$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: /tW7JdFay4lR+7wT9yo4YgBBg/CbMxhS8Ic+0433gDM= Subject key identifier: A6:E4:3C:DA:BC:0F:7D:7A:89:EE:72:49:95:4C:9D:99:1B:35:A9:DE Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 019E1E6C8B1A11BB8A2B657719C4DCD1CC75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 18F8 Signing time: Tue 12 May 2026 23:01:30 +0000 Manifest this update: Tue 12 May 2026 23:01:30 +0000 Manifest next update: Wed 13 May 2026 23:01:30 +0000 Files and hashes: 1: 8_MkA_mT9KIdkBcNq59qKHbc9ho.roa (hash: E24Q5XRNZzYhaFekHtHmSqKUrlGX20Uvqt/+tLWhFo4=) 2: 8dz0TrMtwzys9aId9S0iNBUOM6I.roa (hash: QLXQgTisSL5o9NDXTvqc31xSu43P2bWSnl0Mbj1LxKA=) 3: ATr9on9NXfN5KaeCexdDhihuhvE.roa (hash: fRmU0RyX9cmxFGh6vh7b2kq/1xI8atRRIR73j9hG4+Y=) 4: JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa (hash: arGn6FJKM/5X/KQBvvmxnfiup95zCVTz6MKIcb88dnA=) 5: JutDRiQZPtkgRNn4DbKRtcU159k.roa (hash: TBfVgKnr15EdS367udNkZsLjUZkCmwigL6STK1CGALk=) 6: WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa (hash: EVCumPjXA28vp5ehPKHe+PCdpvR77Tfj3/cbydnM+o0=) 7: XXTLAzTN8ORt_-RYCj2-8C6GR00.roa (hash: 6BDh84FsMhXUtXLJgFo0Xh10o5gPmpg2C2PNspUTVCk=) 8: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: QaSID9UXTWJg8znidsW10usZMhrKyqwemdR8IQwSrAA=) 9: m6mcSmpfmNAj9RbqZcHLhm1-GBQ.roa (hash: p83WPoiu14c7eyRfswAFJNoQrZPR/HEj5misljpRM2U=) 10: nkHJQxs3RvxryxXyywwLA5kWGDI.roa (hash: VuLzAxuuKrma6aeyKBkCPTnFtqwkCI2Bh/sV0lxF7Jc=) 11: vzjiQ62-Ida16ZpmsWaWVB-3g8U.roa (hash: jsH0jmCurlULuLa9fBp8xexVcDJDX4+DOBZF+vtnAlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:6c:8b:1a:11:bb:8a:2b:65:77:19:c4:dc:d1:cc:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: May 12 23:01:30 2026 GMT Not After : May 13 23:01:30 2026 GMT Subject: CN=a6e43cdabc0f7d7a89ee7249954c9d991b35a9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:38:2c:42:33:e0:2e:83:d7:77:03:d9:4a:74: d9:ff:4e:13:ce:65:78:b8:6c:52:af:62:9c:d0:f2: 69:cd:95:63:be:11:81:64:29:ce:31:77:85:06:2f: 9d:74:6f:a8:98:cf:d8:63:3d:9c:bc:63:6d:4e:c3: 07:34:22:91:3d:77:7f:94:bd:cc:e5:ac:27:69:bf: ac:0d:9f:f0:5f:d6:9a:bf:23:86:57:5d:58:1d:3e: 27:28:36:95:b8:1e:e0:8a:1b:9a:99:b4:90:dc:de: 40:d6:eb:e8:c2:c8:1b:dd:5f:a6:b0:bb:a8:5d:e7: ca:8e:b8:a9:4f:4e:4d:cd:cf:a5:a8:2a:35:90:a9: e2:05:db:c2:15:51:fd:d0:48:67:d1:42:33:8f:3d: dc:22:2f:b4:ba:96:f5:75:83:c5:c3:d3:3a:17:4a: 69:40:37:ba:4c:5c:a3:aa:ba:67:97:4e:73:98:eb: 7d:c1:45:67:29:1d:d9:85:fa:82:1d:f0:3c:0c:08: 16:5a:48:13:40:8e:25:9e:de:b3:25:1a:30:ef:ca: 21:9c:71:4d:ef:1a:6c:df:e2:3c:b2:23:13:b3:d3: 72:49:62:92:85:c3:e2:24:02:70:79:68:04:63:83: 1e:9b:aa:e0:0c:6e:9c:ff:df:57:8a:23:0f:fe:07: 9a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E4:3C:DA:BC:0F:7D:7A:89:EE:72:49:95:4C:9D:99:1B:35:A9:DE X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ee:1c:b0:78:28:e3:7d:94:29:00:ba:c2:c9:62:83:01:e5: bf:87:33:d1:ce:0b:40:a8:b9:d4:bc:c9:6d:e6:1d:26:64:46: 2d:04:0b:b8:00:b9:4c:b0:3c:a7:3c:c1:1f:d3:e6:78:d4:07: ca:f4:4c:94:b3:39:7e:bc:2d:69:27:85:6b:c2:da:f1:93:48: 70:e2:01:c2:30:68:0d:fc:0d:f5:72:d8:2a:55:60:a9:f4:84: 11:3a:4c:e1:7d:e9:5f:d8:6a:73:e8:0a:f6:1d:df:3d:3a:45: c0:b1:37:32:f8:80:bc:2d:33:22:78:94:fd:21:ff:b6:0f:a1: fa:07:3a:28:90:46:83:68:17:49:2a:be:fd:bc:24:0d:97:ed: 0d:13:12:42:4d:9e:a8:a2:11:92:a7:5b:15:8d:d5:44:14:f4: 35:cf:69:cd:a8:e7:81:22:1b:f3:24:cc:4a:b6:ca:f4:be:45: d3:e8:b1:30:75:c1:ea:d4:3c:0d:f0:d8:ea:f1:3e:f0:35:e3: ef:43:d1:55:0e:f3:3c:3a:1d:e4:d4:e3:ae:0e:ab:8a:af:e0: f6:e7:30:52:df:a9:69:88:75:fb:8a:3f:9b:9a:6e:57:df:eb: 82:61:3d:d2:e6:d2:77:17:4b:6f:ae:20:54:ff:48:82:c1:5b: e6:b4:59:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ebIsaEbuKK2V3GcTc0cx1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYwNTEyMjMwMTMwWhcNMjYwNTEzMjMwMTMwWjAzMTEwLwYDVQQD EyhhNmU0M2NkYWJjMGY3ZDdhODllZTcyNDk5NTRjOWQ5OTFiMzVhOWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zgsQjPgLoPXdwPZSnTZ/04TzmV4 uGxSr2Kc0PJpzZVjvhGBZCnOMXeFBi+ddG+omM/YYz2cvGNtTsMHNCKRPXd/lL3M 5awnab+sDZ/wX9aavyOGV11YHT4nKDaVuB7gihuambSQ3N5A1uvowsgb3V+msLuo XefKjripT05Nzc+lqCo1kKniBdvCFVH90Ehn0UIzjz3cIi+0upb1dYPFw9M6F0pp QDe6TFyjqrpnl05zmOt9wUVnKR3ZhfqCHfA8DAgWWkgTQI4lnt6zJRow78ohnHFN 7xps3+I8siMTs9NySWKShcPiJAJweWgEY4Mem6rgDG6c/99XiiMP/geaQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbkPNq8D316ie5ySZVMnZkbNaneMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+4csHgo 432UKQC6wsligwHlv4cz0c4LQKi51LzJbeYdJmRGLQQLuAC5TLA8pzzBH9PmeNQH yvRMlLM5frwtaSeFa8La8ZNIcOIBwjBoDfwN9XLYKlVgqfSEETpM4X3pX9hqc+gK 9h3fPTpFwLE3MviAvC0zIniU/SH/tg+h+gc6KJBGg2gXSSq+/bwkDZftDRMSQk2e qKIRkqdbFY3VRBT0Nc9pzajngSIb8yTMSrbK9L5F0+ixMHXB6tQ8DfDY6vE+8DXj 70PRVQ7zPDod5NTjrg6riq/g9ucwUt+paYh1+4o/m5puV9/rgmE90ubSdxdLb64g VP9IgsFb5rRZbg== -----END CERTIFICATE-----Generated at Wed May 13 07:19:27 2026 by rpki-client