$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft File: sobp8IhI5ICx8-mpwGqDLUjON60.mft (raw, json) Hash identifier: Inv/jb4EfoxcLApdw7hYkBOFbiKeYIPUHpQHXwJ1wB8= Subject key identifier: 4A:87:A8:74:3C:27:8B:AE:0C:C4:AE:1D:5E:92:E0:AC:2A:65:73:7B Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad Certificate serial: 01A0220CCC9BEA8198A8ED3374B2FD8C621A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft Manifest number: 8C Signing time: Fri 21 Aug 2026 02:00:59 +0000 Manifest this update: Fri 21 Aug 2026 02:00:59 +0000 Manifest next update: Sat 22 Aug 2026 02:00:59 +0000 Files and hashes: 1: 0Br6ew21BtNn2_2jlJWymhjSVoE.roa (hash: 090GYaL9VJ47BkQl07wkzwEWSWPACUU9C/YKBRTmTt4=) 2: 8hZQgobYRgkTh5xH3Fcd21-S_Qs.roa (hash: O/Sj5qQYmpIeIZz7fbOBaJ5DfsZVzsyZ4dbe+9ThvxU=) 3: DQFgC4bvsfi_pTqBICgk-bE15QA.roa (hash: VJQLlTnWDMMy2v/wCXmkMZzMSnBdZIl4sHH+5xo0vAQ=) 4: I2IDNHEAzEnkJIkoSI1vI-LORTY.roa (hash: ocJqeM3+yT1SlC8JHr3YJAhHyKsPm1741QN/tH9n+4c=) 5: OXB7jvhizKh_U4xlO_0CoK92HAw.roa (hash: VoXwzFtyMKo3BvbVrn81wKv/iAi0DKiDMm3nV3WCrPI=) 6: UyENkh2buny8g0oFxQCN-PLzrjU.roa (hash: NwOU5HK3c+6q7RC6VWrFLDsHuVOA6qPUgGLzcSAlQNU=) 7: VAWgclX_eWi7ePsdsq9sQv1Sahg.roa (hash: c52baJA0P+R7Jm9gmt/JX+phUyyY3a6PPeYJ7erTuSM=) 8: WyF-69RyhfZGofemesv2oL8nFcM.roa (hash: gPnfzwznssPNNOiAFiqJ1s3FhyJgXlz5mX5IEfAIEF4=) 9: _QGC9bzXQgUQnvKg65WHq3KuPR4.roa (hash: 9yWz5L2iR2vS/TJpjDLezXolMQ6rUEcEFagthqiB/iI=) 10: dBPjHcAMvY8FawY6OOi-i_skO1U.roa (hash: ygJguZu2DBoLrCNwtbxwJC+eq+NyAxkvfpeIxCX51us=) 11: dR2PlDh3cYP-vi5_XBcsLRj1q2Y.roa (hash: YQV6Gp2661FhATorBwriAXE3KgOr8Hc9j1LfrYaHB9o=) 12: sobp8IhI5ICx8-mpwGqDLUjON60.crl (hash: iliDRw6AKb/BFb7MGUJZpou7ZCsPTGRzUgHB2cUTfoI=) 13: zD7nESecYwtlNUgziZizt2KgWrs.roa (hash: OQocDdnRY13fhei7ZCsBF7Is+iTp+9SUDJbiLqcYRWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Aug 2026 22:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:22:0c:cc:9b:ea:81:98:a8:ed:33:74:b2:fd:8c:62:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad Validity Not Before: Aug 21 02:00:59 2026 GMT Not After : Aug 22 02:00:59 2026 GMT Subject: CN=4a87a8743c278bae0cc4ae1d5e92e0ac2a65737b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b8:cc:69:e5:20:85:d7:91:23:e1:5a:e9:fd: 91:28:f3:86:57:58:30:2e:64:1e:9a:07:cb:c4:4d: bf:ef:65:73:4d:68:72:7c:5f:fd:c4:c0:a3:7a:e2: 89:c7:e2:14:59:b9:b5:e6:8c:7a:6f:02:e7:96:e0: 40:a8:7f:9f:48:f7:1e:e0:ec:f9:19:9d:b4:79:cc: ee:e0:ec:10:b8:de:84:11:9e:ee:93:94:ca:b7:38: 9d:2f:33:96:5c:23:66:d6:ca:c8:22:d1:97:af:ae: 7f:e2:c9:6e:3f:53:2d:d8:5e:ac:93:89:e4:81:07: 68:b4:57:45:73:04:b9:9a:40:78:19:54:a4:56:6d: 66:e7:d6:36:7c:16:3d:70:22:e8:83:31:af:8b:3f: 95:75:4f:39:64:40:ff:16:ce:d0:a5:f5:24:67:fb: 73:cc:3a:b7:1b:77:b4:3a:db:7a:ad:33:4f:8a:31: 40:8b:71:e3:96:6a:f9:79:0c:f5:53:d1:f8:de:9f: fe:34:a2:d4:4a:d0:d6:5e:64:ad:74:6f:50:ed:07: fc:a1:a1:96:77:4f:ca:d7:35:54:c4:6d:f0:2a:33: 28:1e:a3:03:fa:2b:44:c0:66:02:df:52:35:5d:97: 49:dd:cb:00:37:d4:85:99:70:63:35:1a:ee:fb:ec: 0f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:87:A8:74:3C:27:8B:AE:0C:C4:AE:1D:5E:92:E0:AC:2A:65:73:7B X509v3 Authority Key Identifier: keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:09:87:73:ff:6b:20:49:f0:c6:a1:7d:83:03:1e:54:39:8c: de:bf:fa:df:a6:c9:f2:43:d0:2f:72:c1:a7:cc:fe:b3:01:c6: a4:a9:da:4b:ef:86:e0:1b:ed:b7:fd:f6:5f:c5:e5:40:ca:f0: d9:d4:be:5b:05:95:34:a9:17:57:ab:a9:9d:3f:bf:fd:25:51: 06:4e:9f:45:a0:f6:f5:36:ca:56:23:25:95:18:38:3b:01:2c: 05:35:9e:68:bb:75:e3:0e:77:26:ad:d4:3e:fa:aa:e1:07:b1: 30:82:1c:df:01:b8:39:d5:d4:f0:71:8e:35:4a:f5:43:ff:1d: fd:60:24:82:67:e3:5a:85:d2:bf:49:67:6c:f6:bd:f6:b0:2b: aa:3f:a0:8e:cd:5d:36:d5:9d:2a:75:a3:cf:b1:1b:5b:ff:b6: ce:2f:b0:eb:6a:a3:26:63:02:4c:4d:87:d1:aa:8f:db:b4:57: 49:41:39:9e:3f:9f:a9:f0:52:89:c9:90:ef:f3:3e:14:c3:fe: bd:bd:17:9f:55:b3:2c:c9:1a:28:3d:7c:83:e8:a3:06:73:cb: 31:30:27:6d:1f:9a:35:37:3e:3e:95:a9:46:b2:01:13:52:2b: 69:65:1a:cc:49:59:7a:9c:9d:1e:f3:67:6e:50:47:93:c8:b7: 74:91:ef:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAiDMyb6oGYqO0zdLL9jGIaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyODZlOWYwODg0OGU0ODBiMWYzZTlhOWMwNmE4MzJkNDhj ZTM3YWQwHhcNMjYwODIxMDIwMDU5WhcNMjYwODIyMDIwMDU5WjAzMTEwLwYDVQQD Eyg0YTg3YTg3NDNjMjc4YmFlMGNjNGFlMWQ1ZTkyZTBhYzJhNjU3MzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrjMaeUghdeRI+Fa6f2RKPOGV1gw LmQemgfLxE2/72VzTWhyfF/9xMCjeuKJx+IUWbm15ox6bwLnluBAqH+fSPce4Oz5 GZ20eczu4OwQuN6EEZ7uk5TKtzidLzOWXCNm1srIItGXr65/4sluP1Mt2F6sk4nk gQdotFdFcwS5mkB4GVSkVm1m59Y2fBY9cCLogzGviz+VdU85ZED/Fs7QpfUkZ/tz zDq3G3e0Ott6rTNPijFAi3Hjlmr5eQz1U9H43p/+NKLUStDWXmStdG9Q7Qf8oaGW d0/K1zVUxG3wKjMoHqMD+itEwGYC31I1XZdJ3csAN9SFmXBjNRru++wPLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqHqHQ8J4uuDMSuHV6S4KwqZXN7MB8GA1UdIwQY MBaAFLKG6fCISOSAsfPpqcBqgy1IzjetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc29icDhJaEk1SUN4OC1tcHdHcURMVWpPTjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC85MDA3MDQtNmI0Ny00MDE3LWI5N2Yt NDYwMTY4MDE3M2FhLzEvc29icDhJaEk1SUN4OC1tcHdHcURMVWpPTjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC85MDA3MDQtNmI0Ny00MDE3LWI5N2YtNDYwMTY4MDE3M2Fh LzEvc29icDhJaEk1SUN4OC1tcHdHcURMVWpPTjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQmHc/9r IEnwxqF9gwMeVDmM3r/636bJ8kPQL3LBp8z+swHGpKnaS++G4Bvtt/32X8XlQMrw 2dS+WwWVNKkXV6upnT+//SVRBk6fRaD29TbKViMllRg4OwEsBTWeaLt14w53Jq3U Pvqq4QexMIIc3wG4OdXU8HGONUr1Q/8d/WAkgmfjWoXSv0lnbPa99rArqj+gjs1d NtWdKnWjz7EbW/+2zi+w62qjJmMCTE2H0aqP27RXSUE5nj+fqfBSicmQ7/M+FMP+ vb0Xn1WzLMkaKD18g+ijBnPLMTAnbR+aNTc+PpWpRrIBE1IraWUazElZepydHvNn blBHk8i3dJHvaw== -----END CERTIFICATE-----Generated at Fri Aug 21 06:35:20 2026 by rpki-client