$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json) Hash identifier: D2T5zRDIfry0HUxXBjYnLO6jhUG7jBJVdaJnoLOWdfQ= Subject key identifier: 10:0A:0A:11:A9:B8:AF:77:44:94:63:5E:B0:8C:4A:D4:5F:6E:01:28 Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019D34519404A60F90D00298051447D74E28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft Manifest number: 1844 Signing time: Sat 28 Mar 2026 12:00:54 +0000 Manifest this update: Sat 28 Mar 2026 12:00:54 +0000 Manifest next update: Sun 29 Mar 2026 12:00:54 +0000 Files and hashes: 1: 7crBnHONDEiQfrWIPlw00C8QSKw.roa (hash: Px9bgNmN3CkGROuLFLneuCSVLL0NNlCF94jN/U/6nWk=) 2: 82ufesd9jM_-UcwHl9xDd28w7bc.roa (hash: gm9W00xGdkpnPbgGYol+dd436lsvUg6lbjX2PP6ojh8=) 3: 85Rvc3_9ZASD2vobCL9t5-c1aU4.roa (hash: vTKkBjgSvXm0Sbl7IC7WJ5hSm/4pkOxSRKg6DOoQUAQ=) 4: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: KS9R0zjBY2uaLXO9R+wStdUumgaK5hsVs4bB6j1kVZQ=) 5: 9RcFiPDd3R3zQqDhd_LItb-oDTA.roa (hash: AC0BWwsNFcYLQdYfVVpkxBC/1xIK6znU8uU1YFKJpGM=) 6: ALPiTkZxPDTnbdpPpErdvl97Wc8.roa (hash: Nf4+/SkcOD5qP7AwraGXa6vQHuKG0gARaAPpiziJKcQ=) 7: VzRDRUhOPTiPlaXOeGXg7YkPjGY.roa (hash: ZiS8xAZ8WIWo3rD54IGCFbmBSzYShJeiuytFXk2sEEo=) 8: YtxqG6YVJVzJtkAnwNNnMrka-WU.roa (hash: m+f6M6gTdplPJjEueYl+KBT8SUvLASyT3kyBqwL5mTg=) 9: vRTSmI6KhjkZ7QSqDR8TmUD_H-o.roa (hash: g93xhnAacJq3AAXAMyOtAyF6fP7Xgz52ChSm97QaIXk=) 10: vcGlDl5Ct_NiM8YzttTek7TQKfQ.roa (hash: BnX/CYwHVszSwePzYMqQFPXrCzJ9oUgTdB3TWSa3h4A=) 11: yiMg7ZQH4FHBD9YZKg_pUWu_Ev4.roa (hash: AIchpJMxJjIRdk7/i7zLscbwRaKVTsnK2jEupzwufmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:34:51:94:04:a6:0f:90:d0:02:98:05:14:47:d7:4e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Mar 28 12:00:54 2026 GMT Not After : Mar 29 12:00:54 2026 GMT Subject: CN=100a0a11a9b8af774494635eb08c4ad45f6e0128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:ef:51:d0:7b:25:b2:4d:a4:07:c2:e6:9b: d8:ea:c3:be:cb:c3:11:35:de:3c:89:cf:9e:c1:4d: 09:32:37:41:4a:28:8e:2a:0d:7f:85:80:f1:88:eb: c6:9d:e2:c4:d4:be:da:72:c8:7d:bf:0f:6f:ee:70: 88:fb:b1:a2:64:27:19:7e:25:c6:e2:b9:f9:6c:1d: b2:4b:70:c8:5d:e8:7a:e9:1f:5b:9c:77:fa:36:bb: 65:03:6b:ad:a4:79:9d:2e:7f:04:12:83:a3:39:c3: 6d:f2:e9:05:ce:fb:bf:ec:19:77:a6:08:90:0a:da: a3:fd:75:24:51:69:9a:79:17:cf:fe:fb:7d:43:d0: 4e:0a:98:25:0d:71:6d:47:b9:99:28:96:13:dc:6e: 7b:b5:c8:33:93:ed:74:d5:ba:cd:a1:14:c3:b7:9d: ff:1c:0a:2d:74:4f:87:7d:66:a0:b9:d0:27:ce:e3: 0b:88:3d:c6:68:eb:c0:2a:61:70:70:57:ca:96:b3: cc:32:5d:49:0c:e1:20:24:38:20:75:82:59:b3:80: 21:4b:ff:96:5e:4a:d2:e9:e2:06:c9:0e:74:0d:a4: 12:58:d1:1d:bf:8d:14:96:65:3f:88:07:4d:0e:43: bc:23:73:26:64:35:f2:44:58:aa:be:7b:e0:52:d7: 06:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0A:0A:11:A9:B8:AF:77:44:94:63:5E:B0:8C:4A:D4:5F:6E:01:28 X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ce:12:f5:30:fc:d0:5a:97:c6:21:e1:c6:dc:7c:3a:13:bc: 3f:43:65:51:7a:47:1b:5e:fa:fd:ac:2b:32:24:02:93:3f:7c: 35:45:bf:bc:03:38:da:a7:85:44:2e:6f:db:c2:77:3e:b4:5d: 80:a1:a3:d5:4a:d6:2d:53:1f:9d:3f:55:7c:c4:3b:bb:5d:3c: 4a:15:cb:b0:cf:5d:12:b9:23:12:1b:89:da:3b:da:df:28:e8: 7e:8f:59:e0:15:1d:31:ef:3d:6d:30:52:ac:3e:e4:92:6a:14: 87:a2:30:c1:ad:09:5d:a9:d8:f7:04:cb:c0:8b:c4:86:05:21: 54:31:ba:c7:0c:0f:8b:d5:6e:9b:09:0e:33:e0:58:10:fb:f9: 7b:40:66:6f:87:f5:30:88:b0:c2:49:5c:77:82:33:20:29:6c: 22:e6:85:e4:12:f7:6c:7c:a4:0d:bc:6d:d3:2d:ef:c7:be:1f: 84:08:c9:ba:fb:63:e7:90:f5:38:f3:5f:78:f4:a6:ee:55:e0: da:0c:eb:98:d2:3d:7f:33:a8:08:4d:d6:71:20:44:20:0f:36: 23:0a:d8:08:d1:28:66:c2:ee:ae:70:98:6f:18:87:08:29:8b: 19:29:ad:a5:9c:c5:b3:36:51:06:78:f1:90:cd:84:39:2a:7f: 1f:bf:f2:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ00UZQEpg+Q0AKYBRRH104oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjYwMzI4MTIwMDU0WhcNMjYwMzI5MTIwMDU0WjAzMTEwLwYDVQQD EygxMDBhMGExMWE5YjhhZjc3NDQ5NDYzNWViMDhjNGFkNDVmNmUwMTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi3vUdB7JbJNpAfC5pvY6sO+y8MR Nd48ic+ewU0JMjdBSiiOKg1/hYDxiOvGneLE1L7acsh9vw9v7nCI+7GiZCcZfiXG 4rn5bB2yS3DIXeh66R9bnHf6NrtlA2utpHmdLn8EEoOjOcNt8ukFzvu/7Bl3pgiQ Ctqj/XUkUWmaeRfP/vt9Q9BOCpglDXFtR7mZKJYT3G57tcgzk+101brNoRTDt53/ HAotdE+HfWagudAnzuMLiD3GaOvAKmFwcFfKlrPMMl1JDOEgJDggdYJZs4AhS/+W XkrS6eIGyQ50DaQSWNEdv40UlmU/iAdNDkO8I3MmZDXyRFiqvnvgUtcGVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAKChGpuK93RJRjXrCMStRfbgEoMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm84S9TD8 0FqXxiHhxtx8OhO8P0NlUXpHG176/awrMiQCkz98NUW/vAM42qeFRC5v28J3PrRd gKGj1UrWLVMfnT9VfMQ7u108ShXLsM9dErkjEhuJ2jva3yjofo9Z4BUdMe89bTBS rD7kkmoUh6Iwwa0JXanY9wTLwIvEhgUhVDG6xwwPi9VumwkOM+BYEPv5e0Bmb4f1 MIiwwklcd4IzIClsIuaF5BL3bHykDbxt0y3vx74fhAjJuvtj55D1OPNfePSm7lXg 2gzrmNI9fzOoCE3WcSBEIA82IwrYCNEoZsLurnCYbxiHCCmLGSmtpZzFszZRBnjx kM2EOSp/H7/yTA== -----END CERTIFICATE-----Generated at Sat Mar 28 21:46:14 2026 by rpki-client