$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: dWEyKpIJ2i+tGprpR4qYmLz2hhjlZ/4Se1afF9rPZm4= Subject key identifier: 5F:23:54:21:8E:DF:A6:18:C4:F4:64:2F:62:4E:EB:F2:ED:1C:EB:38 Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 019E1EA378A37E53A797B313EB1C7D73D9E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 190B Signing time: Wed 13 May 2026 00:01:30 +0000 Manifest this update: Wed 13 May 2026 00:01:30 +0000 Manifest next update: Thu 14 May 2026 00:01:30 +0000 Files and hashes: 1: 1WyX2wYZfSpfBSYJmVIkxnQu2wQ.roa (hash: HByWovJax8W7lyVW8tq54HBM8ZSxxFTqPknO3ul1ROw=) 2: 2CXydi7pS_cJcMpLbvELMfs4pr4.roa (hash: 4VhEMr7PE71mfWduL3bPnzBAu34zlbw2TZ44djrJbfs=) 3: ABESchGm3xAWCWATli7x4kGiTzw.roa (hash: AnU+yC61NkHACr9HWnVDLRjrcdrvaYYu39Z2t2XH2V8=) 4: AkX-mzKyW-zWL7niXL60Uuhd2-M.roa (hash: KT91YU3baNR7x3ucuvqSZ47bi2WtNK8I/Rkt9bmg+ew=) 5: IwsvS8RMbeaKnb6W0isgZ_jGVmw.roa (hash: 4c2RJvFORctjrcpJUYKuJxaYNELJKpkNVKrS5LH92qg=) 6: J99XeamfX85WdvVj9bf7jMIVc1M.roa (hash: mqf7/m5EBvBpIA8HdJaRPy8S8x76AjMtaSPox8GG7EU=) 7: VOtCH4o4J2I_5xCMQITnNsVrQfM.roa (hash: lN9s8lkEygb8GJjfZSSBzQIfuy7TwscZaveIQRwQT+M=) 8: VsVyNiSsXQIos_8DFMvFrVCvPpA.roa (hash: R0tV98ZO0gRaUtsVcVg2fiIoo3NKUpn02E2MWrZq94I=) 9: _LeL1BNmnES7Us_tgk-2zM9WYz4.roa (hash: 6CIKHs+5sFlyV+xFBJTDb1/TPrK1K1Sk3+HBhp50WvE=) 10: aumQ2rFvvPhxeJtuueKJVvufvQo.roa (hash: ZFlq8TIHB2weJNR+r1TYQoztERUk3FxSRK57UxVkfCM=) 11: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: XQAWIWjue4AqEjaBgoQnILsRxvH5/Smr8ZaEYaDKxis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:a3:78:a3:7e:53:a7:97:b3:13:eb:1c:7d:73:d9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: May 13 00:01:30 2026 GMT Not After : May 14 00:01:30 2026 GMT Subject: CN=5f2354218edfa618c4f4642f624eebf2ed1ceb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b0:f3:9a:6a:11:ce:e9:16:e4:4e:b7:f1:a1: 4a:6f:7a:f9:9d:74:01:d7:a3:49:66:65:09:e5:99: 26:c9:e1:56:09:d3:63:03:83:c3:ec:d0:a1:6d:cf: fe:db:79:da:85:1b:20:ca:00:fe:db:5c:97:5f:da: 6e:fe:2a:d6:f1:91:4d:4e:26:5b:2d:25:bb:36:62: 6f:07:4b:b3:3f:74:ac:59:79:ff:34:f6:57:a6:0b: 24:a2:00:95:2e:69:47:a6:d5:fd:97:0f:1f:8f:c7: 54:cf:18:c4:40:18:1e:01:ba:9c:31:ae:c1:94:61: 73:2b:b9:36:52:d9:51:f8:26:29:dd:de:61:4a:72: 36:a8:47:7d:a7:cc:10:65:3c:23:0a:ba:64:ae:a6: 85:e9:80:42:ca:4b:1b:0e:d7:bf:8b:25:25:93:9e: b3:95:3b:ac:65:9b:d5:02:59:98:cf:5f:a9:bb:75: 83:e2:02:4b:4b:45:e0:ce:7b:08:16:09:ef:e5:43: 46:ce:3d:f0:26:b5:59:93:b0:e4:a5:84:92:1d:bd: ac:cd:d1:db:1f:79:9d:7d:22:b8:7a:37:e4:30:12: bb:fa:07:47:bb:33:64:bb:57:e5:8e:c0:16:a4:55: ce:08:05:83:ef:8b:23:2a:03:8f:95:d2:ce:f7:f8: 88:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:23:54:21:8E:DF:A6:18:C4:F4:64:2F:62:4E:EB:F2:ED:1C:EB:38 X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:78:13:8f:e2:08:73:69:c2:30:80:20:a8:47:6f:1c:a7:bb: e5:4d:1b:42:12:3c:8a:a3:90:3f:f0:d0:ee:20:b3:41:f1:0f: 28:6d:e4:7f:d0:6a:bd:8d:df:8a:6b:20:d7:76:30:f5:6d:55: f4:46:be:0e:fb:94:5a:ca:8b:9d:4b:99:c4:11:fe:e7:80:8c: 51:fc:7d:ba:c8:67:8a:8f:71:4d:ef:68:db:e8:81:b1:c1:75: 04:08:06:10:14:b0:9b:0e:0b:ec:7f:64:fa:ab:cb:cb:f0:fa: ad:82:e8:d5:af:91:b8:99:9a:6f:50:83:db:78:14:fd:ec:45: 15:1b:e0:5b:76:20:16:d2:d0:1b:2a:b4:1c:8b:23:ad:e0:ec: 1f:27:15:7e:41:be:86:f4:fe:c3:0f:59:ea:be:9a:f3:58:8f: fa:af:30:dd:43:68:56:17:ab:4d:51:b3:45:a2:ac:18:41:f1: 6a:bd:ee:9a:86:8f:5f:c1:d9:b8:27:b4:45:bd:58:c9:50:37: 73:d8:7d:f8:73:91:80:0b:2d:89:fe:fb:6b:f0:99:e8:81:8b: 7a:44:ba:3e:b8:d9:c4:8b:f1:b0:04:79:eb:a0:3e:93:a0:41: 34:ff:c7:aa:6c:95:dd:f8:94:98:1d:6b:7b:aa:5d:57:40:ef: 5c:f9:4c:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eo3ijflOnl7MT6xx9c9npMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjYwNTEzMDAwMTMwWhcNMjYwNTE0MDAwMTMwWjAzMTEwLwYDVQQD Eyg1ZjIzNTQyMThlZGZhNjE4YzRmNDY0MmY2MjRlZWJmMmVkMWNlYjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrDzmmoRzukW5E638aFKb3r5nXQB 16NJZmUJ5ZkmyeFWCdNjA4PD7NChbc/+23nahRsgygD+21yXX9pu/irW8ZFNTiZb LSW7NmJvB0uzP3SsWXn/NPZXpgskogCVLmlHptX9lw8fj8dUzxjEQBgeAbqcMa7B lGFzK7k2UtlR+CYp3d5hSnI2qEd9p8wQZTwjCrpkrqaF6YBCyksbDte/iyUlk56z lTusZZvVAlmYz1+pu3WD4gJLS0XgznsIFgnv5UNGzj3wJrVZk7DkpYSSHb2szdHb H3mdfSK4ejfkMBK7+gdHuzNku1fljsAWpFXOCAWD74sjKgOPldLO9/iIzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8jVCGO36YYxPRkL2JO6/LtHOs4MB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3gTj+II c2nCMIAgqEdvHKe75U0bQhI8iqOQP/DQ7iCzQfEPKG3kf9BqvY3fimsg13Yw9W1V 9Ea+DvuUWsqLnUuZxBH+54CMUfx9ushnio9xTe9o2+iBscF1BAgGEBSwmw4L7H9k +qvLy/D6rYLo1a+RuJmab1CD23gU/exFFRvgW3YgFtLQGyq0HIsjreDsHycVfkG+ hvT+ww9Z6r6a81iP+q8w3UNoVherTVGzRaKsGEHxar3umoaPX8HZuCe0Rb1YyVA3 c9h9+HORgAstif77a/CZ6IGLekS6PrjZxIvxsAR566A+k6BBNP/HqmyV3fiUmB1r e6pdV0DvXPlMHg== -----END CERTIFICATE-----Generated at Wed May 13 09:24:44 2026 by rpki-client