$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: 6AfIpCHa8HETtOotGLrYHcrovaGYHnA0xHZZgYeuIPA= Subject key identifier: 15:EF:1F:C4:FC:32:64:25:00:E2:D0:3B:1A:F2:02:E1:C5:17:47:B4 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 01A0D4940DA41607D27AB34E06E04580D174 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 1AA2 Signing time: Thu 24 Sep 2026 18:01:07 +0000 Manifest this update: Thu 24 Sep 2026 18:01:07 +0000 Manifest next update: Fri 25 Sep 2026 18:01:07 +0000 Files and hashes: 1: 0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa (hash: q7lijpZcsnauEAX8HT2zNssS2eyKaRgPKnXCYMxmnow=) 2: 1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa (hash: a2WWRTi85qtiWX9jSpPt6KLXf/eSt441S1fdhlmq/do=) 3: 5tH7LLAkdhTinMcBwA5ZehHy3T8.roa (hash: FSVoKMxOOpnoQfuC/EJwrwRY/Zx+oB/dMyYOIOIr+Us=) 4: 7OwsFlnHxpebmwPMUCt2me-zyWI.roa (hash: 0Ig1S0d5NpWXySpctyJbfop5unyTsBugYNuECPwIRTg=) 5: 7xF1eBazbFn49vs2BNwnpcCQbU8.roa (hash: tqiV+OVtmDFe9Ok2QIOHbnLYBuKbyGIp9NdmnWlMMuw=) 6: Cbas0g2gR07ffn-dISh755Oa8jI.roa (hash: JrumCEaLcChVR162sO+6/nHAKdNjmGrmpSa1y3KAZ/A=) 7: EIOYZpIbkL6BC-x4564aTLDYD5I.roa (hash: z0WBT/Sycw1oUBchenD/iEcWbUKjtiNpM4WnCTpU/AQ=) 8: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: 2j0/vQADddJM2dRYcKBW7/EWhUKXKd/tHR6fIpAwHAA=) 9: NfpbtdoH2GzbqDfenHlYbv5zt_c.roa (hash: 89a648b6W+muQqrxylg+B9lJhIqBGoKMRio9Dz7PXhw=) 10: YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa (hash: /+pWCkv4pOpaQQ3pOwrh5OujER/vlTj+p3hHLSIAK64=) 11: Ytj0U6XkrheA-ulyRiwoygUy2PE.roa (hash: kTvsXh5scJZT1sBb1vEyZPTtitPkJZHzzOBVXCq/ERw=) 12: cXInX8MThhr-Q2P_0TCbxEVEnFM.roa (hash: 58A2aZSuymaJoOD/zxSFuC/w3QnUk8DmmWAzRDbCkH8=) 13: nRDN1vEHzaEZnMI3qR3L_MkZzjo.roa (hash: mgnK6g1VitEYDRZxuk2/lwLjkbGOufzmOfyHhd2Awg0=) 14: zib85lalNfDUXLnbOxY6qMczZjs.roa (hash: jphImNCP2svx9og7fDdI/KwoYuS28d452U+DOyXWGsw=) 15: zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa (hash: J1GJgdFWQEf7k64nQl0mr5yPcHotjObvTQFYDrnoDYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:94:0d:a4:16:07:d2:7a:b3:4e:06:e0:45:80:d1:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Sep 24 18:01:07 2026 GMT Not After : Sep 25 18:01:07 2026 GMT Subject: CN=15ef1fc4fc32642500e2d03b1af202e1c51747b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7f:fa:5b:dd:ec:6b:fe:1f:46:b3:48:f1:4b: 09:11:bd:68:8e:32:29:35:bf:af:23:9a:75:b0:eb: eb:81:4d:60:5b:d3:60:ec:77:5a:10:8e:e2:d3:2c: 19:5d:5d:bf:de:f8:a3:8c:f0:a4:c0:e4:25:8e:a2: 68:49:2e:93:94:64:0b:33:8c:28:74:26:fb:d1:60: 97:ca:29:20:86:dc:0d:1d:3e:38:5f:cc:79:ee:ae: fc:3f:c3:15:2d:5b:17:dc:66:18:50:7e:36:73:dd: 81:52:21:6c:2b:4c:b9:10:72:50:1a:92:a6:ba:f7: b3:c6:e3:cb:ad:0c:83:29:87:67:82:47:0b:6f:cd: 1d:83:60:88:41:a1:63:38:41:1b:94:0e:91:c4:aa: 7d:bb:1c:5a:ba:14:2a:e3:7a:e5:ea:00:66:0d:d4: 39:a9:fe:2f:71:56:fb:b9:bb:6e:2c:03:c5:a3:5d: 3b:73:b7:9c:be:64:02:6a:33:ac:1b:0e:05:b4:1d: 55:ca:c5:38:f7:20:01:e7:97:ff:aa:94:2a:b1:ac: c6:5d:f7:db:f6:6f:aa:a1:45:2b:17:c4:d6:bd:c4: ec:91:8d:85:55:de:78:78:75:da:d8:44:fb:09:b5: b1:9f:d1:62:b5:43:8c:2f:2b:bb:af:f7:2b:9a:95: 4a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EF:1F:C4:FC:32:64:25:00:E2:D0:3B:1A:F2:02:E1:C5:17:47:B4 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:57:e8:e5:0f:16:f6:76:01:48:fe:65:e5:de:44:0a:39:a3: f2:f7:29:28:94:50:52:36:ef:9b:a0:b6:7d:42:7c:5a:d0:d8: df:55:18:8a:ce:24:68:19:bf:52:c1:5f:bf:8a:5b:23:2e:9f: 4e:e5:00:65:2e:d6:24:49:2b:7e:07:6c:a9:15:36:ac:e8:b2: b8:1d:cc:3a:67:d6:c9:18:06:c0:70:dd:48:e7:0b:97:78:8a: 0c:03:36:09:65:65:f3:f3:b4:0c:de:ff:68:2f:bb:a5:c1:f3: 88:2a:2e:ba:08:3a:00:0d:73:04:73:05:c3:3b:fe:e6:c9:ea: 4d:36:ea:e1:7f:04:55:65:12:03:12:41:05:4d:dc:0e:03:38: fa:c3:dc:7a:4f:ac:a3:9d:58:7e:36:cd:43:f0:72:46:72:0e: a1:3e:ce:80:df:ed:e7:6b:16:1d:76:30:e2:0d:42:4b:6a:2f: fc:a4:0e:24:cc:13:51:97:a5:c0:c6:67:de:e7:0e:22:00:b0: b1:4d:e9:d9:5a:39:5a:e2:fc:02:7b:69:8b:d7:3a:8c:ad:62: 1f:70:7c:ae:0c:36:0e:9e:55:38:6e:08:e3:32:56:f9:b0:2c: 57:f1:01:26:64:2a:05:92:3c:e1:e8:4a:ae:07:4a:ff:c9:55: 72:75:27:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUlA2kFgfSerNOBuBFgNF0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwOTI0MTgwMTA3WhcNMjYwOTI1MTgwMTA3WjAzMTEwLwYDVQQD EygxNWVmMWZjNGZjMzI2NDI1MDBlMmQwM2IxYWYyMDJlMWM1MTc0N2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn/6W93sa/4fRrNI8UsJEb1ojjIp Nb+vI5p1sOvrgU1gW9Ng7HdaEI7i0ywZXV2/3vijjPCkwOQljqJoSS6TlGQLM4wo dCb70WCXyikghtwNHT44X8x57q78P8MVLVsX3GYYUH42c92BUiFsK0y5EHJQGpKm uvezxuPLrQyDKYdngkcLb80dg2CIQaFjOEEblA6RxKp9uxxauhQq43rl6gBmDdQ5 qf4vcVb7ubtuLAPFo107c7ecvmQCajOsGw4FtB1VysU49yAB55f/qpQqsazGXffb 9m+qoUUrF8TWvcTskY2FVd54eHXa2ET7CbWxn9FitUOMLyu7r/crmpVKKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXvH8T8MmQlAOLQOxryAuHFF0e0MB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1fo5Q8W 9nYBSP5l5d5ECjmj8vcpKJRQUjbvm6C2fUJ8WtDY31UYis4kaBm/UsFfv4pbIy6f TuUAZS7WJEkrfgdsqRU2rOiyuB3MOmfWyRgGwHDdSOcLl3iKDAM2CWVl8/O0DN7/ aC+7pcHziCouugg6AA1zBHMFwzv+5snqTTbq4X8EVWUSAxJBBU3cDgM4+sPcek+s o51YfjbNQ/ByRnIOoT7OgN/t52sWHXYw4g1CS2ov/KQOJMwTUZelwMZn3ucOIgCw sU3p2Vo5WuL8Antpi9c6jK1iH3B8rgw2Dp5VOG4I4zJW+bAsV/EBJmQqBZI84ehK rgdK/8lVcnUnYQ== -----END CERTIFICATE-----Generated at Fri Sep 25 05:39:51 2026 by rpki-client