$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: Mgd+8oIXsRwytLEFgs/0i4HwNXIsWnj1d91SPU2ZhHk= Subject key identifier: 35:BC:4D:53:5A:25:7E:61:DF:C0:73:43:FB:2E:71:26:B3:C2:3F:1D Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 019D292972CDF6F56663FBA735BD0A6AB7AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 1879 Signing time: Thu 26 Mar 2026 08:01:15 +0000 Manifest this update: Thu 26 Mar 2026 08:01:15 +0000 Manifest next update: Fri 27 Mar 2026 08:01:15 +0000 Files and hashes: 1: 8_MkA_mT9KIdkBcNq59qKHbc9ho.roa (hash: E24Q5XRNZzYhaFekHtHmSqKUrlGX20Uvqt/+tLWhFo4=) 2: 8dz0TrMtwzys9aId9S0iNBUOM6I.roa (hash: QLXQgTisSL5o9NDXTvqc31xSu43P2bWSnl0Mbj1LxKA=) 3: ATr9on9NXfN5KaeCexdDhihuhvE.roa (hash: fRmU0RyX9cmxFGh6vh7b2kq/1xI8atRRIR73j9hG4+Y=) 4: JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa (hash: arGn6FJKM/5X/KQBvvmxnfiup95zCVTz6MKIcb88dnA=) 5: JutDRiQZPtkgRNn4DbKRtcU159k.roa (hash: TBfVgKnr15EdS367udNkZsLjUZkCmwigL6STK1CGALk=) 6: WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa (hash: EVCumPjXA28vp5ehPKHe+PCdpvR77Tfj3/cbydnM+o0=) 7: XXTLAzTN8ORt_-RYCj2-8C6GR00.roa (hash: 6BDh84FsMhXUtXLJgFo0Xh10o5gPmpg2C2PNspUTVCk=) 8: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: vKm6MOJQOXrA34ziKhEvHz5cAvK6sQ3z7BXHKKuZv5k=) 9: m6mcSmpfmNAj9RbqZcHLhm1-GBQ.roa (hash: p83WPoiu14c7eyRfswAFJNoQrZPR/HEj5misljpRM2U=) 10: nkHJQxs3RvxryxXyywwLA5kWGDI.roa (hash: VuLzAxuuKrma6aeyKBkCPTnFtqwkCI2Bh/sV0lxF7Jc=) 11: vzjiQ62-Ida16ZpmsWaWVB-3g8U.roa (hash: jsH0jmCurlULuLa9fBp8xexVcDJDX4+DOBZF+vtnAlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 08:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:29:72:cd:f6:f5:66:63:fb:a7:35:bd:0a:6a:b7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Mar 26 08:01:15 2026 GMT Not After : Mar 27 08:01:15 2026 GMT Subject: CN=35bc4d535a257e61dfc07343fb2e7126b3c23f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2f:1e:a7:e4:e5:1e:e5:33:a1:07:f9:04:12: c8:fc:d9:e0:f4:dc:64:35:8e:0f:1b:f0:cf:5d:fe: 3c:8b:ff:0a:08:15:57:09:76:ad:65:58:76:61:0c: d4:72:1e:58:1f:3c:b7:51:bf:eb:85:16:97:1d:1d: 13:23:59:b8:cc:0f:8b:7b:7c:1a:77:39:98:1a:24: cf:f5:dc:95:af:74:ab:1b:3e:57:4c:7c:f7:0e:f0: 40:7d:01:ea:2f:4f:5b:25:ce:d7:a4:50:a3:90:f5: 37:05:5d:a4:78:15:fb:4b:6a:d5:75:a1:05:69:72: c1:34:1e:88:2c:54:12:f2:21:10:6f:b4:73:e1:02: b3:00:f8:d1:5c:c2:99:b8:d6:60:c8:3c:75:26:59: 06:d2:8f:7a:48:47:ed:43:33:39:56:6f:6c:63:fa: 09:ba:18:bc:ee:52:9f:65:34:ce:81:2e:ba:4d:37: 75:8f:48:b9:ac:e6:23:a0:73:73:09:b6:7b:4a:19: 76:44:51:4a:dd:d7:0d:7a:2f:fa:9b:20:e5:45:1a: 5f:e7:27:64:76:91:eb:7f:1e:0f:d8:a4:2c:31:9e: bc:63:cf:95:be:88:48:1b:9c:b1:39:ae:da:87:4b: ea:f5:d5:6c:c0:7d:ac:1e:0e:3f:d6:cc:53:b4:c4: 75:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BC:4D:53:5A:25:7E:61:DF:C0:73:43:FB:2E:71:26:B3:C2:3F:1D X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:83:cb:dc:17:7b:be:cd:11:82:45:2c:aa:51:6f:9d:38:c3: ae:c9:f2:2d:e1:58:64:00:f2:36:29:fe:20:f3:66:30:63:fb: 6b:60:35:73:32:9c:52:b1:e5:39:38:b1:22:82:52:33:b4:bc: 0f:9c:9c:a2:56:ce:23:40:e9:a6:f1:d5:90:ac:c9:99:bc:1d: 8b:b3:83:e2:73:fa:bb:a1:69:ff:b2:1e:09:93:ed:f5:c4:2e: dd:aa:91:73:27:e8:9f:e7:7f:6d:4a:c5:b4:1a:02:73:bd:0f: b7:d1:1e:03:ae:69:ab:52:51:fe:34:70:1f:76:0f:4a:13:cb: 0f:6a:fb:dc:b5:74:08:fd:70:b9:10:36:01:b9:8f:cf:ec:d6: 36:25:fc:95:10:f5:11:eb:89:9c:5d:fc:93:08:36:8e:32:2d: 11:fd:4c:da:be:41:ac:28:7b:7f:42:71:6a:cc:bc:5d:bd:6e: df:b6:85:64:24:bf:cf:41:69:95:06:62:31:f0:22:62:4f:c6: 91:fa:9d:9b:09:af:5f:a4:8b:44:ab:30:0d:78:b5:3d:45:3e: 08:a5:b0:b5:b3:a6:6e:9f:49:be:34:21:d9:80:93:f3:1f:35: 42:65:dc:76:3d:ec:0a:0f:e4:74:e4:92:91:04:58:78:46:02: dd:c5:82:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pKXLN9vVmY/unNb0KareqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYwMzI2MDgwMTE1WhcNMjYwMzI3MDgwMTE1WjAzMTEwLwYDVQQD EygzNWJjNGQ1MzVhMjU3ZTYxZGZjMDczNDNmYjJlNzEyNmIzYzIzZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3C8ep+TlHuUzoQf5BBLI/Nng9Nxk NY4PG/DPXf48i/8KCBVXCXatZVh2YQzUch5YHzy3Ub/rhRaXHR0TI1m4zA+Le3wa dzmYGiTP9dyVr3SrGz5XTHz3DvBAfQHqL09bJc7XpFCjkPU3BV2keBX7S2rVdaEF aXLBNB6ILFQS8iEQb7Rz4QKzAPjRXMKZuNZgyDx1JlkG0o96SEftQzM5Vm9sY/oJ uhi87lKfZTTOgS66TTd1j0i5rOYjoHNzCbZ7Shl2RFFK3dcNei/6myDlRRpf5ydk dpHrfx4P2KQsMZ68Y8+VvohIG5yxOa7ah0vq9dVswH2sHg4/1sxTtMR1ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDW8TVNaJX5h38BzQ/sucSazwj8dMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYPL3Bd7 vs0RgkUsqlFvnTjDrsnyLeFYZADyNin+IPNmMGP7a2A1czKcUrHlOTixIoJSM7S8 D5ycolbOI0DppvHVkKzJmbwdi7OD4nP6u6Fp/7IeCZPt9cQu3aqRcyfon+d/bUrF tBoCc70Pt9EeA65pq1JR/jRwH3YPShPLD2r73LV0CP1wuRA2AbmPz+zWNiX8lRD1 EeuJnF38kwg2jjItEf1M2r5BrCh7f0Jxasy8Xb1u37aFZCS/z0FplQZiMfAiYk/G kfqdmwmvX6SLRKswDXi1PUU+CKWwtbOmbp9JvjQh2YCT8x81QmXcdj3sCg/kdOSS kQRYeEYC3cWCiQ== -----END CERTIFICATE-----Generated at Thu Mar 26 18:53:56 2026 by rpki-client