$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: /DvoP5oLxEVyEB+b1dEEkbnkQwd5KwtGWYnqmzGyHFI= Subject key identifier: 08:AB:33:24:A8:67:74:11:A1:F6:81:B0:DD:A7:33:C5:4C:3C:1C:16 Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 019FA0727A76478F6A09F89A5AB64927C2A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 19C3 Signing time: Sun 26 Jul 2026 22:01:24 +0000 Manifest this update: Sun 26 Jul 2026 22:01:24 +0000 Manifest next update: Mon 27 Jul 2026 22:01:24 +0000 Files and hashes: 1: 8dz0TrMtwzys9aId9S0iNBUOM6I.roa (hash: QLXQgTisSL5o9NDXTvqc31xSu43P2bWSnl0Mbj1LxKA=) 2: CG9ohWuinT5B93Rnr5fGvMKn1vY.roa (hash: PUMGIgV3wIfMf5d0ulCrvrKBPvAL6Ata0pqTX8puweA=) 3: JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa (hash: arGn6FJKM/5X/KQBvvmxnfiup95zCVTz6MKIcb88dnA=) 4: JutDRiQZPtkgRNn4DbKRtcU159k.roa (hash: TBfVgKnr15EdS367udNkZsLjUZkCmwigL6STK1CGALk=) 5: WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa (hash: EVCumPjXA28vp5ehPKHe+PCdpvR77Tfj3/cbydnM+o0=) 6: XXTLAzTN8ORt_-RYCj2-8C6GR00.roa (hash: 6BDh84FsMhXUtXLJgFo0Xh10o5gPmpg2C2PNspUTVCk=) 7: Y-SOlnUVIZjOVvcxnnWFzaAte_E.roa (hash: 2bLhdqPwt8VWaJXmqBQ8pl5vk0Pqbt7n4V7xQ3T9Dew=) 8: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: vFs4sk+I6hGe4qunbdToGY0LXykECsHgFST8aL4FKOc=) 9: m6mcSmpfmNAj9RbqZcHLhm1-GBQ.roa (hash: p83WPoiu14c7eyRfswAFJNoQrZPR/HEj5misljpRM2U=) 10: nkHJQxs3RvxryxXyywwLA5kWGDI.roa (hash: VuLzAxuuKrma6aeyKBkCPTnFtqwkCI2Bh/sV0lxF7Jc=) 11: vzjiQ62-Ida16ZpmsWaWVB-3g8U.roa (hash: jsH0jmCurlULuLa9fBp8xexVcDJDX4+DOBZF+vtnAlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 22:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a0:72:7a:76:47:8f:6a:09:f8:9a:5a:b6:49:27:c2:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Jul 26 22:01:24 2026 GMT Not After : Jul 27 22:01:24 2026 GMT Subject: CN=08ab3324a8677411a1f681b0dda733c54c3c1c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:84:d6:24:22:66:da:1b:25:10:4a:e7:5d:f5: c1:29:7a:d2:ae:a8:74:37:2d:1c:e2:c9:be:5d:92: e4:e8:0b:51:b7:90:91:3b:da:d7:a1:62:37:4d:92: 8a:16:be:69:25:24:13:31:da:ce:7f:4e:67:d0:0a: fb:e1:2d:b5:54:b6:f5:11:74:34:1f:60:97:25:e8: b2:5c:a8:f0:fa:b0:fc:47:fa:60:5d:05:74:75:f7: 4b:b3:44:8b:cf:dc:57:2a:03:f6:c3:19:f4:c4:c7: 10:a7:2c:34:77:e6:27:5b:7d:32:54:e5:cf:c9:a1: 0f:33:42:30:02:70:ea:04:40:2d:3b:75:b7:cb:88: 03:91:ae:6c:7c:fb:7d:0e:af:44:a7:72:67:94:3b: e3:ee:54:de:02:97:1a:4e:65:50:ce:ba:14:42:5c: 8f:52:5a:55:cd:7f:af:31:c6:b8:e1:9d:15:c7:5e: 1f:7a:c5:9d:b0:6a:1b:8c:6b:b3:67:74:d6:28:4d: 1d:55:8f:29:7f:ed:70:61:15:4a:e6:d6:c7:4a:b3: 17:9e:24:54:e9:6e:41:21:d0:34:69:37:aa:5d:da: 8d:8e:34:a2:dc:20:89:c8:85:f9:e2:12:c1:81:a4: 47:f0:65:03:62:a0:1c:96:5c:87:6e:e2:30:16:e0: 9f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AB:33:24:A8:67:74:11:A1:F6:81:B0:DD:A7:33:C5:4C:3C:1C:16 X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d3:5e:16:f5:5f:97:37:d2:ff:1f:8d:e5:04:e2:49:60:13: 44:7f:a5:a9:6c:bd:ee:18:1d:94:16:a8:1a:4e:1d:18:ee:cc: 7a:83:5e:ad:11:c0:db:b0:e4:5a:72:2a:6c:d7:f2:d9:f4:15: b0:c8:70:eb:91:18:b1:9c:82:87:68:0e:7a:de:33:b0:26:0c: 6d:27:0c:07:00:d1:79:5b:f0:81:28:be:28:07:b1:e8:b4:b8: 75:f9:75:ac:a0:a9:69:0c:43:53:0d:2a:8f:18:01:ad:32:d7: fc:02:89:1c:a3:73:7d:3a:fe:7a:5f:39:00:20:03:ff:33:11: 1d:b1:91:52:cf:89:4b:f6:f7:82:31:be:1d:c1:af:a8:43:a9: 1f:47:98:f3:6c:f5:ab:db:ac:93:bf:f6:19:51:90:26:92:ed: f8:9f:21:5e:34:e0:f3:4c:d5:8d:e4:c5:09:1a:7a:71:35:24: bc:e1:35:36:5d:f7:c9:b7:d7:54:93:cf:0e:28:b6:fe:ed:5e: a2:b2:e2:a6:42:c2:05:a3:80:78:d4:b7:e8:af:57:1c:72:33: 82:6f:8f:d1:eb:51:3b:65:b6:12:29:26:cd:ea:39:ec:7c:9c: 61:0c:53:1a:05:68:39:23:65:00:a7:d9:a8:9c:ac:94:b4:2c: b0:62:08:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+gcnp2R49qCfiaWrZJJ8KnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYwNzI2MjIwMTI0WhcNMjYwNzI3MjIwMTI0WjAzMTEwLwYDVQQD EygwOGFiMzMyNGE4Njc3NDExYTFmNjgxYjBkZGE3MzNjNTRjM2MxYzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oTWJCJm2hslEErnXfXBKXrSrqh0 Ny0c4sm+XZLk6AtRt5CRO9rXoWI3TZKKFr5pJSQTMdrOf05n0Ar74S21VLb1EXQ0 H2CXJeiyXKjw+rD8R/pgXQV0dfdLs0SLz9xXKgP2wxn0xMcQpyw0d+YnW30yVOXP yaEPM0IwAnDqBEAtO3W3y4gDka5sfPt9Dq9Ep3JnlDvj7lTeApcaTmVQzroUQlyP UlpVzX+vMca44Z0Vx14fesWdsGobjGuzZ3TWKE0dVY8pf+1wYRVK5tbHSrMXniRU 6W5BIdA0aTeqXdqNjjSi3CCJyIX54hLBgaRH8GUDYqAcllyHbuIwFuCfwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAirMySoZ3QRofaBsN2nM8VMPBwWMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9NeFvVf lzfS/x+N5QTiSWATRH+lqWy97hgdlBaoGk4dGO7MeoNerRHA27DkWnIqbNfy2fQV sMhw65EYsZyCh2gOet4zsCYMbScMBwDReVvwgSi+KAex6LS4dfl1rKCpaQxDUw0q jxgBrTLX/AKJHKNzfTr+el85ACAD/zMRHbGRUs+JS/b3gjG+HcGvqEOpH0eY82z1 q9usk7/2GVGQJpLt+J8hXjTg80zVjeTFCRp6cTUkvOE1Nl33ybfXVJPPDii2/u1e orLipkLCBaOAeNS36K9XHHIzgm+P0etRO2W2Eikmzeo57HycYQxTGgVoOSNlAKfZ qJyslLQssGIILw== -----END CERTIFICATE-----Generated at Mon Jul 27 03:13:57 2026 by rpki-client