$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: doGdrtk15+YNTVJCsJO+daGU8eLzTFo7klH8m0OPBo0= Subject key identifier: 77:3E:F3:98:1D:42:7D:BB:4C:D7:3A:D4:11:E8:EA:A6:BE:E0:0B:AC Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019D26CD5D1B03546481AE2D17C807280B3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 18B0 Signing time: Wed 25 Mar 2026 21:01:26 +0000 Manifest this update: Wed 25 Mar 2026 21:01:26 +0000 Manifest next update: Thu 26 Mar 2026 21:01:26 +0000 Files and hashes: 1: 0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa (hash: q7lijpZcsnauEAX8HT2zNssS2eyKaRgPKnXCYMxmnow=) 2: 1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa (hash: a2WWRTi85qtiWX9jSpPt6KLXf/eSt441S1fdhlmq/do=) 3: 5U8f9LogiqESUTajoI4ApxQS82I.roa (hash: 7A8hUU7qh9Z0FffZaQfnDh8e9ymTMgXdrKWZsiScww4=) 4: 5tH7LLAkdhTinMcBwA5ZehHy3T8.roa (hash: FSVoKMxOOpnoQfuC/EJwrwRY/Zx+oB/dMyYOIOIr+Us=) 5: Cbas0g2gR07ffn-dISh755Oa8jI.roa (hash: JrumCEaLcChVR162sO+6/nHAKdNjmGrmpSa1y3KAZ/A=) 6: EIOYZpIbkL6BC-x4564aTLDYD5I.roa (hash: z0WBT/Sycw1oUBchenD/iEcWbUKjtiNpM4WnCTpU/AQ=) 7: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: u/3WZofxm5Ac9exsy7uH+xg0/vEB4fVWoRuR4vS6TBI=) 8: NfpbtdoH2GzbqDfenHlYbv5zt_c.roa (hash: 89a648b6W+muQqrxylg+B9lJhIqBGoKMRio9Dz7PXhw=) 9: Qt-feGoA8-9E6Dhl7ZscFkTMSKI.roa (hash: trEGbh/W18kqxNXY/PaAExVg1jfIAWPTVVeIDtCCH4s=) 10: YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa (hash: /+pWCkv4pOpaQQ3pOwrh5OujER/vlTj+p3hHLSIAK64=) 11: aizTiTr3JBAyofrdSN5dAv2TZSE.roa (hash: zJwdzGPf1h0q9TZ+Muv6Cl42qffhVJBeW6ntkeRkbts=) 12: cXInX8MThhr-Q2P_0TCbxEVEnFM.roa (hash: 58A2aZSuymaJoOD/zxSFuC/w3QnUk8DmmWAzRDbCkH8=) 13: tMOM49mON-wD8zTtajFPDha_yco.roa (hash: X25vCvqdM17ldWbN+OsedMb7/hCVvVUgdyyal0kP0OU=) 14: zib85lalNfDUXLnbOxY6qMczZjs.roa (hash: jphImNCP2svx9og7fDdI/KwoYuS28d452U+DOyXWGsw=) 15: zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa (hash: J1GJgdFWQEf7k64nQl0mr5yPcHotjObvTQFYDrnoDYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cd:5d:1b:03:54:64:81:ae:2d:17:c8:07:28:0b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Mar 25 21:01:26 2026 GMT Not After : Mar 26 21:01:26 2026 GMT Subject: CN=773ef3981d427dbb4cd73ad411e8eaa6bee00bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6e:9e:73:3a:dc:cb:05:6b:12:a9:a3:36:68: 64:f5:ce:ba:70:a5:76:3d:0f:ef:bb:fb:f4:9c:13: d1:7b:21:45:41:4e:b5:2f:47:8d:93:59:7c:a8:28: 8c:2f:99:9f:d3:fe:7c:ba:8d:0c:1c:43:6d:08:39: 16:48:c1:db:01:00:b8:48:47:ee:79:99:4f:6d:ac: 3e:d4:9d:73:1a:7a:71:65:44:84:a0:db:64:5a:63: 55:dd:7c:2c:ef:ac:49:f0:9b:7a:ee:87:af:fd:13: df:96:30:03:f2:ad:95:b5:be:4b:29:26:fc:ef:1e: c2:0a:b3:dc:81:b6:5a:1c:5e:c2:cf:c4:ab:69:6b: 40:fb:f1:f5:63:4f:4e:c3:bc:2b:ca:ec:ac:5e:41: 40:94:ed:4d:46:33:b3:4c:6e:b9:5a:d2:f3:e8:f6: b8:35:dc:38:fd:ee:cd:de:b4:71:0c:85:64:f5:eb: 54:d4:fc:bd:90:56:90:dc:0a:27:73:13:be:fd:35: df:a2:4f:a8:c8:a9:1f:c4:2a:a7:9e:40:9a:a1:79: 3e:71:32:f4:c3:f7:1e:ed:22:89:e8:a3:7e:4a:09: 80:cd:ff:e2:f0:a5:bb:63:f2:c8:63:0f:fb:ab:5d: e8:75:62:71:31:d4:2e:0d:12:ab:d7:46:e0:d0:67: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3E:F3:98:1D:42:7D:BB:4C:D7:3A:D4:11:E8:EA:A6:BE:E0:0B:AC X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:67:34:5e:c6:37:c2:ba:81:f6:26:e3:1b:ed:2b:b3:d6:1c: b3:6b:cd:09:75:9b:a8:70:6f:9f:7f:80:a1:49:61:e7:31:94: cf:bf:fb:5f:9b:f3:e9:c8:75:91:8c:5f:d1:f1:b0:9e:61:c2: 27:50:58:13:93:93:93:8e:72:df:77:8e:69:0f:23:24:40:f6: 4c:b1:5d:31:d1:87:a1:22:76:69:d1:4c:fb:20:5c:37:68:3f: 29:cd:2c:10:85:5d:98:35:58:15:7b:b7:9d:76:09:ed:bf:9c: ee:e8:94:58:11:7b:cc:94:ff:25:02:b3:bd:65:f4:91:71:f5: 38:05:d2:68:e1:e4:0f:bd:e6:53:0f:b9:13:2e:e6:8f:42:71: ba:c5:62:d5:80:a7:3c:bd:b4:ac:af:1f:9b:00:02:72:e0:a4: a4:f4:45:fe:34:ed:87:28:79:82:94:e9:0b:36:da:80:d9:74: e2:37:13:d8:58:85:31:2a:55:93:19:38:42:ff:52:ae:24:75: 6e:1f:77:f8:18:c6:1d:84:35:45:35:ba:c5:4b:a0:9b:cb:22: 0b:58:a1:5b:a1:35:34:f7:79:9a:da:3e:11:b9:91:d8:96:b7: 63:6f:18:ec:87:35:07:4c:f1:86:44:92:e1:50:41:03:d6:25: d6:cb:82:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzV0bA1Rkga4tF8gHKAs8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwMzI1MjEwMTI2WhcNMjYwMzI2MjEwMTI2WjAzMTEwLwYDVQQD Eyg3NzNlZjM5ODFkNDI3ZGJiNGNkNzNhZDQxMWU4ZWFhNmJlZTAwYmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA226eczrcywVrEqmjNmhk9c66cKV2 PQ/vu/v0nBPReyFFQU61L0eNk1l8qCiML5mf0/58uo0MHENtCDkWSMHbAQC4SEfu eZlPbaw+1J1zGnpxZUSEoNtkWmNV3Xws76xJ8Jt67oev/RPfljAD8q2Vtb5LKSb8 7x7CCrPcgbZaHF7Cz8SraWtA+/H1Y09Ow7wryuysXkFAlO1NRjOzTG65WtLz6Pa4 Ndw4/e7N3rRxDIVk9etU1Py9kFaQ3AoncxO+/TXfok+oyKkfxCqnnkCaoXk+cTL0 w/ce7SKJ6KN+SgmAzf/i8KW7Y/LIYw/7q13odWJxMdQuDRKr10bg0GcbYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHc+85gdQn27TNc61BHo6qa+4AusMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImc0XsY3 wrqB9ibjG+0rs9Ycs2vNCXWbqHBvn3+AoUlh5zGUz7/7X5vz6ch1kYxf0fGwnmHC J1BYE5OTk45y33eOaQ8jJED2TLFdMdGHoSJ2adFM+yBcN2g/Kc0sEIVdmDVYFXu3 nXYJ7b+c7uiUWBF7zJT/JQKzvWX0kXH1OAXSaOHkD73mUw+5Ey7mj0JxusVi1YCn PL20rK8fmwACcuCkpPRF/jTthyh5gpTpCzbagNl04jcT2FiFMSpVkxk4Qv9SriR1 bh93+BjGHYQ1RTW6xUugm8siC1ihW6E1NPd5mto+EbmR2Ja3Y28Y7Ic1B0zxhkSS 4VBBA9Yl1suCow== -----END CERTIFICATE-----Generated at Thu Mar 26 04:39:59 2026 by rpki-client