$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json) Hash identifier: 39I5FHUPgYZnu0409HPu8j4dqaFnmuulxrAwMHTdn+I= Subject key identifier: 70:39:8D:AF:53:12:2D:69:86:F0:BD:06:97:2A:95:E9:7E:30:72:20 Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 01A16043F6E0C4BE41A3FF84BD5EF4A7A96A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft Manifest number: 1B19 Signing time: Wed 21 Oct 2026 21:00:29 +0000 Manifest this update: Wed 21 Oct 2026 21:00:29 +0000 Manifest next update: Thu 22 Oct 2026 21:00:29 +0000 Files and hashes: 1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=) 2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=) 3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=) 4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=) 5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=) 6: 4V-9xblXh3p4hsMcELpD2FlsUlA.roa (hash: kRr8MpAPoenaKhVsIA64eElM5LVWHVB6/SUqnX6gbUI=) 7: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=) 8: 67NPNnvEQ5HB8sJH7z0dUe6Gw40.roa (hash: L8+iE4412JG/GqWOxLjJAzwI6Ft8pIvwH1MR+Hkkdb4=) 9: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=) 10: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=) 11: CDJTXCKddgeS45cto4BDn6LGKXM.roa (hash: 53bZhsl27b4D4nLfge1Qmnrp5YltP0H1xlBZflfNcSw=) 12: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=) 13: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=) 14: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=) 15: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=) 16: MxzqwWMUSsptURJMzavxSHfUO8w.roa (hash: poWnPXle6XHD8AxyCDLX0yoA7QSiBEOVvbwg5OVZcvQ=) 17: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=) 18: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=) 19: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=) 20: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=) 21: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=) 22: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=) 23: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=) 24: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=) 25: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: VOwSWWAZ91XIZsggo9IWLhfI9dJrReNrZc/6pOiQyUM=) 26: dbcdybGv00nsOtltVa4dyFU_6EE.roa (hash: usoQZJzAP9Yyuh6A0tgLlXKSV5FhHtp8AP7C2gTLa9A=) 27: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=) 28: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=) 29: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=) 30: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=) 31: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=) 32: qFFcx3mLrYx2nk6029Hm7ZOdMDk.roa (hash: Jn9Y7Pa0WEwNSD3kcDgAMoYx0/NnNpXk4eVq0VyIbRU=) 33: qUwK9s2mmBLTPQlCS2E3qnCndLo.roa (hash: dl9QrW5kzVjvXWRYqlw9UrndrhoQTxzNmZ6VZwh8ncM=) 34: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:60:43:f6:e0:c4:be:41:a3:ff:84:bd:5e:f4:a7:a9:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Oct 21 21:00:29 2026 GMT Not After : Oct 22 21:00:29 2026 GMT Subject: CN=70398daf53122d6986f0bd06972a95e97e307220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:9d:f5:50:67:bc:68:4f:b1:bb:95:9e:5e: 0b:5f:91:02:bb:8e:b1:67:ac:c1:ba:c2:fc:04:1e: 9e:fa:a8:09:bf:8d:02:ad:bf:81:15:41:31:da:d7: 9b:d0:d3:f6:aa:1c:15:14:15:f1:9f:45:a8:e4:e4: d4:c9:a5:53:5d:b9:4d:92:10:e9:c7:1d:b2:f5:4d: ac:eb:44:24:bd:1a:84:af:ed:dd:40:cf:85:74:7f: d7:a2:2b:e8:ee:1d:3d:bf:b1:5e:95:ad:87:5b:78: 18:45:ed:06:28:74:a9:42:94:68:1f:df:ac:c6:be: 42:77:04:12:9a:56:ff:e3:c9:ae:c0:4a:05:14:ea: b5:e8:b5:58:af:e5:58:ab:35:95:e1:c8:e1:a5:2c: c9:c2:f3:12:83:99:c6:ca:f9:6b:e7:05:5f:f2:f1: 8e:53:4c:0e:dc:4f:1d:21:c6:22:9d:be:43:6e:ff: a6:fd:42:59:a9:61:dd:6a:48:26:19:08:c5:f1:83: 92:07:ca:df:c0:b8:cc:87:61:d0:23:9f:bc:18:ee: 59:ef:41:8f:c9:ee:a3:9d:29:f6:de:bd:7b:5b:27: d4:74:3b:b3:b9:85:6b:9d:67:a9:56:e3:20:ba:2d: 82:fb:eb:5e:14:4c:03:83:1b:62:0a:19:10:89:54: 53:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:39:8D:AF:53:12:2D:69:86:F0:BD:06:97:2A:95:E9:7E:30:72:20 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:99:62:75:05:6d:eb:28:9a:38:07:c8:6d:47:7c:1b:31:8c: 5b:22:c7:27:3c:17:b6:79:95:b1:35:ff:4f:67:04:c0:83:a4: 8a:48:f4:c3:11:d1:6c:64:29:f2:38:5e:8a:43:f4:15:e3:bc: 5d:09:c8:35:b9:95:33:8b:52:3e:da:85:2b:5a:16:44:7b:44: 2f:20:ab:5b:20:d1:f4:34:d6:3a:1a:be:99:94:15:6c:69:fc: fa:2e:9a:a8:a0:27:e7:9a:ea:8e:de:85:51:18:98:04:7c:bb: 38:38:6d:ff:35:4d:58:2b:11:8e:a6:8b:1a:36:e6:29:de:11: 9e:fc:44:6e:84:b1:07:0a:ee:b7:60:cc:da:90:97:62:32:17: 7b:c9:fc:8f:55:f0:8f:fa:0c:0f:7c:ea:5c:72:9e:37:6d:8c: f7:03:44:99:24:ca:ad:8d:3f:a5:ba:a3:ad:8f:31:1b:4b:e6: e5:1f:aa:17:47:0e:b7:0d:29:4d:62:ad:df:a5:25:a4:ba:cd: 62:69:44:4d:1c:9c:17:4a:ab:0c:9a:58:05:54:19:4e:a5:01: ac:e3:32:cd:46:8c:35:3b:66:9a:6c:f0:80:e1:97:50:d9:ca: 3f:38:38:c0:36:c7:b8:95:1c:74:31:a9:59:bb:7e:2b:7b:de: 5c:fc:fd:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFgQ/bgxL5Bo/+EvV70p6lqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYxMDIxMjEwMDI5WhcNMjYxMDIyMjEwMDI5WjAzMTEwLwYDVQQD Eyg3MDM5OGRhZjUzMTIyZDY5ODZmMGJkMDY5NzJhOTVlOTdlMzA3MjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyOd9VBnvGhPsbuVnl4LX5ECu46x Z6zBusL8BB6e+qgJv40Crb+BFUEx2teb0NP2qhwVFBXxn0Wo5OTUyaVTXblNkhDp xx2y9U2s60QkvRqEr+3dQM+FdH/Xoivo7h09v7Fela2HW3gYRe0GKHSpQpRoH9+s xr5CdwQSmlb/48muwEoFFOq16LVYr+VYqzWV4cjhpSzJwvMSg5nGyvlr5wVf8vGO U0wO3E8dIcYinb5Dbv+m/UJZqWHdakgmGQjF8YOSB8rfwLjMh2HQI5+8GO5Z70GP ye6jnSn23r17WyfUdDuzuYVrnWepVuMgui2C++teFEwDgxtiChkQiVRTMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHA5ja9TEi1phvC9Bpcqlel+MHIgMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJlidQVt 6yiaOAfIbUd8GzGMWyLHJzwXtnmVsTX/T2cEwIOkikj0wxHRbGQp8jheikP0FeO8 XQnINbmVM4tSPtqFK1oWRHtELyCrWyDR9DTWOhq+mZQVbGn8+i6aqKAn55rqjt6F URiYBHy7ODht/zVNWCsRjqaLGjbmKd4RnvxEboSxBwrut2DM2pCXYjIXe8n8j1Xw j/oMD3zqXHKeN22M9wNEmSTKrY0/pbqjrY8xG0vm5R+qF0cOtw0pTWKt36UlpLrN YmlETRycF0qrDJpYBVQZTqUBrOMyzUaMNTtmmmzwgOGXUNnKPzg4wDbHuJUcdDGp Wbt+K3veXPz9JA== -----END CERTIFICATE-----Generated at Thu Oct 22 06:32:11 2026 by rpki-client