$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft File: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft (raw, json) Hash identifier: A6T9um/t5JhpTYS/YDkEiS2ivXaB/bsptoiapd2iEbA= Subject key identifier: D9:C6:F4:7C:DF:57:3C:70:84:38:2B:11:59:2B:B5:19:09:3C:99:A3 Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 019E1E34D5856451806BA8A82765B398FEC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft Manifest number: 1910 Signing time: Tue 12 May 2026 22:00:39 +0000 Manifest this update: Tue 12 May 2026 22:00:39 +0000 Manifest next update: Wed 13 May 2026 22:00:39 +0000 Files and hashes: 1: BNGMVvTZ1XawSMPOVaywEKgFz8w.roa (hash: WMt9Jn62xWAvsFJt6BLgLhIXnUKvtSHXK/jsLiQ9wc0=) 2: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl (hash: zEbS7xVa+uqQutV5JS7jV5pNMokQC9eeznRDSraJyxk=) 3: J_k_uJydXhJKkAPBLn_Xr9EpYmw.roa (hash: bMaFsCf1Hj+guhXQdkk7ZJ24ZgANPSnkOncPj3CW1pQ=) 4: S9D_ZvZP7Y2SyyqdAWt1mGxtagE.roa (hash: hH6PHrAp3gX28fWUuJtWpjV+rB9bYio8w3wI6R4XHQI=) 5: YPhzzBUAAD8W6PxdQ8Eo6J_1Xlo.roa (hash: QJjVxTN7Kd8ed1QYD92fFHesTbkRe6gyeZIi3S6D0so=) 6: Z8UyJlJrz_tPx2Lzi2wtF6sRSoY.roa (hash: pZEmU7QBOi+LmI67NMxNilqE5KRHfsee+sRCVmykeWE=) 7: gw26QBwPzQF9bT3yyu20z1tgJyk.roa (hash: iuHp19gpWORmcmt7JfC/koJtOp0jpGQxA/LoBFKsFao=) 8: mdj55pZO6nRDbpPFsXBoK-GkNU8.roa (hash: JU7FZwf7hl0KcJAATQ/by5oF+/xX9ntEZw2LOkX+3S0=) 9: n70k782e6Gxq_-Hc2YO_idjOcAs.roa (hash: 9xPDUcAeeZeb+V1tJdiN4n6+fuVQh1F2hwH4+x4MOiQ=) 10: pX4-zHrOaGGZmLrFodKOqsDRVt8.roa (hash: oNNoPaGL9tiGcsnmh6pVkfSYR8zyTqJrDL9WChZzfdA=) 11: vqLY8AJRdwBNZp1vMAKBzj7hYMk.roa (hash: QScIVVTzvA87+g4pWqcXEROo6Uo1IppOyeJM8oSgj8s=) 12: xgHR7y7J0aGtYD0R9jhr6WJbZm8.roa (hash: CHXV05nQbB5KxwYkctbAeeyJMsjXN6ysG0w+cPnzH+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 22:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:34:d5:85:64:51:80:6b:a8:a8:27:65:b3:98:fe:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: May 12 22:00:39 2026 GMT Not After : May 13 22:00:39 2026 GMT Subject: CN=d9c6f47cdf573c7084382b11592bb519093c99a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d6:02:14:fb:e7:86:d3:6d:15:8b:98:31:b7: ef:c3:2f:ad:39:6b:87:de:b4:6c:41:4b:e0:05:fa: 6a:65:3f:71:b5:d6:a8:fa:21:91:2d:46:da:ab:86: cc:23:08:01:e8:36:04:10:72:c5:58:9e:a9:3d:d7: 53:22:b6:4c:3c:43:fb:b8:a9:4b:0b:0a:59:52:c9: 22:9a:48:85:d0:99:fb:af:e4:13:34:be:c6:5f:8a: 09:a2:ee:e8:2e:2d:c3:e0:84:5e:b4:02:ac:65:5b: ac:76:24:f7:99:2a:ed:c7:09:6d:eb:be:a4:66:c6: f2:0e:5f:5a:73:58:3d:06:e8:f7:9b:79:c8:fd:1a: ca:29:20:f6:18:8d:37:97:c5:31:4d:cf:82:91:08: c7:5f:96:00:57:6a:0f:81:56:31:36:80:5f:b5:54: b3:f4:68:aa:2a:fd:c0:13:c1:23:18:80:0e:b6:70: 8d:1c:c5:05:2e:0b:72:01:70:9c:a3:57:a3:b1:1a: be:0a:bb:93:61:84:fa:99:9a:fe:ef:3c:8f:14:4b: 35:cf:ef:92:a2:98:51:ed:ab:08:49:8c:33:de:af: 34:e4:71:77:62:d5:63:a0:e9:eb:8b:79:2a:db:4a: a7:9f:c1:71:86:70:f0:d0:1d:dd:2c:39:32:f3:0f: 19:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C6:F4:7C:DF:57:3C:70:84:38:2B:11:59:2B:B5:19:09:3C:99:A3 X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f2:74:04:5d:58:18:6b:43:46:96:13:45:6d:4f:81:e3:c1: ef:9c:66:dd:c0:93:55:2f:2c:c5:07:cb:2d:13:fb:bb:ab:5a: a7:c1:e3:99:89:85:b1:37:52:85:63:a6:5d:00:dd:ac:57:2f: 45:b5:2d:9b:f7:ba:8e:e9:a8:8d:a0:63:01:b2:48:e8:3e:03: 3a:d0:fe:1f:79:26:28:78:fa:6d:39:93:ee:b6:41:bb:a5:2e: c9:5f:4a:06:9f:ca:2d:db:3d:88:2f:f1:c1:1e:1b:41:2a:e8: 7b:27:64:fc:0d:bf:7e:e7:5c:45:0a:57:4a:22:66:69:ce:e0: 72:ee:00:19:a4:49:ed:c0:6b:54:b4:c5:62:6c:05:8c:4a:bb: f4:22:6c:44:87:0f:e5:8d:22:1d:ca:41:04:64:e2:4d:57:82: 80:a8:8b:5d:ec:2a:21:d1:ad:29:c7:52:c1:a0:18:97:78:de: 6a:8e:81:1b:ec:01:9a:61:7b:cc:ab:08:4f:a0:35:26:91:eb: d7:a4:cf:d2:e4:a4:cd:77:e6:d2:59:f2:dc:72:ec:7f:78:7a: 1d:93:d3:a8:d2:9f:48:78:7f:72:73:bd:e9:b4:d0:f1:fd:36: 3b:f4:0f:d5:d4:51:b6:1e:a7:32:54:da:93:1b:63:6e:34:e1: 58:01:77:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eNNWFZFGAa6ioJ2WzmP7IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjYwNTEyMjIwMDM5WhcNMjYwNTEzMjIwMDM5WjAzMTEwLwYDVQQD EyhkOWM2ZjQ3Y2RmNTczYzcwODQzODJiMTE1OTJiYjUxOTA5M2M5OWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdYCFPvnhtNtFYuYMbfvwy+tOWuH 3rRsQUvgBfpqZT9xtdao+iGRLUbaq4bMIwgB6DYEEHLFWJ6pPddTIrZMPEP7uKlL CwpZUskimkiF0Jn7r+QTNL7GX4oJou7oLi3D4IRetAKsZVusdiT3mSrtxwlt676k ZsbyDl9ac1g9Buj3m3nI/RrKKSD2GI03l8UxTc+CkQjHX5YAV2oPgVYxNoBftVSz 9GiqKv3AE8EjGIAOtnCNHMUFLgtyAXCco1ejsRq+CruTYYT6mZr+7zyPFEs1z++S ophR7asISYwz3q805HF3YtVjoOnri3kq20qnn8FxhnDw0B3dLDky8w8ZWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnG9HzfVzxwhDgrEVkrtRkJPJmjMB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvJ0BF1Y GGtDRpYTRW1PgePB75xm3cCTVS8sxQfLLRP7u6tap8HjmYmFsTdShWOmXQDdrFcv RbUtm/e6jumojaBjAbJI6D4DOtD+H3kmKHj6bTmT7rZBu6UuyV9KBp/KLds9iC/x wR4bQSroeydk/A2/fudcRQpXSiJmac7gcu4AGaRJ7cBrVLTFYmwFjEq79CJsRIcP 5Y0iHcpBBGTiTVeCgKiLXewqIdGtKcdSwaAYl3jeao6BG+wBmmF7zKsIT6A1JpHr 16TP0uSkzXfm0lny3HLsf3h6HZPTqNKfSHh/cnO96bTQ8f02O/QP1dRRth6nMlTa kxtjbjThWAF3aw== -----END CERTIFICATE-----Generated at Wed May 13 06:28:11 2026 by rpki-client