$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: oOsuTo1mgyUKeqFUY2Z5fTX7D92G7S3JG1YmAML1BIY= Subject key identifier: C6:10:78:FB:32:9A:BC:30:77:18:13:07:47:6A:29:9E:34:BD:04:97 Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 01A0D192E55D5C8C0CF1C166963E05EB491A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 1A6A Signing time: Thu 24 Sep 2026 04:01:00 +0000 Manifest this update: Thu 24 Sep 2026 04:01:00 +0000 Manifest next update: Fri 25 Sep 2026 04:01:00 +0000 Files and hashes: 1: 8HNqyROtCPcfRiv1Sx49M6ONZYg.roa (hash: zFpstxzrvOg/IGEksLOhRDjWqdDtkzz+78pgZXkJ73Y=) 2: AIs-v4MTJP3X4O8YQJnAripw4vs.roa (hash: kHs1izlvzimCPZa6IfF/iyB6cbHIdll4P1d4fiptxlM=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: M5Mdh8i4I/t2SLJNl52wz4gfQPrSM0Nd/n0/aHTIFIg=) 4: ODJrKCxhZJXL46-GyJpCGE1A_QM.roa (hash: +3sffUArpiGjIESwpid7XyaHYYYvbrxKYnkoG38bS64=) 5: SX9U68Arj-_uoekiWex6QgdNbwQ.roa (hash: joN8VUGdRybF07eLYHwoTuABQ2kur7JqOJpxlpvlHks=) 6: WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa (hash: BUe0stMaaOWFp6WiIn+aiGaAl/vpI8FjtrNGbrBCxE0=) 7: gEhVWWVbCAuop-zcWZ0zv4pjLxE.roa (hash: xokrZ815d4gYLrLWpgPe6s/SM+gm8TEbsLKu7jgKc28=) 8: gGeNvgahudXxUPNz9yBFk3kYHS4.roa (hash: 8c8Cgq9i3zCtWdYo/SCuVm2tnZ6RLv62A6IykYPbs7Y=) 9: jLaFsD-7kv57uS82Ky9IjH2qI7s.roa (hash: GKSCCv4N+IaXAABFBigYWinS7vfCaNGsxXry11fPlQE=) 10: lyIOq6TA50RExwMG01O0x9KQ_K8.roa (hash: upG12PbzyM39hFjrEWs8ykSga/yXg/EqgsBSnOyEtfg=) 11: y1YWxB7Fy5s5YzamhDItkot32uM.roa (hash: 8TggUtk0Rbk0S6hBWI88A8FYg1Cv2yGjFHoHN2htAJQ=) 12: z9CW8ENT4ms8qSgnRvUL6_vDjPY.roa (hash: lH3Kl/j3Y/mCc0yq2REHce8PieFSAQY5Zjhu7gCcN4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 04:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d1:92:e5:5d:5c:8c:0c:f1:c1:66:96:3e:05:eb:49:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Sep 24 04:01:00 2026 GMT Not After : Sep 25 04:01:00 2026 GMT Subject: CN=c61078fb329abc3077181307476a299e34bd0497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fb:0f:8c:e2:e1:92:ff:af:63:8d:cd:b3:ed: fd:5e:d2:17:33:e2:29:62:07:f5:0e:08:26:4c:0d: b5:4a:8d:b0:2b:4a:af:2c:45:26:ec:47:bf:70:45: da:9a:79:78:99:69:e1:c1:48:8e:aa:6d:bc:77:28: 14:1a:73:22:90:c1:2d:24:5d:e4:f5:26:c7:d2:91: 9b:2e:a3:01:c8:2f:8c:0e:cd:d7:b7:61:16:e0:9a: 88:3d:22:03:2f:97:d5:c8:69:ec:8e:80:ac:62:2b: 84:ab:13:d1:2e:11:d6:95:73:62:3d:42:6e:96:61: 63:5b:1d:23:5a:b8:bf:f7:91:9a:0b:a5:07:c2:29: ac:0c:be:90:65:11:72:c6:8c:7c:77:a5:ba:91:99: b2:73:b7:81:f9:70:11:4c:60:cb:6d:64:9e:f5:48: 8f:19:f6:96:25:26:3f:5f:c9:66:20:12:1e:27:e2: c0:28:05:d4:42:9f:55:f6:29:9d:19:58:06:fe:c4: a3:29:87:45:ff:3a:b5:83:9a:ee:eb:ed:14:e0:e5: b6:e0:8c:e4:05:62:0e:0c:55:68:8b:c0:8c:ac:da: 60:e8:fd:aa:c0:eb:67:74:f6:07:b3:f2:4a:77:db: eb:51:35:7b:97:79:8e:2a:b6:ba:d4:93:0a:bf:13: 37:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:10:78:FB:32:9A:BC:30:77:18:13:07:47:6A:29:9E:34:BD:04:97 X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:7d:c2:56:fa:25:49:40:3f:9b:54:4d:45:a3:43:7f:62:89: 13:26:2f:a1:9d:4e:2e:50:e1:db:a6:f3:c1:73:1c:10:6b:0e: e9:2c:dd:3f:31:80:4b:4c:06:63:82:df:ff:a9:84:2a:e5:fc: cc:69:a9:1c:b6:3c:01:7e:3a:2e:0e:4f:68:6b:9c:b5:a2:14: cd:93:6f:55:86:4c:da:9e:3f:fc:72:6d:4e:83:37:09:86:76: ff:77:1e:8d:04:fc:35:5c:23:64:0a:b0:99:ad:9e:d7:91:94: 6c:cf:bd:40:31:19:fb:9e:5c:e2:14:f7:b7:19:9d:a5:0a:7a: 61:2a:28:f1:98:d0:dc:70:11:8e:f4:90:1c:42:eb:38:4c:4a: 18:8f:cd:53:bb:13:1e:31:5d:75:f4:c2:fe:8c:24:44:c6:05: e3:dd:b3:aa:a4:30:3c:27:e7:63:c5:bd:be:be:5c:57:06:73: cd:79:c9:7a:82:29:01:8c:50:b2:96:12:95:ff:50:cf:20:de: 9d:1a:41:77:50:22:0d:87:1c:d5:e2:a6:1b:40:38:31:01:94: 0e:b2:0b:af:a9:f5:ec:24:57:47:81:1e:92:01:ad:6e:f0:56: 5d:48:02:33:ca:fa:40:f8:2a:2b:08:46:35:c1:96:93:52:30: 19:89:7b:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDRkuVdXIwM8cFmlj4F60kaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjYwOTI0MDQwMTAwWhcNMjYwOTI1MDQwMTAwWjAzMTEwLwYDVQQD EyhjNjEwNzhmYjMyOWFiYzMwNzcxODEzMDc0NzZhMjk5ZTM0YmQwNDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/sPjOLhkv+vY43Ns+39XtIXM+Ip Ygf1DggmTA21So2wK0qvLEUm7Ee/cEXamnl4mWnhwUiOqm28dygUGnMikMEtJF3k 9SbH0pGbLqMByC+MDs3Xt2EW4JqIPSIDL5fVyGnsjoCsYiuEqxPRLhHWlXNiPUJu lmFjWx0jWri/95GaC6UHwimsDL6QZRFyxox8d6W6kZmyc7eB+XARTGDLbWSe9UiP GfaWJSY/X8lmIBIeJ+LAKAXUQp9V9imdGVgG/sSjKYdF/zq1g5ru6+0U4OW24Izk BWIODFVoi8CMrNpg6P2qwOtndPYHs/JKd9vrUTV7l3mOKra61JMKvxM3twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYQePsymrwwdxgTB0dqKZ40vQSXMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVH3CVvol SUA/m1RNRaNDf2KJEyYvoZ1OLlDh26bzwXMcEGsO6SzdPzGAS0wGY4Lf/6mEKuX8 zGmpHLY8AX46Lg5PaGuctaIUzZNvVYZM2p4//HJtToM3CYZ2/3cejQT8NVwjZAqw ma2e15GUbM+9QDEZ+55c4hT3txmdpQp6YSoo8ZjQ3HARjvSQHELrOExKGI/NU7sT HjFddfTC/owkRMYF492zqqQwPCfnY8W9vr5cVwZzzXnJeoIpAYxQspYSlf9QzyDe nRpBd1AiDYcc1eKmG0A4MQGUDrILr6n17CRXR4EekgGtbvBWXUgCM8r6QPgqKwhG NcGWk1IwGYl7eg== -----END CERTIFICATE-----Generated at Thu Sep 24 13:48:53 2026 by rpki-client