$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: CcrQKk08e/60NzOrBgcMEWaGAdhAueuhX1r98hVAruU= Subject key identifier: 33:18:3E:2C:E8:AB:8E:07:E9:A9:99:F1:BC:C4:DF:12:07:9F:D6:F6 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019F837A2F988B3C088AD37DB09FA8594963 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 19EF Signing time: Tue 21 Jul 2026 07:00:50 +0000 Manifest this update: Tue 21 Jul 2026 07:00:50 +0000 Manifest next update: Wed 22 Jul 2026 07:00:50 +0000 Files and hashes: 1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=) 2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=) 3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=) 4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=) 5: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=) 6: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=) 7: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=) 8: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=) 9: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=) 10: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=) 11: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=) 12: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=) 13: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=) 14: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: +4rmkq9F3VgfxsyKhCPav4F41uLDy7MXpwDk2Rv7Lsk=) 15: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=) 16: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=) 17: lgdudiRubbn4kubyyDwuIWxdQas.roa (hash: Mto3E9aOm3/d28/F7shwzi6mJEuxr7zprdp5mund0Ik=) 18: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=) 19: uE7ORiNsRQGjdCc4HH6coM1CcnQ.roa (hash: sElnQC2IhBjiqBFU5wF4Odl3TglqL3IWyDtwzfQrYCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:83:7a:2f:98:8b:3c:08:8a:d3:7d:b0:9f:a8:59:49:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jul 21 07:00:50 2026 GMT Not After : Jul 22 07:00:50 2026 GMT Subject: CN=33183e2ce8ab8e07e9a999f1bcc4df12079fd6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f1:2d:75:f5:c3:93:23:58:4e:fb:77:29:bd: 10:f9:d2:e7:56:6e:84:ce:73:69:59:5d:15:38:82: 74:97:a5:ca:76:24:d3:9c:44:21:39:05:4a:d6:46: 9f:d7:4d:51:20:12:8f:21:8d:87:32:a8:24:c9:f9: 1f:04:8a:55:85:dd:e8:05:02:92:fd:f3:d1:26:7d: 63:82:14:6a:70:53:3a:49:f3:88:12:ee:09:53:ae: d8:d3:3f:08:2f:46:7e:43:98:64:f8:07:be:8c:64: f3:59:91:50:62:d4:e2:c4:60:59:1e:62:2d:eb:48: cb:91:b4:50:de:c3:62:d6:be:f1:72:36:73:42:bf: b5:b3:eb:a6:c4:2e:9e:98:2c:80:5e:54:c5:26:fb: 6c:bc:9a:d9:b6:4b:ba:39:0b:32:aa:4c:6f:39:64: 89:da:02:52:e2:ca:1f:5c:5f:e2:1e:f8:b8:76:13: 1a:10:a4:eb:e2:8b:7c:d8:27:d6:c7:b8:21:f9:2c: 2a:ff:40:9e:c2:aa:9e:13:b3:86:58:2a:e9:0d:2e: 09:b2:d9:f1:98:fe:63:03:94:90:67:9a:1d:f4:3f: f0:8a:67:87:09:ab:36:12:0b:2a:15:65:a5:d2:03: 23:26:cf:24:06:cf:ef:16:ec:4c:51:8c:a3:b5:ac: ae:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:18:3E:2C:E8:AB:8E:07:E9:A9:99:F1:BC:C4:DF:12:07:9F:D6:F6 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b5:56:ce:b0:7d:6c:d7:d4:52:13:b1:30:43:47:85:33:bc: 08:83:c8:4a:e3:1f:e7:32:d6:be:04:91:d3:04:ca:a5:fc:39: e1:74:1b:5a:64:08:42:fe:bd:93:91:a1:c6:b6:f8:fb:90:40: 5d:ea:81:87:dd:20:81:db:49:fe:b2:95:75:e7:0a:f9:1f:6f: 66:01:03:dd:02:47:b6:5d:55:c4:be:0b:72:dc:3f:6a:58:1a: 65:42:65:37:80:50:0d:74:4b:38:e6:cd:5b:fa:89:44:ca:b3: 58:bc:5f:98:fa:44:83:ee:26:e4:70:d5:33:65:be:14:5d:1e: 66:c9:5a:5c:4e:fb:70:17:59:47:0d:4d:b7:21:1e:27:02:18: d5:a0:b2:88:12:27:ed:79:2d:d7:95:9a:6f:06:6a:b3:fb:a8: d2:aa:b1:1c:b3:39:52:22:d5:27:11:6d:34:61:ca:bf:39:b1: 05:a9:76:e1:92:6c:53:cd:96:31:52:81:cf:d4:ba:ae:65:27: 78:cb:07:3a:71:e5:90:6b:0a:72:c6:1d:46:b2:af:61:2c:02: b1:00:3e:f5:bd:ae:f0:ab:92:b8:36:54:57:99:6f:e5:7f:a1: 2c:90:c1:95:e2:bc:01:53:1d:ac:69:b3:7a:59:ac:48:1b:03: c6:8a:72:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Dei+YizwIitN9sJ+oWUljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwNzIxMDcwMDUwWhcNMjYwNzIyMDcwMDUwWjAzMTEwLwYDVQQD EygzMzE4M2UyY2U4YWI4ZTA3ZTlhOTk5ZjFiY2M0ZGYxMjA3OWZkNmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PEtdfXDkyNYTvt3Kb0Q+dLnVm6E znNpWV0VOIJ0l6XKdiTTnEQhOQVK1kaf101RIBKPIY2HMqgkyfkfBIpVhd3oBQKS /fPRJn1jghRqcFM6SfOIEu4JU67Y0z8IL0Z+Q5hk+Ae+jGTzWZFQYtTixGBZHmIt 60jLkbRQ3sNi1r7xcjZzQr+1s+umxC6emCyAXlTFJvtsvJrZtku6OQsyqkxvOWSJ 2gJS4sofXF/iHvi4dhMaEKTr4ot82CfWx7gh+Swq/0CewqqeE7OGWCrpDS4Jstnx mP5jA5SQZ5od9D/wimeHCas2EgsqFWWl0gMjJs8kBs/vFuxMUYyjtayutwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMYPizoq44H6amZ8bzE3xIHn9b2MB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbVWzrB9 bNfUUhOxMENHhTO8CIPISuMf5zLWvgSR0wTKpfw54XQbWmQIQv69k5Ghxrb4+5BA XeqBh90ggdtJ/rKVdecK+R9vZgED3QJHtl1VxL4Lctw/algaZUJlN4BQDXRLOObN W/qJRMqzWLxfmPpEg+4m5HDVM2W+FF0eZslaXE77cBdZRw1NtyEeJwIY1aCyiBIn 7Xkt15WabwZqs/uo0qqxHLM5UiLVJxFtNGHKvzmxBal24ZJsU82WMVKBz9S6rmUn eMsHOnHlkGsKcsYdRrKvYSwCsQA+9b2u8KuSuDZUV5lv5X+hLJDBleK8AVMdrGmz elmsSBsDxopy6w== -----END CERTIFICATE-----Generated at Tue Jul 21 16:34:04 2026 by rpki-client