$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft File: IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json) Hash identifier: lV/sQGkYTUuj1GCwAPK6dW8nplmx/1lT/aA6Mp6waSE= Subject key identifier: FF:64:19:6D:4A:B0:C9:5B:55:0B:7E:70:D5:00:BC:1A:F2:50:D9:64 Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 019F916C781E5E04ED23DF40401927871519 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft Manifest number: 1538 Signing time: Fri 24 Jul 2026 00:00:32 +0000 Manifest this update: Fri 24 Jul 2026 00:00:32 +0000 Manifest next update: Sat 25 Jul 2026 00:00:32 +0000 Files and hashes: 1: 5Q5SmVwCYdWVR4jJ4yPXGm6nx4E.roa (hash: E+HPw/BSZoy+FRt+tdA/pl0xYJ8cBINy/SV66sa2K/Q=) 2: 5VJALfhFe7o_AUDjHLN1heHmdsg.roa (hash: 1gHtL7JZ6Kw9aV9pDDeqj4dLmT+0UP21NwOVssRKidM=) 3: 6V9r_f6L2m84KT2hfkYO8YKk4Qw.roa (hash: IggBLq2a8EpveAoDyReWvG833q0pjf83jxc+h1sihOI=) 4: DKzQQ-3c9fOllLADXKp3F81W6-A.roa (hash: jw/mwS4Ak7mqrGqRDzGrcRqXeDj4kvRniZLDaz5MSF8=) 5: Hs7JKhJtwC6A36Kjs-_4TZrgnpk.roa (hash: 099VsdRInIr4UycUi5XaCXZzdZOiho1gkx4lV1EIJOk=) 6: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: 9k92p37TGkU6kEo8Kxrpyb61JUN5CtJW9EETmMZE4DU=) 7: M8WsoMnGPVNmkP0_GRgTxjZRJnE.roa (hash: +25YQ0hNnRgpLZqiohuE6AMcgCqjkbxQlkrhVlizZHg=) 8: PXFNsoTvcWLxutWM2U5o07bf39c.roa (hash: cG54vwBTWhTGlpn6HVoksrAbeIW3ITTreN2nYOiUpbE=) 9: PjuATr_UD6dPJ0RwbBG9WM6DQBU.roa (hash: FIh/JLPct1tPMk6cZXHr49IFJ+6jWnbcJViSmXmQnYI=) 10: V7PWzU2t3vkVAV89dEpwUD3smfA.roa (hash: NqsbYJcQ3xvsOoac8r1+2QIWje6UGU60aNdH7WHDSQo=) 11: VJ5x4bTZ9uK9NTcParFas1iO94c.roa (hash: YUotaVqMnXNqH2dTVeK+ioLm7GFUTiyLmJLQkyPf5rU=) 12: XetavruOlmwPuDQkb37aWeTU5Gs.roa (hash: OVMRMjZpXUWp7zeiQKGZgTeIS0wuW8Tr2m6fFrqkMg0=) 13: r3n82DH_kgDzSCiIox4JVvtuuKs.roa (hash: GscB1Y7vMXzC56pZeD7dY6Lb7cyydY/SgoKF16qKY1A=) 14: tgbG7zzhd0TpX7VXUJAj4569L48.roa (hash: XrlNtaTTKiEVZlZoi4ceAdhJeiK4Z6r68mciWuydsEY=) 15: uo5w_hamUoonPJRV5DL4G24KROY.roa (hash: aLK0bMT0B6Nh4M0ukHsojn4vtUCdZ1/I4BO6p+c6iOw=) 16: w2zfAC9OFoRmjotH_tHfZysWNMM.roa (hash: a05kJJ6+2j1m7iM1OBjj6aSX+sB+ZxnLme7+mqcwB44=) 17: xO4PnwUl40-LplCi16rGoCZS9YU.roa (hash: /JSxXf/o8DRoe32IgSj2KVEoIDnrUXVHn3+S3v/zp1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:6c:78:1e:5e:04:ed:23:df:40:40:19:27:87:15:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Jul 24 00:00:32 2026 GMT Not After : Jul 25 00:00:32 2026 GMT Subject: CN=ff64196d4ab0c95b550b7e70d500bc1af250d964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3e:45:5c:b7:06:71:6a:13:13:2a:5e:fc:f8: fe:08:7f:e5:04:67:d3:98:de:92:51:97:91:47:10: 93:13:55:a7:fc:d0:55:a3:c7:69:f9:fa:30:b7:9c: 11:f7:70:64:0c:85:5c:65:75:f3:1e:de:17:69:dd: 06:ec:7d:de:ff:5e:32:0f:96:bd:51:eb:9c:df:17: c8:fa:6f:62:6b:7b:af:b3:52:8b:1d:46:cc:7d:f7: 91:1a:55:56:f5:bc:0c:39:ee:7a:96:3b:27:60:d4: d2:08:ea:0b:b5:bb:5f:1d:e7:0b:8f:ed:2d:0b:9b: 26:4c:7f:ec:2a:c2:53:dd:f2:15:14:83:66:2c:8d: 30:19:c1:08:af:79:1a:ee:05:af:71:a5:4a:61:1f: ca:3a:e8:63:ce:2b:b9:af:9f:2e:1c:23:e6:e5:9c: 0a:8c:22:a5:a0:16:5e:4c:8a:48:a5:13:72:04:11: 99:91:6c:75:08:9e:d7:51:5b:24:dd:3a:14:5c:94: c8:5d:6c:8d:36:34:bc:cd:ac:57:cd:84:00:91:66: 63:d5:df:68:29:d1:7b:fb:80:39:4b:ec:db:a9:45: fb:e0:0e:ae:9f:ee:ea:4c:bf:9e:47:5e:c3:df:a8: ad:70:b1:02:a3:af:29:72:16:ed:42:9f:09:b2:50: aa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:64:19:6D:4A:B0:C9:5B:55:0B:7E:70:D5:00:BC:1A:F2:50:D9:64 X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f0:94:77:29:97:f2:e0:f4:7e:59:7a:5a:f8:2d:36:90:ce: 18:17:9a:80:ec:a2:24:5b:96:4f:08:fb:54:e3:dd:bb:dc:dc: 09:be:01:77:fa:e1:c1:d8:32:7a:c0:1a:95:c0:40:42:55:da: b3:7a:89:15:08:92:30:eb:16:28:7b:54:35:39:d3:40:06:89: 61:7d:0f:6e:b7:59:84:11:33:2b:86:06:c2:a1:96:b0:61:51: b9:1c:c9:71:c2:9c:e5:f5:1d:50:8e:7d:c7:d2:1c:21:43:f7: 68:43:1b:cc:07:9b:d4:24:00:75:75:40:ce:1c:9f:d7:63:75: 16:12:b4:0d:64:98:e6:b1:dd:51:51:c4:be:a2:78:41:e9:19: 38:73:28:0e:84:55:00:a7:fe:7c:97:f5:32:8d:51:b6:a3:f1: ad:a6:76:dc:aa:78:5f:75:4d:e1:f9:f2:0e:8a:d2:ba:e8:ec: f1:38:e3:00:e3:c8:5d:47:f4:6f:92:1c:e1:93:76:29:40:03: f3:dc:e4:cd:96:c6:85:f2:45:a8:5d:b0:57:f8:15:45:6e:0a: df:32:70:a5:5e:78:5d:94:34:be:5c:dd:6b:90:ae:dd:f5:d5: 44:b6:ff:47:1d:b5:98:d9:1a:88:56:19:6f:67:78:6c:98:9d: c6:d1:98:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RbHgeXgTtI99AQBknhxUZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjYwNzI0MDAwMDMyWhcNMjYwNzI1MDAwMDMyWjAzMTEwLwYDVQQD EyhmZjY0MTk2ZDRhYjBjOTViNTUwYjdlNzBkNTAwYmMxYWYyNTBkOTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T5FXLcGcWoTEype/Pj+CH/lBGfT mN6SUZeRRxCTE1Wn/NBVo8dp+fowt5wR93BkDIVcZXXzHt4Xad0G7H3e/14yD5a9 Ueuc3xfI+m9ia3uvs1KLHUbMffeRGlVW9bwMOe56ljsnYNTSCOoLtbtfHecLj+0t C5smTH/sKsJT3fIVFINmLI0wGcEIr3ka7gWvcaVKYR/KOuhjziu5r58uHCPm5ZwK jCKloBZeTIpIpRNyBBGZkWx1CJ7XUVsk3ToUXJTIXWyNNjS8zaxXzYQAkWZj1d9o KdF7+4A5S+zbqUX74A6un+7qTL+eR17D36itcLECo68pchbtQp8JslCq3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9kGW1KsMlbVQt+cNUAvBryUNlkMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPCUdymX 8uD0fll6WvgtNpDOGBeagOyiJFuWTwj7VOPdu9zcCb4Bd/rhwdgyesAalcBAQlXa s3qJFQiSMOsWKHtUNTnTQAaJYX0PbrdZhBEzK4YGwqGWsGFRuRzJccKc5fUdUI59 x9IcIUP3aEMbzAeb1CQAdXVAzhyf12N1FhK0DWSY5rHdUVHEvqJ4QekZOHMoDoRV AKf+fJf1Mo1RtqPxraZ23Kp4X3VN4fnyDorSuujs8TjjAOPIXUf0b5Ic4ZN2KUAD 89zkzZbGhfJFqF2wV/gVRW4K3zJwpV54XZQ0vlzda5Cu3fXVRLb/Rx21mNkaiFYZ b2d4bJidxtGYUw== -----END CERTIFICATE-----Generated at Fri Jul 24 09:29:59 2026 by rpki-client