$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: dvLl+8VN4ZchqclowEUug/RMzOGEkH4HGC6PMnEL7Po= Subject key identifier: 26:9C:36:DF:82:18:B7:1B:4D:C9:08:97:2E:F1:00:D2:E4:5D:0A:32 Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 01A0E1065622635476E03810F213FD2D06ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 1A69 Signing time: Sun 27 Sep 2026 04:01:23 +0000 Manifest this update: Sun 27 Sep 2026 04:01:23 +0000 Manifest next update: Mon 28 Sep 2026 04:01:23 +0000 Files and hashes: 1: 8dz0TrMtwzys9aId9S0iNBUOM6I.roa (hash: QLXQgTisSL5o9NDXTvqc31xSu43P2bWSnl0Mbj1LxKA=) 2: CG9ohWuinT5B93Rnr5fGvMKn1vY.roa (hash: PUMGIgV3wIfMf5d0ulCrvrKBPvAL6Ata0pqTX8puweA=) 3: JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa (hash: arGn6FJKM/5X/KQBvvmxnfiup95zCVTz6MKIcb88dnA=) 4: JutDRiQZPtkgRNn4DbKRtcU159k.roa (hash: TBfVgKnr15EdS367udNkZsLjUZkCmwigL6STK1CGALk=) 5: WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa (hash: EVCumPjXA28vp5ehPKHe+PCdpvR77Tfj3/cbydnM+o0=) 6: XXTLAzTN8ORt_-RYCj2-8C6GR00.roa (hash: 6BDh84FsMhXUtXLJgFo0Xh10o5gPmpg2C2PNspUTVCk=) 7: Y-SOlnUVIZjOVvcxnnWFzaAte_E.roa (hash: 2bLhdqPwt8VWaJXmqBQ8pl5vk0Pqbt7n4V7xQ3T9Dew=) 8: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: zxqWew4fT5LXelKsMe3qqSK82IOdM+l/WgGPwkxmIvo=) 9: m6mcSmpfmNAj9RbqZcHLhm1-GBQ.roa (hash: p83WPoiu14c7eyRfswAFJNoQrZPR/HEj5misljpRM2U=) 10: nkHJQxs3RvxryxXyywwLA5kWGDI.roa (hash: VuLzAxuuKrma6aeyKBkCPTnFtqwkCI2Bh/sV0lxF7Jc=) 11: vzjiQ62-Ida16ZpmsWaWVB-3g8U.roa (hash: jsH0jmCurlULuLa9fBp8xexVcDJDX4+DOBZF+vtnAlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 04:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e1:06:56:22:63:54:76:e0:38:10:f2:13:fd:2d:06:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Sep 27 04:01:23 2026 GMT Not After : Sep 28 04:01:23 2026 GMT Subject: CN=269c36df8218b71b4dc908972ef100d2e45d0a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8d:b3:c2:ec:9e:e0:86:45:3a:13:9c:2e:9d: ea:34:6b:a3:d1:5d:ac:f3:02:57:ec:1a:6e:89:b4: 0a:57:97:e6:e3:f6:2b:f1:d1:de:ec:bb:ec:9b:83: 97:d7:e0:65:9b:c8:90:ec:71:6f:0a:8e:24:6a:65: 04:ef:1e:a5:e9:c8:da:87:0f:2f:dc:9d:64:b3:61: 6f:63:a3:dc:8d:53:b2:d3:6e:7b:d4:8a:11:1c:73: 34:88:bd:b6:f7:e8:42:c2:dd:90:06:6f:ac:94:5b: 5d:46:36:ca:04:86:e0:79:64:67:c4:b5:40:db:5d: 14:fb:ed:51:ac:d1:42:2a:17:98:f5:ab:60:79:f1: ac:03:4f:ff:93:3e:2f:7b:ea:67:a0:46:6a:e0:55: 19:44:ce:c8:d1:f9:5b:af:bb:a9:8c:f4:8f:32:58: 03:cb:8a:17:56:60:a5:06:b1:b2:47:45:5d:eb:ec: 69:e8:0b:07:8d:33:c5:33:06:e5:63:4b:d9:d0:c4: 6b:e8:bf:e1:0b:39:78:c1:a3:f1:ab:ee:f8:b6:53: 02:b6:24:c6:e1:64:b0:48:83:12:10:e8:08:fa:65: ab:68:c9:82:51:57:ab:29:9b:8a:6d:fd:86:76:1a: e4:c2:e6:62:c9:5d:8d:8b:48:d2:0d:0b:e9:d3:1a: 5b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9C:36:DF:82:18:B7:1B:4D:C9:08:97:2E:F1:00:D2:E4:5D:0A:32 X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ca:0f:fe:95:92:1d:ea:0b:c2:e1:32:10:d8:35:b9:de:08: 6d:26:2b:53:28:5f:d5:5e:a0:fb:e3:38:52:4f:2b:2c:59:74: 20:4b:74:20:a2:06:bd:13:b6:8d:10:17:67:ce:7c:c4:81:8c: 97:71:67:96:db:d7:a2:3d:3e:77:f5:4f:e5:be:16:e3:e5:22: 86:13:9b:db:c5:df:5b:ac:e1:4f:6f:84:c7:a4:a2:de:af:59: ee:56:8a:60:4c:dc:5f:30:8d:25:16:05:23:a2:ed:4d:d8:f8: 40:54:14:67:ed:8c:7c:c9:a0:d0:b9:d6:14:92:7a:e7:1f:c0: 1e:3b:ea:52:49:6f:cc:e1:3c:33:c7:6f:7a:9e:7e:c3:41:63: 32:c1:74:19:c3:59:06:1a:7b:97:e2:cc:d4:96:35:38:7a:49: 42:4d:84:48:64:49:66:f5:4e:c4:e7:62:3e:bc:b9:f7:dc:a1: e0:32:4a:aa:b4:65:6b:41:56:f7:14:a3:88:bf:06:e3:8f:d3: cb:70:9c:ac:e5:db:6a:9f:dd:05:38:6a:73:dc:09:69:5c:10: 1e:f0:2a:2d:40:c8:70:cc:92:fe:5d:75:b9:33:7d:11:8e:9a: 39:7d:5f:ca:80:8b:66:ff:dd:6a:32:c7:9a:29:44:53:a8:a2: 4b:a9:88:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDhBlYiY1R24DgQ8hP9LQbtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYwOTI3MDQwMTIzWhcNMjYwOTI4MDQwMTIzWjAzMTEwLwYDVQQD EygyNjljMzZkZjgyMThiNzFiNGRjOTA4OTcyZWYxMDBkMmU0NWQwYTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y2zwuye4IZFOhOcLp3qNGuj0V2s 8wJX7BpuibQKV5fm4/Yr8dHe7Lvsm4OX1+Blm8iQ7HFvCo4kamUE7x6l6cjahw8v 3J1ks2FvY6PcjVOy02571IoRHHM0iL229+hCwt2QBm+slFtdRjbKBIbgeWRnxLVA 210U++1RrNFCKheY9atgefGsA0//kz4ve+pnoEZq4FUZRM7I0flbr7upjPSPMlgD y4oXVmClBrGyR0Vd6+xp6AsHjTPFMwblY0vZ0MRr6L/hCzl4waPxq+74tlMCtiTG 4WSwSIMSEOgI+mWraMmCUVerKZuKbf2GdhrkwuZiyV2Ni0jSDQvp0xpbpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCacNt+CGLcbTckIly7xANLkXQoyMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsoP/pWS HeoLwuEyENg1ud4IbSYrUyhf1V6g++M4Uk8rLFl0IEt0IKIGvRO2jRAXZ858xIGM l3FnltvXoj0+d/VP5b4W4+UihhOb28XfW6zhT2+Ex6Si3q9Z7laKYEzcXzCNJRYF I6LtTdj4QFQUZ+2MfMmg0LnWFJJ65x/AHjvqUklvzOE8M8dvep5+w0FjMsF0GcNZ Bhp7l+LM1JY1OHpJQk2ESGRJZvVOxOdiPry599yh4DJKqrRla0FW9xSjiL8G44/T y3CcrOXbap/dBThqc9wJaVwQHvAqLUDIcMyS/l11uTN9EY6aOX1fyoCLZv/dajLH milEU6iiS6mIPA== -----END CERTIFICATE-----Generated at Sun Sep 27 10:11:26 2026 by rpki-client