$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft File: IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json) Hash identifier: fV4Z5/x3PDPRh0pp6Gj1UsYGOZIVnNWCUoSye3ZsPSU= Subject key identifier: E6:64:3D:24:9C:D2:AA:6C:BA:67:B4:4A:75:4C:2F:6D:B7:64:7B:0E Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Certificate serial: 019E1CEBF7DAF3AE78BA2BF96AC0079CA4A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft Manifest number: 0C37 Signing time: Tue 12 May 2026 16:01:26 +0000 Manifest this update: Tue 12 May 2026 16:01:26 +0000 Manifest next update: Wed 13 May 2026 16:01:26 +0000 Files and hashes: 1: 1-Y24DkHX_YS8BQf944IXH_5kays.roa (hash: +VJRpnj8CgCWOeIl5a7z0P70ihS3i/FmFwSi/9utCPo=) 2: IY-cX-MNALu4IC_OTud7vyl-LrA.roa (hash: EREk8HtkB+3C+caNH7Ch6KSJNkDCyci86tLaep5Ej3s=) 3: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: BDjUqprJcEbXoc8JiCgZT6xm3hswrWjGVPZrQtgkflc=) 4: KSxgyXQgmuvgD3hsIbjoWlYRqkk.roa (hash: MfPYx4d8dGraW1R0Aep23IPqwadZP9+eAkLv5cmiWoM=) 5: M6wnPrDmWw7o372pn664G-6XMUM.roa (hash: vz3Xt9QAg5obB1AHMtVF5JrXwk6u3qtnMl8SakINxdQ=) 6: _25UfYuLERvQd7ERXXNW_sly9Oo.roa (hash: mce8PC+zpkQB3aka/bSBor9uJVmt1ZEupgGD8nmRstI=) 7: _6RAmWnPpmERwBYNK-TrrE7oVIA.roa (hash: aa7qoUpTL/t8ummAI7ryHIK1nARbf8cHlGEdf+aw+Hs=) 8: cnvwLGbVEITaoX8cDVSNQAcxcqk.roa (hash: HW2ZpeT6aGnIzGKKy1byADe7gS6Pw3jj7fdnL63L26E=) 9: gr17UYbRi7cQ6eQ9EyDF-CuJIp4.roa (hash: NAQ/vI5+2VgZpVpsxQmGoZaiAZnJI/pT7XEYYA4d1IM=) 10: mwE7644yuRyikfXfTRLC6TQjC0w.roa (hash: KcHRogBcTVnQMGjCpBXC4Xr5iRWrDOZmEHuY1S/TOXA=) 11: rYBbbZbaSpYI3VsNcTxJfCny0P8.roa (hash: dXyRGY+rTBPSQJnVZHUIy5ttKRmSJde9WkRmwq0FUYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:eb:f7:da:f3:ae:78:ba:2b:f9:6a:c0:07:9c:a4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Validity Not Before: May 12 16:01:26 2026 GMT Not After : May 13 16:01:26 2026 GMT Subject: CN=e6643d249cd2aa6cba67b44a754c2f6db7647b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f8:f1:0f:09:4b:dd:b7:7e:5b:6a:4a:ce:da: b7:8f:12:4d:54:10:f5:04:be:cf:fa:49:a2:bb:5d: 52:c0:78:e1:d5:fa:7b:2d:c8:9d:94:ca:2c:2b:6b: fd:75:db:ec:a3:20:af:0f:df:ea:67:a5:45:fc:bb: a3:66:0b:56:6d:c5:77:95:10:76:85:b9:e8:06:d2: ae:d1:d8:fa:9b:e7:38:42:ff:e5:35:56:7a:f1:31: 6c:1e:49:05:43:59:c4:00:09:fd:f3:4f:c8:81:03: f3:8b:b2:3c:43:bd:8d:b8:cb:29:0f:fb:de:30:18: 4d:3f:ee:e8:3f:6d:b3:bf:e8:38:63:04:79:20:a8: a2:ce:7c:3e:0b:e1:33:cf:22:89:87:c9:20:53:c5: a3:6e:fd:f3:1e:a8:7d:9e:a2:82:79:f1:2f:bb:de: 3c:ec:50:d1:af:9e:e8:a0:e1:57:91:0d:0a:06:0f: 4d:72:8e:06:a2:ba:65:93:84:b0:d9:d4:3e:3e:b7: 4d:25:f8:7d:e6:ae:6d:8f:1a:99:85:8f:bf:1c:c8: 5d:9e:56:5c:00:9e:27:8c:d2:bf:72:ff:92:d7:ba: 0e:37:a2:e9:25:23:f5:9d:da:d5:1d:0e:cb:75:bb: 2b:03:bd:25:8f:a1:63:22:c4:8b:34:74:fd:29:4b: fa:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:64:3D:24:9C:D2:AA:6C:BA:67:B4:4A:75:4C:2F:6D:B7:64:7B:0E X509v3 Authority Key Identifier: keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:fc:cc:1c:c0:d7:c6:ca:ae:b1:23:6f:54:13:db:8d:1e:6f: 8d:cc:0a:20:28:36:da:8b:15:3b:e2:35:89:76:7f:6e:48:ff: 2c:be:60:4f:6a:d8:1e:16:11:97:2a:44:46:6a:f1:c5:90:bb: 6e:6e:b7:57:a9:dc:1c:96:e0:6f:fc:39:9f:21:7b:9a:46:8a: a3:5a:d0:84:b9:45:41:ab:0c:8e:72:f7:3e:0e:5c:ae:05:48: f0:3a:85:77:1d:20:2b:8a:e7:a4:f2:7b:3d:de:b2:07:6a:f0: d2:c3:5d:83:3f:40:20:0f:23:76:9d:d8:0e:dd:1d:fd:61:44: 6f:6c:0d:f4:39:83:53:3e:72:c4:63:50:fb:72:23:58:60:01: 16:aa:b2:b0:48:93:fc:18:5e:84:46:b3:a4:9f:be:b3:c1:a0: 15:54:b8:77:51:64:30:6a:14:dd:04:3a:4e:be:da:42:ba:4f: 4f:81:3c:5f:9c:b5:11:c0:b3:24:e2:90:60:22:85:f7:51:0f: 0f:e6:d6:b7:22:e4:a7:c5:65:19:ca:46:d5:f5:0b:d4:33:7c: e7:8b:1b:d5:65:f2:88:9a:7f:18:77:87:54:da:6f:f8:9b:22: dc:6d:ac:09:b2:f6:89:a0:77:55:dc:e3:19:55:14:f3:31:92: fc:6f:7c:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4c6/fa8654uiv5asAHnKSoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm Nzk2NzgwHhcNMjYwNTEyMTYwMTI2WhcNMjYwNTEzMTYwMTI2WjAzMTEwLwYDVQQD EyhlNjY0M2QyNDljZDJhYTZjYmE2N2I0NGE3NTRjMmY2ZGI3NjQ3YjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/jxDwlL3bd+W2pKztq3jxJNVBD1 BL7P+kmiu11SwHjh1fp7LcidlMosK2v9ddvsoyCvD9/qZ6VF/LujZgtWbcV3lRB2 hbnoBtKu0dj6m+c4Qv/lNVZ68TFsHkkFQ1nEAAn980/IgQPzi7I8Q72NuMspD/ve MBhNP+7oP22zv+g4YwR5IKiiznw+C+EzzyKJh8kgU8Wjbv3zHqh9nqKCefEvu948 7FDRr57ooOFXkQ0KBg9Nco4Gorplk4Sw2dQ+PrdNJfh95q5tjxqZhY+/HMhdnlZc AJ4njNK/cv+S17oON6LpJSP1ndrVHQ7LdbsrA70lj6FjIsSLNHT9KUv6UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZkPSSc0qpsume0SnVML223ZHsOMB8GA1UdIwQY MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt NTkxY2FmNTM2ZWNjLzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/zMHMDX xsqusSNvVBPbjR5vjcwKICg22osVO+I1iXZ/bkj/LL5gT2rYHhYRlypERmrxxZC7 bm63V6ncHJbgb/w5nyF7mkaKo1rQhLlFQasMjnL3Pg5crgVI8DqFdx0gK4rnpPJ7 Pd6yB2rw0sNdgz9AIA8jdp3YDt0d/WFEb2wN9DmDUz5yxGNQ+3IjWGABFqqysEiT /BhehEazpJ++s8GgFVS4d1FkMGoU3QQ6Tr7aQrpPT4E8X5y1EcCzJOKQYCKF91EP D+bWtyLkp8VlGcpG1fUL1DN854sb1WXyiJp/GHeHVNpv+Jsi3G2sCbL2iaB3Vdzj GVUU8zGS/G982g== -----END CERTIFICATE-----Generated at Wed May 13 00:40:47 2026 by rpki-client