$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft File: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft (raw, json) Hash identifier: CnbOf/e782inrWIk8POTaR/+Z7yPp5P/EVQbUzHaF0w= Subject key identifier: 76:A5:D3:63:6E:A1:B6:02:54:34:DD:E3:D6:61:6A:5D:FC:6A:5C:13 Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 019F90FEBD0371B13A59CD1D5581A4348193 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft Manifest number: 19D0 Signing time: Thu 23 Jul 2026 22:00:41 +0000 Manifest this update: Thu 23 Jul 2026 22:00:41 +0000 Manifest next update: Fri 24 Jul 2026 22:00:41 +0000 Files and hashes: 1: BNGMVvTZ1XawSMPOVaywEKgFz8w.roa (hash: WMt9Jn62xWAvsFJt6BLgLhIXnUKvtSHXK/jsLiQ9wc0=) 2: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl (hash: 3Ha1JHFhZyK1JiSYtzNBd1sqJZJviMEoQAJVHSNTVNA=) 3: J_k_uJydXhJKkAPBLn_Xr9EpYmw.roa (hash: bMaFsCf1Hj+guhXQdkk7ZJ24ZgANPSnkOncPj3CW1pQ=) 4: S9D_ZvZP7Y2SyyqdAWt1mGxtagE.roa (hash: hH6PHrAp3gX28fWUuJtWpjV+rB9bYio8w3wI6R4XHQI=) 5: YPhzzBUAAD8W6PxdQ8Eo6J_1Xlo.roa (hash: QJjVxTN7Kd8ed1QYD92fFHesTbkRe6gyeZIi3S6D0so=) 6: Z8UyJlJrz_tPx2Lzi2wtF6sRSoY.roa (hash: pZEmU7QBOi+LmI67NMxNilqE5KRHfsee+sRCVmykeWE=) 7: gw26QBwPzQF9bT3yyu20z1tgJyk.roa (hash: iuHp19gpWORmcmt7JfC/koJtOp0jpGQxA/LoBFKsFao=) 8: mdj55pZO6nRDbpPFsXBoK-GkNU8.roa (hash: JU7FZwf7hl0KcJAATQ/by5oF+/xX9ntEZw2LOkX+3S0=) 9: n70k782e6Gxq_-Hc2YO_idjOcAs.roa (hash: 9xPDUcAeeZeb+V1tJdiN4n6+fuVQh1F2hwH4+x4MOiQ=) 10: pX4-zHrOaGGZmLrFodKOqsDRVt8.roa (hash: oNNoPaGL9tiGcsnmh6pVkfSYR8zyTqJrDL9WChZzfdA=) 11: vqLY8AJRdwBNZp1vMAKBzj7hYMk.roa (hash: QScIVVTzvA87+g4pWqcXEROo6Uo1IppOyeJM8oSgj8s=) 12: xgHR7y7J0aGtYD0R9jhr6WJbZm8.roa (hash: CHXV05nQbB5KxwYkctbAeeyJMsjXN6ysG0w+cPnzH+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:fe:bd:03:71:b1:3a:59:cd:1d:55:81:a4:34:81:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: Jul 23 22:00:41 2026 GMT Not After : Jul 24 22:00:41 2026 GMT Subject: CN=76a5d3636ea1b6025434dde3d6616a5dfc6a5c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2e:41:b3:77:37:e3:0c:8c:a0:9a:37:6b:d9: 1e:9d:54:dc:2e:25:66:e4:18:4f:69:39:30:d5:73: b7:3d:77:ec:10:eb:44:88:7a:82:48:7f:2a:bd:f1: c9:e5:04:09:c1:0c:84:bb:15:ec:12:bc:4a:8f:1a: d8:72:25:89:16:b4:70:95:04:21:be:f1:e2:22:9e: 1a:a1:29:b5:d9:ea:c0:fe:f5:94:cd:8b:4f:37:3c: 07:86:91:87:76:6e:fc:1e:0d:8e:a0:b3:7e:87:7c: e3:63:ac:70:45:d6:a3:0f:56:7f:25:c8:0f:54:d1: 33:dc:19:d2:31:e4:2e:a4:c9:83:ab:9e:e9:4b:9f: 0c:e2:5f:7a:65:8b:f6:1c:2c:c5:ef:13:25:bd:27: 96:1e:1e:03:58:ed:b8:98:33:0d:70:a7:cb:27:bd: 05:19:a1:34:7c:1d:15:1f:d6:3c:82:71:90:c3:87: fc:22:b4:b1:3a:38:6d:28:0a:8e:96:f9:7d:da:38: 7e:a1:14:54:a0:82:af:0c:b4:65:d9:79:2e:12:19: cb:c5:5e:9c:18:9c:93:97:03:00:d1:b9:65:7a:14: ec:ac:01:39:3a:fc:60:11:6a:a2:ac:77:87:4e:5c: 2b:14:3b:68:2c:d8:08:24:71:0e:4c:34:54:ed:7d: d9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A5:D3:63:6E:A1:B6:02:54:34:DD:E3:D6:61:6A:5D:FC:6A:5C:13 X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:8e:9d:37:c8:02:b3:b6:8a:47:3e:5a:f0:e0:73:b7:c0:1b: a6:96:9a:c0:d1:33:56:2e:72:83:89:c5:dd:8e:cb:d4:24:c4: 08:16:87:79:91:4f:60:cc:11:c1:15:03:02:db:27:01:b3:9e: 1b:63:05:3a:6c:cb:85:2b:c9:ae:6d:e1:45:d8:83:e8:18:f7: 6b:3a:5a:98:e5:ae:c1:63:88:25:eb:dc:6c:01:e8:20:45:7f: 11:0d:fc:2f:96:8c:39:cf:cc:51:15:0d:e1:78:5c:3e:06:e1: 31:20:21:05:c9:f2:17:7a:fe:f1:4a:d0:27:15:04:66:ec:c2: ad:d3:74:0b:9c:e3:f8:cf:b8:64:0d:9f:40:49:cb:cf:2c:29: d6:74:c8:d6:4c:70:b6:7c:1c:e1:fd:78:db:d8:5f:4d:e4:9a: 2a:8f:34:9d:34:34:07:00:7d:b8:11:6c:99:8f:d8:85:59:9d: 3d:82:e2:c4:df:0c:42:0a:3e:51:dd:c5:ca:b5:7e:23:74:fa: ce:62:46:e6:4e:2b:a9:c1:17:4b:33:25:42:ee:a8:44:c3:83: b4:eb:09:e4:0f:ff:3f:f0:e7:80:6c:c2:fd:4d:d1:46:46:66: 62:5d:65:68:b6:39:46:1a:d4:bd:e5:f6:7f:b3:e2:c1:f8:0e: f3:48:8a:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Q/r0DcbE6Wc0dVYGkNIGTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjYwNzIzMjIwMDQxWhcNMjYwNzI0MjIwMDQxWjAzMTEwLwYDVQQD Eyg3NmE1ZDM2MzZlYTFiNjAyNTQzNGRkZTNkNjYxNmE1ZGZjNmE1YzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS5Bs3c34wyMoJo3a9kenVTcLiVm 5BhPaTkw1XO3PXfsEOtEiHqCSH8qvfHJ5QQJwQyEuxXsErxKjxrYciWJFrRwlQQh vvHiIp4aoSm12erA/vWUzYtPNzwHhpGHdm78Hg2OoLN+h3zjY6xwRdajD1Z/JcgP VNEz3BnSMeQupMmDq57pS58M4l96ZYv2HCzF7xMlvSeWHh4DWO24mDMNcKfLJ70F GaE0fB0VH9Y8gnGQw4f8IrSxOjhtKAqOlvl92jh+oRRUoIKvDLRl2XkuEhnLxV6c GJyTlwMA0bllehTsrAE5OvxgEWqirHeHTlwrFDtoLNgIJHEOTDRU7X3ZOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHal02NuobYCVDTd49Zhal38alwTMB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABo6dN8gC s7aKRz5a8OBzt8AbppaawNEzVi5yg4nF3Y7L1CTECBaHeZFPYMwRwRUDAtsnAbOe G2MFOmzLhSvJrm3hRdiD6Bj3azpamOWuwWOIJevcbAHoIEV/EQ38L5aMOc/MURUN 4XhcPgbhMSAhBcnyF3r+8UrQJxUEZuzCrdN0C5zj+M+4ZA2fQEnLzywp1nTI1kxw tnwc4f1429hfTeSaKo80nTQ0BwB9uBFsmY/YhVmdPYLixN8MQgo+Ud3FyrV+I3T6 zmJG5k4rqcEXSzMlQu6oRMODtOsJ5A//P/DngGzC/U3RRkZmYl1laLY5RhrUveX2 f7PiwfgO80iKzQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:31:19 2026 by rpki-client