$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft File: IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json) Hash identifier: KzZEJMTkKwRG8xcLACgesHAI71v7GjxApu9lo5fjfRo= Subject key identifier: 2B:1E:AD:37:79:DF:DB:CA:1D:75:70:73:48:6E:5B:35:CA:EB:06:F7 Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 019F935ACFB01668FCF465B590F18885EEE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft Manifest number: 1539 Signing time: Fri 24 Jul 2026 09:00:29 +0000 Manifest this update: Fri 24 Jul 2026 09:00:29 +0000 Manifest next update: Sat 25 Jul 2026 09:00:29 +0000 Files and hashes: 1: 5Q5SmVwCYdWVR4jJ4yPXGm6nx4E.roa (hash: E+HPw/BSZoy+FRt+tdA/pl0xYJ8cBINy/SV66sa2K/Q=) 2: 5VJALfhFe7o_AUDjHLN1heHmdsg.roa (hash: 1gHtL7JZ6Kw9aV9pDDeqj4dLmT+0UP21NwOVssRKidM=) 3: 6V9r_f6L2m84KT2hfkYO8YKk4Qw.roa (hash: IggBLq2a8EpveAoDyReWvG833q0pjf83jxc+h1sihOI=) 4: DKzQQ-3c9fOllLADXKp3F81W6-A.roa (hash: jw/mwS4Ak7mqrGqRDzGrcRqXeDj4kvRniZLDaz5MSF8=) 5: Hs7JKhJtwC6A36Kjs-_4TZrgnpk.roa (hash: 099VsdRInIr4UycUi5XaCXZzdZOiho1gkx4lV1EIJOk=) 6: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: Z9aiNfj/1GPDVJpYG8aDWpv0vNpO5WedJsXPUagqShU=) 7: M8WsoMnGPVNmkP0_GRgTxjZRJnE.roa (hash: +25YQ0hNnRgpLZqiohuE6AMcgCqjkbxQlkrhVlizZHg=) 8: PXFNsoTvcWLxutWM2U5o07bf39c.roa (hash: cG54vwBTWhTGlpn6HVoksrAbeIW3ITTreN2nYOiUpbE=) 9: PjuATr_UD6dPJ0RwbBG9WM6DQBU.roa (hash: FIh/JLPct1tPMk6cZXHr49IFJ+6jWnbcJViSmXmQnYI=) 10: V7PWzU2t3vkVAV89dEpwUD3smfA.roa (hash: NqsbYJcQ3xvsOoac8r1+2QIWje6UGU60aNdH7WHDSQo=) 11: VJ5x4bTZ9uK9NTcParFas1iO94c.roa (hash: YUotaVqMnXNqH2dTVeK+ioLm7GFUTiyLmJLQkyPf5rU=) 12: XetavruOlmwPuDQkb37aWeTU5Gs.roa (hash: OVMRMjZpXUWp7zeiQKGZgTeIS0wuW8Tr2m6fFrqkMg0=) 13: r3n82DH_kgDzSCiIox4JVvtuuKs.roa (hash: GscB1Y7vMXzC56pZeD7dY6Lb7cyydY/SgoKF16qKY1A=) 14: tgbG7zzhd0TpX7VXUJAj4569L48.roa (hash: XrlNtaTTKiEVZlZoi4ceAdhJeiK4Z6r68mciWuydsEY=) 15: uo5w_hamUoonPJRV5DL4G24KROY.roa (hash: aLK0bMT0B6Nh4M0ukHsojn4vtUCdZ1/I4BO6p+c6iOw=) 16: w2zfAC9OFoRmjotH_tHfZysWNMM.roa (hash: a05kJJ6+2j1m7iM1OBjj6aSX+sB+ZxnLme7+mqcwB44=) 17: xO4PnwUl40-LplCi16rGoCZS9YU.roa (hash: /JSxXf/o8DRoe32IgSj2KVEoIDnrUXVHn3+S3v/zp1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:93:5a:cf:b0:16:68:fc:f4:65:b5:90:f1:88:85:ee:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Jul 24 09:00:29 2026 GMT Not After : Jul 25 09:00:29 2026 GMT Subject: CN=2b1ead3779dfdbca1d757073486e5b35caeb06f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:32:cf:1d:62:bc:6e:7b:a6:50:a8:89:b4:44: f4:8b:0f:58:40:05:fb:8c:cc:0a:04:33:ed:12:b8: 2a:4f:c2:20:c5:bd:ac:09:12:ad:6c:54:fc:af:b1: f9:e4:fa:cd:6c:12:f8:2a:b5:32:36:10:07:29:d3: 69:a8:b7:31:75:fe:2f:a5:ec:96:99:7d:4a:7c:84: 79:81:d3:bc:6f:97:cd:a3:14:ce:3f:e2:5b:bd:1f: 2c:67:95:2a:b5:7f:41:5c:38:9d:ed:a1:67:46:a5: 1e:76:23:bb:4d:4e:17:5a:1d:46:2f:6a:c7:cc:a5: 76:87:22:6c:0a:db:6b:4b:4c:68:43:b0:e6:07:eb: 43:23:4a:73:18:23:0e:0d:60:ad:1e:55:90:6e:55: 02:92:dc:c9:f7:69:04:b6:23:8a:65:1d:6c:ec:40: 02:96:d5:89:00:a9:90:87:6a:6c:40:46:39:a2:9f: 6e:68:e9:b8:3a:88:b0:10:b3:78:20:2a:c0:40:78: 14:56:a9:1b:47:e2:62:5e:6b:43:e4:b1:08:af:f5: 84:cd:34:32:91:d0:03:f8:74:ee:3e:98:4b:fe:66: eb:52:80:64:13:73:75:a9:ae:78:2f:61:b0:bc:b2: c3:1b:d9:64:c7:96:8b:06:c2:10:d6:1a:90:9a:0d: 5e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1E:AD:37:79:DF:DB:CA:1D:75:70:73:48:6E:5B:35:CA:EB:06:F7 X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c2:eb:79:5b:e0:0d:10:39:e7:23:4b:04:ee:f3:af:48:0e: 11:37:a6:d7:61:2f:46:22:6f:f5:d3:28:ee:b9:9e:5d:e5:e6: 56:bf:23:bd:3f:9d:97:b2:92:b0:b3:6f:0a:77:23:fc:60:6f: 23:99:1c:29:ea:17:8f:49:ed:65:44:85:4c:b5:70:ed:ba:1a: e4:31:9c:04:65:8f:73:5c:11:e0:a5:b0:64:c3:e3:38:19:40: c4:d7:d6:ea:95:3a:c6:0d:8b:59:ca:46:b6:26:a1:68:72:d3: 4f:a4:ff:0c:42:c0:56:a5:85:9a:53:eb:64:30:d9:7a:85:81: 75:5f:b1:6a:f5:c8:b3:7f:c9:ac:68:a1:69:ae:eb:11:f7:39: be:c2:28:8a:ac:14:54:52:13:c2:e5:26:aa:19:10:18:8c:43: 41:f9:ed:a8:b0:52:be:91:bc:60:e3:d2:3c:fb:31:a0:93:2e: 6a:8c:49:55:f0:39:cd:a2:aa:32:87:dc:7a:cf:32:7a:fd:d2: 81:ec:1e:9d:1b:73:9b:23:10:63:a5:2e:71:fd:e9:c1:3b:72: 3f:99:6b:36:89:54:d1:85:80:13:3b:a6:bf:ac:37:21:82:65: bb:20:cf:3c:37:a2:7b:ab:c2:f2:47:03:6d:8b:bb:8c:bd:01: 0c:e2:ab:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+TWs+wFmj89GW1kPGIhe7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjYwNzI0MDkwMDI5WhcNMjYwNzI1MDkwMDI5WjAzMTEwLwYDVQQD EygyYjFlYWQzNzc5ZGZkYmNhMWQ3NTcwNzM0ODZlNWIzNWNhZWIwNmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DLPHWK8bnumUKiJtET0iw9YQAX7 jMwKBDPtErgqT8Igxb2sCRKtbFT8r7H55PrNbBL4KrUyNhAHKdNpqLcxdf4vpeyW mX1KfIR5gdO8b5fNoxTOP+JbvR8sZ5UqtX9BXDid7aFnRqUediO7TU4XWh1GL2rH zKV2hyJsCttrS0xoQ7DmB+tDI0pzGCMODWCtHlWQblUCktzJ92kEtiOKZR1s7EAC ltWJAKmQh2psQEY5op9uaOm4OoiwELN4ICrAQHgUVqkbR+JiXmtD5LEIr/WEzTQy kdAD+HTuPphL/mbrUoBkE3N1qa54L2GwvLLDG9lkx5aLBsIQ1hqQmg1eYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCserTd539vKHXVwc0huWzXK6wb3MB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8LreVvg DRA55yNLBO7zr0gOETem12EvRiJv9dMo7rmeXeXmVr8jvT+dl7KSsLNvCncj/GBv I5kcKeoXj0ntZUSFTLVw7boa5DGcBGWPc1wR4KWwZMPjOBlAxNfW6pU6xg2LWcpG tiahaHLTT6T/DELAVqWFmlPrZDDZeoWBdV+xavXIs3/JrGihaa7rEfc5vsIoiqwU VFITwuUmqhkQGIxDQfntqLBSvpG8YOPSPPsxoJMuaoxJVfA5zaKqMofces8yev3S gewenRtzmyMQY6Uucf3pwTtyP5lrNolU0YWAEzumv6w3IYJluyDPPDeie6vC8kcD bYu7jL0BDOKrKw== -----END CERTIFICATE-----Generated at Fri Jul 24 13:55:45 2026 by rpki-client