$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft File: IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json) Hash identifier: vjHmqibpbSMfGsWE2EWL2h+XxIFzMnvQAFku9YPnB54= Subject key identifier: BF:E6:6A:3A:B6:78:96:B3:3B:60:06:88:37:15:7B:57:F6:09:C3:A1 Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Certificate serial: 019F8FB570DBF9B2ACC3487EE19DBD18CB07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft Manifest number: 0CF8 Signing time: Thu 23 Jul 2026 16:01:00 +0000 Manifest this update: Thu 23 Jul 2026 16:01:00 +0000 Manifest next update: Fri 24 Jul 2026 16:01:00 +0000 Files and hashes: 1: 1-Y24DkHX_YS8BQf944IXH_5kays.roa (hash: +VJRpnj8CgCWOeIl5a7z0P70ihS3i/FmFwSi/9utCPo=) 2: 9Hu5_KEvVkuaYsN5m6cQzzKMIjI.roa (hash: p+jhtgM1l26n79s209lOfRrA6/2Vzy+6l6es1YSywE4=) 3: HSoISsJ-isLr8N_DHmCBMl3TpWs.roa (hash: eFtDBlD8d0dAnIzoz+b3NcMyduLIBF9yLf8ySSSmIvA=) 4: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: 9eJp5f4yzTivH8Ui8jYcsF4l4xWbmnXAtK15sQ48UH4=) 5: KSxgyXQgmuvgD3hsIbjoWlYRqkk.roa (hash: MfPYx4d8dGraW1R0Aep23IPqwadZP9+eAkLv5cmiWoM=) 6: M6wnPrDmWw7o372pn664G-6XMUM.roa (hash: vz3Xt9QAg5obB1AHMtVF5JrXwk6u3qtnMl8SakINxdQ=) 7: OTfefXpqJS5N6ZeJMEPi4o2glcE.roa (hash: EXmrtcvCwOgf/pC8L7II//3SohUrOG6Iw5W8LXbZAkA=) 8: _25UfYuLERvQd7ERXXNW_sly9Oo.roa (hash: mce8PC+zpkQB3aka/bSBor9uJVmt1ZEupgGD8nmRstI=) 9: _hBOrFv7fim--KrBCy30YmUAo3I.roa (hash: qzAl3O9RiG1n+2GEMGj8zSfO491bHrCZda9IZnWLPqI=) 10: dmOHwgbnoCRhoLg_fFLiu1Y5vZk.roa (hash: rfX+Iq8x7mvB73/s7COHDQopmGHF1orAq3S1Gp8T9wg=) 11: gr17UYbRi7cQ6eQ9EyDF-CuJIp4.roa (hash: NAQ/vI5+2VgZpVpsxQmGoZaiAZnJI/pT7XEYYA4d1IM=) 12: mwE7644yuRyikfXfTRLC6TQjC0w.roa (hash: KcHRogBcTVnQMGjCpBXC4Xr5iRWrDOZmEHuY1S/TOXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:b5:70:db:f9:b2:ac:c3:48:7e:e1:9d:bd:18:cb:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Validity Not Before: Jul 23 16:01:00 2026 GMT Not After : Jul 24 16:01:00 2026 GMT Subject: CN=bfe66a3ab67896b33b60068837157b57f609c3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:59:df:1f:86:44:8c:a3:33:a7:fe:55:28:20: 8f:13:ef:cf:b6:1c:f6:a1:c7:09:c6:ca:3c:06:17: 0e:01:29:8f:ff:18:27:90:22:bc:d1:22:48:44:95: 04:32:b5:36:f5:f4:ed:4a:7c:15:73:f9:e6:bd:c8: 3b:ee:a9:6b:eb:10:87:8a:b1:6f:7e:e3:08:e1:3b: 2f:57:c6:0f:a9:87:35:6a:78:bb:ff:42:97:14:08: af:94:48:16:2c:5e:c8:60:a0:bd:8d:91:3a:ad:d4: 60:9e:de:1f:79:33:8f:d5:c3:d4:67:f6:1b:21:e4: b1:12:c4:67:12:85:a7:72:40:a3:10:9c:62:d9:f0: 1b:35:03:fc:7c:79:20:ce:29:b3:8a:65:d1:27:7d: 55:15:41:16:e5:69:38:2a:9e:0e:dc:b6:a6:45:b9: 14:c5:95:54:14:af:4a:e1:5c:07:be:3e:ca:b1:ea: 2c:b9:17:2c:58:f7:ac:41:c3:c6:e6:c8:f3:bb:6d: f3:d9:4c:ab:af:56:24:a7:d0:8a:9d:d7:66:60:f5: f3:d4:90:5f:19:ae:fd:10:56:34:50:a7:8d:a4:72: e3:8f:f6:81:f8:ee:a0:ff:c8:90:4b:82:82:b5:91: 68:42:00:6d:16:36:77:d5:ab:ea:d0:9b:50:58:8c: 8d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E6:6A:3A:B6:78:96:B3:3B:60:06:88:37:15:7B:57:F6:09:C3:A1 X509v3 Authority Key Identifier: keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:12:eb:13:8b:44:62:a9:c8:17:32:a1:ba:6c:42:93:79:86: c0:2d:87:ee:db:fb:54:6d:b1:65:44:53:1d:b7:9c:6e:c2:bc: 8f:8c:b4:86:28:f0:17:9c:e0:6f:80:91:01:05:ba:75:19:19: 57:c8:3f:3e:29:29:e3:6e:4e:4e:7b:d5:d0:fa:1c:6b:dd:50: 05:37:fb:61:7c:71:0f:7f:8c:62:40:70:36:34:9f:f2:a2:99: 37:26:c1:2a:72:28:49:11:dc:94:d0:fb:40:bd:23:ea:af:70: d2:d6:e0:b7:e8:b3:51:8c:67:18:96:18:71:8a:86:fc:9f:de: 5c:08:f0:d5:5a:6a:e1:35:08:98:a6:58:36:1d:e1:aa:86:e5: d1:1a:47:2e:34:cb:de:a5:2b:99:74:1b:26:13:3d:9c:8f:87: 8a:b6:63:71:22:23:55:af:b4:48:dc:70:e2:f0:06:25:fd:67: 67:e9:7d:0a:26:a7:5c:7e:2f:22:4b:66:85:1d:c6:80:d3:db: 2e:14:93:a9:82:88:bc:06:82:f0:fc:0d:3f:ea:e8:ee:21:83: 2f:15:3e:86:aa:ca:f8:10:9f:31:f3:2d:ec:f0:c0:69:7c:bf: 81:64:3b:e0:5c:da:cf:e3:13:50:14:c8:c2:69:98:b3:ae:12: de:92:2c:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PtXDb+bKsw0h+4Z29GMsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm Nzk2NzgwHhcNMjYwNzIzMTYwMTAwWhcNMjYwNzI0MTYwMTAwWjAzMTEwLwYDVQQD EyhiZmU2NmEzYWI2Nzg5NmIzM2I2MDA2ODgzNzE1N2I1N2Y2MDljM2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lnfH4ZEjKMzp/5VKCCPE+/Pthz2 occJxso8BhcOASmP/xgnkCK80SJIRJUEMrU29fTtSnwVc/nmvcg77qlr6xCHirFv fuMI4TsvV8YPqYc1ani7/0KXFAivlEgWLF7IYKC9jZE6rdRgnt4feTOP1cPUZ/Yb IeSxEsRnEoWnckCjEJxi2fAbNQP8fHkgzimzimXRJ31VFUEW5Wk4Kp4O3LamRbkU xZVUFK9K4VwHvj7KseosuRcsWPesQcPG5sjzu23z2Uyrr1Ykp9CKnddmYPXz1JBf Ga79EFY0UKeNpHLjj/aB+O6g/8iQS4KCtZFoQgBtFjZ31avq0JtQWIyN+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/majq2eJazO2AGiDcVe1f2CcOhMB8GA1UdIwQY MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt NTkxY2FmNTM2ZWNjLzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhLrE4tE YqnIFzKhumxCk3mGwC2H7tv7VG2xZURTHbecbsK8j4y0hijwF5zgb4CRAQW6dRkZ V8g/Pikp425OTnvV0Poca91QBTf7YXxxD3+MYkBwNjSf8qKZNybBKnIoSRHclND7 QL0j6q9w0tbgt+izUYxnGJYYcYqG/J/eXAjw1Vpq4TUImKZYNh3hqobl0RpHLjTL 3qUrmXQbJhM9nI+HirZjcSIjVa+0SNxw4vAGJf1nZ+l9CianXH4vIktmhR3GgNPb LhSTqYKIvAaC8PwNP+ro7iGDLxU+hqrK+BCfMfMt7PDAaXy/gWQ74Fzaz+MTUBTI wmmYs64S3pIsaQ== -----END CERTIFICATE-----Generated at Fri Jul 24 02:38:05 2026 by rpki-client