$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft File: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft (raw, json) Hash identifier: YpPRoS/6v5Baj0Qhx9Rtsk3FZj6P1jKaW3kiHQYbxZ0= Subject key identifier: 2E:DD:92:E2:79:AE:07:B4:15:1F:49:37:50:EE:7F:6C:1A:C6:45:37 Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 01A17F61FF771483ECEA9F71FEA68FE55208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft Manifest number: 1AD0 Signing time: Tue 27 Oct 2026 22:01:31 +0000 Manifest this update: Tue 27 Oct 2026 22:01:31 +0000 Manifest next update: Wed 28 Oct 2026 22:01:31 +0000 Files and hashes: 1: BNGMVvTZ1XawSMPOVaywEKgFz8w.roa (hash: WMt9Jn62xWAvsFJt6BLgLhIXnUKvtSHXK/jsLiQ9wc0=) 2: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl (hash: BawQVyZxLCTe/TVhP4dodUPeANzy6wBJYZju8ytdG0s=) 3: J_k_uJydXhJKkAPBLn_Xr9EpYmw.roa (hash: bMaFsCf1Hj+guhXQdkk7ZJ24ZgANPSnkOncPj3CW1pQ=) 4: S9D_ZvZP7Y2SyyqdAWt1mGxtagE.roa (hash: hH6PHrAp3gX28fWUuJtWpjV+rB9bYio8w3wI6R4XHQI=) 5: YPhzzBUAAD8W6PxdQ8Eo6J_1Xlo.roa (hash: QJjVxTN7Kd8ed1QYD92fFHesTbkRe6gyeZIi3S6D0so=) 6: Z8UyJlJrz_tPx2Lzi2wtF6sRSoY.roa (hash: pZEmU7QBOi+LmI67NMxNilqE5KRHfsee+sRCVmykeWE=) 7: gw26QBwPzQF9bT3yyu20z1tgJyk.roa (hash: iuHp19gpWORmcmt7JfC/koJtOp0jpGQxA/LoBFKsFao=) 8: mdj55pZO6nRDbpPFsXBoK-GkNU8.roa (hash: JU7FZwf7hl0KcJAATQ/by5oF+/xX9ntEZw2LOkX+3S0=) 9: n70k782e6Gxq_-Hc2YO_idjOcAs.roa (hash: 9xPDUcAeeZeb+V1tJdiN4n6+fuVQh1F2hwH4+x4MOiQ=) 10: pX4-zHrOaGGZmLrFodKOqsDRVt8.roa (hash: oNNoPaGL9tiGcsnmh6pVkfSYR8zyTqJrDL9WChZzfdA=) 11: vqLY8AJRdwBNZp1vMAKBzj7hYMk.roa (hash: QScIVVTzvA87+g4pWqcXEROo6Uo1IppOyeJM8oSgj8s=) 12: xgHR7y7J0aGtYD0R9jhr6WJbZm8.roa (hash: CHXV05nQbB5KxwYkctbAeeyJMsjXN6ysG0w+cPnzH+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7f:61:ff:77:14:83:ec:ea:9f:71:fe:a6:8f:e5:52:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: Oct 27 22:01:31 2026 GMT Not After : Oct 28 22:01:31 2026 GMT Subject: CN=2edd92e279ae07b4151f493750ee7f6c1ac64537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c3:9e:76:b0:0b:37:c7:fb:2c:3b:15:7d:26: 0e:c3:d0:82:ce:ec:f9:90:0c:cf:ed:dc:aa:03:39: 5a:4d:49:28:a5:89:2e:28:b8:b4:82:ec:f5:99:5d: 6d:2e:3d:9d:88:5f:6d:72:f4:2c:d4:02:41:55:95: 0f:e8:4b:33:fd:ea:c9:aa:b6:68:df:51:d7:13:8e: ab:0d:c6:b4:11:3d:45:72:14:06:ca:24:69:82:3a: ec:ba:27:c0:4f:69:dc:d8:65:27:ce:3d:d4:4b:57: b8:97:80:d0:81:a1:8f:a6:53:5f:49:a1:d0:7b:af: f0:72:16:70:55:9f:1e:02:3e:db:a3:b3:c9:c3:45: 84:f8:d3:b1:7e:3d:e8:4b:84:46:3b:05:b2:44:90: 96:00:c4:a3:5f:9d:71:dd:be:f8:7c:28:d8:23:8b: 0b:b9:d8:1e:51:7a:f9:13:73:c6:35:87:e1:64:7c: 90:5b:9c:05:25:3b:ee:b2:f5:f1:99:53:dd:97:06: 55:4b:95:07:18:67:89:c9:d7:19:30:68:66:1d:19: 18:bc:c0:b3:0a:02:41:70:45:c9:03:7c:c1:35:7c: be:4b:90:e6:3a:ee:6e:0a:81:72:1c:7f:46:e5:0b: 6e:96:df:97:19:f6:52:5f:52:fb:a4:c3:6b:9f:21: f4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DD:92:E2:79:AE:07:B4:15:1F:49:37:50:EE:7F:6C:1A:C6:45:37 X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e7:03:57:0d:96:96:0d:f6:35:7f:22:e0:f2:e0:c6:ae:76: 9c:4d:cc:c5:30:97:54:97:85:bc:16:55:07:3a:1d:79:ce:48: b1:b2:da:03:0f:a8:ee:82:e9:e1:fa:52:06:e8:1e:d4:77:83: 9f:70:46:51:5e:f4:28:cb:75:cb:61:40:d1:36:ef:0c:2d:fe: 2b:e8:e6:56:8d:80:03:e9:ba:df:4a:ae:9e:a6:c5:c4:c2:89: fe:ca:3d:f1:66:66:f7:95:40:1d:a3:72:fc:30:fd:1f:5c:7e: 5d:41:f2:ef:90:69:a2:2e:52:e1:09:c0:08:17:a6:ae:43:83: 6d:20:4c:14:28:41:83:01:40:bb:81:74:ec:f9:f9:0f:f0:ed: 3e:1d:11:e4:5f:8e:d4:00:44:28:c9:d8:53:c4:84:78:a5:04: e1:5f:96:d9:88:2e:e7:ed:7b:cb:58:ae:58:e7:3b:54:df:e6: af:e0:c5:bd:74:ae:9c:a4:cd:fa:f4:fc:01:1c:07:a6:ad:6b: 2f:22:18:f1:fa:95:ea:36:8a:4d:0c:5e:27:3a:7f:de:a2:6f: ac:5f:bd:e9:43:5c:1f:ab:08:7a:9f:d5:7e:92:b6:10:17:b2: 77:06:42:b9:91:66:a1:21:fc:ed:a2:75:4c:06:dc:0b:ba:88: 1a:76:34:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF/Yf93FIPs6p9x/qaP5VIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjYxMDI3MjIwMTMxWhcNMjYxMDI4MjIwMTMxWjAzMTEwLwYDVQQD EygyZWRkOTJlMjc5YWUwN2I0MTUxZjQ5Mzc1MGVlN2Y2YzFhYzY0NTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcOedrALN8f7LDsVfSYOw9CCzuz5 kAzP7dyqAzlaTUkopYkuKLi0guz1mV1tLj2diF9tcvQs1AJBVZUP6Esz/erJqrZo 31HXE46rDca0ET1FchQGyiRpgjrsuifAT2nc2GUnzj3US1e4l4DQgaGPplNfSaHQ e6/wchZwVZ8eAj7bo7PJw0WE+NOxfj3oS4RGOwWyRJCWAMSjX51x3b74fCjYI4sL udgeUXr5E3PGNYfhZHyQW5wFJTvusvXxmVPdlwZVS5UHGGeJydcZMGhmHRkYvMCz CgJBcEXJA3zBNXy+S5DmOu5uCoFyHH9G5Qtult+XGfZSX1L7pMNrnyH0vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7dkuJ5rge0FR9JN1Duf2waxkU3MB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARucDVw2W lg32NX8i4PLgxq52nE3MxTCXVJeFvBZVBzodec5IsbLaAw+o7oLp4fpSBuge1HeD n3BGUV70KMt1y2FA0TbvDC3+K+jmVo2AA+m630qunqbFxMKJ/so98WZm95VAHaNy /DD9H1x+XUHy75Bpoi5S4QnACBemrkODbSBMFChBgwFAu4F07Pn5D/DtPh0R5F+O 1ABEKMnYU8SEeKUE4V+W2Ygu5+17y1iuWOc7VN/mr+DFvXSunKTN+vT8ARwHpq1r LyIY8fqV6jaKTQxeJzp/3qJvrF+96UNcH6sIep/VfpK2EBeydwZCuZFmoSH87aJ1 TAbcC7qIGnY0pw== -----END CERTIFICATE-----Generated at Wed Oct 28 05:21:50 2026 by rpki-client