$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft File: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft (raw, json) Hash identifier: YrlY7mZ2VeVDM8EocBi/xhX7OaMkSiXdYQyPkXhFZ9o= Subject key identifier: A2:5A:9B:76:FC:0C:EB:B7:44:17:0A:F6:5C:AE:A6:E2:54:E0:29:E5 Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 019D2703937D4F468BE97DBD33FF7B0BEE26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft Manifest number: 1890 Signing time: Wed 25 Mar 2026 22:00:38 +0000 Manifest this update: Wed 25 Mar 2026 22:00:38 +0000 Manifest next update: Thu 26 Mar 2026 22:00:38 +0000 Files and hashes: 1: BNGMVvTZ1XawSMPOVaywEKgFz8w.roa (hash: WMt9Jn62xWAvsFJt6BLgLhIXnUKvtSHXK/jsLiQ9wc0=) 2: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl (hash: WqamE1GRM5//lhBWgyBwdx1KCdRhqe69kLgjNI/mZwQ=) 3: J_k_uJydXhJKkAPBLn_Xr9EpYmw.roa (hash: bMaFsCf1Hj+guhXQdkk7ZJ24ZgANPSnkOncPj3CW1pQ=) 4: S9D_ZvZP7Y2SyyqdAWt1mGxtagE.roa (hash: hH6PHrAp3gX28fWUuJtWpjV+rB9bYio8w3wI6R4XHQI=) 5: YPhzzBUAAD8W6PxdQ8Eo6J_1Xlo.roa (hash: QJjVxTN7Kd8ed1QYD92fFHesTbkRe6gyeZIi3S6D0so=) 6: Z8UyJlJrz_tPx2Lzi2wtF6sRSoY.roa (hash: pZEmU7QBOi+LmI67NMxNilqE5KRHfsee+sRCVmykeWE=) 7: gw26QBwPzQF9bT3yyu20z1tgJyk.roa (hash: iuHp19gpWORmcmt7JfC/koJtOp0jpGQxA/LoBFKsFao=) 8: mdj55pZO6nRDbpPFsXBoK-GkNU8.roa (hash: JU7FZwf7hl0KcJAATQ/by5oF+/xX9ntEZw2LOkX+3S0=) 9: n70k782e6Gxq_-Hc2YO_idjOcAs.roa (hash: 9xPDUcAeeZeb+V1tJdiN4n6+fuVQh1F2hwH4+x4MOiQ=) 10: pX4-zHrOaGGZmLrFodKOqsDRVt8.roa (hash: oNNoPaGL9tiGcsnmh6pVkfSYR8zyTqJrDL9WChZzfdA=) 11: vqLY8AJRdwBNZp1vMAKBzj7hYMk.roa (hash: QScIVVTzvA87+g4pWqcXEROo6Uo1IppOyeJM8oSgj8s=) 12: xgHR7y7J0aGtYD0R9jhr6WJbZm8.roa (hash: CHXV05nQbB5KxwYkctbAeeyJMsjXN6ysG0w+cPnzH+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:03:93:7d:4f:46:8b:e9:7d:bd:33:ff:7b:0b:ee:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: Mar 25 22:00:38 2026 GMT Not After : Mar 26 22:00:38 2026 GMT Subject: CN=a25a9b76fc0cebb744170af65caea6e254e029e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:71:da:d1:34:0a:4e:7b:34:3b:0f:1d:82:79: d8:1b:ab:cd:11:55:4f:51:fd:7c:68:aa:42:2b:93: 42:aa:5d:f7:20:64:6c:6a:23:d2:11:14:5a:63:7b: 44:ff:f5:22:1a:93:29:0d:03:13:79:f4:c5:a1:4d: 48:ea:e5:45:0e:df:5c:70:60:ea:8f:32:20:47:e3: 39:f6:9b:1f:29:a4:0c:e5:9e:f1:41:e9:7b:14:f1: fa:f0:81:10:27:c2:13:65:fb:54:ee:fd:d2:f6:0f: 0a:df:d3:a1:ae:65:4d:0c:e2:d0:66:58:64:b7:04: 18:cb:18:15:5e:e4:ae:94:a8:44:86:be:94:c7:03: b6:9d:10:8d:c3:00:a2:c3:19:b2:8e:3e:0a:77:a9: 16:9e:15:04:4b:d6:47:02:c9:1d:b0:14:f8:4a:c2: cc:17:64:15:c9:f1:af:ba:30:4a:1b:51:8e:e4:26: 79:1f:ca:17:e7:c0:03:dd:a5:d3:39:45:31:82:9e: 29:9b:59:0c:01:bc:01:9d:f3:70:13:64:87:a3:19: 41:ed:cf:bb:3a:49:5a:47:43:82:9c:31:ad:7c:06: 6b:bd:48:71:12:58:74:b1:ff:f9:c5:41:54:b6:a6: e3:a9:ec:4b:8b:57:eb:0f:59:5b:46:c4:5c:0f:fb: 6f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5A:9B:76:FC:0C:EB:B7:44:17:0A:F6:5C:AE:A6:E2:54:E0:29:E5 X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:64:d3:b4:c0:48:ac:b2:66:aa:bd:ef:78:eb:4d:d0:40:59: a3:48:9a:d9:b0:87:08:9b:67:3a:b4:43:8b:35:b5:e2:72:32: 43:6e:a6:e4:ec:59:21:64:3e:8a:f6:97:09:07:85:ba:07:a2: af:e1:07:86:7c:41:fc:0c:88:bf:dc:e7:88:9f:02:cf:d2:2c: 66:11:35:21:38:a3:1b:46:10:e5:cb:05:3a:58:a5:ed:7b:9d: e6:37:02:ee:43:ad:4f:29:2f:9c:d9:bf:3e:43:e9:8a:b2:03: fa:1d:d8:3c:2e:f7:35:32:89:82:38:55:00:6c:a3:50:d6:c2: f0:a5:91:fc:99:9d:c7:d9:db:05:58:21:df:de:07:25:e5:fc: 40:b5:2f:b5:0e:d4:d6:2b:09:da:33:a2:99:e4:27:34:57:9d: 92:d8:84:53:4b:f2:f9:13:f5:3b:65:46:d6:81:22:80:48:9f: cc:92:59:e4:93:8b:cd:9d:c1:f8:d4:b2:1c:cd:a1:e7:75:07: cb:2d:54:b5:a6:f2:fe:47:a0:19:71:80:da:de:f1:d7:56:8b: 2b:5f:3f:cd:62:ee:b4:30:dd:77:24:bd:8d:89:b6:0a:c2:30: a3:51:c6:75:90:b5:05:95:e1:bc:b3:d6:2f:c3:3d:b6:e0:1a: e5:d4:39:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nA5N9T0aL6X29M/97C+4mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjYwMzI1MjIwMDM4WhcNMjYwMzI2MjIwMDM4WjAzMTEwLwYDVQQD EyhhMjVhOWI3NmZjMGNlYmI3NDQxNzBhZjY1Y2FlYTZlMjU0ZTAyOWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3Ha0TQKTns0Ow8dgnnYG6vNEVVP Uf18aKpCK5NCql33IGRsaiPSERRaY3tE//UiGpMpDQMTefTFoU1I6uVFDt9ccGDq jzIgR+M59psfKaQM5Z7xQel7FPH68IEQJ8ITZftU7v3S9g8K39OhrmVNDOLQZlhk twQYyxgVXuSulKhEhr6UxwO2nRCNwwCiwxmyjj4Kd6kWnhUES9ZHAskdsBT4SsLM F2QVyfGvujBKG1GO5CZ5H8oX58AD3aXTOUUxgp4pm1kMAbwBnfNwE2SHoxlB7c+7 OklaR0OCnDGtfAZrvUhxElh0sf/5xUFUtqbjqexLi1frD1lbRsRcD/tvvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJam3b8DOu3RBcK9lyupuJU4CnlMB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGTTtMBI rLJmqr3veOtN0EBZo0ia2bCHCJtnOrRDizW14nIyQ26m5OxZIWQ+ivaXCQeFugei r+EHhnxB/AyIv9zniJ8Cz9IsZhE1ITijG0YQ5csFOlil7Xud5jcC7kOtTykvnNm/ PkPpirID+h3YPC73NTKJgjhVAGyjUNbC8KWR/Jmdx9nbBVgh394HJeX8QLUvtQ7U 1isJ2jOimeQnNFedktiEU0vy+RP1O2VG1oEigEifzJJZ5JOLzZ3B+NSyHM2h53UH yy1Utaby/kegGXGA2t7x11aLK18/zWLutDDddyS9jYm2CsIwo1HGdZC1BZXhvLPW L8M9tuAa5dQ5Kg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:15 2026 by rpki-client