$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: GXBCGAGE9riZ7cgd2nRjBEKsvF0Vgq+QRTDG8lTrtls= Subject key identifier: 3C:29:83:B8:DF:38:2A:84:EC:DD:B4:79:96:1D:B5:7A:E9:F9:81:40 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019DF871550B0EE3C5E67034CEE7790D227C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 1920 Signing time: Tue 05 May 2026 14:01:10 +0000 Manifest this update: Tue 05 May 2026 14:01:10 +0000 Manifest next update: Wed 06 May 2026 14:01:10 +0000 Files and hashes: 1: 0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa (hash: q7lijpZcsnauEAX8HT2zNssS2eyKaRgPKnXCYMxmnow=) 2: 1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa (hash: a2WWRTi85qtiWX9jSpPt6KLXf/eSt441S1fdhlmq/do=) 3: 5tH7LLAkdhTinMcBwA5ZehHy3T8.roa (hash: FSVoKMxOOpnoQfuC/EJwrwRY/Zx+oB/dMyYOIOIr+Us=) 4: 7xF1eBazbFn49vs2BNwnpcCQbU8.roa (hash: tqiV+OVtmDFe9Ok2QIOHbnLYBuKbyGIp9NdmnWlMMuw=) 5: Cbas0g2gR07ffn-dISh755Oa8jI.roa (hash: JrumCEaLcChVR162sO+6/nHAKdNjmGrmpSa1y3KAZ/A=) 6: EIOYZpIbkL6BC-x4564aTLDYD5I.roa (hash: z0WBT/Sycw1oUBchenD/iEcWbUKjtiNpM4WnCTpU/AQ=) 7: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: bXX7On31pOTPx654yjZWNFyHifYyCfTYJrtWezGIDQg=) 8: IRfB3tESkmVjLc1Cib2G-VGIhLk.roa (hash: enLveUG1UyfNO0VTMWU5d8FMOrzTgnZOyQcblvKgYSc=) 9: NfpbtdoH2GzbqDfenHlYbv5zt_c.roa (hash: 89a648b6W+muQqrxylg+B9lJhIqBGoKMRio9Dz7PXhw=) 10: YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa (hash: /+pWCkv4pOpaQQ3pOwrh5OujER/vlTj+p3hHLSIAK64=) 11: ZVswBtjqTPAHJwsg9x0J2gXGUJc.roa (hash: /3EEsNzaR8y9IMYHxdGbT7uX8JB4pYmU2IaMc8ZKSDA=) 12: aizTiTr3JBAyofrdSN5dAv2TZSE.roa (hash: zJwdzGPf1h0q9TZ+Muv6Cl42qffhVJBeW6ntkeRkbts=) 13: cXInX8MThhr-Q2P_0TCbxEVEnFM.roa (hash: 58A2aZSuymaJoOD/zxSFuC/w3QnUk8DmmWAzRDbCkH8=) 14: qo7C66bX7nZgf8bu0aV4Y1bWXgg.roa (hash: NUZhkr2nCngDCv92miXKv65EN2+fNIqBrJSkpKYvV70=) 15: qyhqkUNee4Znwp14wfIcER_644M.roa (hash: ck4mFq1vqBwIjbucEOXCx0MDRzjD76rAgZ8Zp5IZXk4=) 16: tMOM49mON-wD8zTtajFPDha_yco.roa (hash: X25vCvqdM17ldWbN+OsedMb7/hCVvVUgdyyal0kP0OU=) 17: y2acnhD1Qle98ny8SvQjdRwfXUY.roa (hash: cxToiNZ+ktSM6/cxvq+vDOW9En/IhYo/LkdV4bJ3yr4=) 18: zib85lalNfDUXLnbOxY6qMczZjs.roa (hash: jphImNCP2svx9og7fDdI/KwoYuS28d452U+DOyXWGsw=) 19: zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa (hash: J1GJgdFWQEf7k64nQl0mr5yPcHotjObvTQFYDrnoDYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 14:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f8:71:55:0b:0e:e3:c5:e6:70:34:ce:e7:79:0d:22:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: May 5 14:01:10 2026 GMT Not After : May 6 14:01:10 2026 GMT Subject: CN=3c2983b8df382a84ecddb479961db57ae9f98140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e0:74:cf:d6:a1:db:1f:b1:d1:10:ed:fa:6d: df:e4:64:4c:54:6d:1d:da:f5:bc:bf:1c:5e:4b:37: a5:07:c7:02:7a:16:c7:1d:17:68:1e:c2:04:5e:ad: cf:9e:9f:c1:99:ac:2a:f5:00:26:2f:8b:83:a5:a2: f0:5d:07:03:d7:c9:cb:a1:6a:ce:60:0c:af:1b:19: f5:0a:3f:cc:3e:2f:7b:e7:9f:c6:a4:d4:63:9b:b2: b9:dd:0b:a9:a3:33:7d:4d:08:77:48:9d:d1:83:df: 0e:c3:15:bb:90:15:41:ef:1c:43:a3:43:7a:0b:ba: 72:f6:46:61:13:01:91:01:0c:84:40:c8:76:32:2d: b2:83:8e:9f:f5:9d:44:ce:1d:3e:d9:cd:0f:a1:be: ca:a1:34:5a:6a:8f:42:fe:32:44:e8:cd:a8:1b:0e: 2f:5c:f5:fe:b2:72:31:cf:3f:90:e5:39:1d:88:88: 87:37:98:82:72:3a:36:ad:e5:98:94:32:c5:12:19: b2:c6:29:60:da:72:48:b9:74:eb:c5:cb:90:32:78: f0:f8:1b:9e:1e:30:f2:14:d2:05:08:ec:14:eb:ec: f2:b1:80:85:40:a6:3f:25:db:d5:d0:d9:a6:49:cb: ea:cd:12:7a:e9:c3:b8:32:43:22:8b:33:d0:ff:95: f7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:29:83:B8:DF:38:2A:84:EC:DD:B4:79:96:1D:B5:7A:E9:F9:81:40 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:30:91:90:89:05:85:21:9e:0d:11:ac:a9:dc:82:31:36:7e: 60:0e:8e:87:51:fa:d3:13:47:1c:4f:ed:77:13:ad:7c:7f:8f: f0:b2:3b:8a:29:e8:3b:d0:9e:7f:d2:e3:4f:8f:d1:c6:1d:76: 07:f9:35:e0:cc:7a:91:28:da:f7:78:7b:d1:76:61:4c:dd:a6: 65:d1:79:87:45:cf:64:8c:6c:6f:2d:ef:c7:f3:58:c4:ea:17: af:27:81:de:c9:de:1a:01:44:ab:3f:f3:7c:c1:87:91:4a:eb: e8:b2:5c:9f:cf:1e:02:4c:ad:72:bd:01:ab:d0:61:95:14:b0: bc:1a:39:9e:78:40:50:c2:1f:b6:91:cc:21:9c:f4:cf:d3:f5: a3:0e:40:9a:51:b4:f3:45:bd:13:cf:25:c0:77:e9:c7:8e:d2: 8f:84:c2:b7:45:36:79:b9:37:d3:e5:b1:be:c8:ff:d9:09:c2: b8:7e:e9:87:d9:7a:28:ff:9b:2b:c3:3a:0a:b5:51:ac:9d:e5: 28:8f:61:2b:d8:27:94:21:ac:d6:77:b8:a6:e1:5f:80:7a:b7: 14:6c:e6:82:e3:93:c1:a1:db:ec:37:5a:b9:9b:9a:32:e0:64: 3c:0f:c7:83:bb:fd:d1:cc:a9:b9:14:25:09:7d:d7:7b:bb:36: 2f:5e:7f:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ34cVULDuPF5nA0zud5DSJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwNTA1MTQwMTEwWhcNMjYwNTA2MTQwMTEwWjAzMTEwLwYDVQQD EygzYzI5ODNiOGRmMzgyYTg0ZWNkZGI0Nzk5NjFkYjU3YWU5Zjk4MTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eB0z9ah2x+x0RDt+m3f5GRMVG0d 2vW8vxxeSzelB8cCehbHHRdoHsIEXq3Pnp/Bmawq9QAmL4uDpaLwXQcD18nLoWrO YAyvGxn1Cj/MPi9755/GpNRjm7K53QupozN9TQh3SJ3Rg98OwxW7kBVB7xxDo0N6 C7py9kZhEwGRAQyEQMh2Mi2yg46f9Z1Ezh0+2c0Pob7KoTRaao9C/jJE6M2oGw4v XPX+snIxzz+Q5TkdiIiHN5iCcjo2reWYlDLFEhmyxilg2nJIuXTrxcuQMnjw+Bue HjDyFNIFCOwU6+zysYCFQKY/JdvV0NmmScvqzRJ66cO4MkMiizPQ/5X30wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwpg7jfOCqE7N20eZYdtXrp+YFAMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTCRkIkF hSGeDRGsqdyCMTZ+YA6Oh1H60xNHHE/tdxOtfH+P8LI7iinoO9Cef9LjT4/Rxh12 B/k14Mx6kSja93h70XZhTN2mZdF5h0XPZIxsby3vx/NYxOoXryeB3sneGgFEqz/z fMGHkUrr6LJcn88eAkytcr0Bq9BhlRSwvBo5nnhAUMIftpHMIZz0z9P1ow5AmlG0 80W9E88lwHfpx47Sj4TCt0U2ebk30+Wxvsj/2QnCuH7ph9l6KP+bK8M6CrVRrJ3l KI9hK9gnlCGs1ne4puFfgHq3FGzmguOTwaHb7DdauZuaMuBkPA/Hg7v90cypuRQl CX3Xe7s2L15/xw== -----END CERTIFICATE-----Generated at Wed May 6 00:20:24 2026 by rpki-client