$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: oD1+Sz5htAMamB1WFUwX90t6SeGsBgilvE/4yEXAGYQ= Subject key identifier: 93:4E:E3:9D:A7:34:DD:74:05:80:8B:E7:BA:83:0A:C8:74:9B:D7:99 Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 01A1DE02EC3A8A1D43C8904E3CCFB482130B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 1AEC Signing time: Sun 15 Nov 2026 07:01:35 +0000 Manifest this update: Sun 15 Nov 2026 07:01:35 +0000 Manifest next update: Mon 16 Nov 2026 07:01:35 +0000 Files and hashes: 1: 8dz0TrMtwzys9aId9S0iNBUOM6I.roa (hash: QLXQgTisSL5o9NDXTvqc31xSu43P2bWSnl0Mbj1LxKA=) 2: CG9ohWuinT5B93Rnr5fGvMKn1vY.roa (hash: PUMGIgV3wIfMf5d0ulCrvrKBPvAL6Ata0pqTX8puweA=) 3: JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa (hash: arGn6FJKM/5X/KQBvvmxnfiup95zCVTz6MKIcb88dnA=) 4: JutDRiQZPtkgRNn4DbKRtcU159k.roa (hash: TBfVgKnr15EdS367udNkZsLjUZkCmwigL6STK1CGALk=) 5: WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa (hash: EVCumPjXA28vp5ehPKHe+PCdpvR77Tfj3/cbydnM+o0=) 6: XXTLAzTN8ORt_-RYCj2-8C6GR00.roa (hash: 6BDh84FsMhXUtXLJgFo0Xh10o5gPmpg2C2PNspUTVCk=) 7: Y-SOlnUVIZjOVvcxnnWFzaAte_E.roa (hash: 2bLhdqPwt8VWaJXmqBQ8pl5vk0Pqbt7n4V7xQ3T9Dew=) 8: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: 5pMzDl/P+AJdti7OsZr1Uc0WHOGjvitDoGzDYnPXlQ4=) 9: m6mcSmpfmNAj9RbqZcHLhm1-GBQ.roa (hash: p83WPoiu14c7eyRfswAFJNoQrZPR/HEj5misljpRM2U=) 10: nkHJQxs3RvxryxXyywwLA5kWGDI.roa (hash: VuLzAxuuKrma6aeyKBkCPTnFtqwkCI2Bh/sV0lxF7Jc=) 11: vzjiQ62-Ida16ZpmsWaWVB-3g8U.roa (hash: jsH0jmCurlULuLa9fBp8xexVcDJDX4+DOBZF+vtnAlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 07:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:02:ec:3a:8a:1d:43:c8:90:4e:3c:cf:b4:82:13:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Nov 15 07:01:35 2026 GMT Not After : Nov 16 07:01:35 2026 GMT Subject: CN=934ee39da734dd7405808be7ba830ac8749bd799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:19:aa:39:6c:3a:eb:74:2e:8a:2c:d7:31: 6c:15:5a:cf:49:39:9f:a1:c7:fa:0c:78:f1:af:ca: 6c:c1:ba:00:b2:4e:bd:99:43:21:ee:1e:b9:18:59: 88:86:eb:33:03:e7:a9:92:29:c6:97:f4:4e:30:f7: 88:f9:23:81:a9:24:15:28:76:88:a1:f7:66:69:69: f3:46:b7:55:5d:b8:6e:58:f3:30:cc:50:18:c4:b1: 15:db:81:99:44:d4:07:dc:d1:14:ae:c2:99:ea:1b: b6:a3:4c:37:f9:88:e5:56:b9:f5:8a:0b:a8:b9:ce: 22:39:f5:8b:67:83:56:ae:87:73:f9:9f:ab:04:dd: a2:ef:77:7e:6b:55:b6:f8:71:44:7f:c0:bb:6f:a4: c3:75:d7:50:6b:43:53:28:90:fe:d4:35:62:2c:a6: 5a:8d:f7:7e:b2:39:7a:f3:7b:36:0b:b3:35:6c:bf: 74:45:41:b1:13:4c:5a:d1:af:77:a7:f7:3f:46:60: 13:cf:a9:28:c5:29:14:ce:5b:ff:41:2a:57:64:cc: 42:b1:3d:bc:fe:76:63:e3:bb:8e:ff:fb:de:cd:26: 89:7d:83:24:a7:19:e7:98:08:a1:f3:66:ef:43:96: 39:ff:71:80:06:40:61:d4:fb:7d:3b:e1:dc:72:20: 60:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4E:E3:9D:A7:34:DD:74:05:80:8B:E7:BA:83:0A:C8:74:9B:D7:99 X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a8:91:4a:6b:7d:bd:6f:74:07:a6:d7:ea:08:ae:37:fa:ad: 07:fe:b3:eb:35:cb:bd:1c:09:45:46:ef:77:81:ef:b7:4a:be: a0:b7:2b:f8:2b:39:93:ac:bd:b3:25:b3:56:51:35:42:d9:28: c8:3c:46:11:a2:81:9f:16:cd:94:ac:d7:d0:9b:1e:d8:c6:3e: ae:65:6f:7d:cf:5b:c8:9a:41:fe:26:5e:df:fb:46:f3:f4:18: d6:95:e8:a6:4d:5f:4e:8f:2c:a3:91:b8:3f:87:f0:44:1d:e9: 98:09:c2:bf:2f:b1:06:ad:ec:cc:9b:c6:ef:67:a3:b1:d7:b3: 1c:85:25:a1:99:8d:b5:af:ec:83:db:b5:fb:7f:a2:84:b7:4a: c5:3d:b8:9f:2a:ff:d7:08:4a:00:8d:95:ba:8c:0d:1e:f0:0f: cb:f8:d0:30:bf:93:e6:1e:78:65:85:5d:44:65:5a:11:94:73: 76:53:22:cc:c8:4a:84:9a:c5:6c:80:21:4d:54:c1:94:c8:5b: 9c:a6:53:90:28:c9:0b:62:69:5e:3d:49:27:38:c0:7f:8d:80: c1:95:79:e4:d5:6f:63:66:e1:7d:88:5c:62:cb:87:ee:80:7e: 48:2c:c7:b6:30:c6:9b:8f:39:83:01:97:56:2f:25:02:f3:43: 42:ef:f9:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHeAuw6ih1DyJBOPM+0ghMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYxMTE1MDcwMTM1WhcNMjYxMTE2MDcwMTM1WjAzMTEwLwYDVQQD Eyg5MzRlZTM5ZGE3MzRkZDc0MDU4MDhiZTdiYTgzMGFjODc0OWJkNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1gZqjlsOut0Loos1zFsFVrPSTmf ocf6DHjxr8pswboAsk69mUMh7h65GFmIhuszA+epkinGl/ROMPeI+SOBqSQVKHaI ofdmaWnzRrdVXbhuWPMwzFAYxLEV24GZRNQH3NEUrsKZ6hu2o0w3+YjlVrn1iguo uc4iOfWLZ4NWrodz+Z+rBN2i73d+a1W2+HFEf8C7b6TDdddQa0NTKJD+1DViLKZa jfd+sjl683s2C7M1bL90RUGxE0xa0a93p/c/RmATz6koxSkUzlv/QSpXZMxCsT28 /nZj47uO//vezSaJfYMkpxnnmAih82bvQ5Y5/3GABkBh1Pt9O+HcciBgpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNO452nNN10BYCL57qDCsh0m9eZMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaiRSmt9 vW90B6bX6giuN/qtB/6z6zXLvRwJRUbvd4Hvt0q+oLcr+Cs5k6y9syWzVlE1Qtko yDxGEaKBnxbNlKzX0Jse2MY+rmVvfc9byJpB/iZe3/tG8/QY1pXopk1fTo8so5G4 P4fwRB3pmAnCvy+xBq3szJvG72ejsdezHIUloZmNta/sg9u1+3+ihLdKxT24nyr/ 1whKAI2VuowNHvAPy/jQML+T5h54ZYVdRGVaEZRzdlMizMhKhJrFbIAhTVTBlMhb nKZTkCjJC2JpXj1JJzjAf42AwZV55NVvY2bhfYhcYsuH7oB+SCzHtjDGm485gwGX Vi8lAvNDQu/52w== -----END CERTIFICATE-----Generated at Sun Nov 15 17:21:16 2026 by rpki-client