$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: eyrrsTIuBj0E8MktRykojlmbAxznMLEpUMWCkTYEy5Q= Subject key identifier: 33:F8:2C:10:EF:CC:DD:0F:7B:2A:A2:03:74:DE:AD:24:5F:36:AA:12 Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 01A0D7CC16D1D7C9A6A1F473435392C53535 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 1A74 Signing time: Fri 25 Sep 2026 09:01:11 +0000 Manifest this update: Fri 25 Sep 2026 09:01:11 +0000 Manifest next update: Sat 26 Sep 2026 09:01:11 +0000 Files and hashes: 1: 1WyX2wYZfSpfBSYJmVIkxnQu2wQ.roa (hash: HByWovJax8W7lyVW8tq54HBM8ZSxxFTqPknO3ul1ROw=) 2: 2CXydi7pS_cJcMpLbvELMfs4pr4.roa (hash: 4VhEMr7PE71mfWduL3bPnzBAu34zlbw2TZ44djrJbfs=) 3: ABESchGm3xAWCWATli7x4kGiTzw.roa (hash: AnU+yC61NkHACr9HWnVDLRjrcdrvaYYu39Z2t2XH2V8=) 4: AkX-mzKyW-zWL7niXL60Uuhd2-M.roa (hash: KT91YU3baNR7x3ucuvqSZ47bi2WtNK8I/Rkt9bmg+ew=) 5: IwsvS8RMbeaKnb6W0isgZ_jGVmw.roa (hash: 4c2RJvFORctjrcpJUYKuJxaYNELJKpkNVKrS5LH92qg=) 6: J99XeamfX85WdvVj9bf7jMIVc1M.roa (hash: mqf7/m5EBvBpIA8HdJaRPy8S8x76AjMtaSPox8GG7EU=) 7: VOtCH4o4J2I_5xCMQITnNsVrQfM.roa (hash: lN9s8lkEygb8GJjfZSSBzQIfuy7TwscZaveIQRwQT+M=) 8: VsVyNiSsXQIos_8DFMvFrVCvPpA.roa (hash: R0tV98ZO0gRaUtsVcVg2fiIoo3NKUpn02E2MWrZq94I=) 9: _LeL1BNmnES7Us_tgk-2zM9WYz4.roa (hash: 6CIKHs+5sFlyV+xFBJTDb1/TPrK1K1Sk3+HBhp50WvE=) 10: aumQ2rFvvPhxeJtuueKJVvufvQo.roa (hash: ZFlq8TIHB2weJNR+r1TYQoztERUk3FxSRK57UxVkfCM=) 11: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: K4dc7ISrIIHRSpUyyF2F95+SxjfE3c7YFArEFN8ipi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d7:cc:16:d1:d7:c9:a6:a1:f4:73:43:53:92:c5:35:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Sep 25 09:01:11 2026 GMT Not After : Sep 26 09:01:11 2026 GMT Subject: CN=33f82c10efccdd0f7b2aa20374dead245f36aa12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:53:4e:df:47:6c:74:85:d3:77:47:b3:9c:cb: 84:ef:78:62:df:46:53:5e:44:90:b0:05:3e:74:d7: b6:98:ee:af:c7:67:ab:ca:c4:5f:f3:86:23:32:73: af:a4:03:3a:54:99:25:5a:5e:11:d8:2b:9f:f3:d5: 9a:e8:c1:e0:d5:63:9f:a8:07:20:02:01:0c:0e:58: 9a:80:7b:54:4b:8a:a2:fd:17:30:3c:15:c2:60:43: 3a:96:22:61:88:d1:42:78:2a:dc:c0:36:bb:b3:89: ab:13:d5:95:b4:0e:ed:44:4b:43:66:0c:f2:1f:0f: 69:5f:b8:68:5d:19:0c:9f:6f:d8:b0:24:83:50:46: 23:f2:23:61:8f:30:52:2b:df:0e:e2:64:9f:e8:5c: a3:3f:c3:98:20:bf:22:09:fa:38:3f:1a:c2:df:21: ae:fb:31:b7:5c:24:06:2c:07:df:46:d6:54:fe:3d: 89:00:97:89:0f:9d:5a:1b:73:36:ab:51:59:06:96: 39:79:51:8f:67:3b:81:c5:14:18:1b:fc:bd:b8:ac: 43:16:4e:44:16:80:61:96:ee:f4:13:80:ef:ce:d2: 9f:7f:60:18:46:82:f7:3e:f3:52:c2:cf:79:1e:cd: d9:00:2a:2c:ab:c5:8d:c4:d3:5c:4f:94:a3:4f:eb: 3e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F8:2C:10:EF:CC:DD:0F:7B:2A:A2:03:74:DE:AD:24:5F:36:AA:12 X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0c:10:c1:6d:9d:08:d8:76:9f:9f:33:b6:0d:d8:db:b8:7e: aa:ce:91:75:02:fd:e6:03:6c:55:6a:6e:96:24:db:de:c4:1b: 0b:37:ee:11:d1:39:e3:62:b0:eb:51:13:eb:f3:73:f6:9e:f8: 6c:42:d5:6b:4b:8d:37:45:7e:8b:1e:f1:58:c1:54:b8:0e:83: e8:fb:0e:61:91:bd:4f:b9:3a:79:5d:6a:f0:fe:59:42:71:5c: c0:64:fd:43:f9:45:94:88:6c:34:0c:12:fe:3c:74:04:af:3b: 19:d7:b4:02:87:ce:7f:44:c2:13:af:2a:6c:3c:5a:72:32:1b: 06:63:59:63:9e:3e:de:3c:69:a7:37:3a:3e:09:ae:9d:e2:35: 10:1e:77:9d:da:1f:af:54:f8:7e:f6:8b:89:17:84:86:23:f5: 21:12:e2:62:b6:48:9b:f7:05:74:65:0c:3f:1f:8f:90:0a:0b: d8:63:69:db:ad:ff:9d:4d:51:3c:2c:7e:d8:2a:3d:d5:1e:72: 3c:6d:c0:41:da:a5:59:9f:e7:29:da:59:ba:77:64:cb:fe:dd: 1b:8e:ca:b0:fe:fe:15:e0:b4:21:09:2d:b3:6e:fd:24:24:bb: ae:d7:51:94:34:39:9c:5a:ae:4a:d2:72:bc:f7:36:97:5a:73: 63:f9:b6:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDXzBbR18mmofRzQ1OSxTU1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjYwOTI1MDkwMTExWhcNMjYwOTI2MDkwMTExWjAzMTEwLwYDVQQD EygzM2Y4MmMxMGVmY2NkZDBmN2IyYWEyMDM3NGRlYWQyNDVmMzZhYTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FNO30dsdIXTd0eznMuE73hi30ZT XkSQsAU+dNe2mO6vx2erysRf84YjMnOvpAM6VJklWl4R2Cuf89Wa6MHg1WOfqAcg AgEMDliagHtUS4qi/RcwPBXCYEM6liJhiNFCeCrcwDa7s4mrE9WVtA7tREtDZgzy Hw9pX7hoXRkMn2/YsCSDUEYj8iNhjzBSK98O4mSf6FyjP8OYIL8iCfo4PxrC3yGu +zG3XCQGLAffRtZU/j2JAJeJD51aG3M2q1FZBpY5eVGPZzuBxRQYG/y9uKxDFk5E FoBhlu70E4DvztKff2AYRoL3PvNSws95Hs3ZACosq8WNxNNcT5SjT+s+/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDP4LBDvzN0PeyqiA3TerSRfNqoSMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQwQwW2d CNh2n58ztg3Y27h+qs6RdQL95gNsVWpuliTb3sQbCzfuEdE542Kw61ET6/Nz9p74 bELVa0uNN0V+ix7xWMFUuA6D6PsOYZG9T7k6eV1q8P5ZQnFcwGT9Q/lFlIhsNAwS /jx0BK87Gde0AofOf0TCE68qbDxacjIbBmNZY54+3jxppzc6PgmuneI1EB53ndof r1T4fvaLiReEhiP1IRLiYrZIm/cFdGUMPx+PkAoL2GNp263/nU1RPCx+2Co91R5y PG3AQdqlWZ/nKdpZundky/7dG47KsP7+FeC0IQkts279JCS7rtdRlDQ5nFquStJy vPc2l1pzY/m2Vw== -----END CERTIFICATE-----Generated at Fri Sep 25 18:41:43 2026 by rpki-client