3f:26:25:e9:4a:2b:45:f2:0c:9e:e6:cb:1e:9b:d7:6f: 11:81:30:3c:10:61:ed:01:50:1f:76:74:1d:62:0d:6c:93:98: ad:fe:5f:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4hNfPZhEFpDKRkpD76zKK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwNTEzMTIwMDQ0WhcNMjYwNTE0MTIwMDQ0WjAzMTEwLwYDVQQD EyhiYTU5ZjgzMDBjYmVkOTZiYmE1MGI2OTEwNTMwMjk5YjJmZWMwMmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Jw1VAyRRZaZ/pSO3yH42o2lX4dw ZdqQ4++8JnCWK8qEnHMRZcUARZOIkVbFkbjiKv74vJev2mCdy4QqH0TJ9bA7bt8r /ob8aSVLGHobOdKzZprBGY90aySxZdDuWcr1iKZKSpa0lJkx3AjY3f5uFkiIFr7k YdK+jpkVHoFjS1jqjl848WykG2A/ZOKqZIX7EuwohorQnbOdKod/orfxy7uUM9EZ /3sue88VlqKgq34OVKe2m0ukKWKGJnlosD3y1LJDJpvsmPPggu6Kd2zD4Rwuzn8P rXyQ/BGVpLgcmIoEmbau+NKzO2uEKPpww2QCRoWaFG5H2JTvxu9Su8kVfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpZ+DAMvtlrulC2kQUwKZsv7ALHMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9c1wqGH OxwG4NNJ3xH6gtlKU3n6EZePYoWrwvqDeIJra/NQSilK7ACShLHt5FyEZegxKTGL sySZr9+2dFe/TT+N+PhnBsSzEFROxFWdEet6pJuyk1jez61+HMqZ6XMETT2QIq7J FAUQbMvc9141B9fY4hq23ue5U+02eRjRgvxpk+RFl4fUgkMG8l+AXFm933KgjXSR d9X7FqPiA79F19MQVEVKssO+GUseyngiOQTHVeAWsMfstEdn+HSfwsbKGKTpvQnV QnU4EgyV31pQYXd7e7FnAtgTu+I/JiXpSitF8gye5ssem9dvEYEwPBBh7QFQH3Z0 HWINbJOYrf5fFw== -----END CERTIFICATE-----Generated at Wed May 13 14:36:26 2026 by rpki-client