$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json) Hash identifier: IqOoJzRzoj2NkmwJUYWKrYx5EeT2OMlEteQKBv5lUXY= Subject key identifier: 19:63:C5:92:8A:1F:41:28:85:77:FB:73:6D:8D:D8:18:E9:A6:04:07 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019D27A8D1CA735836F96CD5779601621726 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft Manifest number: 1636 Signing time: Thu 26 Mar 2026 01:01:08 +0000 Manifest this update: Thu 26 Mar 2026 01:01:08 +0000 Manifest next update: Fri 27 Mar 2026 01:01:08 +0000 Files and hashes: 1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=) 2: 7BHrkta5DcfmRJ9QGXt7SrTu2Xs.roa (hash: WflkvzVUJUW28OrasYS+BvErnK7oO9Zw/lOlmQjDvko=) 3: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=) 4: GsdwkRswQwsiHVAvjxgs3y-ljcU.roa (hash: 8aBionJxUsPqiMFKG+K1+zKOrICiST94ZOL/Hw+ANhs=) 5: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: TqpIGtAwukdesAirKxhyqnnmhE7PiyU9tDpWRGmzxpM=) 6: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=) 7: N_jsupufyQKmOIb-ZLf5qWLkurY.roa (hash: ISV8VmTpCv1AzGmjwJfxFbCXuLOiH9fVhbg2esV16ko=) 8: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=) 9: REV3W8PYUxFJpyQqeipP60uquIM.roa (hash: R/O4LVj/Nn1LD5Jt4pXt5pWCeAyMFWEfHCC2WmVvLdo=) 10: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=) 11: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=) 12: V7t9HoQFq6tA2kgolQRcRfuRldU.roa (hash: hielByb8U0KHIxejo6mEN1esKRKu+XesjxBKkhAqRLc=) 13: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=) 14: _tIJodTF0tjZ2BRpzO06esyTMcc.roa (hash: klg/XfnwGn0Trf6tOz+sC9FOx5B+7q/m4bYYCvOzprs=) 15: awEaR3mu_nadZa6gupzUMmxDjJc.roa (hash: /ZCqGj+NSGdaXR4Sc3N2f3ysSnVFG7540bZGMgnvEn4=) 16: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=) 17: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=) 18: h96UmOpvP2IiuRa1zdcgkZqRdgo.roa (hash: RVWvN7ouN/57gofsCcbTG1pWvWa8tMFeSDqaezJgkLg=) 19: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=) 20: l6HrdleVhy2ogO9R43FSLGOYE-0.roa (hash: I66ExL815Wc0ZDz47aWr6Q06u4QEOdOCM1yWi8w7a+g=) 21: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=) 22: lsMaKp3sC1c5czFXsxQDmNP9xmk.roa (hash: Dsgi94SjJOM3Yr7EX5Jzgm7yi1UrHtc8raZxtMY1V+E=) 23: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=) 24: mWZu0c3ccvwxHHlT9SVTQ6oiDK0.roa (hash: brqoqJsgc5iiFOBbdYvb+I1IyHssIw8FjziyxDUxro8=) 25: pMQVecamDodQSmBw-UmLqkRzTyk.roa (hash: EmfM/FtUUlT/f5+MPBX6UPv6rg0dkI+I1HJgurEQFXU=) 26: tbdaBfEdC2g4j5awlEN4zMAkaHQ.roa (hash: do9qwHU9rPws34K9e7M1l81/QvXBkYAmJ01DjPdwuoA=) 27: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=) 28: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=) 29: vCZg6yHD3XsRPwy9TgcJflXSBXo.roa (hash: vYBjx1Yzv0s/R05C9GEaDFepYhC35vrqYzu3ZIjIJXI=) 30: vKFd01lINY7HRrJ2_dwDiQU35jk.roa (hash: EvsKuWDSYn3JYsN/EsaPWkUuZAJip44s6VOQyBwOiXc=) 31: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=) 32: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:a8:d1:ca:73:58:36:f9:6c:d5:77:96:01:62:17:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Mar 26 01:01:08 2026 GMT Not After : Mar 27 01:01:08 2026 GMT Subject: CN=1963c5928a1f41288577fb736d8dd818e9a60407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ab:d3:81:e8:94:e5:d5:f9:a5:dc:9c:fd:44: 96:92:ac:23:fb:bb:3a:71:97:b4:fb:f7:69:12:40: 63:e9:1c:f9:90:2c:b0:d5:c6:34:89:b7:35:04:a0: 87:86:06:ba:13:26:50:d8:df:58:e0:2b:12:f2:f2: 7b:9d:80:c0:22:e8:b6:63:19:41:f1:79:e5:fa:b8: 5d:56:60:6e:9a:df:3b:8d:7e:fd:e0:51:92:c8:1c: ac:f6:a9:6a:ea:31:06:e1:5f:8b:e1:7d:62:02:2e: 72:1c:b1:a0:b6:9a:59:fd:2f:81:62:97:f7:a7:8a: fc:c4:03:e1:86:94:04:da:39:14:2a:f6:d0:9e:02: f3:dc:5e:99:42:54:1c:88:e7:d1:72:18:ee:e0:91: d8:45:15:0b:d2:5d:89:fd:bf:d4:bb:25:b8:14:0f: 83:e8:88:3f:aa:84:26:ba:79:cf:78:5d:2b:5b:c4: 01:4a:d8:26:7a:e8:c8:d8:8f:07:40:ba:7f:68:cb: 39:e8:3b:36:b7:5f:76:5e:b1:45:58:6d:dc:1a:a7: f8:cd:78:62:63:54:8d:2d:93:d0:43:3c:9b:c5:73: d1:16:0a:d7:08:aa:41:50:e9:48:02:ab:44:20:3a: 64:dd:c3:6b:9e:e8:b4:73:b7:54:71:38:40:80:bc: 4e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:63:C5:92:8A:1F:41:28:85:77:FB:73:6D:8D:D8:18:E9:A6:04:07 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:bd:a5:d4:94:08:73:0c:49:a5:ce:59:89:09:7e:c1:c8:66: 52:91:9d:37:7c:83:a7:b6:65:e7:82:20:21:70:b6:be:16:27: 90:35:fe:fd:1d:b6:14:46:53:72:53:64:16:40:14:e6:5e:ed: da:59:bf:10:ae:0c:f4:46:31:95:90:00:90:ce:0f:e2:bf:63: 13:17:4a:ce:aa:28:07:e8:a3:40:7c:10:10:9e:60:67:75:2b: 47:b0:90:ba:ee:f4:0a:6b:f7:eb:b3:c4:21:ba:8f:8e:0c:6b: 69:96:5b:a1:1f:8e:19:cf:9f:ba:46:b9:54:52:a3:86:b1:0a: 12:01:19:f0:e4:80:cb:1c:83:4b:ad:4f:3c:99:5a:30:12:60: b2:77:27:62:48:ff:bf:04:03:8a:66:c5:5e:b8:6b:c4:99:9d: d2:97:a1:d5:ba:58:2c:5b:28:ae:5a:27:21:7d:94:85:9b:b2: 22:bb:27:b8:fc:b3:ba:10:e7:86:ff:57:b9:80:56:73:92:5d: 76:9b:72:be:d7:e2:5b:a9:6c:f0:8c:8d:53:78:6e:8b:c8:d2: 5a:84:b2:03:25:9e:df:94:b7:84:bf:87:b1:06:a1:5f:a8:7d: 1c:48:3d:97:bc:48:f8:09:8a:bc:69:19:57:66:67:f8:ce:3c: cd:50:9b:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nqNHKc1g2+WzVd5YBYhcmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwMzI2MDEwMTA4WhcNMjYwMzI3MDEwMTA4WjAzMTEwLwYDVQQD EygxOTYzYzU5MjhhMWY0MTI4ODU3N2ZiNzM2ZDhkZDgxOGU5YTYwNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6vTgeiU5dX5pdyc/USWkqwj+7s6 cZe0+/dpEkBj6Rz5kCyw1cY0ibc1BKCHhga6EyZQ2N9Y4CsS8vJ7nYDAIui2YxlB 8Xnl+rhdVmBumt87jX794FGSyBys9qlq6jEG4V+L4X1iAi5yHLGgtppZ/S+BYpf3 p4r8xAPhhpQE2jkUKvbQngLz3F6ZQlQciOfRchju4JHYRRUL0l2J/b/UuyW4FA+D 6Ig/qoQmunnPeF0rW8QBStgmeujI2I8HQLp/aMs56Ds2t192XrFFWG3cGqf4zXhi Y1SNLZPQQzybxXPRFgrXCKpBUOlIAqtEIDpk3cNrnui0c7dUcThAgLxOFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBljxZKKH0EohXf7c22N2BjppgQHMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVb2l1JQI cwxJpc5ZiQl+wchmUpGdN3yDp7Zl54IgIXC2vhYnkDX+/R22FEZTclNkFkAU5l7t 2lm/EK4M9EYxlZAAkM4P4r9jExdKzqooB+ijQHwQEJ5gZ3UrR7CQuu70Cmv367PE IbqPjgxraZZboR+OGc+fuka5VFKjhrEKEgEZ8OSAyxyDS61PPJlaMBJgsncnYkj/ vwQDimbFXrhrxJmd0peh1bpYLFsorlonIX2UhZuyIrsnuPyzuhDnhv9XuYBWc5Jd dptyvtfiW6ls8IyNU3hui8jSWoSyAyWe35S3hL+HsQahX6h9HEg9l7xI+AmKvGkZ V2Zn+M48zVCbng== -----END CERTIFICATE-----Generated at Thu Mar 26 10:06:43 2026 by rpki-client