$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: BXytoOYIwZ2cj1et+LfDS2GZxD7Jr8QhC+4p8yedljs= Subject key identifier: F3:DE:51:67:32:03:C9:1B:E7:CD:F9:BE:4F:C0:C6:BD:5A:F7:76:5D Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019FFDC95CB04531F03FA616368240E65984 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 1A0F Signing time: Fri 14 Aug 2026 01:00:59 +0000 Manifest this update: Fri 14 Aug 2026 01:00:59 +0000 Manifest next update: Sat 15 Aug 2026 01:00:59 +0000 Files and hashes: 1: 4Y6MQ3p-LB6KrtJDo2AEO8Db164.roa (hash: 5atEicVhW+L7Xp6D+LeVcw6nuJeehWHQba6IJiOM6Ms=) 2: As_pVbbnYy_pmBMm0RcX49iX6nY.roa (hash: qzus9UnBcueHhtxBHMySF8j/gf9sbzuNZT387lhMVtE=) 3: IauAxs74tysYNqUuPq3mwgGVBQY.roa (hash: I4y1ed39yJsl3DkGtY/KgIMLvKWqfNhrhjl/qeS45rw=) 4: Q7kjVEhiYHEz_AIBuFCX2o6kXpQ.roa (hash: MuV9xof7zxa6mZSUu9k4zgmUqNgq/+xzFvRw2ejciSU=) 5: UhbmNbA2hwd3CclD7uA5e7VB30s.roa (hash: juSkCYLLU3kVaC1Dq0hdQw2DrlMO0olfzSo1w3Y2IAk=) 6: VmKAAjA4J61Er2pV6nmm2We8eeg.roa (hash: H91QyBvG1I/wj9YFT3ovdtrMrR5xBG3HkuYFKTPkUdk=) 7: Z2JoyRveJcrOS84W6TpEPChd0u8.roa (hash: aEKu2ZE0v6kUC0OnwN6L0HbgZBJi/Gu9YSjx1j8FGfg=) 8: aC9Q_3qjddY1l6-wNmHh31rhiv4.roa (hash: uKO8uok9xpbvJA3MGYKk7ndaYzKJUW2pxyQNGvBjSDU=) 9: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: fWyYfKmKD4LImDwvdUek3WQYmROXSDKKyeeF9wiExCg=) 10: ozLeruCkBhC4yZCUw5lMFfl-TtM.roa (hash: ygWG9N1PXEIgHYpH9dLMI7Qu5ggvIeMB+/+Dm4Mbbz4=) 11: q47qpt1p1Wj02CxPXYgOsikq_GY.roa (hash: RR0Z4b1X2W/yjPPcvR1hUKYG5qy0mYBUJ7YN4lZTqrk=) 12: s0Slj9yVMX7lCq79bqSGCqW6KPg.roa (hash: RaEewhp7TYWAZZHFh2A3/CMtjGLdyIT76c5b57zkYYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 00:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:fd:c9:5c:b0:45:31:f0:3f:a6:16:36:82:40:e6:59:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Aug 14 01:00:59 2026 GMT Not After : Aug 15 01:00:59 2026 GMT Subject: CN=f3de51673203c91be7cdf9be4fc0c6bd5af7765d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cc:55:8f:50:39:1a:61:89:5a:01:86:c3:a5: 1f:f4:53:8e:be:71:7f:17:7f:15:d5:ca:f8:4b:43: 67:b7:c6:e9:cb:6b:6b:fc:a0:43:02:86:73:ce:a0: e3:7a:37:39:73:5f:ac:42:31:c8:0e:9b:fc:d7:0a: 32:74:c2:c6:b9:65:df:78:8b:a7:09:07:db:0f:f2: 83:08:49:6a:0a:08:a0:f9:16:e8:9c:ae:5c:7e:10: 24:fa:e5:5f:3d:4e:76:51:d4:ca:a3:b6:34:2d:5d: 2a:ba:ea:40:75:cf:6e:28:76:fe:f0:b0:c2:36:ce: 46:6f:27:de:80:aa:55:78:35:64:d8:d3:bc:6a:ad: e7:1e:db:2b:b9:3f:af:81:0e:e7:56:ec:48:ea:ef: 57:dc:50:71:a6:da:20:ea:76:8d:89:75:62:19:28: 47:3c:24:da:c6:4a:e8:ce:39:45:af:8c:62:04:eb: d4:e8:ae:e8:03:14:a0:fc:49:cc:b3:0d:6a:c3:d9: 0e:cd:bb:89:52:4c:c5:01:b4:3e:ea:78:f7:a5:6a: 4a:e8:20:ca:df:1d:65:44:16:b2:38:b9:9f:f2:0b: 22:c7:1a:3f:95:9a:6c:40:d2:55:b0:21:a8:de:3b: 3d:0b:bb:0c:2e:1f:63:12:a4:f1:56:f8:86:a9:89: 58:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DE:51:67:32:03:C9:1B:E7:CD:F9:BE:4F:C0:C6:BD:5A:F7:76:5D X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:3b:f8:4e:de:99:1d:d4:32:e1:44:20:2a:1b:01:a0:43:60: c4:a2:a1:51:61:a1:77:cd:d3:3d:7f:5b:6b:06:db:d2:d9:49: 2d:3e:e5:9c:14:04:ac:17:f8:e3:72:1c:3c:9a:71:8e:ad:14: 1b:c9:da:f0:2f:76:b8:9f:02:b3:1b:01:54:00:35:bd:ab:b0: 45:10:67:dd:5d:a0:cf:06:cd:b4:9d:a4:a2:32:85:ff:50:2c: 76:b8:9c:c7:cb:4a:0a:df:78:22:9d:3a:b2:c7:09:9a:d8:4a: 80:12:1f:d8:fc:70:35:de:8d:7a:3a:2d:3c:11:03:36:00:fa: 34:64:b9:19:f0:7d:58:dd:05:8f:9e:01:3e:c0:77:71:3e:d5: 34:4b:c7:eb:3e:7a:5d:b2:20:4c:97:62:12:77:18:84:a4:a8: e3:e5:d8:4a:56:74:00:9f:af:7c:cc:0b:bf:75:8e:f3:af:36: 36:c5:44:7f:ff:03:09:10:63:ee:dd:c1:0c:ac:23:83:f1:fc: be:29:3f:c7:6a:96:f6:44:ba:d3:fa:62:2a:f3:96:23:48:15: f1:00:2b:d8:d7:b5:c3:f7:54:a1:80:f1:c0:c1:55:cf:f9:a5: ed:81:01:5c:d5:26:d6:0e:11:b6:41:86:f7:25:77:11:cd:72: 1b:07:a5:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/9yVywRTHwP6YWNoJA5lmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYwODE0MDEwMDU5WhcNMjYwODE1MDEwMDU5WjAzMTEwLwYDVQQD EyhmM2RlNTE2NzMyMDNjOTFiZTdjZGY5YmU0ZmMwYzZiZDVhZjc3NjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28xVj1A5GmGJWgGGw6Uf9FOOvnF/ F38V1cr4S0Nnt8bpy2tr/KBDAoZzzqDjejc5c1+sQjHIDpv81woydMLGuWXfeIun CQfbD/KDCElqCgig+RbonK5cfhAk+uVfPU52UdTKo7Y0LV0quupAdc9uKHb+8LDC Ns5GbyfegKpVeDVk2NO8aq3nHtsruT+vgQ7nVuxI6u9X3FBxptog6naNiXViGShH PCTaxkrozjlFr4xiBOvU6K7oAxSg/EnMsw1qw9kOzbuJUkzFAbQ+6nj3pWpK6CDK 3x1lRBayOLmf8gsixxo/lZpsQNJVsCGo3js9C7sMLh9jEqTxVviGqYlYMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPeUWcyA8kb5835vk/Axr1a93ZdMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAszv4Tt6Z HdQy4UQgKhsBoENgxKKhUWGhd83TPX9bawbb0tlJLT7lnBQErBf443IcPJpxjq0U G8na8C92uJ8CsxsBVAA1vauwRRBn3V2gzwbNtJ2kojKF/1Asdricx8tKCt94Ip06 sscJmthKgBIf2PxwNd6NejotPBEDNgD6NGS5GfB9WN0Fj54BPsB3cT7VNEvH6z56 XbIgTJdiEncYhKSo4+XYSlZ0AJ+vfMwLv3WO8682NsVEf/8DCRBj7t3BDKwjg/H8 vik/x2qW9kS60/piKvOWI0gV8QAr2Ne1w/dUoYDxwMFVz/ml7YEBXNUm1g4RtkGG 9yV3Ec1yGwelpg== -----END CERTIFICATE-----Generated at Fri Aug 14 03:18:39 2026 by rpki-client