$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: VchFHEW0eoCNtb8CaqZ5Po/DTGIaJ6CoDhyPjULeKK8= Subject key identifier: 4B:7C:06:13:DB:75:1E:EB:7C:10:A3:CB:7C:FA:0F:05:6A:E2:76:7C Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019F0AE288D7F2337D0224F26D19801EE2A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 1583 Signing time: Sat 27 Jun 2026 21:00:45 +0000 Manifest this update: Sat 27 Jun 2026 21:00:45 +0000 Manifest next update: Sun 28 Jun 2026 21:00:45 +0000 Files and hashes: 1: 8qONZL-zarmB_Y1tqZfwTzYcBJo.roa (hash: uD7uxv7CcmmCwKrR/rRY/falCkFooXd096XuRKXA53M=) 2: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 3: H52_1NjStSe7bo70-a34b3HOvac.roa (hash: HF55nNJHz3uWR//Z7REZtnPpt29LIrDGhY4TPWFKubA=) 4: P1pfIuguwdyriYi_GQFSe-izAhE.roa (hash: NKnyRGmEF3rjLPF+lRBevLDxlcCGJDG1k5PVPHODwso=) 5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 8: bdiVopGRMa8RC0mEnWv6wm6w_-0.roa (hash: WzAENNvVjV1DRRjD7yBjtCDo9tO1r/3BMLbac/ZE6p0=) 9: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 10: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 11: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 12: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 13: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: dz269hVFMFpWicYPlhaeQiY8DQ6Ta4pxHEPy+sOS58k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Jun 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:0a:e2:88:d7:f2:33:7d:02:24:f2:6d:19:80:1e:e2:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Jun 27 21:00:45 2026 GMT Not After : Jun 28 21:00:45 2026 GMT Subject: CN=4b7c0613db751eeb7c10a3cb7cfa0f056ae2767c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4b:6b:8b:72:80:d0:13:0e:da:0d:4a:57:82: 56:6a:19:42:f2:f2:c3:3b:0d:1a:d7:c8:2b:69:e5: b6:0b:2e:b5:b7:cf:51:b7:fe:0a:92:da:9e:b2:76: a7:44:7a:c2:96:58:23:95:07:34:82:bd:47:e2:79: 90:c7:a0:ef:4a:19:f5:d2:db:90:7e:4a:f3:64:d7: e6:69:e9:ce:fc:2c:d9:38:f2:d4:e8:34:7c:92:99: b9:8f:ab:b6:7b:5d:d0:85:a6:cf:87:4d:b8:3a:78: 02:aa:90:18:df:1b:f1:1d:4b:ee:f0:2c:3f:59:98: 3e:68:2b:99:5f:a9:db:b2:21:ce:18:d0:a6:7d:87: 69:f9:34:aa:8e:da:97:30:bc:35:04:af:15:d6:59: cc:a1:d7:31:fa:44:8e:13:bb:96:59:b7:cf:9e:d0: b9:99:4c:0a:a9:15:a3:d6:83:85:e5:00:c1:25:f9: c9:9c:f3:21:d7:8e:5b:af:56:56:21:a0:61:d0:f8: e4:25:66:ca:c4:01:40:c4:31:28:0b:76:4e:0f:d2: 18:dc:dd:fd:96:c5:36:7e:8d:7e:8c:1c:80:39:93: 82:b3:40:7d:56:80:43:73:61:0a:df:74:36:a6:2a: e6:79:26:17:df:bb:7c:0f:e5:ba:c2:08:37:1b:83: 0c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7C:06:13:DB:75:1E:EB:7C:10:A3:CB:7C:FA:0F:05:6A:E2:76:7C X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:30:02:43:0d:08:18:6b:04:85:2e:4c:9c:fb:3b:74:69:23: f4:6f:78:6a:e2:e8:0a:07:e6:75:18:77:b7:28:44:91:71:67: 23:95:45:c2:de:f2:36:82:da:f8:e2:08:dc:16:e5:43:63:35: e8:05:06:09:90:91:8f:59:fd:57:98:33:e4:68:a5:68:f9:cd: f7:b1:89:4e:93:86:8f:0d:ed:eb:1d:e3:ac:bc:9a:90:88:f4: 77:59:6f:59:3c:ab:75:9a:02:ea:94:6b:95:6a:9b:40:63:58: 25:f0:a8:38:00:62:bd:2e:0b:fb:b4:f0:7c:2c:f1:c0:d0:0e: 1f:f1:57:40:62:c6:95:96:44:7b:f5:a7:27:64:e2:e0:86:ae: 2b:73:76:94:1f:40:09:59:be:53:51:b5:72:4c:04:68:46:2a: 9e:af:a0:fc:22:e5:ae:df:06:7e:61:f5:b0:08:22:6d:18:db: 2e:2a:69:23:b7:ca:53:73:3c:62:a9:59:f8:fe:14:1f:26:a0: 00:d7:38:52:31:10:69:4b:ab:b7:49:06:ca:4d:c4:9a:9e:d9: 44:23:6e:7b:92:e9:11:99:08:64:f9:e7:f2:75:e8:90:4f:11: b6:65:16:26:22:01:58:e0:78:46:02:bd:b9:6b:70:54:bb:fb: b4:88:f9:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8K4ojX8jN9AiTybRmAHuKnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwNjI3MjEwMDQ1WhcNMjYwNjI4MjEwMDQ1WjAzMTEwLwYDVQQD Eyg0YjdjMDYxM2RiNzUxZWViN2MxMGEzY2I3Y2ZhMGYwNTZhZTI3NjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUtri3KA0BMO2g1KV4JWahlC8vLD Ow0a18graeW2Cy61t89Rt/4KktqesnanRHrCllgjlQc0gr1H4nmQx6DvShn10tuQ fkrzZNfmaenO/CzZOPLU6DR8kpm5j6u2e13QhabPh024OngCqpAY3xvxHUvu8Cw/ WZg+aCuZX6nbsiHOGNCmfYdp+TSqjtqXMLw1BK8V1lnModcx+kSOE7uWWbfPntC5 mUwKqRWj1oOF5QDBJfnJnPMh145br1ZWIaBh0PjkJWbKxAFAxDEoC3ZOD9IY3N39 lsU2fo1+jByAOZOCs0B9VoBDc2EK33Q2pirmeSYX37t8D+W6wgg3G4MMcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEt8BhPbdR7rfBCjy3z6DwVq4nZ8MB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjACQw0I GGsEhS5MnPs7dGkj9G94auLoCgfmdRh3tyhEkXFnI5VFwt7yNoLa+OII3BblQ2M1 6AUGCZCRj1n9V5gz5GilaPnN97GJTpOGjw3t6x3jrLyakIj0d1lvWTyrdZoC6pRr lWqbQGNYJfCoOABivS4L+7TwfCzxwNAOH/FXQGLGlZZEe/WnJ2Ti4IauK3N2lB9A CVm+U1G1ckwEaEYqnq+g/CLlrt8GfmH1sAgibRjbLippI7fKU3M8YqlZ+P4UHyag ANc4UjEQaUurt0kGyk3Emp7ZRCNue5LpEZkIZPnn8nXokE8RtmUWJiIBWOB4RgK9 uWtwVLv7tIj5hg== -----END CERTIFICATE-----Generated at Sat Jun 27 23:12:58 2026 by rpki-client