$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: pZx4HWRQLjAVlUUR/n6hURm88WjJgfPKkXqDDFwnqCY= Subject key identifier: 35:C4:6D:67:A5:F6:75:C5:F3:33:47:53:BB:D8:91:08:F2:5C:FA:ED Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 019F90FE60628115AE4B7816FEE242B065AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 19BB Signing time: Thu 23 Jul 2026 22:00:17 +0000 Manifest this update: Thu 23 Jul 2026 22:00:17 +0000 Manifest next update: Fri 24 Jul 2026 22:00:17 +0000 Files and hashes: 1: 8dz0TrMtwzys9aId9S0iNBUOM6I.roa (hash: QLXQgTisSL5o9NDXTvqc31xSu43P2bWSnl0Mbj1LxKA=) 2: CG9ohWuinT5B93Rnr5fGvMKn1vY.roa (hash: PUMGIgV3wIfMf5d0ulCrvrKBPvAL6Ata0pqTX8puweA=) 3: JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa (hash: arGn6FJKM/5X/KQBvvmxnfiup95zCVTz6MKIcb88dnA=) 4: JutDRiQZPtkgRNn4DbKRtcU159k.roa (hash: TBfVgKnr15EdS367udNkZsLjUZkCmwigL6STK1CGALk=) 5: WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa (hash: EVCumPjXA28vp5ehPKHe+PCdpvR77Tfj3/cbydnM+o0=) 6: XXTLAzTN8ORt_-RYCj2-8C6GR00.roa (hash: 6BDh84FsMhXUtXLJgFo0Xh10o5gPmpg2C2PNspUTVCk=) 7: Y-SOlnUVIZjOVvcxnnWFzaAte_E.roa (hash: 2bLhdqPwt8VWaJXmqBQ8pl5vk0Pqbt7n4V7xQ3T9Dew=) 8: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: 78bGTj8HUY5orGjdN+dACB9J+tjgFT6ubq9lDQc/MGk=) 9: m6mcSmpfmNAj9RbqZcHLhm1-GBQ.roa (hash: p83WPoiu14c7eyRfswAFJNoQrZPR/HEj5misljpRM2U=) 10: nkHJQxs3RvxryxXyywwLA5kWGDI.roa (hash: VuLzAxuuKrma6aeyKBkCPTnFtqwkCI2Bh/sV0lxF7Jc=) 11: vzjiQ62-Ida16ZpmsWaWVB-3g8U.roa (hash: jsH0jmCurlULuLa9fBp8xexVcDJDX4+DOBZF+vtnAlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 22:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:fe:60:62:81:15:ae:4b:78:16:fe:e2:42:b0:65:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Jul 23 22:00:17 2026 GMT Not After : Jul 24 22:00:17 2026 GMT Subject: CN=35c46d67a5f675c5f3334753bbd89108f25cfaed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:ab:62:ca:44:d9:2c:4d:d3:fd:93:e5:f6: f1:c6:d7:7d:a4:82:42:7c:75:77:51:52:2b:58:ca: 85:30:e2:e8:17:ce:4e:74:0d:96:6f:4e:f6:ca:06: 28:da:47:ab:87:b5:2c:91:12:b8:0c:52:e4:44:0b: 26:1c:e7:0c:57:12:84:e7:15:1c:44:65:85:4c:8b: ea:e9:3a:ea:99:eb:55:39:2d:4f:63:be:56:9c:26: 76:b1:60:ed:90:82:cf:8e:1c:05:44:e9:24:4c:39: 28:8f:80:aa:f1:fa:3c:5b:a6:ab:9d:9b:68:61:5c: 09:d5:69:6f:ba:ac:bb:07:c1:a6:6c:e3:fa:eb:13: 97:bf:62:f9:f3:2c:eb:94:9c:e2:62:cf:06:3a:99: 5d:3f:fa:73:4b:af:d8:86:dd:b9:ee:1a:34:f9:c0: cc:21:94:1b:ff:cd:f7:7e:6a:af:0f:b4:e0:1d:3a: 7b:08:73:d9:d9:06:60:2d:e3:50:c2:e3:f3:9d:2d: 30:1e:1f:bd:05:f3:0b:cc:dc:d2:04:1d:a2:64:31: 6a:9a:d5:e1:76:21:60:45:9f:e5:fc:ef:24:b8:40: e4:f9:ab:bb:4a:85:6c:e7:ba:74:58:01:a3:e6:d8: 06:be:25:c1:c9:59:42:b4:6b:ba:4d:89:97:b3:7a: 2b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C4:6D:67:A5:F6:75:C5:F3:33:47:53:BB:D8:91:08:F2:5C:FA:ED X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ca:84:9f:ea:81:6a:18:82:54:b6:b6:44:be:c9:ea:fd:88: d2:c1:b4:aa:19:ff:c2:79:6f:e8:18:09:0e:37:55:64:a0:34: 9f:2d:b1:df:94:f4:80:89:64:88:fe:4c:2d:2e:fb:a7:35:9b: 2f:fd:46:d2:c4:49:7f:6c:7c:43:9f:61:1e:e1:f8:90:5c:33: 76:e5:51:73:e3:ae:43:4d:b7:1b:a2:75:5f:e1:47:04:e4:36: b8:3b:d1:08:ed:f3:75:da:7f:9f:92:b6:ff:7c:ca:ff:9b:24: da:5b:36:dd:e2:56:e2:ce:40:8e:83:6c:3d:69:51:9c:cf:e5: 78:94:aa:a1:2b:b9:d0:3e:8b:92:70:32:5f:cc:9e:65:fc:28: af:6b:bc:71:d9:01:00:5e:a8:40:aa:02:7a:e7:c7:87:60:e1: c2:e7:9d:b2:a9:25:92:31:73:d9:c2:d2:0d:55:f6:fc:93:20: c1:6f:be:7f:3f:3c:1d:1c:28:2f:64:93:7e:5b:72:11:91:bf: 62:cb:4e:b2:e1:ac:31:bf:69:cc:1f:5f:08:2f:87:a6:22:5a: 50:3f:e3:ec:d2:81:fa:1b:f9:26:80:48:85:92:99:2e:ef:c3: be:1b:41:15:07:4a:02:c1:4e:24:07:8f:df:9a:ac:dd:73:fb: 8b:2c:1a:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Q/mBigRWuS3gW/uJCsGWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYwNzIzMjIwMDE3WhcNMjYwNzI0MjIwMDE3WjAzMTEwLwYDVQQD EygzNWM0NmQ2N2E1ZjY3NWM1ZjMzMzQ3NTNiYmQ4OTEwOGYyNWNmYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ2rYspE2SxN0/2T5fbxxtd9pIJC fHV3UVIrWMqFMOLoF85OdA2Wb072ygYo2kerh7UskRK4DFLkRAsmHOcMVxKE5xUc RGWFTIvq6TrqmetVOS1PY75WnCZ2sWDtkILPjhwFROkkTDkoj4Cq8fo8W6arnZto YVwJ1Wlvuqy7B8GmbOP66xOXv2L58yzrlJziYs8GOpldP/pzS6/Yht257ho0+cDM IZQb/833fmqvD7TgHTp7CHPZ2QZgLeNQwuPznS0wHh+9BfMLzNzSBB2iZDFqmtXh diFgRZ/l/O8kuEDk+au7SoVs57p0WAGj5tgGviXByVlCtGu6TYmXs3orbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXEbWel9nXF8zNHU7vYkQjyXPrtMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8qEn+qB ahiCVLa2RL7J6v2I0sG0qhn/wnlv6BgJDjdVZKA0ny2x35T0gIlkiP5MLS77pzWb L/1G0sRJf2x8Q59hHuH4kFwzduVRc+OuQ023G6J1X+FHBOQ2uDvRCO3zddp/n5K2 /3zK/5sk2ls23eJW4s5AjoNsPWlRnM/leJSqoSu50D6LknAyX8yeZfwor2u8cdkB AF6oQKoCeufHh2DhwuedsqklkjFz2cLSDVX2/JMgwW++fz88HRwoL2STfltyEZG/ YstOsuGsMb9pzB9fCC+HpiJaUD/j7NKB+hv5JoBIhZKZLu/DvhtBFQdKAsFOJAeP 35qs3XP7iywayg== -----END CERTIFICATE-----Generated at Fri Jul 24 03:00:32 2026 by rpki-client