$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: 2s6A7f/5nrgA+PLB7KS4zvURTl+ZUmf91rHVHSmrBJw= Subject key identifier: D9:5F:9F:C2:E9:D0:14:B3:3E:D6:31:C6:1E:CA:79:CB:75:AC:C4:48 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019EB80EF80CF09514115BBB228C5F56F567 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 195C Signing time: Thu 11 Jun 2026 19:00:49 +0000 Manifest this update: Thu 11 Jun 2026 19:00:49 +0000 Manifest next update: Fri 12 Jun 2026 19:00:49 +0000 Files and hashes: 1: 5CLXXKkA4JcsyDrUBBM3fxn2kdc.roa (hash: gFWbYqwKSpr3zQtON6eHRCE0iX3y63ZJZklzBNANHsM=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: h+bIcsYZC94jKjqEunlWwSi+yNKh5Y4MDi5FqHyNQ00=) 3: DXIDJwT32OV423k4TIWwn2iDwyg.roa (hash: 1DgbvkANX93phDSb+AyRjq7ZFAZDrX3G2DhrbhrdrCY=) 4: Ex4sydFNNb9e9IlWuLzuPazLU44.roa (hash: tuvV0h/eTCcgOOevaItUPifNfonAkWlBsMN+IAbF80I=) 5: F0q3v2kkeTya7vdhm0lzFl3wBAA.roa (hash: BpkEUnq+/w6BrSZ1bTiqPBmMOt7WaZgSwy12/ipsBqo=) 6: GU71SIKDNqtDYi7P5ZGVJfaZ9Ng.roa (hash: 7ZQhqryE0L0rNOAz1gL32gj8EsSrO0yhlKkyCkXl4cc=) 7: PIBmTf3gSYM6zkI7Y8MKCCqkVmM.roa (hash: 5xE+UcziQ9DiquZ2A/57aqh1sjUE876lnNSATCS1lTI=) 8: TXBfEq-bhV4ePw8hLBP6UCEQEtg.roa (hash: gEbc+tVQGYMxTiSiJNGO8DDQrrsZOyqWJhw0Dv/aKqE=) 9: XN9ItxoiVygt3a0qQVsmKKlWk9E.roa (hash: iH4X65Vs6HtOKFxQaLyaQ9nZPsCEbiHQMEBYUWCi4KY=) 10: bba2QTZrp_1uueLnjfHPBxHS3PY.roa (hash: OYrkuz8mezgI3XbKfKRWAwnwwsrmJ+JNJd03sNYC3L8=) 11: djcMZ6pGXyKmA-lIeoWfJvgd_vg.roa (hash: 2V8x5uW66gGIUCrfVlUVt3oOyIC3Jcqdd44dr46xxaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b8:0e:f8:0c:f0:95:14:11:5b:bb:22:8c:5f:56:f5:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Jun 11 19:00:49 2026 GMT Not After : Jun 12 19:00:49 2026 GMT Subject: CN=d95f9fc2e9d014b33ed631c61eca79cb75acc448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:12:b0:69:3e:e6:b0:42:6f:41:8c:85:44:ba: 15:85:1f:5e:5b:84:8f:94:94:d7:f8:4e:7b:a6:b3: 12:77:57:5d:65:88:c7:52:01:1d:25:ba:4c:fc:00: 14:fd:a7:d5:a1:bf:93:8d:70:ee:39:08:b5:3e:bf: eb:aa:80:8d:9b:40:41:ed:cb:6f:d8:c3:99:eb:39: 37:a7:9f:29:8e:32:1d:34:8e:af:f7:05:f1:a7:6b: 57:cc:8a:3a:e5:34:a4:6f:0c:20:fa:26:21:17:fb: 79:e5:88:fc:82:ba:cb:a3:57:60:3f:1f:c6:1c:9b: 9a:91:68:92:e4:63:a9:85:c7:02:6d:27:97:e2:b3: 3e:21:a5:91:26:f3:2a:b0:62:91:3d:6b:e6:01:77: 44:9d:69:e8:99:d3:fe:8d:a7:c9:e5:3c:aa:f4:ee: 9c:e1:5c:c4:57:4f:f1:69:b2:e1:d2:b3:28:46:ef: 88:0f:37:29:d5:76:65:6f:20:ee:1b:dc:40:a8:2d: f5:88:24:a3:1a:55:e5:04:c4:e4:7f:06:aa:e0:cd: c0:66:3b:65:40:0d:79:55:1b:82:62:40:85:88:c6: 04:22:5b:6d:22:96:e7:24:b7:af:6f:81:20:13:20: f8:54:0c:34:f3:b9:c8:79:f5:e7:b4:94:43:d4:8c: e3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5F:9F:C2:E9:D0:14:B3:3E:D6:31:C6:1E:CA:79:CB:75:AC:C4:48 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:87:34:d8:5d:b4:a3:38:5e:1f:fe:0a:42:76:5c:80:50:86: f0:86:80:b9:b5:33:8a:d6:d6:d1:75:84:e5:8e:9f:0f:eb:cf: e6:9a:4b:fd:4b:6e:93:51:47:eb:41:ea:fe:c4:93:7b:0c:42: b7:21:bb:a5:46:fa:0d:18:e4:e4:17:3c:2e:09:c7:2b:8d:33: 49:72:18:57:49:22:9c:dc:37:81:79:a4:cc:44:3e:30:6a:d6: 03:04:9e:97:03:d6:3d:e8:7a:3c:c6:b0:59:53:9c:05:a4:fe: c6:ab:b0:45:4d:6c:c8:cc:26:ad:e3:1b:79:c2:35:8c:33:23: a2:91:39:5b:66:29:b2:d2:05:4b:02:a2:72:34:41:3d:fb:de: fa:eb:7a:a5:87:b7:63:80:b1:8d:0f:c9:1b:15:c0:57:3d:54: 25:c2:92:85:72:03:ff:2c:04:c8:40:3c:d8:e5:1d:ed:ac:32: 50:56:87:9c:0b:69:b8:8e:95:54:c4:97:81:01:a9:6a:a4:b9: ef:0e:84:b2:d6:50:41:ad:28:b9:06:70:4d:d1:24:de:5d:45: 91:38:bf:50:d4:97:1c:1b:6e:95:86:a9:b6:fd:4b:59:78:12: 68:0a:8e:ab:0f:93:16:87:8f:17:d0:ed:df:f5:e0:e3:c4:20: aa:30:8e:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ64DvgM8JUUEVu7IoxfVvVnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYwNjExMTkwMDQ5WhcNMjYwNjEyMTkwMDQ5WjAzMTEwLwYDVQQD EyhkOTVmOWZjMmU5ZDAxNGIzM2VkNjMxYzYxZWNhNzljYjc1YWNjNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRKwaT7msEJvQYyFRLoVhR9eW4SP lJTX+E57prMSd1ddZYjHUgEdJbpM/AAU/afVob+TjXDuOQi1Pr/rqoCNm0BB7ctv 2MOZ6zk3p58pjjIdNI6v9wXxp2tXzIo65TSkbwwg+iYhF/t55Yj8grrLo1dgPx/G HJuakWiS5GOphccCbSeX4rM+IaWRJvMqsGKRPWvmAXdEnWnomdP+jafJ5Tyq9O6c 4VzEV0/xabLh0rMoRu+IDzcp1XZlbyDuG9xAqC31iCSjGlXlBMTkfwaq4M3AZjtl QA15VRuCYkCFiMYEIlttIpbnJLevb4EgEyD4VAw087nIefXntJRD1IzjVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlfn8Lp0BSzPtYxxh7Kect1rMRIMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYc02F20 ozheH/4KQnZcgFCG8IaAubUzitbW0XWE5Y6fD+vP5ppL/Utuk1FH60Hq/sSTewxC tyG7pUb6DRjk5Bc8LgnHK40zSXIYV0kinNw3gXmkzEQ+MGrWAwSelwPWPeh6PMaw WVOcBaT+xquwRU1syMwmreMbecI1jDMjopE5W2YpstIFSwKicjRBPfve+ut6pYe3 Y4CxjQ/JGxXAVz1UJcKShXID/ywEyEA82OUd7awyUFaHnAtpuI6VVMSXgQGpaqS5 7w6EstZQQa0ouQZwTdEk3l1FkTi/UNSXHBtulYaptv1LWXgSaAqOqw+TFoePF9Dt 3/Xg48QgqjCOlQ== -----END CERTIFICATE-----Generated at Thu Jun 11 22:42:23 2026 by rpki-client