$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft File: IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json) Hash identifier: UCclUZeAXGABjYRwl9BEKCv473X+zGDckbq5iXlWEVs= Subject key identifier: 24:16:CB:F0:4C:76:7C:DF:48:60:8B:C9:75:F5:12:21:C2:90:A2:71 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 01A18C0A9895C50C331160E06CCE94138AAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft Manifest number: 1AF8 Signing time: Fri 30 Oct 2026 09:01:06 +0000 Manifest this update: Fri 30 Oct 2026 09:01:06 +0000 Manifest next update: Sat 31 Oct 2026 09:01:06 +0000 Files and hashes: 1: 1-kUP60QrhWAtAgy7hcGLRqDMZs0.roa (hash: Fu35/+YQg8Zu+dlavAtKg8JaD90oFzzH1onpdQ5Y6oY=) 2: 6Ov23BLHXZEo_g6Qvsh9lD8PAKA.roa (hash: 8GvbG6s3RPwfopIs9XgARrrF1rjC6XY19ETpAszLP8I=) 3: 9j9Cr3fnwmgjqkXx14urDbJasp0.roa (hash: KW0VD6lDdNbgIp4ZsL2MGrtyxm+1LW6cNcgokA6BqI8=) 4: D97R0f6wcJeezq7lLgqmu7BA_nc.roa (hash: A+f6qmQCetOSAsJLLeyROkHkp5iv9hWhVN2aKLzqLTE=) 5: FsC7j1ZnW9fvd_MhLsMo0F5wiDM.roa (hash: htFUuvTJdlK2gOgKs0gKKqW+9jnUAHhAceSH0KAekak=) 6: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: vVL2JIMXmYdUsjgIoYzhOJfxmgrhBvSdsWI6jfIboSs=) 7: K7e0_WclzsRxbDgQl0m2GyC0awM.roa (hash: vQbkQa9JX2Q86b4F0AezEHB0GMnTiQRSgXLPAgphUxE=) 8: LL4asLDw3271RX0UzOrcd8UQePQ.roa (hash: g9EWeVbWKxalUxSKi4YGS0KlwOF+b+mjphC2cg6OVVo=) 9: M2737Kt-OKT4cwZg4viZL0ezWHk.roa (hash: Xgsds8L8YcUZbYe9UXVPzU1lKNJSTQTeXad2hhRxl9I=) 10: MBkrOOhdhon2PhUZJgtjDAd8tOU.roa (hash: hW4AmvxmksvcWmVBpumWyTnm5KximR6PbhMb2CKistg=) 11: N3UnlwMOiCPor8fOEr__gAYIrSM.roa (hash: x/pwXlflb9SsnKG7wuuULMx75zKgSUqP9QAnUFoqRhs=) 12: NipgiA7nWo95KVHsFSO0BGsePIE.roa (hash: G+j2PLZUQhdVgxq/HyRkEd9NcDIecek/OBFAXQhHzkc=) 13: O7FrqaG5VsQ5KFOKmcfOEc5P57g.roa (hash: HTqDYC1nRE3LkJmUy9M4M3I587kOWgHXriuwbMluE8E=) 14: RipkiCpTN4mFL2FF9zHdpp9YCjk.roa (hash: OnPLwFbKkZSd7QY8QBHcfUOy4okcvY1rfsmoZKGmWi8=) 15: T1F3qk8LhawCDk9nTAf4naoGRg8.roa (hash: aQgPYoClwrq8NkswlVpVaf501J/wYiiEJsgo08XzB5k=) 16: Toi74ngMk8iMkETT7QmeelInLio.roa (hash: cdnyZv5QV1TwjMBRgbJCcQqcC2938hSblX1iGXnlsPg=) 17: YFhff6PieA-0R_-D6roOZogSJYw.roa (hash: uq54FImU4X4n4Q5wAXCqz42QpkCkIhO0GgHxJfUTPP8=) 18: aKfQ-5lMgYP0JI0A9n1qEYkxhDQ.roa (hash: r2Wo2GFq531NFIKM8VlPd5aTqIW84E3DIi1eqRZI5bQ=) 19: aPlZnQWtj-q04HWeqXabAKMT6h4.roa (hash: qMB7kiStIsp5/ItJSnoaHMSnB7QpqZcmeaPW1lPudSI=) 20: b3x9MgXvL3PTr4don27jJ7KcZ-U.roa (hash: og0sUIx4pVJgJgZExjSAsHZvgWsvBSypO6sOjz57nD0=) 21: cFL1EJyYNzSFvISJnQuX3ZkUY7U.roa (hash: wujKocfHMBpZH00dc6pNcl9yD87nGXF+SDw9jaWJwcU=) 22: fmNBy9Cj0U-HEAkPtnbUg0eIT-A.roa (hash: Qirqc0W+Lqc03wM+xcAN53u2usp9+4O2S+/ddNQhy1w=) 23: imL0Bv9oNo72HfaP6hi7wxQ6gP4.roa (hash: khbN/ig9hlglazApKQX+gYGTDa2dWuU+YgpXL3Ov0Cg=) 24: kxJnezzNDEUiqIwrMrS9hJJJeag.roa (hash: zz7Ieb04C6jhC5Jd17Xzul9nQQzF2s391XrM6eqtYg8=) 25: lyUxPH3p1gyRR8v9TM54AekVNQY.roa (hash: P4j9D2TQV05hcP6DYizsgQ0f8usXVytikc5NgAea7u8=) 26: oy3fD75BcrDNS6I3ezq0y8VLuRQ.roa (hash: oHOFp9TL81c7KtMVFWQ9DGRuGttBJhr1ayJ1ZSxs8Lw=) 27: p9QObIf1OeGL35dA6XPq_krw2hU.roa (hash: j+Grnpqo/obd2JzfzoB1ui5FPqoBL910Sxe8EfKjVvM=) 28: rSklrKM9yUBRtmcTZ3JrpV-pbF8.roa (hash: IeInj6Ips0Ggz3WNulyuE5o9Jct1XuzppTnW6FpL1E0=) 29: sv5SB3k_6Vm6Bm0wKrn2MBynhrM.roa (hash: opJzNV6FEUtzmIuV3nD2tt4j7hDOk/PqNpj2ykTZfgU=) 30: tCNeV_J6VU-7Bj-OfpuXhHy2kfE.roa (hash: fDyZCQSZKGYKwS6K6RL9aN00NMCUW0dVIOA3MqfvcuM=) 31: xc_O8fJNKB9MZ99docy925NUS6M.roa (hash: YAI+l3E+qbq82kgBXviylGXScO5+u/jTMIel+5Z3CL0=) 32: xzpWx6VUIpGcmh-1iUpPlYZppMU.roa (hash: UNWYOyMIvw/ynQuOswCka5zDXJh3HAZAPdJ+HWke4dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Oct 2026 08:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:8c:0a:98:95:c5:0c:33:11:60:e0:6c:ce:94:13:8a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Oct 30 09:01:06 2026 GMT Not After : Oct 31 09:01:06 2026 GMT Subject: CN=2416cbf04c767cdf48608bc975f51221c290a271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e4:70:a9:77:b8:63:d0:d5:8f:70:64:f7:56: de:0d:4a:30:41:44:51:dd:9c:c0:0f:65:03:88:4b: 86:25:bd:e1:9c:a7:97:7d:52:2e:6e:66:1c:94:1a: d8:6e:75:61:3c:8f:39:62:b2:98:55:ec:cc:68:d1: a8:7b:d4:d2:f6:83:64:52:20:25:e7:19:ed:d1:dc: f4:8a:4c:a5:4b:86:55:54:e0:56:e5:24:9f:a4:4e: ac:ea:fe:b5:0c:fc:3e:12:fc:9a:5e:30:60:6f:9e: 6b:e5:99:0c:50:fe:e3:9a:ab:ee:17:6b:10:a3:97: 99:2d:41:64:30:91:2d:b9:a0:92:9b:6e:1f:e1:d3: 52:b1:25:bf:e5:b6:3d:36:38:08:b0:98:0c:17:af: c7:89:1b:fa:7c:4c:6e:ce:3b:86:60:66:f1:56:d7: 6e:61:59:3a:37:f5:9c:92:fd:40:95:56:2f:50:f8: b2:14:e1:0b:0d:f4:cd:14:4f:ff:7a:18:c3:3f:d4: 05:e2:7a:b1:21:29:c7:ce:08:6f:f6:28:ca:9e:71: 05:ad:f3:04:94:6c:de:1a:5a:42:09:81:23:11:94: bd:ab:de:a8:a9:3b:0c:17:f2:6a:7b:46:d5:1e:06: 30:3b:bf:4a:71:8d:33:e0:94:7a:52:72:ca:0d:f6: 09:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:16:CB:F0:4C:76:7C:DF:48:60:8B:C9:75:F5:12:21:C2:90:A2:71 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:88:cc:11:d7:b7:04:05:85:59:b6:5c:ee:f4:88:a3:19:c7: 13:bb:6d:63:8c:6c:c2:64:95:c5:aa:66:05:c0:89:fb:10:d3: 82:ba:44:9b:ff:13:a3:bd:0a:52:94:6f:eb:4b:cb:47:06:a3: ec:d7:d5:e7:77:e4:0f:77:cc:fd:3b:20:78:ae:fa:06:c8:67: df:58:47:22:41:e7:a4:9b:44:0e:ad:95:97:30:20:a7:3e:c8: cc:da:50:5a:19:f5:22:f0:be:34:cb:3b:ac:00:40:14:ef:0c: ef:6c:40:22:bd:5d:2c:d0:02:01:a5:ad:9f:df:94:9e:f6:c9: dc:a1:fd:05:9a:5d:68:02:b3:aa:3d:e0:4c:06:d0:a2:6c:e5: 1d:cd:95:be:95:cc:cb:b3:7d:fe:74:b4:ef:32:44:54:ac:05: 80:73:5a:4e:8c:04:dc:65:07:fa:c2:32:6d:bd:2f:a9:15:f2: 6f:03:59:17:b4:25:02:db:d9:31:c2:1b:ff:79:af:0e:35:aa: a4:4a:d9:d3:6d:32:d2:bf:fa:07:22:35:cb:6f:73:85:cf:74: 1d:a8:d3:50:85:2b:25:12:c3:07:ca:0e:e5:d2:4f:e2:98:b9: d5:d8:8d:e7:7c:01:78:98:4f:88:72:d5:11:b0:f7:3e:eb:bc: 6e:2f:6e:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGMCpiVxQwzEWDgbM6UE4qqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYxMDMwMDkwMTA2WhcNMjYxMDMxMDkwMTA2WjAzMTEwLwYDVQQD EygyNDE2Y2JmMDRjNzY3Y2RmNDg2MDhiYzk3NWY1MTIyMWMyOTBhMjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeRwqXe4Y9DVj3Bk91beDUowQURR 3ZzAD2UDiEuGJb3hnKeXfVIubmYclBrYbnVhPI85YrKYVezMaNGoe9TS9oNkUiAl 5xnt0dz0ikylS4ZVVOBW5SSfpE6s6v61DPw+EvyaXjBgb55r5ZkMUP7jmqvuF2sQ o5eZLUFkMJEtuaCSm24f4dNSsSW/5bY9NjgIsJgMF6/HiRv6fExuzjuGYGbxVtdu YVk6N/Wckv1AlVYvUPiyFOELDfTNFE//ehjDP9QF4nqxISnHzghv9ijKnnEFrfME lGzeGlpCCYEjEZS9q96oqTsMF/Jqe0bVHgYwO79KcY0z4JR6UnLKDfYJuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQWy/BMdnzfSGCLyXX1EiHCkKJxMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIjMEde3 BAWFWbZc7vSIoxnHE7ttY4xswmSVxapmBcCJ+xDTgrpEm/8To70KUpRv60vLRwaj 7NfV53fkD3fM/TsgeK76Bshn31hHIkHnpJtEDq2VlzAgpz7IzNpQWhn1IvC+NMs7 rABAFO8M72xAIr1dLNACAaWtn9+UnvbJ3KH9BZpdaAKzqj3gTAbQomzlHc2VvpXM y7N9/nS07zJEVKwFgHNaTowE3GUH+sIybb0vqRXybwNZF7QlAtvZMcIb/3mvDjWq pErZ020y0r/6ByI1y29zhc90HajTUIUrJRLDB8oO5dJP4pi51diN53wBeJhPiHLV EbD3Puu8bi9ukA== -----END CERTIFICATE-----Generated at Fri Oct 30 14:23:14 2026 by rpki-client