$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: lRvlwyXuvvx+7Koh1g/Wi6vje1clnY0diZupBeDRyrE= Subject key identifier: 25:93:CF:FE:E1:3B:55:A3:28:B5:03:20:FC:7E:5C:0A:EA:B3:92:C3 Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 01A181503A38D1B9576CFDF55C0A6569C26A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 1ABC Signing time: Wed 28 Oct 2026 07:01:20 +0000 Manifest this update: Wed 28 Oct 2026 07:01:20 +0000 Manifest next update: Thu 29 Oct 2026 07:01:20 +0000 Files and hashes: 1: 8dz0TrMtwzys9aId9S0iNBUOM6I.roa (hash: QLXQgTisSL5o9NDXTvqc31xSu43P2bWSnl0Mbj1LxKA=) 2: CG9ohWuinT5B93Rnr5fGvMKn1vY.roa (hash: PUMGIgV3wIfMf5d0ulCrvrKBPvAL6Ata0pqTX8puweA=) 3: JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa (hash: arGn6FJKM/5X/KQBvvmxnfiup95zCVTz6MKIcb88dnA=) 4: JutDRiQZPtkgRNn4DbKRtcU159k.roa (hash: TBfVgKnr15EdS367udNkZsLjUZkCmwigL6STK1CGALk=) 5: WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa (hash: EVCumPjXA28vp5ehPKHe+PCdpvR77Tfj3/cbydnM+o0=) 6: XXTLAzTN8ORt_-RYCj2-8C6GR00.roa (hash: 6BDh84FsMhXUtXLJgFo0Xh10o5gPmpg2C2PNspUTVCk=) 7: Y-SOlnUVIZjOVvcxnnWFzaAte_E.roa (hash: 2bLhdqPwt8VWaJXmqBQ8pl5vk0Pqbt7n4V7xQ3T9Dew=) 8: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: POvLVB2maW0XrlSFXzt3736ujiF8zGW6SysbLyJo+iQ=) 9: m6mcSmpfmNAj9RbqZcHLhm1-GBQ.roa (hash: p83WPoiu14c7eyRfswAFJNoQrZPR/HEj5misljpRM2U=) 10: nkHJQxs3RvxryxXyywwLA5kWGDI.roa (hash: VuLzAxuuKrma6aeyKBkCPTnFtqwkCI2Bh/sV0lxF7Jc=) 11: vzjiQ62-Ida16ZpmsWaWVB-3g8U.roa (hash: jsH0jmCurlULuLa9fBp8xexVcDJDX4+DOBZF+vtnAlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:81:50:3a:38:d1:b9:57:6c:fd:f5:5c:0a:65:69:c2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Oct 28 07:01:20 2026 GMT Not After : Oct 29 07:01:20 2026 GMT Subject: CN=2593cffee13b55a328b50320fc7e5c0aeab392c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:77:68:e4:fb:25:d0:22:0e:ce:1b:a1:39:15: bf:c4:80:6f:22:6c:5b:11:8e:bb:d4:b7:8b:89:e1: e6:1a:7f:48:7b:86:b0:a5:55:27:32:34:45:aa:68: ef:f2:d9:4a:07:80:83:cc:15:9b:6b:6b:05:07:e9: 97:41:40:84:cb:65:67:7d:e6:b4:dc:50:bf:16:57: 1e:29:bc:cf:51:aa:34:97:54:41:94:f0:f0:00:84: 98:c6:d1:96:ab:6e:1c:a6:1e:01:d5:8c:c3:b9:a9: 46:c6:be:8c:7c:2d:3a:3e:1f:4b:61:9a:46:83:4d: ef:13:90:9b:39:62:5b:88:de:8d:12:ca:1c:e9:a7: 10:07:22:6c:23:d8:65:fa:14:d6:46:8d:5f:c3:c4: 41:4b:ba:bc:26:53:75:9c:37:05:ef:b3:bb:63:72: 3f:90:95:17:15:1a:b7:49:19:73:82:81:a1:f0:ea: 63:02:db:ce:f1:05:ce:f5:d7:5e:99:e4:88:cf:b7: bb:a0:ee:71:97:cf:7f:13:4d:42:42:07:73:f1:50: 6e:76:0c:c0:17:40:3e:9e:16:3e:ed:92:67:48:f2: 2c:8b:09:d6:17:4f:c6:93:cb:f6:4d:45:ce:af:e2: 83:96:e6:01:35:e1:72:26:8b:99:38:49:4e:8c:70: d5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:93:CF:FE:E1:3B:55:A3:28:B5:03:20:FC:7E:5C:0A:EA:B3:92:C3 X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ab:66:f9:ac:7b:ab:f6:f4:55:9c:4f:01:3a:4c:66:e0:15: 0c:3c:60:2c:6d:18:f2:47:d8:d1:b2:49:5b:f9:35:c0:34:e4: e2:9b:d1:7c:48:3b:90:19:b5:7f:56:1b:35:4c:91:1f:b1:d7: f8:04:14:a7:aa:fb:a2:49:2c:b3:e6:fa:5d:b0:9d:ac:0b:71: 20:e5:bd:4d:82:19:2f:5a:b7:74:a3:e8:95:09:53:8c:df:21: 9d:a6:ea:6a:f5:9d:f1:df:dd:8f:87:de:f3:fb:3b:6c:df:9c: d8:c4:47:c4:83:84:5f:e4:94:bc:a1:65:6f:ad:6e:8f:83:d2: 92:db:84:c5:9a:eb:a2:36:a5:e7:83:a6:79:3a:a9:82:14:de: 27:93:5a:d6:7b:51:71:de:76:87:68:71:15:d1:e5:4e:17:e5: c0:a2:db:e7:a8:49:7f:89:bd:a8:6a:49:47:24:b8:06:45:02: df:84:4b:7a:be:1a:84:f0:14:06:58:d0:68:78:c8:ed:c2:32: 9d:6a:c9:12:b6:ed:dd:48:dd:17:f3:d6:ba:f7:88:0b:ae:d2: bc:0e:50:b9:bf:a1:c5:74:56:79:52:77:1c:65:a0:e4:4d:6c: f2:1c:92:7f:12:ff:6c:95:a8:0a:4d:eb:3e:4f:aa:20:08:64: c0:0a:79:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGBUDo40blXbP31XAplacJqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYxMDI4MDcwMTIwWhcNMjYxMDI5MDcwMTIwWjAzMTEwLwYDVQQD EygyNTkzY2ZmZWUxM2I1NWEzMjhiNTAzMjBmYzdlNWMwYWVhYjM5MmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXdo5Psl0CIOzhuhORW/xIBvImxb EY671LeLieHmGn9Ie4awpVUnMjRFqmjv8tlKB4CDzBWba2sFB+mXQUCEy2Vnfea0 3FC/FlceKbzPUao0l1RBlPDwAISYxtGWq24cph4B1YzDualGxr6MfC06Ph9LYZpG g03vE5CbOWJbiN6NEsoc6acQByJsI9hl+hTWRo1fw8RBS7q8JlN1nDcF77O7Y3I/ kJUXFRq3SRlzgoGh8OpjAtvO8QXO9ddemeSIz7e7oO5xl89/E01CQgdz8VBudgzA F0A+nhY+7ZJnSPIsiwnWF0/Gk8v2TUXOr+KDluYBNeFyJouZOElOjHDVSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWTz/7hO1WjKLUDIPx+XArqs5LDMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6tm+ax7 q/b0VZxPATpMZuAVDDxgLG0Y8kfY0bJJW/k1wDTk4pvRfEg7kBm1f1YbNUyRH7HX +AQUp6r7okkss+b6XbCdrAtxIOW9TYIZL1q3dKPolQlTjN8hnabqavWd8d/dj4fe 8/s7bN+c2MRHxIOEX+SUvKFlb61uj4PSktuExZrrojal54OmeTqpghTeJ5Na1ntR cd52h2hxFdHlThflwKLb56hJf4m9qGpJRyS4BkUC34RLer4ahPAUBljQaHjI7cIy nWrJErbt3UjdF/PWuveIC67SvA5Qub+hxXRWeVJ3HGWg5E1s8hySfxL/bJWoCk3r Pk+qIAhkwAp54g== -----END CERTIFICATE-----Generated at Wed Oct 28 16:29:12 2026 by rpki-client