$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft File: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft (raw, json) Hash identifier: F45QyiP/JfA6lr/CmAOs6spFOz2Sy0XBiTdqAmBg664= Subject key identifier: 91:23:84:28:50:FB:5E:82:9E:D9:C1:B3:2E:38:D7:AB:82:D2:44:5A Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Certificate serial: 019F1265AE29BBDAA9E0825B19F92F8CB51D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft Manifest number: 142A Signing time: Mon 29 Jun 2026 08:01:21 +0000 Manifest this update: Mon 29 Jun 2026 08:01:21 +0000 Manifest next update: Tue 30 Jun 2026 08:01:21 +0000 Files and hashes: 1: 8YEPdClPNr_3zDrhmRGiX4nWwZA.asa (hash: 2bvyL1QtbFD5dzAQ0Bl2sb4g9BiR/U4X0BGmGEMfbKU=) 2: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl (hash: oJ+0qmcyUrLR9swnWKDP1R8GkQ22owej+C3Z9xpJx8Q=) 3: B5j3YeJoZkR-M842kAei_UWMVnY.roa (hash: 9dBcdzBINoDXdmkJLkcJhvttYwcsyEIX2FhzFQvtp+s=) 4: axIqDyAlK0bUNbzn8X3np8rLZdg.asa (hash: qyAh01KjzZwobQ5AxwlXgm7EdBIeIjU3cgZPryzz3yA=) 5: g3MXjNcsWoLD0PetYkh3H8FGFEw.asa (hash: na+ynpKUQZPFDrKy+EXa5B4rQ+xPN8v4RPHAqcwEPhI=) 6: hfYAMmC7nzj6eP_4KjmX0ydK61k.roa (hash: ENco3xJLaaDmCT3M7xz4xfUTyINJdjSu/7+AW54JdKY=) 7: lwxiv3kekrPmCweGpFX4WJfrhX0.roa (hash: 2lW/SbMqaftEHsN9ssTuGMfD/ZAuKFXzBYGrp9TrmHI=) 8: nBKubqHJCPmxZed95Pwvup7veOk.roa (hash: SF8k+2B3p2IDWArFu3EKiVWXhjgf4ze2L6pnr/0Lp4o=) 9: qMkdURgl5v8iVuM-fHHXRCMHBok.asa (hash: KT0x4APoSA9EBXsj4uU5Mno2FoqnMrb2Le5rpuVOb0U=) 10: wehxXgpfgzalQRxlqvRAJwCWbMQ.roa (hash: kDdYxSItK7GlFWzV8XEeVDHmfQM6o/WzrJGoU9qv79A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:12:65:ae:29:bb:da:a9:e0:82:5b:19:f9:2f:8c:b5:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Validity Not Before: Jun 29 08:01:21 2026 GMT Not After : Jun 30 08:01:21 2026 GMT Subject: CN=9123842850fb5e829ed9c1b32e38d7ab82d2445a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:48:94:72:2f:34:a1:15:41:f0:8a:0d:7c: 8b:8a:a6:ad:c8:4f:3d:86:83:93:9f:40:a3:5e:fa: 32:a0:70:ab:fd:ab:d2:08:73:01:9d:1e:7b:58:84: 23:68:43:4b:57:9d:c1:1f:0a:5d:31:22:f7:33:a4: e7:f5:e9:b7:f3:f2:7f:4b:01:fe:c8:93:bd:af:8d: 4f:3d:92:e7:3d:2f:b6:96:e3:e0:93:d0:c1:9b:b5: 20:87:0d:1d:0a:75:77:e0:43:81:b4:db:dc:2f:b5: 3c:ea:9d:53:34:2f:43:17:4c:26:93:ea:b1:94:f5: 72:40:4c:05:c9:cf:a9:e1:4d:ff:ca:25:02:e7:f6: 5b:b3:08:54:46:47:08:ba:99:6c:11:98:16:c0:92: 26:f1:42:43:e5:e7:08:b8:be:18:a9:9d:0d:b3:57: ca:9e:98:a7:ff:7f:e2:e6:d1:ca:c8:b4:88:c6:14: ae:af:b9:cc:33:4c:6a:89:d1:93:04:ac:4d:11:23: ca:be:81:1e:f0:e0:78:7d:6d:c2:29:d5:9f:41:bf: 9f:35:0a:d6:47:3e:9d:41:c5:25:73:10:43:3c:2f: ee:14:4f:5c:dd:01:db:24:10:8f:ae:38:bd:d8:d9: 1f:cf:82:d2:75:90:85:d9:8a:5f:8b:35:af:50:84: ba:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:23:84:28:50:FB:5E:82:9E:D9:C1:B3:2E:38:D7:AB:82:D2:44:5A X509v3 Authority Key Identifier: keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2b:3f:b6:a6:2a:0d:54:ea:67:b9:b9:93:85:de:51:48:8c: 89:c1:fb:91:6f:00:7a:dd:0a:4b:d0:a1:f7:47:3c:77:bb:f7: 7e:85:55:b2:ee:fb:f2:a2:c3:fc:55:51:59:de:98:f6:25:b3: 79:f2:15:76:bb:68:c9:0d:0f:71:f2:2e:59:47:65:50:a5:30: 15:36:b7:3c:bf:0c:df:83:1a:6d:2d:6b:a9:71:f8:0f:1e:dd: 55:43:d5:46:d3:cc:a9:f9:89:b8:4a:cf:93:15:98:d6:1c:f0: 14:6f:c9:52:7c:b3:17:4e:58:fd:1c:96:a5:43:38:3c:88:98: 09:ef:7b:69:43:83:63:17:7d:8a:c5:5a:6d:3f:ae:0a:47:12: 2d:b1:3b:a4:ab:51:0a:f7:7c:ff:e8:20:f4:e8:5d:4c:64:a1: 14:ba:d2:46:48:b4:b7:0c:3d:42:de:31:8f:21:b8:a6:0c:6d: 82:66:7b:80:7d:55:d4:77:fb:06:1c:1f:f9:a9:ea:94:19:9a: aa:cd:49:56:65:2a:ff:94:87:2d:62:a4:97:48:e2:3d:d8:6f: 07:8b:2e:ca:d7:e3:95:ce:cf:fe:26:e9:ff:f9:ef:43:ec:ed: e0:0a:16:95:16:e6:fc:b9:3c:f4:e4:1d:76:89:e2:6e:7a:57: c3:73:cf:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8SZa4pu9qp4IJbGfkvjLUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh MzVhNTUwHhcNMjYwNjI5MDgwMTIxWhcNMjYwNjMwMDgwMTIxWjAzMTEwLwYDVQQD Eyg5MTIzODQyODUwZmI1ZTgyOWVkOWMxYjMyZTM4ZDdhYjgyZDI0NDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr5IlHIvNKEVQfCKDXyLiqatyE89 hoOTn0CjXvoyoHCr/avSCHMBnR57WIQjaENLV53BHwpdMSL3M6Tn9em38/J/SwH+ yJO9r41PPZLnPS+2luPgk9DBm7Ughw0dCnV34EOBtNvcL7U86p1TNC9DF0wmk+qx lPVyQEwFyc+p4U3/yiUC5/ZbswhURkcIuplsEZgWwJIm8UJD5ecIuL4YqZ0Ns1fK npin/3/i5tHKyLSIxhSur7nMM0xqidGTBKxNESPKvoEe8OB4fW3CKdWfQb+fNQrW Rz6dQcUlcxBDPC/uFE9c3QHbJBCPrji92Nkfz4LSdZCF2YpfizWvUIS6vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEjhChQ+16CntnBsy4416uC0kRaMB8GA1UdIwQY MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt ZmUwYTY1OGQ5ZGVkLzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXys/tqYq DVTqZ7m5k4XeUUiMicH7kW8Aet0KS9Ch90c8d7v3foVVsu778qLD/FVRWd6Y9iWz efIVdrtoyQ0PcfIuWUdlUKUwFTa3PL8M34MabS1rqXH4Dx7dVUPVRtPMqfmJuErP kxWY1hzwFG/JUnyzF05Y/RyWpUM4PIiYCe97aUODYxd9isVabT+uCkcSLbE7pKtR Cvd8/+gg9OhdTGShFLrSRki0tww9Qt4xjyG4pgxtgmZ7gH1V1Hf7Bhwf+anqlBma qs1JVmUq/5SHLWKkl0jiPdhvB4suytfjlc7P/ibp//nvQ+zt4AoWlRbm/Lk89OQd donibnpXw3PPdg== -----END CERTIFICATE-----Generated at Mon Jun 29 11:36:40 2026 by rpki-client