$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: iE3Xfw0iIa82fX0ynbc9R8BBfl11zQYDIj4QjOeD/C4= Subject key identifier: FF:55:81:30:62:FC:A3:8A:39:5A:52:7A:A0:32:9B:63:8F:65:2B:4C Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019F90C7748197514FD43C9C392AB6297490 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 1A0F Signing time: Thu 23 Jul 2026 21:00:18 +0000 Manifest this update: Thu 23 Jul 2026 21:00:18 +0000 Manifest next update: Fri 24 Jul 2026 21:00:18 +0000 Files and hashes: 1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=) 2: 1-_1qCNtot2hgU_IZPJL2qsTTFXc.roa (hash: Iaj382heCZM+jzCY8eetFxeK6yVOOq/mB7H0r3jsr2Y=) 3: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=) 4: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (hash: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8=) 5: 43Q8B1j8uCGR8HMdyPrt74IDtQ0.roa (hash: jg6HtmjBC3mwgDbDxK1J2hnGtmR596d4s1Ft0DjJQas=) 6: 5swB1JkT1VyW8pJXYfhhtWuqbUk.roa (hash: P4bpo9eoBW3ismZvtEHI2xgozarCbgRUUYsWF6JkP1Y=) 7: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=) 8: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=) 9: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=) 10: E3-_fXrx3WJEz1xqKZqUxJBmM-Q.roa (hash: aSCX2XxnC/aSPKRCNlxxflXs9icajrveCo9SBL09YdY=) 11: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=) 12: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=) 13: KV59OO7KJClf-nV-SktyqxjeQD0.roa (hash: +DyBXnPmKjRM65p+azkaO5DME2Q2gJhFVzsQryAN8lM=) 14: KsTzSaaFVIdfKiI35XLhL2mOYwY.roa (hash: +4JAmHk3Gn/aestC45pzoS352L2AknY9Wetv1FFGjm0=) 15: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=) 16: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=) 17: LQ2MMiTg73YogggMlO3q0fwzTYs.roa (hash: jiGxpN7PaAMkunNkUqVgtCVKMwjT12Y2+fuZm4c5duo=) 18: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=) 19: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=) 20: Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa (hash: 2GXJ33Dr4S4I4v3yZpn2MEA0G+YkALmc+OG+HXlP1Uo=) 21: Qe79LUiT3PJfRIEGPLNCl6k0V64.roa (hash: moL8jegGz0VXRX21YyGo37edkpvRmar1XACAXINhLYI=) 22: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=) 23: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=) 24: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=) 25: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=) 26: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=) 27: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=) 28: dhJildBdnZloo4poxJ4mC7kw6Ag.roa (hash: EWtd6p1SEWsSY07NqVyBMZcvWFTTHxhlSXR3BRJMANc=) 29: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: Srztpnh8FozHMg1sBegOXG6F454zW/YYvdE2+2G64Js=) 30: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=) 31: q2L5SyKqID2l1hg0Qhj5bxpMU78.roa (hash: Z9AmXohIpa+e04Joh+QhWbWtZMLnK/rjPBTVsW3zyT8=) 32: q9K5X-x5m3r2gOyHks1WDwyq-7Q.roa (hash: y0PtBOWuJ4HDoeaCO6HZcOEzqPu8pe2J9jjSvPgHyiU=) 33: qrB3Eo2Ov1FmKMVfZK8XfTmirqc.roa (hash: hZfGNLtJikKtYnLkrqax5kP9tjeXld/JNv+JEvk0F/g=) 34: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=) 35: uj4j6cfJ7bOcHn5Z6sqT_zROd8E.roa (hash: P13gsQor+N4Emp0P4NO+P2Eyz4EQ9E4uMhkwNyYMsOA=) 36: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=) 37: xe5Lcg3JTJHR_eWIXGRcFm9VxKM.roa (hash: 125ShwFH043Mwx/YVzTZ+aTSmLm1FUB4/5PjVBfP5So=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:c7:74:81:97:51:4f:d4:3c:9c:39:2a:b6:29:74:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jul 23 21:00:18 2026 GMT Not After : Jul 24 21:00:18 2026 GMT Subject: CN=ff55813062fca38a395a527aa0329b638f652b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:22:47:b7:ac:f3:b9:c8:79:a7:81:fa:48:77: 58:ec:6e:9c:7e:ec:84:08:8f:50:6e:43:a6:18:a2: 0a:2d:23:97:6a:8e:3f:91:d2:61:53:99:96:b2:aa: 09:ab:cb:e8:49:c5:57:2c:7d:9d:53:19:26:2a:c8: d9:0e:f0:b8:e3:6c:7e:80:af:44:87:2c:bf:8a:87: 88:8a:6c:cb:05:3a:4f:b9:08:1b:91:ae:93:3c:de: a5:78:34:14:b1:7b:56:82:b6:0e:56:32:e3:76:32: d8:16:6e:ac:4a:f2:75:76:f4:ce:37:24:b1:5c:69: 3d:d8:a9:bd:a0:9e:6c:ae:14:22:c6:36:46:47:13: c7:eb:d2:a1:20:55:29:af:70:f1:8c:e7:c7:cb:90: 09:33:5d:b8:61:e8:3e:a7:2d:0e:f5:87:46:02:df: 58:4d:5e:69:7e:e0:bb:6c:ad:74:ba:60:bc:b4:83: 7e:93:6e:ce:89:27:fa:4a:e9:28:dd:02:fe:90:d7: 71:b2:65:c3:59:85:31:a9:08:1c:32:50:fc:fc:d1: 78:b3:e3:25:89:fe:65:c0:0d:62:e8:83:9f:34:35: 5c:40:d6:d5:3f:8e:0d:e4:c2:41:b6:97:de:4b:25: a9:da:ec:d9:80:cd:b9:70:22:4c:20:b9:a6:39:aa: 64:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:55:81:30:62:FC:A3:8A:39:5A:52:7A:A0:32:9B:63:8F:65:2B:4C X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:52:4e:32:6f:02:ec:b3:60:21:75:de:8f:9b:ee:b3:1f:ec: bd:69:73:d9:74:96:d3:13:bb:c3:72:dc:12:a6:44:88:26:9f: a0:2a:83:4b:34:82:b3:85:96:97:ce:e1:9b:f6:8e:0f:88:e2: 04:c0:5b:a7:84:03:b9:25:57:c4:28:3e:a6:62:c2:5e:f8:a6: 69:7e:e2:f9:9f:24:d6:8f:09:80:a6:84:c2:f6:4f:7c:42:b5: 5a:af:28:a1:b2:1c:fa:4c:90:33:c1:33:6d:6f:fb:99:4f:9a: 6d:4c:34:53:8f:d5:2b:d1:7e:94:9b:6b:ca:b3:cb:69:c4:5f: 3f:cb:3a:bd:b4:88:14:8c:30:cf:02:2a:a2:bb:a5:3f:df:19: 5e:94:e4:ba:09:72:0a:77:af:f3:df:eb:72:70:4b:75:25:23: c4:82:40:ce:7d:b8:aa:91:4f:bf:75:e9:70:97:96:35:36:2e: c1:1d:7b:7e:9e:54:87:aa:4a:15:15:f5:52:91:eb:ad:0f:b4: 40:4e:62:d9:37:d2:11:7e:73:43:f9:3e:bc:3d:ec:83:7d:a6: 4b:1c:80:0a:ee:51:c5:41:3a:76:72:69:64:82:08:6d:a0:19: 46:af:2c:7f:b9:ae:2c:45:f5:df:16:93:cb:4d:5a:0f:7f:12: 9c:20:68:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Qx3SBl1FP1DycOSq2KXSQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwNzIzMjEwMDE4WhcNMjYwNzI0MjEwMDE4WjAzMTEwLwYDVQQD EyhmZjU1ODEzMDYyZmNhMzhhMzk1YTUyN2FhMDMyOWI2MzhmNjUyYjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliJHt6zzuch5p4H6SHdY7G6cfuyE CI9QbkOmGKIKLSOXao4/kdJhU5mWsqoJq8voScVXLH2dUxkmKsjZDvC442x+gK9E hyy/ioeIimzLBTpPuQgbka6TPN6leDQUsXtWgrYOVjLjdjLYFm6sSvJ1dvTONySx XGk92Km9oJ5srhQixjZGRxPH69KhIFUpr3DxjOfHy5AJM124Yeg+py0O9YdGAt9Y TV5pfuC7bK10umC8tIN+k27OiSf6Suko3QL+kNdxsmXDWYUxqQgcMlD8/NF4s+Ml if5lwA1i6IOfNDVcQNbVP44N5MJBtpfeSyWp2uzZgM25cCJMILmmOapkhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9VgTBi/KOKOVpSeqAym2OPZStMMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFJOMm8C 7LNgIXXej5vusx/svWlz2XSW0xO7w3LcEqZEiCafoCqDSzSCs4WWl87hm/aOD4ji BMBbp4QDuSVXxCg+pmLCXvimaX7i+Z8k1o8JgKaEwvZPfEK1Wq8oobIc+kyQM8Ez bW/7mU+abUw0U4/VK9F+lJtryrPLacRfP8s6vbSIFIwwzwIqorulP98ZXpTkugly Cnev89/rcnBLdSUjxIJAzn24qpFPv3XpcJeWNTYuwR17fp5Uh6pKFRX1UpHrrQ+0 QE5i2TfSEX5zQ/k+vD3sg32mSxyACu5RxUE6dnJpZIIIbaAZRq8sf7muLEX13xaT y01aD38SnCBosg== -----END CERTIFICATE-----Generated at Fri Jul 24 04:20:46 2026 by rpki-client