$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: X0fMOeHefMsIJ19NumHdoKlFwLu8Tn4WM47lis74Pcs= Subject key identifier: 52:C3:7C:0A:7A:BF:DC:7B:04:5C:5C:93:AC:27:9D:59:44:2C:29:4D Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019E1EDA44B457BC38560BE7D449FF8D59A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 1900 Signing time: Wed 13 May 2026 01:01:21 +0000 Manifest this update: Wed 13 May 2026 01:01:21 +0000 Manifest next update: Thu 14 May 2026 01:01:21 +0000 Files and hashes: 1: 8HNqyROtCPcfRiv1Sx49M6ONZYg.roa (hash: zFpstxzrvOg/IGEksLOhRDjWqdDtkzz+78pgZXkJ73Y=) 2: AKoY622JmnwKjq8nfHcGvYUdZ68.roa (hash: I1a3paZI5yF551cZ5VvbjCz2egQx07gZs4bp02j+tj8=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: eQAnAX3NqRkZVhhlT8CD49iimqdHR2bYknyHQfNKrLc=) 4: ODJrKCxhZJXL46-GyJpCGE1A_QM.roa (hash: +3sffUArpiGjIESwpid7XyaHYYYvbrxKYnkoG38bS64=) 5: SX9U68Arj-_uoekiWex6QgdNbwQ.roa (hash: joN8VUGdRybF07eLYHwoTuABQ2kur7JqOJpxlpvlHks=) 6: WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa (hash: BUe0stMaaOWFp6WiIn+aiGaAl/vpI8FjtrNGbrBCxE0=) 7: a6TUKLcrgKGMG2raYpkqJfa3RkY.roa (hash: BqBHRpbd+b4VyRTymepYE1rRKfu4yhE4JnFTaF1/sBQ=) 8: gEhVWWVbCAuop-zcWZ0zv4pjLxE.roa (hash: xokrZ815d4gYLrLWpgPe6s/SM+gm8TEbsLKu7jgKc28=) 9: gGeNvgahudXxUPNz9yBFk3kYHS4.roa (hash: 8c8Cgq9i3zCtWdYo/SCuVm2tnZ6RLv62A6IykYPbs7Y=) 10: jLaFsD-7kv57uS82Ky9IjH2qI7s.roa (hash: GKSCCv4N+IaXAABFBigYWinS7vfCaNGsxXry11fPlQE=) 11: kEPNlrKv9PFSISICuZi7jWl1rcI.roa (hash: 8hThMhId1cGvL3/GDEFCrpTOphy3jXFlFz6HT3SnBow=) 12: y1YWxB7Fy5s5YzamhDItkot32uM.roa (hash: 8TggUtk0Rbk0S6hBWI88A8FYg1Cv2yGjFHoHN2htAJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:da:44:b4:57:bc:38:56:0b:e7:d4:49:ff:8d:59:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: May 13 01:01:21 2026 GMT Not After : May 14 01:01:21 2026 GMT Subject: CN=52c37c0a7abfdc7b045c5c93ac279d59442c294d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6e:e8:10:88:3f:b7:47:eb:3c:49:53:60:5b: 88:59:d2:03:9f:07:89:77:be:51:05:d5:a3:81:e2: cd:a7:ef:c2:a3:d5:ff:5f:7e:ee:70:bb:39:8c:22: f9:fb:4c:f2:52:01:ac:55:cc:0d:74:b4:4a:6a:78: d9:cb:5b:e8:8e:37:ae:3f:1b:26:8b:2e:8b:cf:5f: 3c:20:d0:aa:13:a3:96:ba:90:0d:37:59:c2:ef:d3: a9:36:5a:bb:ea:38:c9:46:35:4b:5a:e3:71:e7:05: b6:e6:81:6b:e4:28:ba:40:71:fd:9a:eb:63:d3:cd: 6e:70:89:72:7b:85:d2:e0:06:70:d8:51:98:fa:0c: 89:33:35:80:28:3f:3c:9d:ac:00:eb:aa:21:90:d9: 77:0d:8e:19:12:cb:6c:56:40:a6:a1:74:6d:a2:5a: a7:db:e4:d6:d4:4a:bd:07:ba:c2:c6:a3:7b:1c:e5: 38:42:9a:93:09:a7:2e:e4:d9:c9:5e:b7:94:8d:06: f5:b4:f2:f9:ed:b2:0f:eb:38:c1:2e:07:f3:13:9e: 65:b5:d5:9a:af:0c:e7:be:fb:a3:ae:52:d4:53:0c: 72:a5:00:a1:10:0d:bb:20:98:d6:78:73:70:2c:e1: d9:a0:d6:6a:5e:ba:3e:47:50:fa:8f:56:93:ee:70: a5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C3:7C:0A:7A:BF:DC:7B:04:5C:5C:93:AC:27:9D:59:44:2C:29:4D X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1b:cb:e8:e9:ac:89:06:91:8a:e9:e9:47:96:4f:49:38:1f: c6:31:d4:5a:cf:6d:16:72:af:08:bc:15:56:c4:45:a5:65:34: 01:36:a0:5c:27:c3:c7:a6:1e:5b:f1:6f:7a:64:fa:9b:88:e4: 10:4f:8d:0d:da:da:24:34:50:81:0b:89:77:25:f1:d4:06:ac: 6d:d6:40:7c:ea:49:1d:32:db:8b:ee:cc:ad:b7:95:39:8f:3d: 9e:64:0f:0d:f8:d8:b6:15:fe:91:00:74:8e:ba:43:13:0d:72: c6:a9:16:0a:5c:3f:28:b8:10:fb:31:1c:69:f9:1b:f0:e7:dc: 48:12:9d:16:b8:b9:b4:69:be:6d:4a:ca:6c:41:5a:76:13:48: f4:2d:6a:2e:6f:48:e6:ce:48:eb:a2:8c:d4:1b:cd:17:08:57: 24:3e:61:a7:0b:38:bb:92:74:9f:55:a9:b6:a9:d8:74:bf:1e: f0:50:7b:e8:6e:77:b3:ed:47:47:3e:9b:ac:cf:bf:3b:98:21: 5e:15:f0:00:25:3b:24:53:26:4c:4d:5f:7e:f3:32:c0:45:64: 55:74:24:a7:10:0a:a0:b0:39:e1:2e:a6:74:a9:da:1f:98:67: c1:de:3e:4e:60:97:51:2d:63:44:ad:fe:3d:6b:fa:5a:7f:25: d5:f9:f4:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4e2kS0V7w4Vgvn1En/jVmpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjYwNTEzMDEwMTIxWhcNMjYwNTE0MDEwMTIxWjAzMTEwLwYDVQQD Eyg1MmMzN2MwYTdhYmZkYzdiMDQ1YzVjOTNhYzI3OWQ1OTQ0MmMyOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3W7oEIg/t0frPElTYFuIWdIDnweJ d75RBdWjgeLNp+/Co9X/X37ucLs5jCL5+0zyUgGsVcwNdLRKanjZy1vojjeuPxsm iy6Lz188INCqE6OWupANN1nC79OpNlq76jjJRjVLWuNx5wW25oFr5Ci6QHH9mutj 081ucIlye4XS4AZw2FGY+gyJMzWAKD88nawA66ohkNl3DY4ZEstsVkCmoXRtolqn 2+TW1Eq9B7rCxqN7HOU4QpqTCacu5NnJXreUjQb1tPL57bIP6zjBLgfzE55ltdWa rwznvvujrlLUUwxypQChEA27IJjWeHNwLOHZoNZqXro+R1D6j1aT7nCljwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLDfAp6v9x7BFxck6wnnVlELClNMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBvL6Oms iQaRiunpR5ZPSTgfxjHUWs9tFnKvCLwVVsRFpWU0ATagXCfDx6YeW/FvemT6m4jk EE+NDdraJDRQgQuJdyXx1AasbdZAfOpJHTLbi+7MrbeVOY89nmQPDfjYthX+kQB0 jrpDEw1yxqkWClw/KLgQ+zEcafkb8OfcSBKdFri5tGm+bUrKbEFadhNI9C1qLm9I 5s5I66KM1BvNFwhXJD5hpws4u5J0n1WptqnYdL8e8FB76G53s+1HRz6brM+/O5gh XhXwACU7JFMmTE1ffvMywEVkVXQkpxAKoLA54S6mdKnaH5hnwd4+TmCXUS1jRK3+ PWv6Wn8l1fn0pg== -----END CERTIFICATE-----Generated at Wed May 13 05:20:54 2026 by rpki-client