$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: UX2JDTwpK2YC4wKaOyeX/3fivlV9aL3vpC462aIxxNY= Subject key identifier: 22:36:BF:D7:D4:81:5E:33:39:67:4F:68:09:0E:0D:2A:D2:6B:4F:C2 Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019F9090FD6191261473C2B2AEAA62322CC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 19C3 Signing time: Thu 23 Jul 2026 20:00:48 +0000 Manifest this update: Thu 23 Jul 2026 20:00:48 +0000 Manifest next update: Fri 24 Jul 2026 20:00:48 +0000 Files and hashes: 1: 2jo8nJ0eUlaCrdXeCQLsnxqxv5c.roa (hash: E5+CdpbMvk4x9kQVSv8lulj9PRBdhLSmoXYqO8KmtiE=) 2: 8HNqyROtCPcfRiv1Sx49M6ONZYg.roa (hash: zFpstxzrvOg/IGEksLOhRDjWqdDtkzz+78pgZXkJ73Y=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: FgzQic88tSb6Zu9WGlFvxpiM3zQh1V9oAzJRuNYHba4=) 4: ODJrKCxhZJXL46-GyJpCGE1A_QM.roa (hash: +3sffUArpiGjIESwpid7XyaHYYYvbrxKYnkoG38bS64=) 5: SX9U68Arj-_uoekiWex6QgdNbwQ.roa (hash: joN8VUGdRybF07eLYHwoTuABQ2kur7JqOJpxlpvlHks=) 6: WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa (hash: BUe0stMaaOWFp6WiIn+aiGaAl/vpI8FjtrNGbrBCxE0=) 7: gEhVWWVbCAuop-zcWZ0zv4pjLxE.roa (hash: xokrZ815d4gYLrLWpgPe6s/SM+gm8TEbsLKu7jgKc28=) 8: gGeNvgahudXxUPNz9yBFk3kYHS4.roa (hash: 8c8Cgq9i3zCtWdYo/SCuVm2tnZ6RLv62A6IykYPbs7Y=) 9: iDkxuZs58srqOeUdyBvDJqrsf6g.roa (hash: fvVkp516bISUUseiQSRuMvIc4e9qx8ent9yHd+ZyB3o=) 10: jLaFsD-7kv57uS82Ky9IjH2qI7s.roa (hash: GKSCCv4N+IaXAABFBigYWinS7vfCaNGsxXry11fPlQE=) 11: y1YWxB7Fy5s5YzamhDItkot32uM.roa (hash: 8TggUtk0Rbk0S6hBWI88A8FYg1Cv2yGjFHoHN2htAJQ=) 12: z9CW8ENT4ms8qSgnRvUL6_vDjPY.roa (hash: lH3Kl/j3Y/mCc0yq2REHce8PieFSAQY5Zjhu7gCcN4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:90:fd:61:91:26:14:73:c2:b2:ae:aa:62:32:2c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Jul 23 20:00:48 2026 GMT Not After : Jul 24 20:00:48 2026 GMT Subject: CN=2236bfd7d4815e3339674f68090e0d2ad26b4fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:73:23:7e:bb:25:c1:74:9f:b1:fd:44:09: 5b:88:dc:7e:89:3f:11:bb:10:93:9b:bf:b9:ed:5d: 5b:ab:5a:76:ea:1f:24:59:83:1f:c7:40:5a:6a:71: 79:8f:f8:45:f5:4b:71:c3:2e:34:80:3d:74:5d:2c: 35:03:b8:08:04:0b:73:b9:22:d3:eb:5e:eb:52:18: 1f:e5:50:d2:21:a9:40:d6:bd:0c:95:92:5c:ef:08: c2:70:ee:7e:7f:18:4b:22:ae:20:fc:e1:44:df:bb: 9e:58:b5:e6:d2:ad:17:c8:86:c6:15:7a:9c:0f:c4: 58:ae:2c:11:00:9e:78:09:b3:64:f9:b1:f0:0d:98: 59:1f:cd:e5:f5:c0:26:fe:41:16:5f:05:ec:f1:7c: c3:14:c9:97:cc:b9:39:94:f9:de:2c:c8:65:75:e8: 88:65:b4:8c:18:05:36:c6:3f:75:e2:8d:60:b6:a3: 0d:b6:2b:a5:2a:7a:b1:41:9e:48:b1:87:90:8f:dd: e3:9d:8a:a9:36:5a:db:63:be:c9:0d:f7:32:3b:26: d7:df:ef:22:d2:54:24:dd:86:e8:92:17:40:22:61: 77:3a:64:18:cc:28:13:95:05:3f:29:67:95:0c:95: 00:11:f3:2b:7a:12:cb:1e:d6:95:4a:a3:a8:ab:79: 0b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:36:BF:D7:D4:81:5E:33:39:67:4F:68:09:0E:0D:2A:D2:6B:4F:C2 X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9d:32:64:5e:31:d6:53:57:20:27:6a:fd:8f:71:63:7c:f0: 55:d0:4d:76:34:0e:da:84:50:0e:aa:5d:5b:a4:9f:2f:af:2f: 0b:c2:f2:d0:d8:ae:8e:de:86:38:a4:ff:77:55:b2:57:2d:69: 7c:7d:31:e4:f0:6f:39:91:f7:f2:9f:95:f0:c4:79:c2:a5:9b: f1:86:20:d5:61:e3:82:b3:17:75:08:b4:0f:b0:c7:b6:c1:01: eb:ab:03:3f:75:d7:84:45:6f:01:ce:46:97:8a:47:52:c9:47: c7:88:fc:a0:5d:02:f4:c7:d3:41:cc:be:e7:4e:13:93:2d:b8: 41:ee:85:cb:a0:f8:70:df:b8:dd:32:79:06:31:7d:20:75:90: 48:9e:a0:49:b6:b5:85:b3:b9:26:0f:5b:7e:34:8f:69:59:59: 41:8b:d1:d1:c1:d6:3b:f3:04:0d:ed:d4:00:30:46:50:9c:81: a4:af:00:0a:39:b8:c8:a9:ee:bc:96:0c:7a:3e:5e:76:19:8c: 08:25:2d:14:bc:84:eb:e6:d6:0b:26:da:be:31:c5:66:f0:d8: 6a:6c:eb:5c:37:66:58:ff:9c:f7:bb:d0:b7:34:cb:f4:e7:5f: b7:17:99:49:c7:34:8d:93:75:16:ac:f6:be:b3:a3:12:7a:79: 5a:bd:27:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QkP1hkSYUc8KyrqpiMizEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjYwNzIzMjAwMDQ4WhcNMjYwNzI0MjAwMDQ4WjAzMTEwLwYDVQQD EygyMjM2YmZkN2Q0ODE1ZTMzMzk2NzRmNjgwOTBlMGQyYWQyNmI0ZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjxzI367JcF0n7H9RAlbiNx+iT8R uxCTm7+57V1bq1p26h8kWYMfx0BaanF5j/hF9Utxwy40gD10XSw1A7gIBAtzuSLT 617rUhgf5VDSIalA1r0MlZJc7wjCcO5+fxhLIq4g/OFE37ueWLXm0q0XyIbGFXqc D8RYriwRAJ54CbNk+bHwDZhZH83l9cAm/kEWXwXs8XzDFMmXzLk5lPneLMhldeiI ZbSMGAU2xj914o1gtqMNtiulKnqxQZ5IsYeQj93jnYqpNlrbY77JDfcyOybX3+8i 0lQk3YbokhdAImF3OmQYzCgTlQU/KWeVDJUAEfMrehLLHtaVSqOoq3kLkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCI2v9fUgV4zOWdPaAkODSrSa0/CMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASp0yZF4x 1lNXICdq/Y9xY3zwVdBNdjQO2oRQDqpdW6SfL68vC8Ly0Niujt6GOKT/d1WyVy1p fH0x5PBvOZH38p+V8MR5wqWb8YYg1WHjgrMXdQi0D7DHtsEB66sDP3XXhEVvAc5G l4pHUslHx4j8oF0C9MfTQcy+504Tky24Qe6Fy6D4cN+43TJ5BjF9IHWQSJ6gSba1 hbO5Jg9bfjSPaVlZQYvR0cHWO/MEDe3UADBGUJyBpK8ACjm4yKnuvJYMej5edhmM CCUtFLyE6+bWCybavjHFZvDYamzrXDdmWP+c97vQtzTL9OdftxeZScc0jZN1Fqz2 vrOjEnp5Wr0nJQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:26:09 2026 by rpki-client