$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft File: Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json) Hash identifier: ugVpoIGFpuxveld3v7wiInwZeNhlDbIH540COWHs8IU= Subject key identifier: C8:64:E8:45:84:3A:8A:ED:90:30:41:7F:C8:D9:8E:CC:0E:AD:44:66 Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 019F91A3AB244E290A7B1C51905D183F4436 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft Manifest number: 132F Signing time: Fri 24 Jul 2026 01:00:50 +0000 Manifest this update: Fri 24 Jul 2026 01:00:50 +0000 Manifest next update: Sat 25 Jul 2026 01:00:50 +0000 Files and hashes: 1: 0qcRgVORJ6l9UlTI2CKPLzjbfog.roa (hash: wvJhHDw0n2QTgzGbPUH8xt0FfoOscXlBHhG0tJvFt98=) 2: 2EkuPAqVHEWEKp6ASw2K5zmACQk.roa (hash: n72y5YkbbuFUJAYmxmxnzR7f3ZsUZLnhTxeGIE67Cko=) 3: FLjvYn5Mu6OSQ1vmJsficIZ3oAg.roa (hash: WAKAnnjMgQbJs7Wfu2NA1DQe3FG0M4jG7s2jCVV8t08=) 4: LKqcV__iHBkuJmHBTgVTMKe7jfs.roa (hash: LzRNG01pbqOOrg9Ke+0IrSjljXKIcSklaBxsB5gc1AU=) 5: PxxNVNL5BOB3QrAZZvS5ahJKLOQ.roa (hash: tFLry/v07lnhSlHBjf2oO0BxwozcI2XhOgOvdmFzcjY=) 6: TuXsasZ-4b8nW75mHIofbfVtahQ.roa (hash: WQY2WQVSqHmWvAPhxSmdnowvY1X9klQmLQ7FkZqoEzE=) 7: U74ViGODTud33ngPAmj4w73NK6o.roa (hash: 8g7ud1guSPB+L+sklXn8DfQQ/RtzcbmpgZcJ8hWX/2M=) 8: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: dbwqUeWntBuZWy3L32yWW8/tc+XtSUfizgqb3M1o3S8=) 9: ajUdjtPuTYK4cJ-GDNgzwU_V7QU.roa (hash: zq0p6TTpyxJr1rlBswAzuDS0To2T7g83akxmSzfwXWY=) 10: esQiMgPaySQVW0k54pO3jc5Zyuc.roa (hash: 2aftWcOZmt2bVeY6qt170y22emZnUo4u4rs+oiqH7rU=) 11: n9NpVtjQ4CgC347DPdZBbkrl1rk.roa (hash: F/VcD/rkVFmMD8EIR8zYpeskYz8L7PTmG19l/6//DPo=) 12: qzDK1lhCM39SxM8PACxbyKkom_M.roa (hash: nfWxgyb2gt4+A8mM3hL0XhTI+0dXdf9+3PuS2IdhMMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:a3:ab:24:4e:29:0a:7b:1c:51:90:5d:18:3f:44:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Jul 24 01:00:50 2026 GMT Not After : Jul 25 01:00:50 2026 GMT Subject: CN=c864e845843a8aed9030417fc8d98ecc0ead4466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:64:05:07:e0:bf:44:be:b5:5f:e4:cb:46: 79:45:07:2f:7b:22:35:f1:12:4c:8c:5c:84:75:55: a6:b8:84:95:49:15:21:34:cd:be:10:f2:36:64:86: 26:36:a3:e4:a7:88:72:84:ef:60:54:18:5f:ba:7d: 69:0f:c8:69:e0:77:93:61:81:33:7f:4b:12:94:bc: 4d:ca:a8:bd:54:52:f1:05:4b:1e:69:04:51:0b:d6: b3:a5:59:f0:ae:93:19:85:fe:e3:40:6c:63:44:0f: 0a:f5:5d:58:19:0f:2c:f6:ae:ec:16:79:5a:d1:4d: f1:76:31:fd:7c:50:ae:3b:98:01:f7:a3:e4:87:af: b7:53:f7:25:26:cb:a0:ee:67:a4:38:82:82:f4:9e: 84:08:34:e5:99:fc:6d:f6:b2:be:db:1b:40:24:76: e6:69:68:5e:fe:09:ba:d4:f8:01:74:9c:12:33:e3: dd:2f:3b:92:87:46:11:fc:3d:61:79:35:5e:6a:2a: 1a:4d:70:43:4a:37:04:26:74:10:e5:cb:58:04:6b: 80:9b:be:ca:cf:a7:6d:11:38:e9:c4:01:0c:91:b2: 30:08:a3:40:bd:15:0e:5b:db:87:fa:a7:cc:cb:48: 5d:89:6d:74:57:b5:cc:f8:9a:74:17:ab:8b:08:01: 6d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:64:E8:45:84:3A:8A:ED:90:30:41:7F:C8:D9:8E:CC:0E:AD:44:66 X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:77:5b:09:f8:06:ae:90:40:29:07:9a:17:34:ab:d1:5d:fc: 25:ea:3c:2e:a3:01:e5:0b:4e:15:b7:3e:ab:a0:8e:74:19:70: 47:ac:c0:22:2b:57:ae:5d:86:55:79:db:c8:0a:c7:e2:13:3c: e6:8b:c9:ea:26:93:79:6d:12:14:cf:7f:f0:7e:c0:c2:cb:73: 96:09:e3:43:ba:f7:cc:62:8e:f8:7d:78:96:47:47:e8:dd:e8: 08:7c:1f:95:d4:1d:d1:94:83:6b:97:90:e2:8d:1a:b8:ee:29: 4f:a6:c9:a3:b3:6c:26:3c:89:f6:75:aa:c5:da:9a:1f:8a:02: d7:64:91:ef:24:e6:2d:bc:23:9b:a2:c5:6e:dc:12:a2:c8:0f: c2:54:c9:b6:9f:5a:54:af:86:12:dc:09:7e:07:57:72:a2:24: df:62:71:84:e8:63:f7:9e:d9:0c:a1:d0:66:91:c4:f8:1c:0f: 7c:e7:eb:fa:e2:6a:65:34:63:f5:1c:c5:1e:9e:f6:02:a6:8f: f9:1a:18:45:e5:07:a5:e7:ab:3f:70:4c:22:1f:43:25:06:27: b7:2a:70:ce:25:a3:55:a6:a9:7b:eb:fc:00:59:51:6d:d5:33: a5:fa:3b:1e:2d:e6:6b:79:eb:52:36:91:a2:e7:b7:92:a8:7b: ce:ce:2e:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Ro6skTikKexxRkF0YP0Q2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjYwNzI0MDEwMDUwWhcNMjYwNzI1MDEwMDUwWjAzMTEwLwYDVQQD EyhjODY0ZTg0NTg0M2E4YWVkOTAzMDQxN2ZjOGQ5OGVjYzBlYWQ0NDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHxkBQfgv0S+tV/ky0Z5RQcveyI1 8RJMjFyEdVWmuISVSRUhNM2+EPI2ZIYmNqPkp4hyhO9gVBhfun1pD8hp4HeTYYEz f0sSlLxNyqi9VFLxBUseaQRRC9azpVnwrpMZhf7jQGxjRA8K9V1YGQ8s9q7sFnla 0U3xdjH9fFCuO5gB96Pkh6+3U/clJsug7mekOIKC9J6ECDTlmfxt9rK+2xtAJHbm aWhe/gm61PgBdJwSM+PdLzuSh0YR/D1heTVeaioaTXBDSjcEJnQQ5ctYBGuAm77K z6dtETjpxAEMkbIwCKNAvRUOW9uH+qfMy0hdiW10V7XM+Jp0F6uLCAFtOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhk6EWEOortkDBBf8jZjswOrURmMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXdbCfgG rpBAKQeaFzSr0V38Jeo8LqMB5QtOFbc+q6COdBlwR6zAIitXrl2GVXnbyArH4hM8 5ovJ6iaTeW0SFM9/8H7AwstzlgnjQ7r3zGKO+H14lkdH6N3oCHwfldQd0ZSDa5eQ 4o0auO4pT6bJo7NsJjyJ9nWqxdqaH4oC12SR7yTmLbwjm6LFbtwSosgPwlTJtp9a VK+GEtwJfgdXcqIk32JxhOhj957ZDKHQZpHE+BwPfOfr+uJqZTRj9RzFHp72AqaP +RoYReUHpeerP3BMIh9DJQYntypwziWjVaape+v8AFlRbdUzpfo7Hi3ma3nrUjaR oue3kqh7zs4uQg== -----END CERTIFICATE-----Generated at Fri Jul 24 06:18:02 2026 by rpki-client