$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json) Hash identifier: +9T21DGBqn5VQ38GYxvmcOsoSPigS8OIY9c5YrRYNrs= Subject key identifier: 19:BA:9C:18:9F:DD:10:5E:EF:81:3F:01:25:49:63:45:E2:AE:56:FE Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 01A1DB6FBE0B537998A3E53A8BDF9E0C3AFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft Manifest number: 1B59 Signing time: Sat 14 Nov 2026 19:01:35 +0000 Manifest this update: Sat 14 Nov 2026 19:01:35 +0000 Manifest next update: Sun 15 Nov 2026 19:01:35 +0000 Files and hashes: 1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=) 2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=) 3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=) 4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=) 5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=) 6: 4V-9xblXh3p4hsMcELpD2FlsUlA.roa (hash: kRr8MpAPoenaKhVsIA64eElM5LVWHVB6/SUqnX6gbUI=) 7: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=) 8: 67NPNnvEQ5HB8sJH7z0dUe6Gw40.roa (hash: L8+iE4412JG/GqWOxLjJAzwI6Ft8pIvwH1MR+Hkkdb4=) 9: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=) 10: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=) 11: CDJTXCKddgeS45cto4BDn6LGKXM.roa (hash: 53bZhsl27b4D4nLfge1Qmnrp5YltP0H1xlBZflfNcSw=) 12: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=) 13: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=) 14: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=) 15: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=) 16: MxzqwWMUSsptURJMzavxSHfUO8w.roa (hash: poWnPXle6XHD8AxyCDLX0yoA7QSiBEOVvbwg5OVZcvQ=) 17: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=) 18: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=) 19: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=) 20: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=) 21: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=) 22: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=) 23: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=) 24: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=) 25: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: H4oJsxZejAzR+4mZHhMnWD63eN+SSsPqtVId0AC32b8=) 26: dbcdybGv00nsOtltVa4dyFU_6EE.roa (hash: usoQZJzAP9Yyuh6A0tgLlXKSV5FhHtp8AP7C2gTLa9A=) 27: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=) 28: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=) 29: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=) 30: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=) 31: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=) 32: oKSsMuSbioJTAAXxNUhX3aEkTkA.roa (hash: uN6o2dfQogWKiR10tNNdi8uBAG3yAcVpyMFsu4QzgWY=) 33: qFFcx3mLrYx2nk6029Hm7ZOdMDk.roa (hash: Jn9Y7Pa0WEwNSD3kcDgAMoYx0/NnNpXk4eVq0VyIbRU=) 34: qUwK9s2mmBLTPQlCS2E3qnCndLo.roa (hash: dl9QrW5kzVjvXWRYqlw9UrndrhoQTxzNmZ6VZwh8ncM=) 35: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 19:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:6f:be:0b:53:79:98:a3:e5:3a:8b:df:9e:0c:3a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Nov 14 19:01:35 2026 GMT Not After : Nov 15 19:01:35 2026 GMT Subject: CN=19ba9c189fdd105eef813f0125496345e2ae56fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:e6:18:75:c8:08:f9:04:1b:3b:e4:41:82: 60:d0:51:25:ec:d2:b2:bb:62:3b:d7:ae:e4:6a:85: 53:68:cc:cd:e7:50:1c:68:20:28:90:07:43:ef:f4: 1c:36:73:1a:50:5a:d7:5d:f2:a9:80:0c:36:92:26: b4:17:84:66:32:de:b0:f2:89:8c:2d:07:ca:11:fa: ac:1b:6b:d6:15:8e:71:7b:38:11:18:fa:f0:dc:38: 93:da:da:0a:fa:7d:95:0f:c2:33:c0:1a:65:0d:af: 1f:6b:40:4d:59:cf:2a:fa:39:33:ef:75:b8:06:26: 15:8f:21:f2:b6:a5:43:1a:c2:c2:7c:b2:35:76:bc: f7:11:5a:77:18:7e:2d:5e:e7:a9:73:fe:44:a7:9e: 3e:f1:68:c3:12:f3:57:d0:9f:40:ed:26:eb:71:24: 8a:8e:da:a2:fb:90:4a:30:11:90:46:b6:ba:61:48: b8:ef:bc:fd:3a:66:72:6f:4f:d4:fc:2c:5c:15:b2: 08:b2:d7:ea:c7:4f:c7:f3:e2:a4:b9:1d:03:e8:08: 7a:b1:54:98:82:ef:ac:bd:a3:5f:0c:77:35:f4:3a: 7f:cf:ee:d6:0a:67:f6:ce:40:67:8c:8e:46:41:c1: 65:54:38:8c:4c:8e:c2:f8:0d:69:57:a5:14:dc:d3: 1e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BA:9C:18:9F:DD:10:5E:EF:81:3F:01:25:49:63:45:E2:AE:56:FE X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:87:6d:99:f0:2a:6d:f5:b2:d4:bd:df:23:30:da:ad:7c:6d: 93:6b:96:cc:bf:83:b6:50:bd:e5:f6:44:18:9d:da:fa:9a:68: 08:b7:57:17:d2:a2:89:54:3c:be:09:00:71:95:ca:b0:d4:5f: 07:45:a6:a7:0b:b3:d3:b9:2f:d6:e2:fc:e5:65:f2:ac:fc:20: 9b:ed:f6:13:97:3f:ae:22:34:22:9f:40:4c:e0:f4:1d:59:da: eb:54:40:e9:4c:7f:be:39:5a:12:3b:32:68:aa:0a:0d:74:07: ea:2a:2e:4f:ea:86:ad:25:9a:21:9a:be:7f:d6:63:a8:d4:5a: 0a:82:5c:5f:69:ac:db:a1:a7:64:ff:0e:a8:79:68:b8:9a:4e: 57:63:38:43:b2:a4:d1:88:1d:65:67:0b:22:0f:9d:d4:72:12: b1:6a:47:52:4a:ff:37:da:0e:72:ba:b9:47:70:97:da:2d:68: ff:4a:c2:dc:b5:98:49:1c:a8:69:18:cf:37:01:e0:32:41:7f: 1d:f6:03:a5:9a:ab:c6:18:d4:e6:5a:89:58:83:ef:3e:20:d3: 4a:ab:4f:59:83:ce:48:ca:9f:19:93:79:9b:d6:f7:2e:35:9f: bb:90:b6:ab:62:c3:9a:28:0d:6d:bc:fd:20:45:1f:16:15:54: 9e:1b:9c:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbb74LU3mYo+U6i9+eDDr9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYxMTE0MTkwMTM1WhcNMjYxMTE1MTkwMTM1WjAzMTEwLwYDVQQD EygxOWJhOWMxODlmZGQxMDVlZWY4MTNmMDEyNTQ5NjM0NWUyYWU1NmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRTmGHXICPkEGzvkQYJg0FEl7NKy u2I7167kaoVTaMzN51AcaCAokAdD7/QcNnMaUFrXXfKpgAw2kia0F4RmMt6w8omM LQfKEfqsG2vWFY5xezgRGPrw3DiT2toK+n2VD8IzwBplDa8fa0BNWc8q+jkz73W4 BiYVjyHytqVDGsLCfLI1drz3EVp3GH4tXuepc/5Ep54+8WjDEvNX0J9A7SbrcSSK jtqi+5BKMBGQRra6YUi477z9OmZyb0/U/CxcFbIIstfqx0/H8+KkuR0D6Ah6sVSY gu+svaNfDHc19Dp/z+7WCmf2zkBnjI5GQcFlVDiMTI7C+A1pV6UU3NMeXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBm6nBif3RBe74E/ASVJY0Xirlb+MB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4dtmfAq bfWy1L3fIzDarXxtk2uWzL+DtlC95fZEGJ3a+ppoCLdXF9KiiVQ8vgkAcZXKsNRf B0Wmpwuz07kv1uL85WXyrPwgm+32E5c/riI0Ip9ATOD0HVna61RA6Ux/vjlaEjsy aKoKDXQH6iouT+qGrSWaIZq+f9ZjqNRaCoJcX2ms26GnZP8OqHlouJpOV2M4Q7Kk 0YgdZWcLIg+d1HISsWpHUkr/N9oOcrq5R3CX2i1o/0rC3LWYSRyoaRjPNwHgMkF/ HfYDpZqrxhjU5lqJWIPvPiDTSqtPWYPOSMqfGZN5m9b3LjWfu5C2q2LDmigNbbz9 IEUfFhVUnhuccA== -----END CERTIFICATE-----Generated at Sat Nov 14 23:25:50 2026 by rpki-client