$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: gJarviHH+wA6snuFc+zL1LpLDM4OEGO09CAIwDd6UyQ= Subject key identifier: BA:8E:49:6A:08:B0:E8:4E:A6:60:87:60:D9:C7:0B:4E:DE:E0:3E:B9 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019F9248137DE10D38D5F68D5E9020022908 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 19F8 Signing time: Fri 24 Jul 2026 04:00:24 +0000 Manifest this update: Fri 24 Jul 2026 04:00:24 +0000 Manifest next update: Sat 25 Jul 2026 04:00:24 +0000 Files and hashes: 1: 0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa (hash: q7lijpZcsnauEAX8HT2zNssS2eyKaRgPKnXCYMxmnow=) 2: 1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa (hash: a2WWRTi85qtiWX9jSpPt6KLXf/eSt441S1fdhlmq/do=) 3: 5tH7LLAkdhTinMcBwA5ZehHy3T8.roa (hash: FSVoKMxOOpnoQfuC/EJwrwRY/Zx+oB/dMyYOIOIr+Us=) 4: 7OwsFlnHxpebmwPMUCt2me-zyWI.roa (hash: 0Ig1S0d5NpWXySpctyJbfop5unyTsBugYNuECPwIRTg=) 5: 7xF1eBazbFn49vs2BNwnpcCQbU8.roa (hash: tqiV+OVtmDFe9Ok2QIOHbnLYBuKbyGIp9NdmnWlMMuw=) 6: Cbas0g2gR07ffn-dISh755Oa8jI.roa (hash: JrumCEaLcChVR162sO+6/nHAKdNjmGrmpSa1y3KAZ/A=) 7: EIOYZpIbkL6BC-x4564aTLDYD5I.roa (hash: z0WBT/Sycw1oUBchenD/iEcWbUKjtiNpM4WnCTpU/AQ=) 8: FX3QzUkxt_bOZJMEd68NoBa6xjw.roa (hash: Aeuem70DTwxuRaSzC0M0X4yGLZRf049S8H5di9SwmV0=) 9: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: nV6KzazRUfdaI2plSAly8M1Vd6djZCGRYzIAikuN+zQ=) 10: NfpbtdoH2GzbqDfenHlYbv5zt_c.roa (hash: 89a648b6W+muQqrxylg+B9lJhIqBGoKMRio9Dz7PXhw=) 11: YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa (hash: /+pWCkv4pOpaQQ3pOwrh5OujER/vlTj+p3hHLSIAK64=) 12: cXInX8MThhr-Q2P_0TCbxEVEnFM.roa (hash: 58A2aZSuymaJoOD/zxSFuC/w3QnUk8DmmWAzRDbCkH8=) 13: zib85lalNfDUXLnbOxY6qMczZjs.roa (hash: jphImNCP2svx9og7fDdI/KwoYuS28d452U+DOyXWGsw=) 14: zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa (hash: J1GJgdFWQEf7k64nQl0mr5yPcHotjObvTQFYDrnoDYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 04:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:48:13:7d:e1:0d:38:d5:f6:8d:5e:90:20:02:29:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Jul 24 04:00:24 2026 GMT Not After : Jul 25 04:00:24 2026 GMT Subject: CN=ba8e496a08b0e84ea6608760d9c70b4edee03eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d8:6e:b1:bd:65:d8:98:87:eb:af:cf:f1:b1: 08:5d:67:53:a8:56:22:43:36:17:80:9a:0e:5e:a3: a2:aa:a9:f8:db:42:72:c2:b8:60:49:b0:b4:a7:8c: cd:00:1a:81:c3:fa:75:ec:fd:5f:9f:38:46:91:58: 13:5c:8c:9e:43:02:29:fa:1c:95:9c:8c:bb:2c:af: 07:56:cd:4d:44:0e:56:3b:35:f8:3a:02:0b:40:5a: 6e:66:7d:e5:fa:06:32:ef:ff:62:e2:f3:1c:43:d6: 56:a7:d3:25:36:c6:f5:3f:ce:9d:a9:98:c3:1f:ea: f9:0c:b8:ac:55:5d:98:52:36:42:67:c0:ef:f3:9d: 9b:1a:9b:92:7e:31:c7:3f:ac:a2:f1:ff:2c:0d:24: f9:7c:d6:d0:f6:db:d0:3b:84:d2:ae:72:4c:7a:4e: 07:1a:67:fa:6a:32:a1:ed:4c:b4:d3:55:9c:b3:b8: 78:a9:3a:09:9e:00:57:a8:c5:ea:9d:2f:e0:1b:3e: 21:1b:30:4b:16:d3:6f:aa:ef:4b:bb:33:69:73:38: 14:6b:48:0f:e0:b3:09:a3:48:21:f0:83:9a:ca:35: 38:be:32:5b:34:13:77:7d:ea:cd:7b:fc:3b:3d:4e: ac:71:9c:b9:7f:ca:a3:bd:e6:f5:39:b8:2d:0c:de: fe:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8E:49:6A:08:B0:E8:4E:A6:60:87:60:D9:C7:0B:4E:DE:E0:3E:B9 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:70:4f:80:61:e0:e9:c9:17:00:be:bf:75:30:4d:f8:c8:26: b6:49:0c:b1:2d:a9:0c:02:27:15:11:fb:53:1e:9a:92:0c:6e: 19:37:11:fd:85:36:5c:6c:59:84:ca:56:6f:45:02:6d:af:1f: 1f:21:5e:37:14:0e:74:3d:ff:d2:70:52:6b:42:a2:57:75:a7: 67:03:ed:82:37:16:82:89:b3:ed:54:e6:a3:d6:7e:ec:d3:28: 40:b9:34:be:fc:b0:97:be:0e:16:fd:d7:fe:e3:1f:15:fb:81: 45:07:82:f5:79:06:4d:25:de:61:09:e5:f7:06:9a:06:f2:d5: a3:6a:85:09:e7:b9:47:90:3e:a5:1c:ec:69:10:7a:b4:d8:62: 9e:91:f1:16:2b:44:d6:74:ed:2e:9d:67:44:ec:d1:dc:ce:f2: f3:01:d2:85:b9:12:5b:62:0f:8c:11:05:8f:e4:95:ee:e9:84: 7d:18:7e:f7:17:8f:bb:f8:64:4f:4d:42:71:33:c8:de:98:63: 14:81:b4:a5:01:64:de:26:a7:44:26:f1:35:b3:79:18:8e:a4: 67:c2:d6:a1:e3:a1:ee:f0:9d:6e:8b:c8:55:51:c6:ab:a7:cb: a7:c0:60:c6:ae:d4:2c:fd:37:a0:de:f0:1c:0d:90:ea:b9:38: 71:53:4a:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SSBN94Q041faNXpAgAikIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwNzI0MDQwMDI0WhcNMjYwNzI1MDQwMDI0WjAzMTEwLwYDVQQD EyhiYThlNDk2YTA4YjBlODRlYTY2MDg3NjBkOWM3MGI0ZWRlZTAzZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4thusb1l2JiH66/P8bEIXWdTqFYi QzYXgJoOXqOiqqn420JywrhgSbC0p4zNABqBw/p17P1fnzhGkVgTXIyeQwIp+hyV nIy7LK8HVs1NRA5WOzX4OgILQFpuZn3l+gYy7/9i4vMcQ9ZWp9MlNsb1P86dqZjD H+r5DLisVV2YUjZCZ8Dv852bGpuSfjHHP6yi8f8sDST5fNbQ9tvQO4TSrnJMek4H Gmf6ajKh7Uy001Wcs7h4qToJngBXqMXqnS/gGz4hGzBLFtNvqu9LuzNpczgUa0gP 4LMJo0gh8IOayjU4vjJbNBN3ferNe/w7PU6scZy5f8qjveb1ObgtDN7+CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqOSWoIsOhOpmCHYNnHC07e4D65MB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXBPgGHg 6ckXAL6/dTBN+MgmtkkMsS2pDAInFRH7Ux6akgxuGTcR/YU2XGxZhMpWb0UCba8f HyFeNxQOdD3/0nBSa0KiV3WnZwPtgjcWgomz7VTmo9Z+7NMoQLk0vvywl74OFv3X /uMfFfuBRQeC9XkGTSXeYQnl9waaBvLVo2qFCee5R5A+pRzsaRB6tNhinpHxFitE 1nTtLp1nROzR3M7y8wHShbkSW2IPjBEFj+SV7umEfRh+9xePu/hkT01CcTPI3phj FIG0pQFk3ianRCbxNbN5GI6kZ8LWoeOh7vCdbovIVVHGq6fLp8Bgxq7ULP03oN7w HA2Q6rk4cVNKOA== -----END CERTIFICATE-----Generated at Fri Jul 24 10:37:50 2026 by rpki-client