$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: U00KKizOw5CKIzOtDCCs+eNNeld4SYuM7v7OHGepM38= Subject key identifier: BE:F0:E3:EE:0B:71:C1:7E:BA:73:82:ED:35:1A:49:2E:F1:81:96:35 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 01A1A67084E0323558A88076F467320318DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 1B10 Signing time: Wed 04 Nov 2026 12:02:34 +0000 Manifest this update: Wed 04 Nov 2026 12:02:34 +0000 Manifest next update: Thu 05 Nov 2026 12:02:34 +0000 Files and hashes: 1: 0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa (hash: q7lijpZcsnauEAX8HT2zNssS2eyKaRgPKnXCYMxmnow=) 2: 1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa (hash: a2WWRTi85qtiWX9jSpPt6KLXf/eSt441S1fdhlmq/do=) 3: 5tH7LLAkdhTinMcBwA5ZehHy3T8.roa (hash: FSVoKMxOOpnoQfuC/EJwrwRY/Zx+oB/dMyYOIOIr+Us=) 4: 7xF1eBazbFn49vs2BNwnpcCQbU8.roa (hash: tqiV+OVtmDFe9Ok2QIOHbnLYBuKbyGIp9NdmnWlMMuw=) 5: Cbas0g2gR07ffn-dISh755Oa8jI.roa (hash: JrumCEaLcChVR162sO+6/nHAKdNjmGrmpSa1y3KAZ/A=) 6: EIOYZpIbkL6BC-x4564aTLDYD5I.roa (hash: z0WBT/Sycw1oUBchenD/iEcWbUKjtiNpM4WnCTpU/AQ=) 7: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: 4+QsGBoe1GoENcZ13cpWbi4yO2ToiZ7hoKR39mAFSas=) 8: NfpbtdoH2GzbqDfenHlYbv5zt_c.roa (hash: 89a648b6W+muQqrxylg+B9lJhIqBGoKMRio9Dz7PXhw=) 9: Q_gezbiwAEhHuVDv053_fnOzg9g.roa (hash: 5PGOF68VebGELr/golG8zck23jHz/VBd0CHj4RfWteQ=) 10: YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa (hash: /+pWCkv4pOpaQQ3pOwrh5OujER/vlTj+p3hHLSIAK64=) 11: cXInX8MThhr-Q2P_0TCbxEVEnFM.roa (hash: 58A2aZSuymaJoOD/zxSFuC/w3QnUk8DmmWAzRDbCkH8=) 12: h9pKEM3z71POQosuhmS3E0bJWQo.roa (hash: QlvjW7kP/nGq0/L5LtWdNkECKZyJXXGNbH1toz/eR70=) 13: zib85lalNfDUXLnbOxY6qMczZjs.roa (hash: jphImNCP2svx9og7fDdI/KwoYuS28d452U+DOyXWGsw=) 14: zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa (hash: J1GJgdFWQEf7k64nQl0mr5yPcHotjObvTQFYDrnoDYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a6:70:84:e0:32:35:58:a8:80:76:f4:67:32:03:18:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Nov 4 12:02:34 2026 GMT Not After : Nov 5 12:02:34 2026 GMT Subject: CN=bef0e3ee0b71c17eba7382ed351a492ef1819635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d4:f1:8a:4b:8a:12:23:d4:e6:46:b2:20:f2: 1d:20:d5:46:f9:00:65:80:f4:87:64:a3:82:c4:22: 18:58:1d:a4:47:e4:4d:da:2c:d8:4d:f4:04:a2:c5: 96:79:af:98:b7:75:0d:01:7c:83:12:d1:60:31:a4: 0c:4c:0c:43:d8:5e:dd:32:87:11:bb:84:a5:aa:cf: 9b:82:5f:29:e7:8f:17:e3:c2:0b:a8:4c:e2:e7:6b: 80:91:2d:3f:ec:2d:a6:ea:e5:65:06:0d:64:9f:b5: 02:7e:b8:54:7f:0e:48:15:da:1c:8c:eb:db:9b:9f: 18:a2:bd:f3:45:e8:f7:aa:75:84:87:d2:68:a4:2b: 04:86:87:df:28:7a:27:de:72:78:1c:d5:32:0d:cc: f8:ac:2a:b5:86:ec:c4:04:b3:00:f9:06:08:7c:b8: 20:73:1a:20:59:e0:01:65:00:39:63:56:f2:a4:0d: 60:00:17:4d:ee:4d:9d:a4:30:06:ee:62:e3:a2:e0: b1:47:8c:c9:81:77:08:6c:20:0d:e5:c0:89:38:6d: 87:68:34:e9:d7:fb:e1:50:2f:c3:85:d7:c1:f5:d8: e8:1f:aa:17:ac:b2:c0:76:ce:98:f9:25:80:b1:9e: 8f:c7:1c:6d:13:f6:c9:78:02:c6:38:fc:0d:f8:15: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F0:E3:EE:0B:71:C1:7E:BA:73:82:ED:35:1A:49:2E:F1:81:96:35 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:12:67:c1:1a:4c:b6:90:7c:81:bb:2d:10:86:77:52:27:af: c6:97:10:10:15:e1:2f:9b:cc:8b:cb:4c:2e:a4:e8:5d:24:7f: a5:6f:3a:2d:36:01:21:87:bd:12:28:72:f5:f3:d3:b3:3c:6c: 48:e6:b6:64:51:fd:89:ae:b2:a7:c8:04:de:bd:79:e4:0e:8d: 52:75:44:ca:6c:06:36:5c:7b:04:a8:e4:ca:09:97:99:fb:aa: a6:0e:95:86:f6:88:25:ec:63:e1:0f:5e:9d:3e:0d:fe:65:f0: e7:c9:dd:81:6a:f3:22:8c:66:58:b0:d4:90:ae:19:c0:df:b4: 7a:18:21:9b:eb:d7:a7:ea:3c:b5:55:99:f2:ab:45:11:10:73: f2:22:95:ed:ce:f3:4f:6c:84:c0:43:d7:93:91:7e:88:3c:f5: cd:d7:b0:c9:6e:5f:75:63:4e:94:7b:81:a8:1b:44:f3:7c:83: 84:fa:d3:b9:2d:66:09:ed:db:75:23:54:cf:52:59:7c:1f:05: 3d:4d:87:95:dc:1d:66:c8:f5:11:91:88:2d:19:17:f5:5c:40: f9:c5:3a:42:2f:ca:8d:c1:bd:a5:42:ec:9a:0d:f3:45:70:df: 07:9c:d5:93:55:97:47:c8:50:c2:98:f4:88:48:78:66:91:7f: 98:a9:fa:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGmcITgMjVYqIB29GcyAxjaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYxMTA0MTIwMjM0WhcNMjYxMTA1MTIwMjM0WjAzMTEwLwYDVQQD EyhiZWYwZTNlZTBiNzFjMTdlYmE3MzgyZWQzNTFhNDkyZWYxODE5NjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69TxikuKEiPU5kayIPIdINVG+QBl gPSHZKOCxCIYWB2kR+RN2izYTfQEosWWea+Yt3UNAXyDEtFgMaQMTAxD2F7dMocR u4Slqs+bgl8p548X48ILqEzi52uAkS0/7C2m6uVlBg1kn7UCfrhUfw5IFdocjOvb m58Yor3zRej3qnWEh9JopCsEhoffKHon3nJ4HNUyDcz4rCq1huzEBLMA+QYIfLgg cxogWeABZQA5Y1bypA1gABdN7k2dpDAG7mLjouCxR4zJgXcIbCAN5cCJOG2HaDTp 1/vhUC/DhdfB9djoH6oXrLLAds6Y+SWAsZ6PxxxtE/bJeALGOPwN+BU0VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7w4+4LccF+unOC7TUaSS7xgZY1MB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBJnwRpM tpB8gbstEIZ3UievxpcQEBXhL5vMi8tMLqToXSR/pW86LTYBIYe9Eihy9fPTszxs SOa2ZFH9ia6yp8gE3r155A6NUnVEymwGNlx7BKjkygmXmfuqpg6VhvaIJexj4Q9e nT4N/mXw58ndgWrzIoxmWLDUkK4ZwN+0ehghm+vXp+o8tVWZ8qtFERBz8iKV7c7z T2yEwEPXk5F+iDz1zdewyW5fdWNOlHuBqBtE83yDhPrTuS1mCe3bdSNUz1JZfB8F PU2HldwdZsj1EZGILRkX9VxA+cU6Qi/KjcG9pULsmg3zRXDfB5zVk1WXR8hQwpj0 iEh4ZpF/mKn6Dw== -----END CERTIFICATE-----Generated at Wed Nov 4 18:58:57 2026 by rpki-client