$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft File: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft (raw, json) Hash identifier: OT/OAethrFK/PERBSMGXvjMITiOip5yPPzkMThGqDeg= Subject key identifier: 1E:21:16:2A:9B:1E:3C:F1:9C:57:5C:57:32:C4:10:B7:39:8A:8A:E8 Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 01A103C983E5B98FA4AFA2BBF8D3B50D5205 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft Manifest number: 1A90 Signing time: Sat 03 Oct 2026 22:01:40 +0000 Manifest this update: Sat 03 Oct 2026 22:01:40 +0000 Manifest next update: Sun 04 Oct 2026 22:01:40 +0000 Files and hashes: 1: BNGMVvTZ1XawSMPOVaywEKgFz8w.roa (hash: WMt9Jn62xWAvsFJt6BLgLhIXnUKvtSHXK/jsLiQ9wc0=) 2: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl (hash: uadctHNzNdij+0NQScxUK1y2ruUUMWpL6cIiDLyO2DA=) 3: J_k_uJydXhJKkAPBLn_Xr9EpYmw.roa (hash: bMaFsCf1Hj+guhXQdkk7ZJ24ZgANPSnkOncPj3CW1pQ=) 4: S9D_ZvZP7Y2SyyqdAWt1mGxtagE.roa (hash: hH6PHrAp3gX28fWUuJtWpjV+rB9bYio8w3wI6R4XHQI=) 5: YPhzzBUAAD8W6PxdQ8Eo6J_1Xlo.roa (hash: QJjVxTN7Kd8ed1QYD92fFHesTbkRe6gyeZIi3S6D0so=) 6: Z8UyJlJrz_tPx2Lzi2wtF6sRSoY.roa (hash: pZEmU7QBOi+LmI67NMxNilqE5KRHfsee+sRCVmykeWE=) 7: gw26QBwPzQF9bT3yyu20z1tgJyk.roa (hash: iuHp19gpWORmcmt7JfC/koJtOp0jpGQxA/LoBFKsFao=) 8: mdj55pZO6nRDbpPFsXBoK-GkNU8.roa (hash: JU7FZwf7hl0KcJAATQ/by5oF+/xX9ntEZw2LOkX+3S0=) 9: n70k782e6Gxq_-Hc2YO_idjOcAs.roa (hash: 9xPDUcAeeZeb+V1tJdiN4n6+fuVQh1F2hwH4+x4MOiQ=) 10: pX4-zHrOaGGZmLrFodKOqsDRVt8.roa (hash: oNNoPaGL9tiGcsnmh6pVkfSYR8zyTqJrDL9WChZzfdA=) 11: vqLY8AJRdwBNZp1vMAKBzj7hYMk.roa (hash: QScIVVTzvA87+g4pWqcXEROo6Uo1IppOyeJM8oSgj8s=) 12: xgHR7y7J0aGtYD0R9jhr6WJbZm8.roa (hash: CHXV05nQbB5KxwYkctbAeeyJMsjXN6ysG0w+cPnzH+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:03:c9:83:e5:b9:8f:a4:af:a2:bb:f8:d3:b5:0d:52:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: Oct 3 22:01:40 2026 GMT Not After : Oct 4 22:01:40 2026 GMT Subject: CN=1e21162a9b1e3cf19c575c5732c410b7398a8ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:0d:66:7b:bc:64:ad:3c:8d:b0:19:a4:ea: c1:c3:68:a7:30:e6:01:50:b7:84:ce:28:f4:84:ac: ae:0b:bb:3f:23:58:03:1a:d9:aa:b6:aa:6e:73:e6: 49:11:f2:6a:a6:ef:45:71:ea:92:61:b0:2f:90:8b: ae:c4:e5:53:cb:db:48:e4:39:b8:9f:b6:b8:3f:7e: 02:97:10:a4:24:c8:8d:64:4e:ff:66:e7:32:94:63: e5:4f:15:de:ec:87:f9:5b:35:0f:9b:3d:85:d7:1f: a1:63:51:b8:e7:fc:48:ad:b6:d9:76:4c:3e:20:1d: 5d:a0:9d:c3:88:02:b8:b7:0c:f6:ef:14:97:56:db: 90:6d:d2:aa:42:69:20:80:25:35:d5:40:61:c5:41: 04:17:a5:2b:82:b1:fe:dc:8e:0c:94:0d:b8:e1:4e: 15:18:02:d1:b5:85:5e:28:cf:b9:c0:f9:af:1d:40: 23:27:7a:e9:33:41:18:9d:a2:cf:2a:fb:a7:6f:a6: 2f:94:28:ad:f6:11:02:e7:14:fc:c9:59:42:d9:ec: f5:3c:6f:b7:ba:39:65:60:04:c6:b8:14:a9:b4:4b: 2c:83:34:d3:75:2e:d1:ee:ad:13:f4:a3:fa:19:fa: d1:23:9c:4e:dd:73:5e:36:80:9d:1b:87:97:65:0b: 48:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:21:16:2A:9B:1E:3C:F1:9C:57:5C:57:32:C4:10:B7:39:8A:8A:E8 X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:26:96:f0:ba:b7:b2:ee:92:82:7c:6b:40:5a:73:42:cf:09: de:a5:a5:61:79:a5:be:b6:d0:14:d6:c4:99:9c:7b:09:fe:13: c2:ac:d3:07:e8:64:d2:1a:98:1c:a2:d4:b7:4d:8a:b6:03:c4: e7:d2:c0:a4:97:d0:c7:36:4a:8c:37:5b:fd:7a:cd:59:a1:8e: 04:bd:0f:0b:77:aa:62:a7:f7:87:07:46:5f:ab:d3:23:e3:60: a0:66:15:4c:11:06:e0:0a:bb:80:17:29:97:b9:32:9f:db:22: 31:e4:98:4a:9c:4b:de:71:6f:fb:cf:c3:9a:88:e8:18:4e:cb: bb:59:80:8b:9d:cf:1a:0f:46:9f:85:3e:52:17:ce:ef:60:34: 82:fe:5d:86:f8:0c:32:d8:ee:80:0f:40:f4:24:60:f1:f1:18: f9:f7:0c:04:1b:57:28:7f:fa:3c:8a:c9:39:28:97:7f:02:78: 49:02:ca:d7:26:14:a6:a2:49:47:f8:07:ba:19:e2:7c:66:02: 18:7e:c1:b7:91:6a:5c:48:98:db:ba:30:d7:44:e6:10:93:1d: 71:d5:d3:8e:4a:23:a3:c9:09:ca:a7:4b:2d:f3:96:5c:92:eb: 09:f6:97:68:6d:08:33:25:74:57:4a:4c:01:60:9e:6d:27:fb: 12:13:c8:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEDyYPluY+kr6K7+NO1DVIFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjYxMDAzMjIwMTQwWhcNMjYxMDA0MjIwMTQwWjAzMTEwLwYDVQQD EygxZTIxMTYyYTliMWUzY2YxOWM1NzVjNTczMmM0MTBiNzM5OGE4YWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoYNZnu8ZK08jbAZpOrBw2inMOYB ULeEzij0hKyuC7s/I1gDGtmqtqpuc+ZJEfJqpu9FceqSYbAvkIuuxOVTy9tI5Dm4 n7a4P34ClxCkJMiNZE7/ZucylGPlTxXe7If5WzUPmz2F1x+hY1G45/xIrbbZdkw+ IB1doJ3DiAK4twz27xSXVtuQbdKqQmkggCU11UBhxUEEF6UrgrH+3I4MlA244U4V GALRtYVeKM+5wPmvHUAjJ3rpM0EYnaLPKvunb6YvlCit9hEC5xT8yVlC2ez1PG+3 ujllYATGuBSptEssgzTTdS7R7q0T9KP6GfrRI5xO3XNeNoCdG4eXZQtIIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4hFiqbHjzxnFdcVzLEELc5ioroMB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiaW8Lq3 su6SgnxrQFpzQs8J3qWlYXmlvrbQFNbEmZx7Cf4TwqzTB+hk0hqYHKLUt02KtgPE 59LApJfQxzZKjDdb/XrNWaGOBL0PC3eqYqf3hwdGX6vTI+NgoGYVTBEG4Aq7gBcp l7kyn9siMeSYSpxL3nFv+8/DmojoGE7Lu1mAi53PGg9Gn4U+UhfO72A0gv5dhvgM MtjugA9A9CRg8fEY+fcMBBtXKH/6PIrJOSiXfwJ4SQLK1yYUpqJJR/gHuhnifGYC GH7Bt5FqXEiY27ow10TmEJMdcdXTjkojo8kJyqdLLfOWXJLrCfaXaG0IMyV0V0pM AWCebSf7EhPI6g== -----END CERTIFICATE-----Generated at Sun Oct 4 02:03:38 2026 by rpki-client