$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft File: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft (raw, json) Hash identifier: pRjNqxcbZAoDtfUU//mzEiXd+HzYmRfHNCDb5KpjCq4= Subject key identifier: 2B:A3:F2:09:30:A6:9D:D3:0E:36:39:AB:61:DE:4E:D5:FB:D6:3D:5B Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Certificate serial: 01A001DC9A9F540555AE69B9C38068BDE15B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft Manifest number: 14A6 Signing time: Fri 14 Aug 2026 20:00:29 +0000 Manifest this update: Fri 14 Aug 2026 20:00:29 +0000 Manifest next update: Sat 15 Aug 2026 20:00:29 +0000 Files and hashes: 1: 8YEPdClPNr_3zDrhmRGiX4nWwZA.asa (hash: 2bvyL1QtbFD5dzAQ0Bl2sb4g9BiR/U4X0BGmGEMfbKU=) 2: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl (hash: DqrNaBhsUBD42i0/ejwKU/b08D4QZCX/JteSJ7irecg=) 3: B5j3YeJoZkR-M842kAei_UWMVnY.roa (hash: 9dBcdzBINoDXdmkJLkcJhvttYwcsyEIX2FhzFQvtp+s=) 4: axIqDyAlK0bUNbzn8X3np8rLZdg.asa (hash: qyAh01KjzZwobQ5AxwlXgm7EdBIeIjU3cgZPryzz3yA=) 5: g3MXjNcsWoLD0PetYkh3H8FGFEw.asa (hash: na+ynpKUQZPFDrKy+EXa5B4rQ+xPN8v4RPHAqcwEPhI=) 6: hfYAMmC7nzj6eP_4KjmX0ydK61k.roa (hash: ENco3xJLaaDmCT3M7xz4xfUTyINJdjSu/7+AW54JdKY=) 7: lwxiv3kekrPmCweGpFX4WJfrhX0.roa (hash: 2lW/SbMqaftEHsN9ssTuGMfD/ZAuKFXzBYGrp9TrmHI=) 8: nBKubqHJCPmxZed95Pwvup7veOk.roa (hash: SF8k+2B3p2IDWArFu3EKiVWXhjgf4ze2L6pnr/0Lp4o=) 9: qMkdURgl5v8iVuM-fHHXRCMHBok.asa (hash: KT0x4APoSA9EBXsj4uU5Mno2FoqnMrb2Le5rpuVOb0U=) 10: wehxXgpfgzalQRxlqvRAJwCWbMQ.roa (hash: kDdYxSItK7GlFWzV8XEeVDHmfQM6o/WzrJGoU9qv79A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 15:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:01:dc:9a:9f:54:05:55:ae:69:b9:c3:80:68:bd:e1:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Validity Not Before: Aug 14 20:00:29 2026 GMT Not After : Aug 15 20:00:29 2026 GMT Subject: CN=2ba3f20930a69dd30e3639ab61de4ed5fbd63d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:35:60:d6:eb:9c:50:36:4d:29:de:e0:ed:80: 14:87:2e:57:a0:46:7e:4d:80:b1:04:b9:d1:ad:d8: a0:2d:df:b2:c0:ab:dd:6d:c3:93:16:4d:64:db:10: e5:40:ab:8e:ce:2d:10:3a:09:d9:19:ec:73:ed:f2: 64:98:0e:1a:ee:bd:24:c3:5a:36:b1:0c:ef:88:34: 0a:05:9d:c5:84:d6:47:23:2f:6f:b5:8c:41:03:da: 38:9a:6a:fa:61:a7:a4:85:19:2e:fc:10:6e:88:87: 4c:59:c8:a6:3e:d9:2e:e2:c3:5a:0d:35:6a:e3:32: eb:b1:15:c2:ab:e1:ff:88:a3:8c:2a:6b:b4:e7:df: 9b:ef:5f:2a:8c:8a:06:4f:04:b1:63:37:90:67:88: e8:c6:76:ae:da:70:bf:d6:ba:36:07:17:b9:3d:a7: b6:c8:41:f8:14:d0:be:9e:9d:cf:56:7a:ca:99:f1: 20:3d:46:e1:d4:86:f2:82:3d:7b:dd:a5:a4:cb:8d: 85:db:46:a6:3c:25:e6:32:c7:30:b0:6a:d6:67:49: 47:7e:3a:57:89:03:fa:3d:3d:13:14:3a:18:44:63: d1:cd:ac:75:6b:69:5e:88:d3:3f:42:76:3a:17:b9: ce:0d:8e:86:85:d1:e6:52:69:09:29:12:74:7a:3b: 8b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A3:F2:09:30:A6:9D:D3:0E:36:39:AB:61:DE:4E:D5:FB:D6:3D:5B X509v3 Authority Key Identifier: keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:49:2f:db:d6:43:28:b8:e5:10:bc:0b:7e:7f:63:24:df:5e: 2e:1f:fa:fd:ad:27:52:61:75:59:95:c0:e7:47:f0:ac:31:83: 33:e2:51:de:57:7c:8f:a0:5b:9e:33:be:5d:f0:71:0c:d7:68: 07:1c:42:d7:9e:42:43:9f:db:f5:48:52:2f:7f:6d:1b:9e:7f: 91:8a:9d:d5:af:7f:fa:88:ca:49:00:be:eb:73:65:b7:40:c1: a8:c1:c2:15:67:98:1f:27:36:7b:7b:2b:f1:97:ce:b0:9e:8c: 59:f5:fb:3c:68:81:68:96:43:7f:92:05:c9:e5:32:f2:85:d8: f6:71:66:bc:5b:d9:46:cc:39:30:d7:a5:60:37:6f:ba:4b:d6: 63:fc:b4:a2:2f:db:8e:98:2e:5c:5c:f4:ec:56:99:ee:ad:79: 48:36:c4:3c:d0:75:1f:d7:80:cc:7b:7f:b7:ed:68:94:a7:31: 1f:42:d8:17:d5:21:dc:fb:8d:8e:d4:c4:1e:cb:b8:96:eb:7f: ea:31:74:6d:b7:d6:a3:f7:3f:c3:ec:02:a8:7d:2a:cb:65:aa: c1:f3:9a:ea:c8:2a:2f:7b:3f:70:77:a6:6f:2c:a8:62:2c:49: cd:6f:89:9b:b5:47:4d:0c:58:01:03:9a:e3:41:c5:8a:7f:5f: e6:3d:dc:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAB3JqfVAVVrmm5w4BoveFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh MzVhNTUwHhcNMjYwODE0MjAwMDI5WhcNMjYwODE1MjAwMDI5WjAzMTEwLwYDVQQD EygyYmEzZjIwOTMwYTY5ZGQzMGUzNjM5YWI2MWRlNGVkNWZiZDYzZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTVg1uucUDZNKd7g7YAUhy5XoEZ+ TYCxBLnRrdigLd+ywKvdbcOTFk1k2xDlQKuOzi0QOgnZGexz7fJkmA4a7r0kw1o2 sQzviDQKBZ3FhNZHIy9vtYxBA9o4mmr6YaekhRku/BBuiIdMWcimPtku4sNaDTVq 4zLrsRXCq+H/iKOMKmu059+b718qjIoGTwSxYzeQZ4joxnau2nC/1ro2Bxe5Pae2 yEH4FNC+np3PVnrKmfEgPUbh1Ibygj173aWky42F20amPCXmMscwsGrWZ0lHfjpX iQP6PT0TFDoYRGPRzax1a2leiNM/QnY6F7nODY6GhdHmUmkJKRJ0ejuL2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuj8gkwpp3TDjY5q2HeTtX71j1bMB8GA1UdIwQY MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt ZmUwYTY1OGQ5ZGVkLzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUkv29ZD KLjlELwLfn9jJN9eLh/6/a0nUmF1WZXA50fwrDGDM+JR3ld8j6BbnjO+XfBxDNdo BxxC155CQ5/b9UhSL39tG55/kYqd1a9/+ojKSQC+63Nlt0DBqMHCFWeYHyc2e3sr 8ZfOsJ6MWfX7PGiBaJZDf5IFyeUy8oXY9nFmvFvZRsw5MNelYDdvukvWY/y0oi/b jpguXFz07FaZ7q15SDbEPNB1H9eAzHt/t+1olKcxH0LYF9Uh3PuNjtTEHsu4lut/ 6jF0bbfWo/c/w+wCqH0qy2WqwfOa6sgqL3s/cHembyyoYixJzW+Jm7VHTQxYAQOa 40HFin9f5j3cVw== -----END CERTIFICATE-----Generated at Sat Aug 15 00:30:39 2026 by rpki-client