$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: XJ8Ew2BBSV3N8K2SE0Cg/K83Qu0QzysQeS3iYmRKUg4= Subject key identifier: 1E:A9:36:BB:55:46:80:75:07:A0:FF:86:D1:8D:68:47:9C:36:60:D1 Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 019F916D9C64608866CF0BBCC454D23B8595 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 19CB Signing time: Fri 24 Jul 2026 00:01:47 +0000 Manifest this update: Fri 24 Jul 2026 00:01:47 +0000 Manifest next update: Sat 25 Jul 2026 00:01:47 +0000 Files and hashes: 1: 1WyX2wYZfSpfBSYJmVIkxnQu2wQ.roa (hash: HByWovJax8W7lyVW8tq54HBM8ZSxxFTqPknO3ul1ROw=) 2: 2CXydi7pS_cJcMpLbvELMfs4pr4.roa (hash: 4VhEMr7PE71mfWduL3bPnzBAu34zlbw2TZ44djrJbfs=) 3: ABESchGm3xAWCWATli7x4kGiTzw.roa (hash: AnU+yC61NkHACr9HWnVDLRjrcdrvaYYu39Z2t2XH2V8=) 4: AkX-mzKyW-zWL7niXL60Uuhd2-M.roa (hash: KT91YU3baNR7x3ucuvqSZ47bi2WtNK8I/Rkt9bmg+ew=) 5: IwsvS8RMbeaKnb6W0isgZ_jGVmw.roa (hash: 4c2RJvFORctjrcpJUYKuJxaYNELJKpkNVKrS5LH92qg=) 6: J99XeamfX85WdvVj9bf7jMIVc1M.roa (hash: mqf7/m5EBvBpIA8HdJaRPy8S8x76AjMtaSPox8GG7EU=) 7: VOtCH4o4J2I_5xCMQITnNsVrQfM.roa (hash: lN9s8lkEygb8GJjfZSSBzQIfuy7TwscZaveIQRwQT+M=) 8: VsVyNiSsXQIos_8DFMvFrVCvPpA.roa (hash: R0tV98ZO0gRaUtsVcVg2fiIoo3NKUpn02E2MWrZq94I=) 9: _LeL1BNmnES7Us_tgk-2zM9WYz4.roa (hash: 6CIKHs+5sFlyV+xFBJTDb1/TPrK1K1Sk3+HBhp50WvE=) 10: aumQ2rFvvPhxeJtuueKJVvufvQo.roa (hash: ZFlq8TIHB2weJNR+r1TYQoztERUk3FxSRK57UxVkfCM=) 11: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: ItnyUolCDzbqvuQZxdHy/bnK/6iDn8fQZQAnVKv/paE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:6d:9c:64:60:88:66:cf:0b:bc:c4:54:d2:3b:85:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Jul 24 00:01:47 2026 GMT Not After : Jul 25 00:01:47 2026 GMT Subject: CN=1ea936bb5546807507a0ff86d18d68479c3660d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2a:1d:a7:c8:a7:0b:f6:8c:b2:af:aa:ad:e7: fd:fc:a7:1a:8d:fa:ed:e6:27:e2:83:ae:bd:70:f3: 04:bb:df:b9:56:6a:c9:b7:88:d2:fb:01:02:0d:13: 27:19:93:7b:72:03:67:16:28:33:3a:45:12:3e:74: 94:71:00:79:e7:08:f9:c0:b5:02:81:69:fa:96:b4: 19:ff:14:1d:ac:28:13:2e:4f:6b:3e:83:e5:f8:30: b8:13:3c:c6:64:22:cb:52:2a:ad:f6:26:b3:10:f1: 51:a9:9e:94:e6:66:8a:d5:cf:ae:12:bd:32:66:c9: 9a:6c:1e:9a:2d:12:8e:68:bb:81:26:6b:b3:b5:d5: 6a:36:94:c9:0c:72:ab:1f:b9:15:7c:1b:45:8f:bf: 45:a3:e6:3f:2c:d0:de:68:85:dc:85:b8:14:68:bc: c3:06:31:87:78:a2:f0:4b:6e:06:eb:b6:19:e7:81: 1d:fb:0e:2b:d2:de:83:e9:af:03:49:1a:0b:36:c3: 6a:cf:6b:e7:6a:39:17:5c:de:40:28:98:16:33:71: bd:c5:59:14:37:7c:90:0a:b6:9e:5f:cb:a6:73:41: be:85:bc:38:2d:f4:b9:cd:33:43:86:16:ee:1d:09: cb:96:50:e2:fd:70:c6:2c:38:f4:9e:82:87:9f:a0: 48:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A9:36:BB:55:46:80:75:07:A0:FF:86:D1:8D:68:47:9C:36:60:D1 X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a0:dc:44:7f:9a:2e:ef:1d:85:c8:40:93:d2:80:88:93:f4: 7c:df:f0:b0:59:a8:00:c3:3e:ab:1a:4b:60:a9:7b:2d:d6:9c: c1:b7:12:5b:26:9a:ef:2f:20:3a:85:42:50:9d:65:f4:3d:8e: e8:62:4a:f0:09:a2:19:8c:63:2f:be:a3:e2:16:9e:b5:05:5a: 0d:07:5a:5a:20:27:ed:30:2a:8a:3a:05:c5:e9:42:3a:c0:1f: 64:72:66:80:09:18:61:f9:0e:43:c7:19:38:d4:84:16:5c:12: dd:18:bf:63:b3:84:35:c3:40:66:58:f5:3a:41:c0:78:f1:88: 5d:8a:f6:b7:ba:d5:3f:9d:80:86:f3:56:a2:00:c9:b9:e0:ac: fe:93:aa:ac:33:4c:f9:1a:17:65:be:82:e6:9c:bc:ef:9a:52: 78:e2:58:90:52:a6:4e:38:4d:ea:f2:a9:bf:1e:a0:8e:f1:5f: b9:2c:2a:37:21:8d:97:d6:6f:83:06:29:9a:b5:84:ca:76:f0: a4:09:7a:b1:04:c8:9b:3e:9a:66:7a:2e:84:ec:4a:5c:d2:5e: 67:cc:3e:57:bf:53:2e:14:de:2d:96:8f:dd:f9:fb:91:e5:76: 8b:91:0c:52:33:0f:3c:45:6e:f6:35:8b:2d:29:da:a2:72:73: 63:52:ff:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RbZxkYIhmzwu8xFTSO4WVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjYwNzI0MDAwMTQ3WhcNMjYwNzI1MDAwMTQ3WjAzMTEwLwYDVQQD EygxZWE5MzZiYjU1NDY4MDc1MDdhMGZmODZkMThkNjg0NzljMzY2MGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyodp8inC/aMsq+qref9/Kcajfrt 5ifig669cPMEu9+5VmrJt4jS+wECDRMnGZN7cgNnFigzOkUSPnSUcQB55wj5wLUC gWn6lrQZ/xQdrCgTLk9rPoPl+DC4EzzGZCLLUiqt9iazEPFRqZ6U5maK1c+uEr0y ZsmabB6aLRKOaLuBJmuztdVqNpTJDHKrH7kVfBtFj79Fo+Y/LNDeaIXchbgUaLzD BjGHeKLwS24G67YZ54Ed+w4r0t6D6a8DSRoLNsNqz2vnajkXXN5AKJgWM3G9xVkU N3yQCraeX8umc0G+hbw4LfS5zTNDhhbuHQnLllDi/XDGLDj0noKHn6BIVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6pNrtVRoB1B6D/htGNaEecNmDRMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6DcRH+a Lu8dhchAk9KAiJP0fN/wsFmoAMM+qxpLYKl7LdacwbcSWyaa7y8gOoVCUJ1l9D2O 6GJK8AmiGYxjL76j4haetQVaDQdaWiAn7TAqijoFxelCOsAfZHJmgAkYYfkOQ8cZ ONSEFlwS3Ri/Y7OENcNAZlj1OkHAePGIXYr2t7rVP52AhvNWogDJueCs/pOqrDNM +RoXZb6C5py875pSeOJYkFKmTjhN6vKpvx6gjvFfuSwqNyGNl9ZvgwYpmrWEynbw pAl6sQTImz6aZnouhOxKXNJeZ8w+V79TLhTeLZaP3fn7keV2i5EMUjMPPEVu9jWL LSnaonJzY1L/Hg== -----END CERTIFICATE-----Generated at Fri Jul 24 07:19:09 2026 by rpki-client