$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: YZOqAH4HtH507T/GTj1d7x2YL8FJMqHA5hQd/uCF2x8= Subject key identifier: 7F:AF:EB:36:F9:41:89:0B:B2:07:76:03:32:B3:C3:72:75:41:E0:89 Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 01A128B0C4F2E9BB500E18B50594D513E0D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 1AE2 Signing time: Sun 11 Oct 2026 02:00:35 +0000 Manifest this update: Sun 11 Oct 2026 02:00:35 +0000 Manifest next update: Mon 12 Oct 2026 02:00:35 +0000 Files and hashes: 1: Dv8Xj573URhelnbmcJLlhmPDGD4.roa (hash: qlnvjr9BaLF0/kBmFp/g12eWnCcKOHwXVrBxaeJlhqI=) 2: ErxTNyERBBDMhHQ30nH0srvQHWE.roa (hash: vCvge335d0b4IZOO+kvKrubjYExpx9nKBs7ZlxM4sEY=) 3: GokOnLgcwEKBfp_sk2MIuuQ-_TY.roa (hash: zQRRa9NS4gIwYEiBt9K5iRhHmWoyu+BxEByrxS3tpEY=) 4: V66mUyeO5X_O6JGUAL_LInwhpW0.roa (hash: WTpJ/+xyEsdWBV9e8DfdpDEOxLLOMxmk9zRPy8of4Nw=) 5: WAFGlC69-0ob11MbBQG2gcGKWnk.roa (hash: fs3/LEyDskuqCQv30OKbL6do/sufFAX29xlb3wrGuaA=) 6: b4JEVE3QPzkNygQLlI0iBGroxU0.roa (hash: GbTRuy5jkEUqjUNqE8oi/B2zDg7qLzkinV68BhIMhV0=) 7: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: 4GqlF7PDbyb2JwvE65uXwMuWrAVxvw2o3Pa86RsbQRw=) 8: fX3KuGbBaSgozBC8VJSKif-SJWQ.roa (hash: YvJvbJ8D5DpHd4D9ZPHBQEllNbujWBnvbGsXVYfxrbQ=) 9: hS05mveN2aMKs32vgPN62OxZyU4.roa (hash: ppIsNge7NuGGbn+pU/a2PkG/ZsHka3x0Ag4o3/gijLY=) 10: iLauOm2qK9XnqY9ztUU9moKfnvg.roa (hash: MD/6ZVmSej56cLCXyFeTYzesox6xFljqFiihcyr2blE=) 11: mOIM-oZXOhPXcspDNu9QRUce9wI.roa (hash: TX23tkqgD+PXYsu3SvaWNxNHNfg0oQahFUpEkkPiqP0=) 12: maoDBiTq7OlnZavgCrqS2PNJzVg.roa (hash: 5lnUQuuOEn9crnGLrQz+sL2Asrk/3K0SqWLzxdWxHuc=) 13: rKU1mC3UrxRCEsXb-l25oaEBhJw.roa (hash: 4jepadulIWtRtacZBukRLsOXuyzRr5YeactatRKpnlE=) 14: vbkUkoSSvSBZWgO04-XIKz79J_g.roa (hash: rJWBZTHWqIREoHZuiUQTaD5sySodS5E6pv5B11Juiwo=) 15: wCrdreEenBFJr40kfhAiXxXP4VE.roa (hash: 1w9FYdnTnijOy22xqaq4vC9r9i/Zq/2AJnQG0P3/L0g=) 16: yX_yhv_jUUfVVPMPnlpzUI5cFxs.roa (hash: bg6ibEfMDVCBPduOQFB/gGWqEjD+qw8SCbixEdu1S7Q=) 17: zyjvREkWFF6X7pbwt-H3M-ZqZks.roa (hash: HtAgtb461giJt36H40FvVS9Xbx1kevgnUEyHwD9fYBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 02:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:28:b0:c4:f2:e9:bb:50:0e:18:b5:05:94:d5:13:e0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Oct 11 02:00:35 2026 GMT Not After : Oct 12 02:00:35 2026 GMT Subject: CN=7fafeb36f941890bb207760332b3c3727541e089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:69:03:ee:76:8c:8f:ab:7b:3f:4e:c8:60: 73:fe:9c:59:f7:32:2a:e2:95:12:dc:ec:af:c0:57: f0:af:2c:8e:0c:22:95:73:ac:c0:46:f1:68:97:f9: 66:25:0b:45:4a:32:60:3c:f9:93:b3:fa:de:6b:a6: 49:38:07:17:0c:da:9e:05:98:98:dd:6f:9b:b5:b9: 7e:ba:b0:87:cb:14:7a:5b:34:3f:5b:8b:77:1c:6b: aa:52:b7:4c:dd:75:28:54:bd:93:c2:76:91:2a:ff: 64:47:72:6b:ec:f7:aa:dd:12:02:d6:4f:91:b8:ea: 20:df:59:6f:c8:0b:0a:75:0b:57:5f:2a:66:5c:1d: 93:4f:5c:34:88:46:4c:ac:88:6d:15:83:f7:b4:ed: ca:71:44:95:91:29:35:13:d6:97:fd:63:62:8e:e2: f8:f6:59:87:f1:63:5f:48:7e:7b:9c:dc:9f:be:67: 9d:a8:1d:5a:57:d3:9e:c0:34:b5:95:f1:e3:a4:67: ac:eb:ff:7a:25:c5:db:5a:ce:0f:d6:9c:3f:4b:35: 67:02:0b:cb:ad:29:3b:d0:89:62:5f:33:bb:78:a1: fc:3e:0e:97:e3:ca:fb:95:14:e0:46:18:f6:54:64: ca:00:58:95:f5:61:54:b9:bd:9c:da:15:97:e7:51: 2b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AF:EB:36:F9:41:89:0B:B2:07:76:03:32:B3:C3:72:75:41:E0:89 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:11:73:cf:26:94:f0:79:ea:79:e8:92:8e:8c:cd:1f:e9:30: cb:53:13:a0:b8:3c:66:4b:69:8e:51:ac:e2:b5:cf:c5:90:52: 56:0f:53:ce:b3:99:8e:1a:e5:1c:54:55:7d:41:e8:69:36:ea: 7c:e8:e1:8c:b4:18:5c:64:de:26:39:6c:02:9e:14:d7:ed:41: b9:51:ff:23:2d:44:7e:72:0b:5f:47:46:bb:0d:cd:6d:3c:8f: e8:f0:48:8b:54:67:0a:0f:9c:e4:fc:ca:29:c4:0f:6b:1a:10: c8:6b:4d:01:66:42:51:eb:f1:9f:09:5e:48:3c:50:ad:56:00: 71:f1:77:43:de:6a:0d:fc:77:47:1b:77:96:e9:49:7d:e6:63: 19:9d:d7:c3:04:d4:af:7e:39:3e:09:db:d7:3c:66:b5:5a:2a: 4f:46:e2:a3:07:55:ac:5d:cd:d8:ab:02:bd:b5:78:61:bf:f9: f8:86:13:5b:53:52:91:59:e1:4f:74:bf:fe:36:5d:56:80:5d: 20:77:f2:3f:f6:bb:09:71:cb:5b:1a:da:31:db:55:98:7e:1a: c9:c4:ee:6e:09:29:cc:cd:e4:6b:13:a9:b7:28:65:fd:6f:21: e0:36:dc:75:f1:2a:e3:98:a1:27:f5:ea:32:3b:45:1d:62:60: 27:d6:3e:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEosMTy6btQDhi1BZTVE+DZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYxMDExMDIwMDM1WhcNMjYxMDEyMDIwMDM1WjAzMTEwLwYDVQQD Eyg3ZmFmZWIzNmY5NDE4OTBiYjIwNzc2MDMzMmIzYzM3Mjc1NDFlMDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVBpA+52jI+rez9OyGBz/pxZ9zIq 4pUS3OyvwFfwryyODCKVc6zARvFol/lmJQtFSjJgPPmTs/rea6ZJOAcXDNqeBZiY 3W+btbl+urCHyxR6WzQ/W4t3HGuqUrdM3XUoVL2TwnaRKv9kR3Jr7Peq3RIC1k+R uOog31lvyAsKdQtXXypmXB2TT1w0iEZMrIhtFYP3tO3KcUSVkSk1E9aX/WNijuL4 9lmH8WNfSH57nNyfvmedqB1aV9OewDS1lfHjpGes6/96JcXbWs4P1pw/SzVnAgvL rSk70IliXzO7eKH8Pg6X48r7lRTgRhj2VGTKAFiV9WFUub2c2hWX51ErfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+v6zb5QYkLsgd2AzKzw3J1QeCJMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuhFzzyaU 8HnqeeiSjozNH+kwy1MToLg8ZktpjlGs4rXPxZBSVg9TzrOZjhrlHFRVfUHoaTbq fOjhjLQYXGTeJjlsAp4U1+1BuVH/Iy1EfnILX0dGuw3NbTyP6PBIi1RnCg+c5PzK KcQPaxoQyGtNAWZCUevxnwleSDxQrVYAcfF3Q95qDfx3Rxt3lulJfeZjGZ3XwwTU r345Pgnb1zxmtVoqT0biowdVrF3N2KsCvbV4Yb/5+IYTW1NSkVnhT3S//jZdVoBd IHfyP/a7CXHLWxraMdtVmH4aycTubgkpzM3kaxOptyhl/W8h4DbcdfEq45ihJ/Xq MjtFHWJgJ9Y+uQ== -----END CERTIFICATE-----Generated at Sun Oct 11 07:19:40 2026 by rpki-client