$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: GhlhpO22AcVV5SrJRSPj3PR5MetYpRRezyjRxE4QtY8= Subject key identifier: B1:C6:6A:26:BA:C8:19:FB:48:25:9A:8D:E4:54:B9:A7:61:55:66:56 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 01A0FB340166B53DE57A6A4D5270AFA99EFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 072C Signing time: Fri 02 Oct 2026 06:01:24 +0000 Manifest this update: Fri 02 Oct 2026 06:01:24 +0000 Manifest next update: Sat 03 Oct 2026 06:01:24 +0000 Files and hashes: 1: 1-BlSXqYyBKUdfU94NGff_PAPul4.roa (hash: 5sWUhwz5Gcq5/MhNhTcOvD2uhQ0tuUa+W9GIH9V8OaQ=) 2: 1fRolkRjd-APCzNnG-5bwuoOqNg.roa (hash: uECN6gUKiv+lFioLhpnkI4G1xAlKUZVG1VCjkCRQOjI=) 3: 2F897qCWvfh11SUzKWZ5JUV2vMs.roa (hash: BDm7sSnQsdMShImHFreyfB5QnyPZWja62eMfrLC52Z0=) 4: 3DigKmaWxP-qw4TMo5nSEFFHNlw.roa (hash: SFQibSW8pDXFPKPG5MbvdKYY13AwQ4A4xl349zx1iCA=) 5: 91LDPauwCWQ9godr-xheoc62kZY.roa (hash: pLiJYVDF484K9mWtl+JKcTe0VgA4TfPZgkN8+ZrNjMs=) 6: 9XRLK1OdgukwixTDk2AKzFzTzbs.roa (hash: GCjLjdeI8luwyn1PGNY8s6Ygk/m/2VfxU7ui9AQ53ww=) 7: 9ohNILRN251EJCEOaFSvlOoDNJg.roa (hash: 2WRd0d2oEyTbSuOnacVQb9zr84nnPee4Alvgcj+3gVU=) 8: GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa (hash: 9wH2XPtuxgQ1BMZZEBYsg16k1bgpNYguMty8atBuYf4=) 9: H9OemdXyC7tAgnmNPQ8cKr4kXek.roa (hash: Y6oksDUVORVjfAcT/DowbWJFqVZVzW3cfm1/KNkAcoU=) 10: Jt1l3PmmzdbcYP2rfmhzsDtcPhI.roa (hash: zt/605nd1EgOMLhSVE8EHytRNsfa1q/ziCZNE0ebjzg=) 11: PI0GWokWQCIYbfxBSxMKrWG4rlA.roa (hash: qRwJTh2gHSy2lv6qJPXbAlMzsB4kzURHt7CqQP0XkRU=) 12: PTZMdAT0hDazMuAsVI3CEFaCfvE.roa (hash: Z9gyi8MZGuuvG1z3xCSCxfacu9FwpO6Pum1TmCZXgaA=) 13: RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa (hash: 7jSM+R7ontglcAC1koxA8s1vIKZN1w9IqBWxZkjEi38=) 14: Y0JbxOj_u8eJzUeHjUqUp5ZzdjI.roa (hash: upN3TgIZvGzCE5YLEWAdPuZbKmynb15EXTQ5pfRhfMc=) 15: Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa (hash: 49fIprccRJUVDzFPqcsAmiCiqNfTbqtbpr/g64iaVzQ=) 16: _tnY0906wHjzFjHNCJLnKZtEe0w.roa (hash: 5Apr07COEZAT/ICQgss3FIiTDt+qU9p7QTb4qGNKhvc=) 17: avrcnfB12N6L1uAItV4pxr4ZeBk.roa (hash: UCrkK/t7tVltSG/GoHf/iVcJnaXfqtG/1ac64yo7m4E=) 18: hMoYvytTC8MSE72GcaOmUQp55TM.roa (hash: QNj9222JszfBwsXWHLHqGbqHpk9emhsVOXPVoX1Flpc=) 19: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: 2EluBZ4/9ANNgil3YuT7LYCVdWfnSlhleRKmQiheEDs=) 20: jC80DyZfd08kqUPQfGLYtFSpqeA.roa (hash: QkkRAI+hrNUAThXm4mIodhuWyIPzbk15zdb1sYevpvs=) 21: pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa (hash: Zwjahs4SIZZ7mXWd1Naf3bCGTp7nVeEdZf7T1NQzjwE=) 22: r6qKV9nEirBUwP3KmuLyUTNtefg.roa (hash: iWqKDpTKfBVdyUC9r9QWpqk9OSg69kGIRh/unEHarFg=) 23: xJkF66cCvGxEcbXW72kYSvCe9pc.roa (hash: 8ukNpwANOCXSCFQousC6/SlMGWqDu4dvIjSPXAjmXlo=) 24: xQPVpv6oDfVejRnWElQGbmYJcaY.roa (hash: y3RHPAzs8tten2VXnVg+llQRjecqqHar32AXcJuIcWg=) 25: xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa (hash: uA7hO9E7hUzauisNryngMo6HASraVHp6A2BgzZx4YIE=) 26: y78xNtcYu21c47h3KufgEPgZVnE.roa (hash: MwiDwZITS/z04aTqMBZZx2J7qe1RkzKld+egFNWQZro=) 27: ycFTntx4cs4onGaGpj0o47JW98Y.roa (hash: Ttb49ZN4wbdVcFXW70bm/uwe/p5I14QSBI+L4GbrQys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Oct 2026 06:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:fb:34:01:66:b5:3d:e5:7a:6a:4d:52:70:af:a9:9e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Oct 2 06:01:24 2026 GMT Not After : Oct 3 06:01:24 2026 GMT Subject: CN=b1c66a26bac819fb48259a8de454b9a761556656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:f4:01:f0:fc:51:de:2d:a9:7b:d2:3f:b9: e7:84:e0:c9:8a:8f:79:c4:4a:4b:b2:3f:63:31:86: 6a:c6:37:ba:14:7b:29:f6:4a:63:fd:f8:80:e4:4f: 28:fd:b2:f2:99:e0:c0:7c:24:7c:a5:55:8f:90:f3: ac:69:90:5e:7e:de:ca:b2:47:f0:08:1c:cd:c7:e6: fb:96:22:57:cc:ec:50:55:2b:98:e0:3c:5a:54:36: cb:3c:db:50:4c:aa:fc:de:0f:7d:9a:af:22:f8:ae: 3b:cd:49:ca:ec:19:09:e9:e7:c2:e5:2e:6c:9b:68: 27:0f:52:46:f9:cc:ec:29:f8:b0:10:11:47:be:fd: c3:ee:b3:db:44:8b:68:17:0e:32:4d:b3:29:15:11: 54:47:99:10:c0:1b:f6:b0:af:a1:1f:98:cb:56:1a: 34:43:1a:e0:db:53:23:c7:20:7a:ad:99:50:49:08: 56:09:f5:6a:c4:55:32:f0:f3:d9:3f:46:ea:77:00: 97:2e:d9:74:34:cb:2a:bb:10:f8:3a:24:c7:53:8b: a0:0b:07:3f:78:94:61:ae:ad:ce:66:75:c9:10:e9: 96:bf:41:72:0f:dc:4f:2a:57:50:12:a3:59:9d:b6: 91:45:02:08:b3:69:fb:e7:dc:84:e7:f5:15:dd:9f: 4b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C6:6A:26:BA:C8:19:FB:48:25:9A:8D:E4:54:B9:A7:61:55:66:56 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:2b:70:29:4d:65:09:92:aa:f7:39:dd:8f:8d:03:13:4d:7e: 47:bf:33:21:13:df:f9:c2:9f:d8:2e:89:81:69:78:e5:31:25: 0f:0d:7d:fd:ad:32:c0:ee:a7:ba:04:ca:37:77:b4:c3:ef:ed: 78:e0:a1:be:77:f0:7c:a8:e3:f9:93:a3:0f:0d:eb:70:e8:45: 50:69:84:ec:ae:bb:72:4e:93:f0:d1:65:94:ee:ca:20:42:d0: 34:6a:c9:e1:b2:eb:9a:70:41:02:b5:33:b3:a2:d4:03:81:59: ef:2c:07:cc:63:10:2f:49:cc:b0:aa:03:ee:f6:15:b9:59:9e: bb:fb:57:b7:88:88:8e:df:4f:d8:b2:c3:6a:2b:04:11:46:63: 7f:d9:d7:b5:a3:fc:c8:60:3f:33:29:9e:c5:be:d2:13:83:65: 1f:0e:68:e8:c5:01:c9:1f:bd:c1:0e:10:c9:0e:54:65:70:3a: 5e:ab:8a:42:6c:81:6a:6d:5b:e2:c7:5c:23:b4:59:bb:41:54: 91:36:b5:6f:0f:33:ce:63:6c:4e:34:88:23:1e:1d:9b:eb:82: cc:bb:41:50:ac:53:22:78:02:6b:ae:d9:17:18:5d:5e:39:27: 6f:3c:6d:73:e7:58:1e:e2:d6:4d:9b:01:fb:2c:80:6a:d8:a8: 9c:95:f8:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaD7NAFmtT3lempNUnCvqZ7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYxMDAyMDYwMTI0WhcNMjYxMDAzMDYwMTI0WjAzMTEwLwYDVQQD EyhiMWM2NmEyNmJhYzgxOWZiNDgyNTlhOGRlNDU0YjlhNzYxNTU2NjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhz0AfD8Ud4tqXvSP7nnhODJio95 xEpLsj9jMYZqxje6FHsp9kpj/fiA5E8o/bLymeDAfCR8pVWPkPOsaZBeft7Kskfw CBzNx+b7liJXzOxQVSuY4DxaVDbLPNtQTKr83g99mq8i+K47zUnK7BkJ6efC5S5s m2gnD1JG+czsKfiwEBFHvv3D7rPbRItoFw4yTbMpFRFUR5kQwBv2sK+hH5jLVho0 Qxrg21MjxyB6rZlQSQhWCfVqxFUy8PPZP0bqdwCXLtl0NMsquxD4OiTHU4ugCwc/ eJRhrq3OZnXJEOmWv0FyD9xPKldQEqNZnbaRRQIIs2n759yE5/UV3Z9LjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHGaia6yBn7SCWajeRUuadhVWZWMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnytwKU1l CZKq9zndj40DE01+R78zIRPf+cKf2C6JgWl45TElDw19/a0ywO6nugTKN3e0w+/t eOChvnfwfKjj+ZOjDw3rcOhFUGmE7K67ck6T8NFllO7KIELQNGrJ4bLrmnBBArUz s6LUA4FZ7ywHzGMQL0nMsKoD7vYVuVmeu/tXt4iIjt9P2LLDaisEEUZjf9nXtaP8 yGA/Mymexb7SE4NlHw5o6MUByR+9wQ4QyQ5UZXA6XquKQmyBam1b4sdcI7RZu0FU kTa1bw8zzmNsTjSIIx4dm+uCzLtBUKxTIngCa67ZFxhdXjknbzxtc+dYHuLWTZsB +yyAationJX4Dg== -----END CERTIFICATE-----Generated at Fri Oct 2 17:29:54 2026 by rpki-client