$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft File: s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json) Hash identifier: 1CWrzVTm+VGurLUm//vewmKYTzrcKNvvaOnzqDuemVU= Subject key identifier: 6E:F7:A8:46:51:AC:A9:1E:6A:4D:1D:B7:E2:18:7F:E9:88:86:04:9C Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 01A0E7E424EFBAC542FB9A7183AE1B4B923B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft Manifest number: 1A8D Signing time: Mon 28 Sep 2026 12:01:23 +0000 Manifest this update: Mon 28 Sep 2026 12:01:23 +0000 Manifest next update: Tue 29 Sep 2026 12:01:23 +0000 Files and hashes: 1: 0SfcrueR4QFb8tc3xCE9ChZKK7I.roa (hash: IdDOQHOx8rCnzoVeUvZ2P/Vc0fq61+r5BuBjfqgD4w8=) 2: 2-9TE0hGien7uJimnUsiIL-slx4.roa (hash: ITBjj6tI+9B/OwJk2K8Dzw0Ey9IFfvrN1KI8kY4JXFU=) 3: 4yoK_eJAZQm-WbM5DBSju_S_g9Y.roa (hash: lgK4wDh2/dU2RT27074ZUCpZTP9aGuib0EW4Skf9pnw=) 4: 5wHePNmHiLxtlCYvlaGW1MyLNGY.roa (hash: 19szNpHnnm6pkaW4TlJOhu+0nXLMQC+WoPm1n3sfLvM=) 5: 60zN1G8HfzYuFPygt3H-4b18ytU.roa (hash: ZIesJxWGT7Q67L0RiBjzfL/tP6joKKOh3GhApUIGf8w=) 6: KplJ3LduqB8fju8Cp8wVC5kYaEw.roa (hash: 1HTgbzS5o5VYiYxgpRXb60MFv/qXACweKzDFgHcjSQo=) 7: T2XlEh6k8oXA5m_Hmkc7Jeq872U.roa (hash: /9TV0tPt7Hezx8nofCt10e+R7phZBTBRrAT2/hbBfq0=) 8: XD3CHImTefD8FuenptmC1xt8ItM.asa (hash: zINZ70P1S66UVaG5a/xPv//b9AHB0SJycGjf91yrXwY=) 9: a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa (hash: YrbotmHDUF9LRM1RQzShBPkq+JRfuxMVJgnz/gexBZA=) 10: cH5VUqUcKkt9HSVAYge0hus4RzQ.roa (hash: wbhN9oe6hbcxDEr+Ij32oivB3HfT5mVhEID8dWUc5rw=) 11: dIGZhkcQjwXD6TRRSDLTBNo_khY.roa (hash: iHaZdF9YmqdeJqR3BWg40wlZURcExcqa9x9g9e5Q+Sw=) 12: e7AhsDGyXnglWGP4F2vWjFKoYe0.roa (hash: e/toQQVnqhq4qPJ3Y8N1Xo0D5ymFTKzkV6/84IOgDm4=) 13: esK7vUUmoe40XTn02C1nePqnmu4.roa (hash: OEIBdY80QQKHjWxchlaPmmZgXh8xpcGsK6uCERu5/OA=) 14: micpmXuBXJ3dOE45zxgN5f1tySY.roa (hash: timEpEuW2bJbH8o0L2R6fxPkiFxXOpRncmuh270Cg8o=) 15: qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa (hash: H4C9ry+5IfYnCURh7FDnZSYaZWLRwKVBeS8DaqAWsew=) 16: qtDoqnaV9ZZGBUq4tRSN1Fvz-j0.roa (hash: GSE9R+oyIw7xMTL0Ep+U9AxHVf7kythML3j+Y7ovTM8=) 17: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: GEfA1Aem/6TIaE8pUvbCzqfXyWc2CpCwsRcg/QmC1Y0=) 18: xwR5dZkRnrr1skSXQMNYngkeNa8.roa (hash: hOBraH+aXlwWcJU3uccn3dhXaJ0+izS/UP4kbWzbnEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e7:e4:24:ef:ba:c5:42:fb:9a:71:83:ae:1b:4b:92:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Sep 28 12:01:23 2026 GMT Not After : Sep 29 12:01:23 2026 GMT Subject: CN=6ef7a84651aca91e6a4d1db7e2187fe98886049c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ec:f9:63:fb:fb:e0:6c:e7:05:bc:4c:a4:a5: c2:5a:b6:eb:75:7c:1c:b8:57:af:aa:bd:bb:68:92: a6:b6:d6:38:17:db:71:fd:0f:0f:59:59:0f:db:4e: a3:99:9b:3e:2a:c4:ab:34:d9:68:bb:9f:36:47:0c: 7e:5a:88:b5:0b:4b:e0:6a:f6:ee:d2:aa:fc:5d:b1: 2f:24:ea:d5:e8:98:af:fd:ca:21:ca:ee:a5:50:14: ce:98:e6:e1:4c:b6:3e:96:b4:27:07:8c:c9:dd:03: f7:32:da:36:ed:88:be:87:9d:72:de:68:1c:96:7e: dc:1f:b0:71:05:88:a2:05:04:7c:ca:f2:a2:02:06: b8:e6:4c:a6:40:16:e2:0d:b3:84:37:f3:36:19:44: af:70:33:96:d1:96:89:64:41:85:5f:8a:37:24:3c: e7:88:36:87:88:5a:4e:f6:80:da:92:ac:47:d4:d9: d0:60:2f:a0:fe:a8:b9:22:0f:85:3e:37:bc:c9:40: d5:41:31:84:c0:5e:ab:6c:86:99:a2:49:91:17:29: 3d:ea:cb:26:d6:66:a5:76:9e:ea:5e:4f:16:63:61: 88:19:cd:3f:02:65:16:73:2a:3f:82:a9:ba:59:e8: 7b:c5:97:d1:24:b7:2b:cb:8b:48:cb:63:52:02:bf: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F7:A8:46:51:AC:A9:1E:6A:4D:1D:B7:E2:18:7F:E9:88:86:04:9C X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b9:e8:8b:0a:41:76:58:1f:e2:78:24:37:bb:da:54:62:e8: 96:d1:be:87:00:ec:d0:2e:dc:1e:c7:8b:9c:de:e6:90:26:59: e6:67:2d:67:14:a9:b0:3e:77:23:48:d5:3f:c4:04:78:c7:5a: e6:52:48:6e:40:2d:71:36:a3:88:32:fa:71:94:87:79:81:2e: f4:a4:07:0f:ce:6a:8e:72:ae:87:37:9b:d4:43:27:5e:ec:85: c8:35:39:9c:26:14:06:ff:13:12:5c:b8:29:6d:64:dd:e7:21: 9e:7e:45:2f:0e:14:83:f9:e6:7d:2c:5c:f0:ef:c2:19:7f:ea: fc:ea:01:ab:d3:b4:23:51:4e:62:62:25:6d:be:35:76:b0:43: 7e:73:a7:b9:94:e8:29:36:8e:a0:26:21:96:98:59:6e:e0:30: 8c:9f:a1:f3:8f:3b:16:9c:3b:6b:c1:fa:46:f6:2a:77:53:e2: 51:38:fd:be:24:f7:69:e0:f6:61:56:c5:f2:05:55:9d:8b:35: c8:b9:9e:88:19:da:91:99:ec:d0:7a:e2:58:b1:54:5e:fd:2a: d6:22:5d:4d:6c:61:1c:64:cc:a2:bd:ef:16:bd:42:4b:1a:e8: 8d:29:2d:c6:b0:aa:13:92:9e:99:0c:62:b9:81:98:6e:1b:5e: a1:b6:63:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDn5CTvusVC+5pxg64bS5I7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjYwOTI4MTIwMTIzWhcNMjYwOTI5MTIwMTIzWjAzMTEwLwYDVQQD Eyg2ZWY3YTg0NjUxYWNhOTFlNmE0ZDFkYjdlMjE4N2ZlOTg4ODYwNDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuz5Y/v74GznBbxMpKXCWrbrdXwc uFevqr27aJKmttY4F9tx/Q8PWVkP206jmZs+KsSrNNlou582Rwx+Woi1C0vgavbu 0qr8XbEvJOrV6Jiv/cohyu6lUBTOmObhTLY+lrQnB4zJ3QP3Mto27Yi+h51y3mgc ln7cH7BxBYiiBQR8yvKiAga45kymQBbiDbOEN/M2GUSvcDOW0ZaJZEGFX4o3JDzn iDaHiFpO9oDakqxH1NnQYC+g/qi5Ig+FPje8yUDVQTGEwF6rbIaZokmRFyk96ssm 1maldp7qXk8WY2GIGc0/AmUWcyo/gqm6Weh7xZfRJLcry4tIy2NSAr9KXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG73qEZRrKkeak0dt+IYf+mIhgScMB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbnoiwpB dlgf4ngkN7vaVGLoltG+hwDs0C7cHseLnN7mkCZZ5mctZxSpsD53I0jVP8QEeMda 5lJIbkAtcTajiDL6cZSHeYEu9KQHD85qjnKuhzeb1EMnXuyFyDU5nCYUBv8TEly4 KW1k3echnn5FLw4Ug/nmfSxc8O/CGX/q/OoBq9O0I1FOYmIlbb41drBDfnOnuZTo KTaOoCYhlphZbuAwjJ+h8487Fpw7a8H6RvYqd1PiUTj9viT3aeD2YVbF8gVVnYs1 yLmeiBnakZns0HriWLFUXv0q1iJdTWxhHGTMor3vFr1CSxrojSktxrCqE5KemQxi uYGYbhteobZjjg== -----END CERTIFICATE-----Generated at Mon Sep 28 19:29:48 2026 by rpki-client