$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: PdaPc2K6irc+r2Kb0pkdPOoUS5T+XgeCioaEOUfGMuA= Subject key identifier: A0:37:D3:E1:0C:8F:66:CC:89:E7:DC:5D:D4:AA:75:57:1D:94:5F:F9 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019FCA81092FF508B84A7213D6D925CF6417 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 1A16 Signing time: Tue 04 Aug 2026 02:01:21 +0000 Manifest this update: Tue 04 Aug 2026 02:01:21 +0000 Manifest next update: Wed 05 Aug 2026 02:01:21 +0000 Files and hashes: 1: 0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa (hash: q7lijpZcsnauEAX8HT2zNssS2eyKaRgPKnXCYMxmnow=) 2: 1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa (hash: a2WWRTi85qtiWX9jSpPt6KLXf/eSt441S1fdhlmq/do=) 3: 5tH7LLAkdhTinMcBwA5ZehHy3T8.roa (hash: FSVoKMxOOpnoQfuC/EJwrwRY/Zx+oB/dMyYOIOIr+Us=) 4: 7Gl4E5nv7lfdVD8WY0x_QnPy1Rk.roa (hash: 5BXePYC3akOngpzUfmX92F9cN0eAA0nV6nBriCadQDo=) 5: 7OwsFlnHxpebmwPMUCt2me-zyWI.roa (hash: 0Ig1S0d5NpWXySpctyJbfop5unyTsBugYNuECPwIRTg=) 6: 7xF1eBazbFn49vs2BNwnpcCQbU8.roa (hash: tqiV+OVtmDFe9Ok2QIOHbnLYBuKbyGIp9NdmnWlMMuw=) 7: Cbas0g2gR07ffn-dISh755Oa8jI.roa (hash: JrumCEaLcChVR162sO+6/nHAKdNjmGrmpSa1y3KAZ/A=) 8: EIOYZpIbkL6BC-x4564aTLDYD5I.roa (hash: z0WBT/Sycw1oUBchenD/iEcWbUKjtiNpM4WnCTpU/AQ=) 9: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: va8/acm7XPB9QVlkbCELJOjwQO4mRrOdFM7KrlPC/nA=) 10: NfpbtdoH2GzbqDfenHlYbv5zt_c.roa (hash: 89a648b6W+muQqrxylg+B9lJhIqBGoKMRio9Dz7PXhw=) 11: OI7FN0R3KVn8RagtjfraPAT_-h0.roa (hash: rHzaod1j1F2szA4DXpq47DGPOL7feB2iEse6a1F0sVI=) 12: YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa (hash: /+pWCkv4pOpaQQ3pOwrh5OujER/vlTj+p3hHLSIAK64=) 13: cXInX8MThhr-Q2P_0TCbxEVEnFM.roa (hash: 58A2aZSuymaJoOD/zxSFuC/w3QnUk8DmmWAzRDbCkH8=) 14: zib85lalNfDUXLnbOxY6qMczZjs.roa (hash: jphImNCP2svx9og7fDdI/KwoYuS28d452U+DOyXWGsw=) 15: zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa (hash: J1GJgdFWQEf7k64nQl0mr5yPcHotjObvTQFYDrnoDYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Aug 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ca:81:09:2f:f5:08:b8:4a:72:13:d6:d9:25:cf:64:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Aug 4 02:01:21 2026 GMT Not After : Aug 5 02:01:21 2026 GMT Subject: CN=a037d3e10c8f66cc89e7dc5dd4aa75571d945ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e9:7f:b0:d0:35:5b:b9:66:94:c5:8b:f3:10: d4:58:fe:15:6f:69:83:59:54:53:0b:43:31:33:5f: 29:34:3c:e3:59:c6:7b:77:df:a8:0d:77:d9:c6:e2: 3b:fc:37:37:a0:be:86:69:00:a4:0a:b6:63:df:ea: 23:c4:74:e7:c3:f2:c4:84:a0:82:f5:ec:59:3b:44: 9b:3a:35:bd:67:58:a9:93:77:a5:6c:d4:60:b2:e5: e1:a6:f0:89:13:c6:25:80:3a:50:53:05:54:3a:fe: d9:04:1a:30:e9:c1:77:0c:a0:49:29:38:3f:22:e1: 03:7f:eb:d1:d0:f5:38:62:16:80:5b:c2:ae:23:27: 88:3a:a6:e9:a8:e6:26:8f:ed:25:7d:9b:32:4e:e0: 65:4b:5d:3e:fd:27:84:47:0f:d2:a7:a4:b0:13:bd: 93:96:df:ed:fb:ad:f5:4a:08:6f:54:3a:5f:d4:fd: 6d:52:16:a0:a6:9a:ae:dc:53:5c:97:3c:e2:1b:f2: bb:1b:2a:c6:33:03:a3:d2:5a:91:fc:3d:0e:67:29: 8b:ba:f7:34:36:48:12:a4:20:99:e1:0b:04:cf:09: 4a:19:27:46:b1:d7:64:40:66:65:bb:6d:0b:11:de: ab:63:38:c4:10:cb:0e:12:33:3e:61:af:57:d7:b1: 16:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:37:D3:E1:0C:8F:66:CC:89:E7:DC:5D:D4:AA:75:57:1D:94:5F:F9 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0a:ef:83:7e:3d:88:fd:e1:64:36:a7:e9:7e:b2:f3:e7:9f: ed:8f:fd:d8:9e:b9:6d:f2:a0:83:07:fd:8e:99:e2:8a:b9:22: 9a:c4:75:9d:43:7d:78:85:c1:8d:21:eb:51:d9:65:eb:a2:65: 58:ca:84:a5:c5:d6:06:50:4a:a1:3f:22:6f:07:8f:15:11:9e: 90:7f:51:01:0f:bf:e3:b1:88:54:52:7c:be:03:5b:64:f7:31: bd:33:69:56:f4:d5:ce:0f:90:df:e8:32:25:cc:e5:43:c5:a1: c9:8d:08:30:5c:c9:e8:b5:29:2f:0f:b1:74:c0:01:74:f0:36: 42:90:58:3e:f2:a4:54:51:4b:d7:dc:d0:37:8f:65:fb:e4:57: 6f:3b:bd:45:52:ad:0a:f1:9a:d4:32:44:ca:03:53:18:9e:6c: 77:e1:60:89:39:b0:54:68:80:e9:1f:09:38:b9:1c:ed:92:4d: f5:4f:95:f8:b8:19:a2:04:ef:69:c0:6d:fa:8d:61:3d:ae:70: ac:63:e6:d4:78:a0:d7:a3:66:4c:2a:5f:f9:97:55:17:0b:05: 91:7b:bb:77:e2:75:98:bc:c7:67:bc:75:94:dc:0f:48:58:e2: ea:fc:f3:e8:66:7b:1d:17:d5:6d:8b:2f:9e:ab:4a:2a:b7:08: 27:6f:6d:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/KgQkv9Qi4SnIT1tklz2QXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwODA0MDIwMTIxWhcNMjYwODA1MDIwMTIxWjAzMTEwLwYDVQQD EyhhMDM3ZDNlMTBjOGY2NmNjODllN2RjNWRkNGFhNzU1NzFkOTQ1ZmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOl/sNA1W7lmlMWL8xDUWP4Vb2mD WVRTC0MxM18pNDzjWcZ7d9+oDXfZxuI7/Dc3oL6GaQCkCrZj3+ojxHTnw/LEhKCC 9exZO0SbOjW9Z1ipk3elbNRgsuXhpvCJE8YlgDpQUwVUOv7ZBBow6cF3DKBJKTg/ IuEDf+vR0PU4YhaAW8KuIyeIOqbpqOYmj+0lfZsyTuBlS10+/SeERw/Sp6SwE72T lt/t+631SghvVDpf1P1tUhagppqu3FNclzziG/K7GyrGMwOj0lqR/D0OZymLuvc0 NkgSpCCZ4QsEzwlKGSdGsddkQGZlu20LEd6rYzjEEMsOEjM+Ya9X17EWEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKA30+EMj2bMiefcXdSqdVcdlF/5MB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwrvg349 iP3hZDan6X6y8+ef7Y/92J65bfKggwf9jpniirkimsR1nUN9eIXBjSHrUdll66Jl WMqEpcXWBlBKoT8ibwePFRGekH9RAQ+/47GIVFJ8vgNbZPcxvTNpVvTVzg+Q3+gy JczlQ8WhyY0IMFzJ6LUpLw+xdMABdPA2QpBYPvKkVFFL19zQN49l++RXbzu9RVKt CvGa1DJEygNTGJ5sd+FgiTmwVGiA6R8JOLkc7ZJN9U+V+LgZogTvacBt+o1hPa5w rGPm1Hig16NmTCpf+ZdVFwsFkXu7d+J1mLzHZ7x1lNwPSFji6vzz6GZ7HRfVbYsv nqtKKrcIJ29tYg== -----END CERTIFICATE-----Generated at Tue Aug 4 08:47:58 2026 by rpki-client