$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: Puz4hmmvanVotN3UIzIIi3H8+bAmzHM0ftR/w80cmKE= Subject key identifier: 2E:AE:AE:03:9B:04:1A:71:24:FE:AC:1A:4A:D0:A2:E6:77:9E:24:B9 Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 01A08A1F52F1809A7F85BF2B0B2CB51FE976 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 1A3C Signing time: Thu 10 Sep 2026 07:01:43 +0000 Manifest this update: Thu 10 Sep 2026 07:01:43 +0000 Manifest next update: Fri 11 Sep 2026 07:01:43 +0000 Files and hashes: 1: 8dz0TrMtwzys9aId9S0iNBUOM6I.roa (hash: QLXQgTisSL5o9NDXTvqc31xSu43P2bWSnl0Mbj1LxKA=) 2: CG9ohWuinT5B93Rnr5fGvMKn1vY.roa (hash: PUMGIgV3wIfMf5d0ulCrvrKBPvAL6Ata0pqTX8puweA=) 3: JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa (hash: arGn6FJKM/5X/KQBvvmxnfiup95zCVTz6MKIcb88dnA=) 4: JutDRiQZPtkgRNn4DbKRtcU159k.roa (hash: TBfVgKnr15EdS367udNkZsLjUZkCmwigL6STK1CGALk=) 5: WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa (hash: EVCumPjXA28vp5ehPKHe+PCdpvR77Tfj3/cbydnM+o0=) 6: XXTLAzTN8ORt_-RYCj2-8C6GR00.roa (hash: 6BDh84FsMhXUtXLJgFo0Xh10o5gPmpg2C2PNspUTVCk=) 7: Y-SOlnUVIZjOVvcxnnWFzaAte_E.roa (hash: 2bLhdqPwt8VWaJXmqBQ8pl5vk0Pqbt7n4V7xQ3T9Dew=) 8: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: 8hLZ3h+fqh6t5X56accu3/7+mR2kaU9vECfE43oToTA=) 9: m6mcSmpfmNAj9RbqZcHLhm1-GBQ.roa (hash: p83WPoiu14c7eyRfswAFJNoQrZPR/HEj5misljpRM2U=) 10: nkHJQxs3RvxryxXyywwLA5kWGDI.roa (hash: VuLzAxuuKrma6aeyKBkCPTnFtqwkCI2Bh/sV0lxF7Jc=) 11: vzjiQ62-Ida16ZpmsWaWVB-3g8U.roa (hash: jsH0jmCurlULuLa9fBp8xexVcDJDX4+DOBZF+vtnAlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 07:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:1f:52:f1:80:9a:7f:85:bf:2b:0b:2c:b5:1f:e9:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Sep 10 07:01:43 2026 GMT Not After : Sep 11 07:01:43 2026 GMT Subject: CN=2eaeae039b041a7124feac1a4ad0a2e6779e24b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0d:d2:ca:65:e9:5e:87:1d:27:88:5a:ec:78: 47:ac:01:f9:84:dd:8a:85:a5:a3:64:86:36:c0:30: b8:ba:36:94:f2:01:5d:04:a3:b6:fb:fd:64:90:7d: 0a:47:a7:dc:19:8b:f2:8d:26:a6:0b:0a:09:af:62: ca:96:88:b2:cc:d0:82:61:78:fe:f3:a4:19:93:dd: 37:32:30:ee:72:ba:f6:2a:62:14:ec:e2:f3:0f:db: 86:44:d6:30:3c:34:3b:92:58:d2:c2:b6:54:a4:01: b0:26:9e:9a:0a:3c:71:f8:31:08:74:ac:6b:74:f4: 99:6d:7d:fa:ba:61:89:7c:bf:12:fa:4b:e8:ff:6d: d6:61:a1:91:b0:f0:c2:0f:56:e6:56:8a:db:eb:19: 32:5a:6f:1d:ac:ed:17:50:73:1f:25:22:6c:5f:1a: c1:a1:1d:bd:64:7f:0a:15:2d:63:cc:0e:d5:6e:91: 5f:20:73:18:19:86:58:20:a6:46:9f:1f:ea:e4:48: d5:43:a7:84:24:78:1b:95:98:eb:a4:8a:28:09:f2: ec:c2:ab:0b:55:3f:db:4f:06:ec:a8:dc:c9:8a:d6: 28:fe:e1:42:14:95:6e:60:37:4a:66:89:e4:38:42: a9:c9:6b:c1:55:2b:11:fb:d7:d9:b5:d1:bb:23:13: 94:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AE:AE:03:9B:04:1A:71:24:FE:AC:1A:4A:D0:A2:E6:77:9E:24:B9 X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:93:9e:a2:d9:3c:0b:f7:7b:b0:9a:8e:4e:78:7e:f6:c6:03: b9:cb:ee:5b:62:7e:51:95:1f:98:44:df:d9:a5:5f:6e:44:30: 7f:8c:ee:30:0a:25:27:ff:ec:40:39:36:90:92:5c:50:19:a5: 87:f6:f1:c9:ce:fc:b5:91:ab:a2:fc:2c:21:d1:e8:1d:fc:27: d2:1c:95:a9:26:4a:b4:4a:93:79:df:ff:86:5d:76:0b:e8:37: 23:9c:ca:c9:b9:62:9c:61:ea:b0:bb:4f:5f:9d:7f:e4:ed:ea: 17:4d:c3:28:28:5d:21:93:a1:59:99:d7:5e:4f:b1:4e:90:0d: 73:e5:07:8f:e0:53:2b:fd:e7:44:68:70:f7:f5:c2:83:0f:a4: 88:c7:60:64:d7:e4:3a:46:95:d1:9b:40:89:47:04:02:ff:17: 50:10:1b:85:5e:ab:10:4f:fd:f2:b6:3f:b2:2d:48:99:84:c8: 08:16:4c:66:41:cd:0b:0c:cc:43:28:af:41:65:26:14:d2:e0: 29:1d:3b:2b:7d:46:9a:04:70:5b:60:1d:e1:d7:3d:6a:e3:f3: ad:1e:6f:58:db:7e:94:ba:b1:fa:ae:5c:b5:18:ad:c4:3d:8a: b0:0b:71:d5:0a:e4:bc:a3:54:4e:fd:69:17:b6:b2:84:22:b0: 6b:25:c6:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKH1LxgJp/hb8rCyy1H+l2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYwOTEwMDcwMTQzWhcNMjYwOTExMDcwMTQzWjAzMTEwLwYDVQQD EygyZWFlYWUwMzliMDQxYTcxMjRmZWFjMWE0YWQwYTJlNjc3OWUyNGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ3SymXpXocdJ4ha7HhHrAH5hN2K haWjZIY2wDC4ujaU8gFdBKO2+/1kkH0KR6fcGYvyjSamCwoJr2LKloiyzNCCYXj+ 86QZk903MjDucrr2KmIU7OLzD9uGRNYwPDQ7kljSwrZUpAGwJp6aCjxx+DEIdKxr dPSZbX36umGJfL8S+kvo/23WYaGRsPDCD1bmVorb6xkyWm8drO0XUHMfJSJsXxrB oR29ZH8KFS1jzA7VbpFfIHMYGYZYIKZGnx/q5EjVQ6eEJHgblZjrpIooCfLswqsL VT/bTwbsqNzJitYo/uFCFJVuYDdKZonkOEKpyWvBVSsR+9fZtdG7IxOUZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6urgObBBpxJP6sGkrQouZ3niS5MB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZOeotk8 C/d7sJqOTnh+9sYDucvuW2J+UZUfmETf2aVfbkQwf4zuMAolJ//sQDk2kJJcUBml h/bxyc78tZGrovwsIdHoHfwn0hyVqSZKtEqTed//hl12C+g3I5zKyblinGHqsLtP X51/5O3qF03DKChdIZOhWZnXXk+xTpANc+UHj+BTK/3nRGhw9/XCgw+kiMdgZNfk OkaV0ZtAiUcEAv8XUBAbhV6rEE/98rY/si1ImYTICBZMZkHNCwzMQyivQWUmFNLg KR07K31GmgRwW2Ad4dc9auPzrR5vWNt+lLqx+q5ctRitxD2KsAtx1QrkvKNUTv1p F7ayhCKwayXGjg== -----END CERTIFICATE-----Generated at Thu Sep 10 17:41:23 2026 by rpki-client