$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft File: Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json) Hash identifier: 24xu3I8WingdIjM2txN1APw3YQGQ29W0OsXy+pWdvQ0= Subject key identifier: 1D:B0:9A:30:C5:4F:91:8E:69:C1:24:74:14:D6:80:D3:EB:84:B6:62 Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 019E1C0FD981B2D407AD3DD72F8234C8B045 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft Manifest number: 126B Signing time: Tue 12 May 2026 12:01:01 +0000 Manifest this update: Tue 12 May 2026 12:01:01 +0000 Manifest next update: Wed 13 May 2026 12:01:01 +0000 Files and hashes: 1: 0qcRgVORJ6l9UlTI2CKPLzjbfog.roa (hash: wvJhHDw0n2QTgzGbPUH8xt0FfoOscXlBHhG0tJvFt98=) 2: 2EkuPAqVHEWEKp6ASw2K5zmACQk.roa (hash: n72y5YkbbuFUJAYmxmxnzR7f3ZsUZLnhTxeGIE67Cko=) 3: LKqcV__iHBkuJmHBTgVTMKe7jfs.roa (hash: LzRNG01pbqOOrg9Ke+0IrSjljXKIcSklaBxsB5gc1AU=) 4: PxxNVNL5BOB3QrAZZvS5ahJKLOQ.roa (hash: tFLry/v07lnhSlHBjf2oO0BxwozcI2XhOgOvdmFzcjY=) 5: SIvhvF1If_eehl4BJQbNmZRMLCs.roa (hash: A0jqff8Zj1Pg1atqnLNMXWm6hZKNe3Li8V1vNh3iP38=) 6: U74ViGODTud33ngPAmj4w73NK6o.roa (hash: 8g7ud1guSPB+L+sklXn8DfQQ/RtzcbmpgZcJ8hWX/2M=) 7: Uu6kgZoXxkmNniYXRrRma31jomI.roa (hash: SRpT2c+ZtineJthFU2Lj326eHBfCWg/PI6AuJE6p0HE=) 8: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: /tF680cR0c5zSa3qipieoF8PA64rLttW8sJUkeOglUw=) 9: ajUdjtPuTYK4cJ-GDNgzwU_V7QU.roa (hash: zq0p6TTpyxJr1rlBswAzuDS0To2T7g83akxmSzfwXWY=) 10: esQiMgPaySQVW0k54pO3jc5Zyuc.roa (hash: 2aftWcOZmt2bVeY6qt170y22emZnUo4u4rs+oiqH7rU=) 11: n9NpVtjQ4CgC347DPdZBbkrl1rk.roa (hash: F/VcD/rkVFmMD8EIR8zYpeskYz8L7PTmG19l/6//DPo=) 12: qzDK1lhCM39SxM8PACxbyKkom_M.roa (hash: nfWxgyb2gt4+A8mM3hL0XhTI+0dXdf9+3PuS2IdhMMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:0f:d9:81:b2:d4:07:ad:3d:d7:2f:82:34:c8:b0:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: May 12 12:01:01 2026 GMT Not After : May 13 12:01:01 2026 GMT Subject: CN=1db09a30c54f918e69c1247414d680d3eb84b662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b5:aa:a0:de:28:65:39:26:01:93:f8:65:89: 9f:76:38:31:15:d3:84:70:08:af:c3:ee:0f:07:bf: 71:04:94:ee:af:72:7c:b5:39:3e:35:a8:a2:cb:1e: 62:d7:2a:5e:ff:fd:6c:e8:c0:13:de:4b:39:fa:56: f0:ef:68:e3:79:3c:3d:3f:13:0c:6a:d4:d1:48:f3: c9:bc:ee:84:72:3d:ec:56:c5:d8:b8:2e:a7:4b:0d: 89:bb:1f:7a:75:24:6c:a6:fc:78:93:87:ec:5b:d4: b9:71:0a:2f:a5:54:3f:e8:48:04:1a:f4:46:6c:ec: 65:89:bd:68:5a:15:9a:0d:07:1e:6c:76:4c:a1:da: cc:55:0f:4e:43:64:e1:75:d9:47:95:4f:d1:af:ac: 70:f1:95:a5:04:3e:a9:88:ac:d8:12:06:0f:c8:63: 2f:e3:67:a3:de:0d:2d:d2:45:10:f3:4e:b9:43:24: b0:c6:93:03:30:be:7e:71:51:50:52:b6:a7:4e:8b: 10:5f:0b:7b:7d:65:5e:08:3c:53:06:0d:24:34:1c: fa:69:36:94:c5:c7:cb:a3:d3:83:98:73:3a:f9:46: 6d:da:0b:27:e0:7e:cd:66:a5:51:41:a2:05:89:37: e8:75:03:24:4d:21:5b:02:18:3f:c7:56:56:12:b7: 14:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B0:9A:30:C5:4F:91:8E:69:C1:24:74:14:D6:80:D3:EB:84:B6:62 X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:fa:9c:c3:1b:d9:35:55:b2:34:66:a7:80:0f:3f:31:1c:85: 38:4c:9b:3d:78:94:16:e6:fe:97:81:3c:9f:43:56:03:ee:e5: a0:ec:23:38:c3:09:a8:0d:af:6e:26:75:0b:82:45:c9:80:4e: bf:17:cf:4c:cc:2b:40:b5:90:5a:eb:ac:fd:4b:d6:a3:66:18: d3:ca:63:3d:4b:63:2d:4b:2c:b9:fc:7b:0d:87:1d:f8:fb:34: 1f:80:d8:88:19:d8:b5:24:05:e7:2e:e2:18:de:1a:62:a9:32: 67:03:48:38:27:76:20:d1:38:07:81:51:d3:62:84:c3:87:55: 96:6e:4e:29:7d:45:37:85:41:71:f3:cb:9e:a6:c5:35:13:1a: 59:f9:4f:1d:5a:4d:63:25:85:5f:ea:c0:73:35:3a:3a:95:d2: ed:ae:4f:7c:19:a7:ac:75:9d:91:1f:f3:e1:e5:3b:ba:d2:99: 77:68:5a:2b:7f:6e:d7:d1:da:14:74:89:3a:80:d5:12:b5:84: f9:31:93:43:cd:91:4a:81:52:fa:3d:86:ee:06:4a:61:cc:c8: 2b:c4:8a:49:69:57:8b:bc:13:8b:36:d9:66:90:d5:cf:0d:49: d8:fd:b0:ab:20:21:e3:49:fb:bd:2c:e1:e4:49:58:09:05:a9: ad:82:d7:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4cD9mBstQHrT3XL4I0yLBFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjYwNTEyMTIwMTAxWhcNMjYwNTEzMTIwMTAxWjAzMTEwLwYDVQQD EygxZGIwOWEzMGM1NGY5MThlNjljMTI0NzQxNGQ2ODBkM2ViODRiNjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87WqoN4oZTkmAZP4ZYmfdjgxFdOE cAivw+4PB79xBJTur3J8tTk+Naiiyx5i1ype//1s6MAT3ks5+lbw72jjeTw9PxMM atTRSPPJvO6Ecj3sVsXYuC6nSw2Jux96dSRspvx4k4fsW9S5cQovpVQ/6EgEGvRG bOxlib1oWhWaDQcebHZModrMVQ9OQ2ThddlHlU/Rr6xw8ZWlBD6piKzYEgYPyGMv 42ej3g0t0kUQ8065QySwxpMDML5+cVFQUranTosQXwt7fWVeCDxTBg0kNBz6aTaU xcfLo9ODmHM6+UZt2gsn4H7NZqVRQaIFiTfodQMkTSFbAhg/x1ZWErcUaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2wmjDFT5GOacEkdBTWgNPrhLZiMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvqcwxvZ NVWyNGangA8/MRyFOEybPXiUFub+l4E8n0NWA+7loOwjOMMJqA2vbiZ1C4JFyYBO vxfPTMwrQLWQWuus/UvWo2YY08pjPUtjLUssufx7DYcd+Ps0H4DYiBnYtSQF5y7i GN4aYqkyZwNIOCd2INE4B4FR02KEw4dVlm5OKX1FN4VBcfPLnqbFNRMaWflPHVpN YyWFX+rAczU6OpXS7a5PfBmnrHWdkR/z4eU7utKZd2haK39u19HaFHSJOoDVErWE +TGTQ82RSoFS+j2G7gZKYczIK8SKSWlXi7wTizbZZpDVzw1J2P2wqyAh40n7vSzh 5ElYCQWprYLX5A== -----END CERTIFICATE-----Generated at Tue May 12 22:28:09 2026 by rpki-client