$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json) Hash identifier: WSGA3yShA/kRFxRhQbERmvl/9uNgKfd0nJN/dSxrgIk= Subject key identifier: AF:F5:77:70:70:E1:DA:CB:19:C6:01:DB:C4:17:3E:CD:BC:1B:BB:83 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 01A0D383742617837170171DD31994297669 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft Manifest number: 18AE Signing time: Thu 24 Sep 2026 13:03:22 +0000 Manifest this update: Thu 24 Sep 2026 13:03:22 +0000 Manifest next update: Fri 25 Sep 2026 13:03:22 +0000 Files and hashes: 1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=) 2: 9D8zRooL7GIRssyQDERj2pjLTEg.roa (hash: ou/519X40RGEgsg6xFxzjP5mJ508RHz7Yy+VOx34VIY=) 3: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=) 4: FjN1hqKmZUsC4Mg7aPBr_QLVSOM.roa (hash: tg987J0i644Z+rDUbSmguymeU+9jrpbhpfN7TJ7twhQ=) 5: GsdwkRswQwsiHVAvjxgs3y-ljcU.roa (hash: 8aBionJxUsPqiMFKG+K1+zKOrICiST94ZOL/Hw+ANhs=) 6: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: lUQPT3MZX/w+pYpfFVvv2eE6KGKJ+97F4VLhSlwe6U8=) 7: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=) 8: M4yvFOCrNQYrMEvHUynTCH1sRYg.roa (hash: AUJ02SjlaCnhsHTiNOzqXyVE53GehhBlvRs76nGe1NA=) 9: Nekk3PxF8fO-rhzaegHvfM_t41w.roa (hash: A1QX31c5i0IexwLkYJODSCPQogKNlG8IRZDo0disb/U=) 10: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=) 11: ObHLTJq1aBz3HWS_14dGi7ZnpUA.roa (hash: rjgdc1W6vPpG3uPNkDBN/qtt12z0N51cOglFEFDyoWY=) 12: Pi6uT0MDxxHleo3_yZKxdHy8ou0.roa (hash: 5x3VDZkeU6jGG2nc7DGajOTETO/SJdxa0o8peRVLzVg=) 13: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=) 14: StqYfznXE-QPiA-TOmLGA4FrAS8.roa (hash: h5TKEuBn2q4c0zbHABA+TvU5nsvIwHYwDNRGaJto+e8=) 15: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=) 16: WBw7gw6osmHy0IqvZHLM8HMfKls.roa (hash: 9skt4Vx5fYnNFz8d3wonj2F4Wujetk0O7qCLQaqmEmE=) 17: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=) 18: _tIJodTF0tjZ2BRpzO06esyTMcc.roa (hash: klg/XfnwGn0Trf6tOz+sC9FOx5B+7q/m4bYYCvOzprs=) 19: aOll2yIzGlTioL_5KcotM1hRg6I.roa (hash: WjZYWFwSah/T1ngfGN/4LLm1yrnATZDAMq581306uVg=) 20: aa15nZfX27ubGWEeb2X5ayBEBXE.roa (hash: w+5MiVWAe1cAGq7vjX3zG5riF68ch5od/IXze+J4XLM=) 21: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=) 22: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=) 23: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=) 24: jIiWE2zJZX5pFl0vy1PL64bE8T0.roa (hash: 2YBMClvraF+AFYCDBE549nteIWo0rkRBKQCVhkycQQk=) 25: jzn_75xItj3KyIJmhhPYTg2Y6PQ.roa (hash: ieKy1kXYNMahlm9LrSc0LnStC9m9sUgw5teAYjTCgaU=) 26: lGKAv74gYmGH37A1DRbh0Rl9bx4.roa (hash: E14cPJbJ1TEA8BquVRSARSC5FdHT+0thzYkCOpdQdEk=) 27: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=) 28: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=) 29: oKhpIH_BWd5Noqx6eV2DySEcGb0.roa (hash: N7FlWOqyJoex6ZmwsucsTTYLs5nNX4sZKRbn/6c/tug=) 30: pbnN9srlyaf0BgeZnbG7vJQQcDg.roa (hash: W564THz4iqZL14hlu/uRhAEJ9fbzZM3yuaKczKwNTLE=) 31: quUFSSqLC17PWuHw4n9doB2Ldgw.roa (hash: c+mlnrjBfuvxfpOQWD6Qk8yh8Z9jsfAhLNTYgM4TAic=) 32: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=) 33: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=) 34: vlgoPpdjqzPsej1q_cUrYrKNxps.roa (hash: qCakI2gGntoClWe4ikMHsxVjZenQkCcmSU97XWi2kw8=) 35: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=) 36: xUZt8DNQHiBefNBi4Ert7_QLSEI.roa (hash: oWYA1BCVHJtygn7rZSGc6Cdmnr0lvqfDo1gxsViQABk=) 37: yILg3Hndq5JGOi0ESwh1jw7vK90.roa (hash: s4Kkslyzo5Htl0fCNn5xAtDK8phfonhKQ/TLfEr43FA=) 38: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 13:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d3:83:74:26:17:83:71:70:17:1d:d3:19:94:29:76:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Sep 24 13:03:22 2026 GMT Not After : Sep 25 13:03:22 2026 GMT Subject: CN=aff5777070e1dacb19c601dbc4173ecdbc1bbb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:40:45:34:bf:8e:ef:44:f3:3e:a8:e4:86:ac: 58:b0:a8:21:2b:dc:ed:e0:bd:c3:84:fc:88:ae:c6: f7:b9:5f:cb:56:0c:9b:33:27:db:b4:ae:88:14:6c: 23:db:9a:55:0f:0c:fe:46:ff:de:09:22:9e:4a:fe: ed:46:56:48:23:e7:50:eb:07:c2:1c:1b:6b:9d:99: c6:2e:20:08:43:b9:f6:fa:e1:e4:44:14:f9:d7:af: 12:c2:f3:10:7f:ab:93:d4:64:20:51:35:3a:a0:c5: cd:b7:ac:64:5e:4f:b6:8c:5f:42:2a:2f:f5:bd:f3: 75:96:dc:1e:97:2a:22:6c:4a:12:87:a2:b1:37:85: 80:d8:de:75:68:7e:87:30:77:3b:7a:1f:2f:a0:9c: 3d:fa:c5:71:9a:2b:fa:46:32:ef:d8:e3:bc:13:e2: ed:cb:06:b0:0b:52:72:9b:e6:f5:59:b1:0c:b4:db: 15:41:09:fe:bf:34:e0:e2:39:f3:f6:66:1a:af:a1: fa:6c:d9:3c:74:2b:b4:2c:62:7f:80:09:a3:c0:aa: 2f:73:39:fc:b0:3a:79:ba:e4:f1:86:38:cd:4e:db: c2:90:00:b3:f4:3c:82:68:e4:16:b2:7b:25:91:9d: 36:70:1d:1d:37:8d:e2:1c:b7:67:32:e0:b0:bf:39: 29:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F5:77:70:70:E1:DA:CB:19:C6:01:DB:C4:17:3E:CD:BC:1B:BB:83 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a0:ab:36:13:eb:c3:97:24:1c:8d:b5:c6:34:7f:cf:3a:49: e4:48:cb:3f:e1:52:f7:21:45:d4:57:f4:b8:97:d8:51:d8:12: ab:2f:4f:4a:83:d4:5e:d3:69:64:66:47:b3:b3:2e:98:98:66: 10:c8:cd:4c:81:4d:0c:5d:1f:86:e9:d2:3d:4a:d9:a0:b8:6f: 37:52:22:d9:7b:8f:47:bb:df:17:d9:0f:4a:03:cb:c8:ea:17: a2:38:e1:11:3c:1c:a5:1a:f4:00:ed:74:5f:91:26:94:5e:f5: 0c:1d:2a:ec:b6:5f:28:e1:1f:79:fb:98:f9:73:4a:62:53:0c: 6b:aa:9e:26:15:8f:59:57:d9:e2:02:b1:a3:ed:2b:cc:b8:9d: 5d:03:5b:82:48:d8:57:e8:92:70:90:e1:00:ce:cb:60:60:fc: a7:53:70:d6:bc:42:0b:87:f6:6b:5f:8f:d7:b5:83:1e:0f:b2: 28:38:92:11:49:64:33:a3:c5:72:73:97:c6:32:93:63:63:60: 00:b7:54:cf:af:61:14:9c:b8:a7:7f:62:d5:bc:4b:45:1a:fb: 8c:8b:92:d9:6c:fc:dd:e5:0e:c0:66:9f:09:44:25:83:c2:6f: 24:63:61:89:48:87:a9:ec:1a:91:0a:03:a2:6e:4d:18:1c:63: 08:52:bc:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDTg3QmF4NxcBcd0xmUKXZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwOTI0MTMwMzIyWhcNMjYwOTI1MTMwMzIyWjAzMTEwLwYDVQQD EyhhZmY1Nzc3MDcwZTFkYWNiMTljNjAxZGJjNDE3M2VjZGJjMWJiYjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEBFNL+O70TzPqjkhqxYsKghK9zt 4L3DhPyIrsb3uV/LVgybMyfbtK6IFGwj25pVDwz+Rv/eCSKeSv7tRlZII+dQ6wfC HBtrnZnGLiAIQ7n2+uHkRBT5168SwvMQf6uT1GQgUTU6oMXNt6xkXk+2jF9CKi/1 vfN1ltwelyoibEoSh6KxN4WA2N51aH6HMHc7eh8voJw9+sVxmiv6RjLv2OO8E+Lt ywawC1Jym+b1WbEMtNsVQQn+vzTg4jnz9mYar6H6bNk8dCu0LGJ/gAmjwKovczn8 sDp5uuTxhjjNTtvCkACz9DyCaOQWsnslkZ02cB0dN43iHLdnMuCwvzkplQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/1d3Bw4drLGcYB28QXPs28G7uDMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqCrNhPr w5ckHI21xjR/zzpJ5EjLP+FS9yFF1Ff0uJfYUdgSqy9PSoPUXtNpZGZHs7MumJhm EMjNTIFNDF0fhunSPUrZoLhvN1Ii2XuPR7vfF9kPSgPLyOoXojjhETwcpRr0AO10 X5EmlF71DB0q7LZfKOEfefuY+XNKYlMMa6qeJhWPWVfZ4gKxo+0rzLidXQNbgkjY V+iScJDhAM7LYGD8p1Nw1rxCC4f2a1+P17WDHg+yKDiSEUlkM6PFcnOXxjKTY2Ng ALdUz69hFJy4p39i1bxLRRr7jIuS2Wz83eUOwGafCUQlg8JvJGNhiUiHqewakQoD om5NGBxjCFK8AA== -----END CERTIFICATE-----Generated at Thu Sep 24 23:33:58 2026 by rpki-client