$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: 8GGnlid2SJsrJCo77h39lFH67eI6wGoDeXLR6EJEvWk= Subject key identifier: 33:4D:07:B1:81:AD:1B:E6:5F:A5:7E:3A:D0:AB:A5:6F:23:EB:50:4D Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 01A0D2A66AE1ACB671C6D4E27AAF227EB171 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 1AA1 Signing time: Thu 24 Sep 2026 09:01:56 +0000 Manifest this update: Thu 24 Sep 2026 09:01:56 +0000 Manifest next update: Fri 25 Sep 2026 09:01:56 +0000 Files and hashes: 1: 0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa (hash: q7lijpZcsnauEAX8HT2zNssS2eyKaRgPKnXCYMxmnow=) 2: 1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa (hash: a2WWRTi85qtiWX9jSpPt6KLXf/eSt441S1fdhlmq/do=) 3: 5tH7LLAkdhTinMcBwA5ZehHy3T8.roa (hash: FSVoKMxOOpnoQfuC/EJwrwRY/Zx+oB/dMyYOIOIr+Us=) 4: 7OwsFlnHxpebmwPMUCt2me-zyWI.roa (hash: 0Ig1S0d5NpWXySpctyJbfop5unyTsBugYNuECPwIRTg=) 5: 7xF1eBazbFn49vs2BNwnpcCQbU8.roa (hash: tqiV+OVtmDFe9Ok2QIOHbnLYBuKbyGIp9NdmnWlMMuw=) 6: Cbas0g2gR07ffn-dISh755Oa8jI.roa (hash: JrumCEaLcChVR162sO+6/nHAKdNjmGrmpSa1y3KAZ/A=) 7: EIOYZpIbkL6BC-x4564aTLDYD5I.roa (hash: z0WBT/Sycw1oUBchenD/iEcWbUKjtiNpM4WnCTpU/AQ=) 8: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: xtA2fzrxlm/hVkBxsxySK5MWppyh/1HwgI/Q4vYyVQA=) 9: NfpbtdoH2GzbqDfenHlYbv5zt_c.roa (hash: 89a648b6W+muQqrxylg+B9lJhIqBGoKMRio9Dz7PXhw=) 10: YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa (hash: /+pWCkv4pOpaQQ3pOwrh5OujER/vlTj+p3hHLSIAK64=) 11: Ytj0U6XkrheA-ulyRiwoygUy2PE.roa (hash: kTvsXh5scJZT1sBb1vEyZPTtitPkJZHzzOBVXCq/ERw=) 12: cXInX8MThhr-Q2P_0TCbxEVEnFM.roa (hash: 58A2aZSuymaJoOD/zxSFuC/w3QnUk8DmmWAzRDbCkH8=) 13: nRDN1vEHzaEZnMI3qR3L_MkZzjo.roa (hash: mgnK6g1VitEYDRZxuk2/lwLjkbGOufzmOfyHhd2Awg0=) 14: zib85lalNfDUXLnbOxY6qMczZjs.roa (hash: jphImNCP2svx9og7fDdI/KwoYuS28d452U+DOyXWGsw=) 15: zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa (hash: J1GJgdFWQEf7k64nQl0mr5yPcHotjObvTQFYDrnoDYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 09:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:a6:6a:e1:ac:b6:71:c6:d4:e2:7a:af:22:7e:b1:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Sep 24 09:01:56 2026 GMT Not After : Sep 25 09:01:56 2026 GMT Subject: CN=334d07b181ad1be65fa57e3ad0aba56f23eb504d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:58:64:e6:a9:44:98:25:3e:84:32:e3:2f:b1: a3:38:33:2c:59:b6:dc:f2:ee:cf:7d:70:d2:9e:76: 7f:fc:84:b2:c7:8b:93:16:c0:c8:5f:01:1d:2d:ee: 8a:7d:8c:e6:7c:45:33:37:4e:3d:87:7b:ba:99:23: 49:61:ea:70:8a:9c:45:a5:f7:cc:13:fc:67:ec:3e: 96:42:6d:0f:1b:c9:7a:ef:6e:6f:32:d0:da:eb:f9: 59:fe:56:99:27:e2:53:40:b7:c1:e8:81:f0:9f:3e: 0a:77:21:05:47:22:c7:a2:b5:22:dd:8a:ea:b9:0c: ae:4d:6a:75:d6:d8:f2:14:6b:ef:01:dc:ac:24:c6: 96:b6:04:f4:82:88:20:5e:d7:7c:c0:90:6a:71:66: a3:61:ca:3c:b7:ee:7b:42:98:ca:6d:18:76:ea:50: 36:9e:53:c7:92:7c:2c:28:df:c4:00:a6:9a:d7:89: df:53:04:52:ae:81:dc:bf:0b:1e:b5:f1:4b:d4:fb: c5:0d:0a:2f:73:c6:82:d1:5a:26:88:bf:38:92:47: 68:71:02:2a:06:66:cb:6d:3a:e1:47:3e:12:ae:4e: 5c:89:d2:33:51:82:f9:0d:7d:b2:3e:3a:a1:b7:02: 72:db:40:11:5e:53:1b:00:13:b5:81:32:19:0a:e1: ea:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4D:07:B1:81:AD:1B:E6:5F:A5:7E:3A:D0:AB:A5:6F:23:EB:50:4D X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:1f:5e:8d:c1:01:7e:19:d0:c2:ae:c3:61:48:d5:14:9a:34: a8:8a:6b:39:86:48:0e:ef:7b:4a:cf:69:44:a1:f0:57:fc:36: e2:a4:68:a9:22:5e:8f:b2:ab:a6:f3:35:21:7d:ae:9c:bb:05: 05:8e:9d:9b:7e:2c:2d:cf:32:ef:b4:ff:d4:5f:89:b1:f4:56: 74:5c:be:86:08:68:12:9b:60:fe:9b:bd:64:4e:a3:65:d4:1b: fc:e4:89:b6:d6:71:77:54:42:7f:66:db:0a:80:52:73:92:7c: fe:d4:c5:84:3d:21:63:2e:ed:6b:29:7d:75:0f:97:ea:22:44: 36:ba:de:2f:5b:dd:5b:2f:c5:7c:74:d6:d3:a0:ff:99:a9:9b: 34:2d:d4:87:58:fc:37:11:ba:07:d0:d7:1e:45:e5:0f:15:0e: 74:7e:72:49:3e:2d:d9:ff:07:55:f3:5a:20:05:65:64:4c:54: 97:79:07:a3:a1:ff:9e:08:ce:d0:5e:5f:7f:fa:52:a2:2d:69: bf:15:e7:d5:bd:b8:68:d8:eb:27:0a:d4:ac:ea:52:c2:62:47: b8:38:e2:78:3a:b2:4d:f3:a8:74:ec:56:2d:89:e1:7a:f8:f7: 67:f9:78:8a:58:dd:5f:9f:dd:20:82:42:92:d0:30:f1:c3:c8: f0:fb:b5:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDSpmrhrLZxxtTieq8ifrFxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwOTI0MDkwMTU2WhcNMjYwOTI1MDkwMTU2WjAzMTEwLwYDVQQD EygzMzRkMDdiMTgxYWQxYmU2NWZhNTdlM2FkMGFiYTU2ZjIzZWI1MDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFhk5qlEmCU+hDLjL7GjODMsWbbc 8u7PfXDSnnZ//ISyx4uTFsDIXwEdLe6KfYzmfEUzN049h3u6mSNJYepwipxFpffM E/xn7D6WQm0PG8l6725vMtDa6/lZ/laZJ+JTQLfB6IHwnz4KdyEFRyLHorUi3Yrq uQyuTWp11tjyFGvvAdysJMaWtgT0goggXtd8wJBqcWajYco8t+57QpjKbRh26lA2 nlPHknwsKN/EAKaa14nfUwRSroHcvwsetfFL1PvFDQovc8aC0VomiL84kkdocQIq BmbLbTrhRz4Srk5cidIzUYL5DX2yPjqhtwJy20ARXlMbABO1gTIZCuHqOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNNB7GBrRvmX6V+OtCrpW8j61BNMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWB9ejcEB fhnQwq7DYUjVFJo0qIprOYZIDu97Ss9pRKHwV/w24qRoqSJej7KrpvM1IX2unLsF BY6dm34sLc8y77T/1F+JsfRWdFy+hghoEptg/pu9ZE6jZdQb/OSJttZxd1RCf2bb CoBSc5J8/tTFhD0hYy7tayl9dQ+X6iJENrreL1vdWy/FfHTW06D/mambNC3Uh1j8 NxG6B9DXHkXlDxUOdH5yST4t2f8HVfNaIAVlZExUl3kHo6H/ngjO0F5ff/pSoi1p vxXn1b24aNjrJwrUrOpSwmJHuDjieDqyTfOodOxWLYnhevj3Z/l4iljdX5/dIIJC ktAw8cPI8Pu1sw== -----END CERTIFICATE-----Generated at Thu Sep 24 17:37:45 2026 by rpki-client