$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: YiMQO1f/vbY46+VCmpaSaG8zhgHKLL+rKxMQtexz6kc= Subject key identifier: 46:69:D3:C4:DD:A7:38:54:E5:BD:CE:5C:C5:29:0B:3E:1A:61:22:F6 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 01A0B3BF39D4F95FBCE6B21516283F0946DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 1A91 Signing time: Fri 18 Sep 2026 09:00:48 +0000 Manifest this update: Fri 18 Sep 2026 09:00:48 +0000 Manifest next update: Sat 19 Sep 2026 09:00:48 +0000 Files and hashes: 1: 0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa (hash: q7lijpZcsnauEAX8HT2zNssS2eyKaRgPKnXCYMxmnow=) 2: 1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa (hash: a2WWRTi85qtiWX9jSpPt6KLXf/eSt441S1fdhlmq/do=) 3: 5tH7LLAkdhTinMcBwA5ZehHy3T8.roa (hash: FSVoKMxOOpnoQfuC/EJwrwRY/Zx+oB/dMyYOIOIr+Us=) 4: 7OwsFlnHxpebmwPMUCt2me-zyWI.roa (hash: 0Ig1S0d5NpWXySpctyJbfop5unyTsBugYNuECPwIRTg=) 5: 7xF1eBazbFn49vs2BNwnpcCQbU8.roa (hash: tqiV+OVtmDFe9Ok2QIOHbnLYBuKbyGIp9NdmnWlMMuw=) 6: Cbas0g2gR07ffn-dISh755Oa8jI.roa (hash: JrumCEaLcChVR162sO+6/nHAKdNjmGrmpSa1y3KAZ/A=) 7: EIOYZpIbkL6BC-x4564aTLDYD5I.roa (hash: z0WBT/Sycw1oUBchenD/iEcWbUKjtiNpM4WnCTpU/AQ=) 8: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: 2rnYRQ1Db/E25PXsKLY5+Rw7LAKbJ4SHli+xor5FWQI=) 9: NfpbtdoH2GzbqDfenHlYbv5zt_c.roa (hash: 89a648b6W+muQqrxylg+B9lJhIqBGoKMRio9Dz7PXhw=) 10: YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa (hash: /+pWCkv4pOpaQQ3pOwrh5OujER/vlTj+p3hHLSIAK64=) 11: Ytj0U6XkrheA-ulyRiwoygUy2PE.roa (hash: kTvsXh5scJZT1sBb1vEyZPTtitPkJZHzzOBVXCq/ERw=) 12: cXInX8MThhr-Q2P_0TCbxEVEnFM.roa (hash: 58A2aZSuymaJoOD/zxSFuC/w3QnUk8DmmWAzRDbCkH8=) 13: nRDN1vEHzaEZnMI3qR3L_MkZzjo.roa (hash: mgnK6g1VitEYDRZxuk2/lwLjkbGOufzmOfyHhd2Awg0=) 14: zib85lalNfDUXLnbOxY6qMczZjs.roa (hash: jphImNCP2svx9og7fDdI/KwoYuS28d452U+DOyXWGsw=) 15: zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa (hash: J1GJgdFWQEf7k64nQl0mr5yPcHotjObvTQFYDrnoDYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 08:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b3:bf:39:d4:f9:5f:bc:e6:b2:15:16:28:3f:09:46:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Sep 18 09:00:48 2026 GMT Not After : Sep 19 09:00:48 2026 GMT Subject: CN=4669d3c4dda73854e5bdce5cc5290b3e1a6122f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ad:03:38:b5:cd:9e:d4:15:b8:2f:96:60:69: 26:00:86:4b:e6:1e:b2:66:81:8c:a6:d5:ff:00:f9: 5a:73:a5:ae:de:1e:be:7d:2b:42:36:1b:66:fe:2a: 23:5f:38:91:dd:6a:95:87:92:d5:82:a0:39:fe:70: 4a:f8:f1:70:7c:79:4f:c9:d8:98:dd:4f:a2:b0:2e: c4:de:a8:34:0c:40:80:f2:b5:49:77:7c:95:45:1c: 70:cd:4d:7e:63:26:39:d3:64:65:dc:ef:cc:c5:44: c2:2c:54:b1:94:f6:1a:8d:04:f2:43:5d:6e:75:3b: f0:64:1f:9f:a0:16:32:f7:78:6b:50:7a:0f:21:e3: 7c:95:c0:a2:20:a1:c5:d9:d7:13:51:2b:e0:76:64: 03:e1:49:cd:8e:ed:28:4b:a9:c1:83:08:aa:1e:4e: 51:ac:13:45:18:36:05:ff:db:5a:04:33:12:59:aa: 11:d1:36:0a:29:79:09:c8:56:91:54:7f:32:9b:de: ee:a8:b4:c4:4f:f9:73:80:7e:4e:fa:c4:50:27:9c: 3b:82:5b:b7:0c:37:a4:42:e6:55:17:e1:7c:84:c0: 1f:64:0d:21:ee:d6:01:e2:aa:78:16:07:0c:12:47: e1:d1:27:00:d4:40:65:41:f9:2b:bc:37:23:59:7c: d2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:69:D3:C4:DD:A7:38:54:E5:BD:CE:5C:C5:29:0B:3E:1A:61:22:F6 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:cb:b8:73:d0:68:3e:c8:ea:df:d9:18:d0:c6:1d:04:2d:27: 99:ce:67:b5:90:07:50:8a:60:0a:b0:05:ed:8c:f9:71:dc:63: 1b:f0:41:47:a2:6b:39:1d:e5:b7:c0:47:96:03:a7:4f:ee:6d: 4f:ac:a9:84:d1:fb:c9:47:4c:96:e8:f2:00:ed:f1:47:97:6c: 6e:db:9c:55:30:85:90:3c:66:d4:05:cc:1d:d6:ef:3d:8e:16: b4:8a:e2:c5:9c:21:aa:c9:b1:bc:84:0b:93:6a:e6:6b:52:a4: 4b:8a:88:4c:92:55:ff:5d:07:38:19:9e:4f:23:ff:6e:07:a5: 12:be:a7:2c:df:37:d4:e9:b2:cb:24:05:4e:94:e6:0b:6b:07: 44:2d:a2:92:5f:66:be:b9:5f:e4:e5:24:96:b7:50:e8:47:fa: 5f:6f:ec:03:00:1f:ad:28:8a:17:9d:8b:bf:7a:5d:32:8e:dc: 1d:df:bf:13:08:be:8f:1f:64:0b:1a:2a:c9:8b:09:73:95:89: e0:85:57:b5:cf:02:59:c0:74:32:6c:fa:80:c3:a1:3a:04:9d: 18:91:02:73:69:00:bd:c7:d9:f6:91:5b:83:87:ec:55:8a:e5: 9c:17:c3:9d:36:8e:97:0a:a6:2a:f1:83:86:3d:72:30:4c:09: b7:5a:f0:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCzvznU+V+85rIVFig/CUbbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwOTE4MDkwMDQ4WhcNMjYwOTE5MDkwMDQ4WjAzMTEwLwYDVQQD Eyg0NjY5ZDNjNGRkYTczODU0ZTViZGNlNWNjNTI5MGIzZTFhNjEyMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa0DOLXNntQVuC+WYGkmAIZL5h6y ZoGMptX/APlac6Wu3h6+fStCNhtm/iojXziR3WqVh5LVgqA5/nBK+PFwfHlPydiY 3U+isC7E3qg0DECA8rVJd3yVRRxwzU1+YyY502Rl3O/MxUTCLFSxlPYajQTyQ11u dTvwZB+foBYy93hrUHoPIeN8lcCiIKHF2dcTUSvgdmQD4UnNju0oS6nBgwiqHk5R rBNFGDYF/9taBDMSWaoR0TYKKXkJyFaRVH8ym97uqLTET/lzgH5O+sRQJ5w7glu3 DDekQuZVF+F8hMAfZA0h7tYB4qp4FgcMEkfh0ScA1EBlQfkrvDcjWXzSCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZp08TdpzhU5b3OXMUpCz4aYSL2MB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesu4c9Bo Psjq39kY0MYdBC0nmc5ntZAHUIpgCrAF7Yz5cdxjG/BBR6JrOR3lt8BHlgOnT+5t T6yphNH7yUdMlujyAO3xR5dsbtucVTCFkDxm1AXMHdbvPY4WtIrixZwhqsmxvIQL k2rma1KkS4qITJJV/10HOBmeTyP/bgelEr6nLN831OmyyyQFTpTmC2sHRC2ikl9m vrlf5OUklrdQ6Ef6X2/sAwAfrSiKF52Lv3pdMo7cHd+/Ewi+jx9kCxoqyYsJc5WJ 4IVXtc8CWcB0Mmz6gMOhOgSdGJECc2kAvcfZ9pFbg4fsVYrlnBfDnTaOlwqmKvGD hj1yMEwJt1rwNg== -----END CERTIFICATE-----Generated at Fri Sep 18 19:12:17 2026 by rpki-client