$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft File: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft (raw, json) Hash identifier: ZOoA/QNEMcSq61uyWg6vOdrhGFrzZfmRRuzIGELJ+fM= Subject key identifier: FC:68:00:D4:E2:5E:60:21:3C:16:B1:E2:AA:0C:AD:2C:A0:F0:C8:99 Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Certificate serial: 019D37529EFE22A8D8707DA66D2CB0898FA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft Manifest number: 1334 Signing time: Sun 29 Mar 2026 02:00:54 +0000 Manifest this update: Sun 29 Mar 2026 02:00:54 +0000 Manifest next update: Mon 30 Mar 2026 02:00:54 +0000 Files and hashes: 1: 8YEPdClPNr_3zDrhmRGiX4nWwZA.asa (hash: 2bvyL1QtbFD5dzAQ0Bl2sb4g9BiR/U4X0BGmGEMfbKU=) 2: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl (hash: z4pcTE9TZ0G1wxhApY1kIAVxw04jm8Z4awOqkpWF2mI=) 3: B5j3YeJoZkR-M842kAei_UWMVnY.roa (hash: 9dBcdzBINoDXdmkJLkcJhvttYwcsyEIX2FhzFQvtp+s=) 4: axIqDyAlK0bUNbzn8X3np8rLZdg.asa (hash: qyAh01KjzZwobQ5AxwlXgm7EdBIeIjU3cgZPryzz3yA=) 5: g3MXjNcsWoLD0PetYkh3H8FGFEw.asa (hash: na+ynpKUQZPFDrKy+EXa5B4rQ+xPN8v4RPHAqcwEPhI=) 6: hfYAMmC7nzj6eP_4KjmX0ydK61k.roa (hash: ENco3xJLaaDmCT3M7xz4xfUTyINJdjSu/7+AW54JdKY=) 7: lwxiv3kekrPmCweGpFX4WJfrhX0.roa (hash: 2lW/SbMqaftEHsN9ssTuGMfD/ZAuKFXzBYGrp9TrmHI=) 8: nBKubqHJCPmxZed95Pwvup7veOk.roa (hash: SF8k+2B3p2IDWArFu3EKiVWXhjgf4ze2L6pnr/0Lp4o=) 9: qMkdURgl5v8iVuM-fHHXRCMHBok.asa (hash: KT0x4APoSA9EBXsj4uU5Mno2FoqnMrb2Le5rpuVOb0U=) 10: wehxXgpfgzalQRxlqvRAJwCWbMQ.roa (hash: kDdYxSItK7GlFWzV8XEeVDHmfQM6o/WzrJGoU9qv79A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:37:52:9e:fe:22:a8:d8:70:7d:a6:6d:2c:b0:89:8f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Validity Not Before: Mar 29 02:00:54 2026 GMT Not After : Mar 30 02:00:54 2026 GMT Subject: CN=fc6800d4e25e60213c16b1e2aa0cad2ca0f0c899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6c:67:ae:7d:8a:49:b3:00:33:7e:89:43:7c: 8e:b2:bb:c5:f8:fe:37:1d:b8:50:3d:d7:11:42:29: d6:81:0d:be:74:3f:ce:e6:a5:24:7f:fd:e2:a6:75: d6:77:73:43:4c:89:82:e5:50:61:3b:2f:da:dc:6f: c3:a0:bb:eb:f4:d5:0b:c3:f3:ba:9e:47:69:15:9d: 4c:a3:6f:8d:89:df:65:fe:76:27:e5:f6:b0:14:cc: 68:ac:ab:c7:ec:02:06:96:03:30:4b:97:6c:d2:df: 92:f7:06:60:37:0d:82:5f:4a:3c:3c:44:9c:4d:c1: 03:03:e1:b2:1b:68:b5:72:c5:50:b2:a1:ef:83:03: 81:02:47:19:ac:88:4e:e0:86:20:db:56:f7:10:bd: 6b:cf:61:af:6b:31:59:cd:69:62:ac:8a:57:fc:91: 99:93:a1:16:23:20:bf:75:07:e8:48:96:c1:b4:ec: 4c:4a:16:71:ff:2b:4f:cf:35:f9:fa:e9:29:ae:e6: 4a:cd:ec:ad:d1:71:46:97:93:9e:45:2f:03:53:ca: 98:f8:31:ee:ad:5a:65:74:7b:04:f5:40:0e:a0:9d: 6d:f3:be:91:57:56:79:f3:82:44:c6:8a:93:dc:ac: 26:bd:6c:17:03:7c:1d:8f:81:ee:f3:93:ea:26:6a: 49:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:68:00:D4:E2:5E:60:21:3C:16:B1:E2:AA:0C:AD:2C:A0:F0:C8:99 X509v3 Authority Key Identifier: keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f2:05:ff:0e:54:50:59:38:a9:34:9c:dc:e8:ed:9b:5f:31:e5: 86:94:f4:b2:04:9a:1f:59:02:57:1f:0c:5e:c8:d4:40:2c:8b: 67:68:a4:5c:99:f7:f5:5e:0a:02:60:a0:60:67:ce:a9:fe:56: f7:ce:36:b1:50:b9:99:2d:a4:c8:d5:c7:30:12:50:a0:53:9a: 01:e6:87:67:ae:0f:f6:9e:f0:99:ee:61:29:c1:0c:80:10:27: 36:e3:67:f0:47:ff:de:89:ba:9f:10:2a:1c:d7:3d:6c:a2:fe: 1d:d2:4e:9d:da:b3:e2:f0:12:b3:d1:c3:aa:3f:ae:e4:49:40: 5d:c2:60:27:e7:eb:bc:e5:fe:cc:fa:96:ec:e0:f6:63:96:e2: 7b:09:36:d7:a3:50:8a:18:4d:57:7d:09:68:29:72:84:1a:8b: 08:8e:07:41:6b:32:6f:88:2a:1d:00:1d:c8:10:76:ea:71:36: a6:54:2a:0c:2b:ea:ee:5f:d3:42:7c:6d:0a:68:00:41:0c:4e: e0:60:78:6f:89:70:ae:63:1e:ca:ed:f0:05:84:06:95:7f:17: e4:95:47:af:56:12:0f:97:93:4c:be:3f:76:9f:10:29:ba:2e: e8:10:b6:e4:6b:d3:ab:87:fe:44:79:80:10:a8:f6:cb:30:22: 4b:3a:98:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ03Up7+IqjYcH2mbSywiY+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh MzVhNTUwHhcNMjYwMzI5MDIwMDU0WhcNMjYwMzMwMDIwMDU0WjAzMTEwLwYDVQQD EyhmYzY4MDBkNGUyNWU2MDIxM2MxNmIxZTJhYTBjYWQyY2EwZjBjODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2xnrn2KSbMAM36JQ3yOsrvF+P43 HbhQPdcRQinWgQ2+dD/O5qUkf/3ipnXWd3NDTImC5VBhOy/a3G/DoLvr9NULw/O6 nkdpFZ1Mo2+Nid9l/nYn5fawFMxorKvH7AIGlgMwS5ds0t+S9wZgNw2CX0o8PESc TcEDA+GyG2i1csVQsqHvgwOBAkcZrIhO4IYg21b3EL1rz2GvazFZzWlirIpX/JGZ k6EWIyC/dQfoSJbBtOxMShZx/ytPzzX5+ukpruZKzeyt0XFGl5OeRS8DU8qY+DHu rVpldHsE9UAOoJ1t876RV1Z584JExoqT3KwmvWwXA3wdj4Hu85PqJmpJgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxoANTiXmAhPBax4qoMrSyg8MiZMB8GA1UdIwQY MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt ZmUwYTY1OGQ5ZGVkLzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8gX/DlRQ WTipNJzc6O2bXzHlhpT0sgSaH1kCVx8MXsjUQCyLZ2ikXJn39V4KAmCgYGfOqf5W 9842sVC5mS2kyNXHMBJQoFOaAeaHZ64P9p7wme5hKcEMgBAnNuNn8Ef/3om6nxAq HNc9bKL+HdJOndqz4vASs9HDqj+u5ElAXcJgJ+frvOX+zPqW7OD2Y5biewk216NQ ihhNV30JaClyhBqLCI4HQWsyb4gqHQAdyBB26nE2plQqDCvq7l/TQnxtCmgAQQxO 4GB4b4lwrmMeyu3wBYQGlX8X5JVHr1YSD5eTTL4/dp8QKbou6BC25GvTq4f+RHmA EKj2yzAiSzqYHA== -----END CERTIFICATE-----Generated at Sun Mar 29 12:34:50 2026 by rpki-client