$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft File: Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json) Hash identifier: vFbDK6vLRIu6rSZeodtTtr8ld91cIid/J7uq7AnL+Qg= Subject key identifier: 14:47:19:38:7E:A5:D8:58:F7:B7:88:F1:EF:79:83:3A:C7:91:6A:70 Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 019F9F288F39FA274F1EDB5B0C9A3B91B54C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft Manifest number: 1336 Signing time: Sun 26 Jul 2026 16:01:03 +0000 Manifest this update: Sun 26 Jul 2026 16:01:03 +0000 Manifest next update: Mon 27 Jul 2026 16:01:03 +0000 Files and hashes: 1: 0qcRgVORJ6l9UlTI2CKPLzjbfog.roa (hash: wvJhHDw0n2QTgzGbPUH8xt0FfoOscXlBHhG0tJvFt98=) 2: 2EkuPAqVHEWEKp6ASw2K5zmACQk.roa (hash: n72y5YkbbuFUJAYmxmxnzR7f3ZsUZLnhTxeGIE67Cko=) 3: FLjvYn5Mu6OSQ1vmJsficIZ3oAg.roa (hash: WAKAnnjMgQbJs7Wfu2NA1DQe3FG0M4jG7s2jCVV8t08=) 4: LKqcV__iHBkuJmHBTgVTMKe7jfs.roa (hash: LzRNG01pbqOOrg9Ke+0IrSjljXKIcSklaBxsB5gc1AU=) 5: PxxNVNL5BOB3QrAZZvS5ahJKLOQ.roa (hash: tFLry/v07lnhSlHBjf2oO0BxwozcI2XhOgOvdmFzcjY=) 6: TuXsasZ-4b8nW75mHIofbfVtahQ.roa (hash: WQY2WQVSqHmWvAPhxSmdnowvY1X9klQmLQ7FkZqoEzE=) 7: U74ViGODTud33ngPAmj4w73NK6o.roa (hash: 8g7ud1guSPB+L+sklXn8DfQQ/RtzcbmpgZcJ8hWX/2M=) 8: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: fFkkr0pvpF3yhTAsYo0exq2UE7JAsDMXHqnQzPq7Rew=) 9: ajUdjtPuTYK4cJ-GDNgzwU_V7QU.roa (hash: zq0p6TTpyxJr1rlBswAzuDS0To2T7g83akxmSzfwXWY=) 10: esQiMgPaySQVW0k54pO3jc5Zyuc.roa (hash: 2aftWcOZmt2bVeY6qt170y22emZnUo4u4rs+oiqH7rU=) 11: n9NpVtjQ4CgC347DPdZBbkrl1rk.roa (hash: F/VcD/rkVFmMD8EIR8zYpeskYz8L7PTmG19l/6//DPo=) 12: qzDK1lhCM39SxM8PACxbyKkom_M.roa (hash: nfWxgyb2gt4+A8mM3hL0XhTI+0dXdf9+3PuS2IdhMMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 15:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9f:28:8f:39:fa:27:4f:1e:db:5b:0c:9a:3b:91:b5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Jul 26 16:01:03 2026 GMT Not After : Jul 27 16:01:03 2026 GMT Subject: CN=144719387ea5d858f7b788f1ef79833ac7916a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:71:42:6d:ff:4f:7f:f6:b5:f4:d4:b9:1f:00: ba:ed:fa:d5:74:47:2e:45:5b:a8:16:09:bb:9c:77: 4c:7a:06:e0:e3:35:29:0b:e6:a2:38:dc:b1:e8:65: 23:1e:fb:fc:7f:01:b7:81:2d:a7:ea:eb:9f:39:ab: 3b:76:e7:f5:00:fe:75:8a:7b:e5:ae:b3:75:73:26: bc:99:07:19:ef:cb:70:a0:20:91:6e:67:1f:f5:b3: 16:91:ce:c0:98:b3:d0:74:e8:f5:1e:a8:6e:e7:58: ac:70:89:cc:44:72:06:96:1a:e5:8c:30:f2:a1:fe: 14:22:2d:7d:e3:fc:6e:11:5e:83:e2:64:7a:ae:c7: 9a:48:76:69:17:26:25:1e:82:78:69:13:8d:21:14: d6:b1:84:58:71:9c:0d:15:27:0f:43:0c:e8:50:16: 56:b0:0a:11:84:d0:65:25:87:fe:33:18:21:05:10: 47:b5:b7:42:d4:ab:be:e2:38:ec:3b:76:bf:9e:2b: 00:0a:53:67:72:fa:71:13:da:0e:2f:f0:63:76:a0: 1b:8b:18:21:ea:f2:af:b6:43:fa:38:8e:e5:69:68: c0:e0:cc:64:c6:60:6c:c8:c2:93:9a:fc:6f:75:80: 34:36:c2:21:c0:50:a7:62:58:8f:63:fd:4a:83:12: 40:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:47:19:38:7E:A5:D8:58:F7:B7:88:F1:EF:79:83:3A:C7:91:6A:70 X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:fd:ad:5d:75:73:c0:02:3e:3c:05:84:e6:ef:64:2a:24:d2: c0:e8:c9:f6:e7:34:ab:93:50:31:07:ae:79:c3:2d:88:e3:2a: 62:0e:9b:c2:b7:69:ca:10:1c:71:8a:c4:de:4c:3d:80:39:3c: 9c:00:b0:70:75:f5:95:71:21:22:d7:c9:ac:61:f0:51:93:d0: 15:60:76:22:56:4c:1e:6e:4a:e6:38:40:78:be:a3:6b:f2:20: 91:92:f5:1c:df:54:c2:d6:c4:0a:c4:0a:de:56:5c:5b:89:6f: 43:8d:41:aa:53:3c:ec:84:38:50:1b:1b:ed:25:3d:7d:cd:30: 77:0d:7b:0a:05:2d:2f:fa:4b:ff:70:49:07:fa:63:80:c6:24: c0:54:3f:86:a9:f8:97:d5:ad:ee:29:10:e0:4f:da:cf:55:43: bd:12:39:23:d0:7c:df:51:94:5b:c6:00:d0:15:c9:96:32:cb: 80:06:ec:66:05:c2:18:15:5e:47:03:b1:14:fa:d2:ef:f2:b0: f0:2b:5b:c0:33:ba:58:a9:21:27:49:16:90:e4:8e:c2:6c:c1: 93:87:40:2b:78:ad:e0:3d:3d:c5:ae:1b:82:db:b3:d0:3d:1d: fe:55:39:4f:88:c6:98:e5:cf:a8:b7:66:dd:0f:ca:2c:c7:16: fb:a5:33:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+fKI85+idPHttbDJo7kbVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjYwNzI2MTYwMTAzWhcNMjYwNzI3MTYwMTAzWjAzMTEwLwYDVQQD EygxNDQ3MTkzODdlYTVkODU4ZjdiNzg4ZjFlZjc5ODMzYWM3OTE2YTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHFCbf9Pf/a19NS5HwC67frVdEcu RVuoFgm7nHdMegbg4zUpC+aiONyx6GUjHvv8fwG3gS2n6uufOas7duf1AP51invl rrN1cya8mQcZ78twoCCRbmcf9bMWkc7AmLPQdOj1Hqhu51iscInMRHIGlhrljDDy of4UIi194/xuEV6D4mR6rseaSHZpFyYlHoJ4aRONIRTWsYRYcZwNFScPQwzoUBZW sAoRhNBlJYf+MxghBRBHtbdC1Ku+4jjsO3a/nisAClNncvpxE9oOL/BjdqAbixgh 6vKvtkP6OI7laWjA4MxkxmBsyMKTmvxvdYA0NsIhwFCnYliPY/1KgxJAUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRHGTh+pdhY97eI8e95gzrHkWpwMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdv2tXXVz wAI+PAWE5u9kKiTSwOjJ9uc0q5NQMQeuecMtiOMqYg6bwrdpyhAccYrE3kw9gDk8 nACwcHX1lXEhItfJrGHwUZPQFWB2IlZMHm5K5jhAeL6ja/IgkZL1HN9UwtbECsQK 3lZcW4lvQ41BqlM87IQ4UBsb7SU9fc0wdw17CgUtL/pL/3BJB/pjgMYkwFQ/hqn4 l9Wt7ikQ4E/az1VDvRI5I9B831GUW8YA0BXJljLLgAbsZgXCGBVeRwOxFPrS7/Kw 8CtbwDO6WKkhJ0kWkOSOwmzBk4dAK3it4D09xa4bgtuz0D0d/lU5T4jGmOXPqLdm 3Q/KLMcW+6UzSg== -----END CERTIFICATE-----Generated at Mon Jul 27 00:52:11 2026 by rpki-client