$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft File: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft (raw, json) Hash identifier: SkIMcHuO7tm60rQsWxTEcYiV+AK+a3UW44TPH4p1q3o= Subject key identifier: 3E:60:A6:3F:8D:B7:66:BB:B5:2E:78:B4:8B:16:74:90:A7:26:6D:F9 Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 01A03AF16C648D6DD5D2D404D0E3DDBCC17E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft Manifest number: 1A28 Signing time: Tue 25 Aug 2026 22:01:35 +0000 Manifest this update: Tue 25 Aug 2026 22:01:35 +0000 Manifest next update: Wed 26 Aug 2026 22:01:35 +0000 Files and hashes: 1: BNGMVvTZ1XawSMPOVaywEKgFz8w.roa (hash: WMt9Jn62xWAvsFJt6BLgLhIXnUKvtSHXK/jsLiQ9wc0=) 2: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl (hash: Tid0EUl47UPDA1Y0IzuifTkgK54h7z01rNHj+XrkitI=) 3: J_k_uJydXhJKkAPBLn_Xr9EpYmw.roa (hash: bMaFsCf1Hj+guhXQdkk7ZJ24ZgANPSnkOncPj3CW1pQ=) 4: S9D_ZvZP7Y2SyyqdAWt1mGxtagE.roa (hash: hH6PHrAp3gX28fWUuJtWpjV+rB9bYio8w3wI6R4XHQI=) 5: YPhzzBUAAD8W6PxdQ8Eo6J_1Xlo.roa (hash: QJjVxTN7Kd8ed1QYD92fFHesTbkRe6gyeZIi3S6D0so=) 6: Z8UyJlJrz_tPx2Lzi2wtF6sRSoY.roa (hash: pZEmU7QBOi+LmI67NMxNilqE5KRHfsee+sRCVmykeWE=) 7: gw26QBwPzQF9bT3yyu20z1tgJyk.roa (hash: iuHp19gpWORmcmt7JfC/koJtOp0jpGQxA/LoBFKsFao=) 8: mdj55pZO6nRDbpPFsXBoK-GkNU8.roa (hash: JU7FZwf7hl0KcJAATQ/by5oF+/xX9ntEZw2LOkX+3S0=) 9: n70k782e6Gxq_-Hc2YO_idjOcAs.roa (hash: 9xPDUcAeeZeb+V1tJdiN4n6+fuVQh1F2hwH4+x4MOiQ=) 10: pX4-zHrOaGGZmLrFodKOqsDRVt8.roa (hash: oNNoPaGL9tiGcsnmh6pVkfSYR8zyTqJrDL9WChZzfdA=) 11: vqLY8AJRdwBNZp1vMAKBzj7hYMk.roa (hash: QScIVVTzvA87+g4pWqcXEROo6Uo1IppOyeJM8oSgj8s=) 12: xgHR7y7J0aGtYD0R9jhr6WJbZm8.roa (hash: CHXV05nQbB5KxwYkctbAeeyJMsjXN6ysG0w+cPnzH+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 14:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:3a:f1:6c:64:8d:6d:d5:d2:d4:04:d0:e3:dd:bc:c1:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: Aug 25 22:01:35 2026 GMT Not After : Aug 26 22:01:35 2026 GMT Subject: CN=3e60a63f8db766bbb52e78b48b167490a7266df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:8d:74:97:d7:86:c8:b5:13:95:a5:e5:d2: 84:fb:2c:6a:47:06:28:1f:b5:59:bd:ef:3d:a0:59: ea:68:04:bb:fe:c6:46:2b:9e:e2:f2:f4:4f:8d:87: 28:aa:ea:15:8f:23:e3:ef:c4:cb:7c:78:fe:71:1a: 43:e1:4e:c5:37:39:65:c5:35:27:04:61:fe:d2:9f: 53:3d:24:de:f3:0c:ad:84:7e:dc:c8:5c:11:2e:9a: f0:69:d5:65:d2:1f:03:61:8d:d2:64:44:a0:8c:b6: c0:ec:9e:51:0c:6e:9d:0a:85:97:f1:64:cf:ed:e4: 14:5c:24:bc:f2:69:5d:6e:48:92:3d:f0:e6:a3:b8: 6d:57:20:c4:10:8e:2a:15:56:ed:91:5b:17:8d:b1: 1b:77:d5:10:b4:6e:5c:c3:78:90:76:38:52:ce:32: 34:98:06:90:73:6c:46:36:38:d1:a0:f9:c4:68:43: f5:57:90:1d:99:96:1a:06:d0:a4:73:7e:0d:63:45: cb:68:f3:4a:30:5f:e3:52:85:ac:48:43:8a:15:18: 5a:4d:af:fc:12:bd:c8:8d:7d:b9:89:0b:10:6a:35: 75:78:a7:6a:e5:88:e5:ee:1b:c8:93:90:b1:77:33: 2d:e6:63:f6:f7:5c:3e:b8:e1:62:91:f8:d3:a2:71: f6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:60:A6:3F:8D:B7:66:BB:B5:2E:78:B4:8B:16:74:90:A7:26:6D:F9 X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:9f:b8:26:65:e1:1b:bc:cd:5a:5d:48:ae:71:10:5c:8a:ae: 7a:9e:72:70:f0:6a:80:5b:90:58:e4:55:d3:90:f3:ea:d4:f1: e0:85:00:fa:8b:ba:38:2c:15:89:ff:60:e9:a2:27:2b:c2:41: 39:fc:19:6e:41:52:0d:fa:9d:18:c3:31:51:d0:31:5b:e7:eb: 11:c8:17:df:16:eb:70:8b:b6:3c:a1:cb:80:6b:a5:a3:a6:45: 3e:76:a3:d7:b2:0a:a6:f8:ce:b2:e9:95:e7:13:8d:f2:10:c8: 97:be:05:8b:1b:e4:57:20:13:ad:a1:37:e6:d1:57:ac:2c:a4: 22:74:cc:5a:a2:3b:e7:ff:f6:f3:42:b6:58:23:1c:8d:3c:b4: f4:e4:b7:0e:02:d2:39:1e:d7:d7:3f:ef:f3:c9:dc:5a:50:aa: 5c:37:48:66:de:5b:25:77:45:24:7a:04:89:83:55:75:df:80: e9:81:47:2e:4a:bf:31:0f:e6:9d:30:59:ca:5c:2c:00:36:e0: ca:ca:1c:38:8b:b4:1b:38:60:a8:1c:b4:90:b2:ce:da:b9:b3: a6:ae:6d:16:ee:9e:b6:74:61:d6:1d:c9:df:54:a2:03:df:cf: 4e:ec:6c:75:e1:f5:da:25:c0:83:b5:52:60:e3:68:f9:3b:35: 75:37:cb:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaA68WxkjW3V0tQE0OPdvMF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjYwODI1MjIwMTM1WhcNMjYwODI2MjIwMTM1WjAzMTEwLwYDVQQD EygzZTYwYTYzZjhkYjc2NmJiYjUyZTc4YjQ4YjE2NzQ5MGE3MjY2ZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJiNdJfXhsi1E5Wl5dKE+yxqRwYo H7VZve89oFnqaAS7/sZGK57i8vRPjYcoquoVjyPj78TLfHj+cRpD4U7FNzllxTUn BGH+0p9TPSTe8wythH7cyFwRLprwadVl0h8DYY3SZESgjLbA7J5RDG6dCoWX8WTP 7eQUXCS88mldbkiSPfDmo7htVyDEEI4qFVbtkVsXjbEbd9UQtG5cw3iQdjhSzjI0 mAaQc2xGNjjRoPnEaEP1V5AdmZYaBtCkc34NY0XLaPNKMF/jUoWsSEOKFRhaTa/8 Er3IjX25iQsQajV1eKdq5Yjl7hvIk5CxdzMt5mP291w+uOFikfjTonH29QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5gpj+Nt2a7tS54tIsWdJCnJm35MB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5+4JmXh G7zNWl1IrnEQXIquep5ycPBqgFuQWORV05Dz6tTx4IUA+ou6OCwVif9g6aInK8JB OfwZbkFSDfqdGMMxUdAxW+frEcgX3xbrcIu2PKHLgGulo6ZFPnaj17IKpvjOsumV 5xON8hDIl74FixvkVyATraE35tFXrCykInTMWqI75//280K2WCMcjTy09OS3DgLS OR7X1z/v88ncWlCqXDdIZt5bJXdFJHoEiYNVdd+A6YFHLkq/MQ/mnTBZylwsADbg ysocOIu0GzhgqBy0kLLO2rmzpq5tFu6etnRh1h3J31SiA9/PTuxsdeH12iXAg7VS YONo+Ts1dTfLww== -----END CERTIFICATE-----Generated at Tue Aug 25 23:42:13 2026 by rpki-client