$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: tewqKevCe6KpxQZmcKncnOENxELoloaBN/NHGaNEXCY= Subject key identifier: E8:67:5A:DC:7D:B9:68:D1:07:4B:43:2E:D6:0B:00:09:9D:EE:CA:CB Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 019E2A39C5C8A46FEA0A0AF2CA8FE8853D59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 1911 Signing time: Fri 15 May 2026 06:01:29 +0000 Manifest this update: Fri 15 May 2026 06:01:29 +0000 Manifest next update: Sat 16 May 2026 06:01:29 +0000 Files and hashes: 1: 1WyX2wYZfSpfBSYJmVIkxnQu2wQ.roa (hash: HByWovJax8W7lyVW8tq54HBM8ZSxxFTqPknO3ul1ROw=) 2: 2CXydi7pS_cJcMpLbvELMfs4pr4.roa (hash: 4VhEMr7PE71mfWduL3bPnzBAu34zlbw2TZ44djrJbfs=) 3: ABESchGm3xAWCWATli7x4kGiTzw.roa (hash: AnU+yC61NkHACr9HWnVDLRjrcdrvaYYu39Z2t2XH2V8=) 4: AkX-mzKyW-zWL7niXL60Uuhd2-M.roa (hash: KT91YU3baNR7x3ucuvqSZ47bi2WtNK8I/Rkt9bmg+ew=) 5: IwsvS8RMbeaKnb6W0isgZ_jGVmw.roa (hash: 4c2RJvFORctjrcpJUYKuJxaYNELJKpkNVKrS5LH92qg=) 6: J99XeamfX85WdvVj9bf7jMIVc1M.roa (hash: mqf7/m5EBvBpIA8HdJaRPy8S8x76AjMtaSPox8GG7EU=) 7: VOtCH4o4J2I_5xCMQITnNsVrQfM.roa (hash: lN9s8lkEygb8GJjfZSSBzQIfuy7TwscZaveIQRwQT+M=) 8: VsVyNiSsXQIos_8DFMvFrVCvPpA.roa (hash: R0tV98ZO0gRaUtsVcVg2fiIoo3NKUpn02E2MWrZq94I=) 9: _LeL1BNmnES7Us_tgk-2zM9WYz4.roa (hash: 6CIKHs+5sFlyV+xFBJTDb1/TPrK1K1Sk3+HBhp50WvE=) 10: aumQ2rFvvPhxeJtuueKJVvufvQo.roa (hash: ZFlq8TIHB2weJNR+r1TYQoztERUk3FxSRK57UxVkfCM=) 11: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: JM/Wc6a5+bLS9LhbincVf5gbN7ziClTFSD3f8HEfFDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:2a:39:c5:c8:a4:6f:ea:0a:0a:f2:ca:8f:e8:85:3d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: May 15 06:01:29 2026 GMT Not After : May 16 06:01:29 2026 GMT Subject: CN=e8675adc7db968d1074b432ed60b00099deecacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:29:1e:b7:73:44:21:bd:c2:f9:4f:6b:9a:4a: cc:91:28:83:62:a3:00:f6:a9:29:ab:3c:90:2a:ac: ec:80:bf:bf:b3:c2:e2:63:72:43:9b:09:49:be:d9: 7c:55:0b:6e:12:f4:82:5c:f5:54:15:13:0a:81:4d: cf:d7:11:1d:a3:90:51:85:3b:6e:9d:e2:e8:21:2d: bd:65:51:df:a8:37:29:f4:3d:5a:16:69:cc:47:0f: d8:28:a1:02:fb:86:0b:6e:0b:9d:6f:d6:f1:9c:d7: 64:04:df:5e:25:98:f9:4b:69:2e:18:2f:03:96:46: 8c:f2:21:b8:ea:4c:e8:be:5b:2a:f5:c4:32:1a:b8: de:60:fc:2c:b4:cd:f9:04:fc:0c:03:b4:9b:34:79: c9:ef:e0:8f:63:15:26:ea:2b:42:e6:7f:4e:04:27: 28:1d:cb:70:df:ed:cb:62:9f:c4:f1:51:11:83:48: ec:e8:85:39:d1:95:9a:43:e2:f1:92:09:6b:97:95: 57:2d:3f:1d:f3:a7:81:d8:b3:48:cb:eb:e0:58:a9: 5b:a2:24:a0:06:8d:22:83:ab:55:e2:04:fd:a9:50: 0b:4e:0a:c5:85:a8:74:fd:4a:6b:78:5c:c3:08:24: 4e:19:c3:03:74:0e:17:1e:b9:b3:a1:1f:37:9b:c9: 19:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:67:5A:DC:7D:B9:68:D1:07:4B:43:2E:D6:0B:00:09:9D:EE:CA:CB X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:5a:5f:75:6d:c2:e5:dc:46:88:65:d5:9e:09:6e:97:0b:98: a7:fa:39:93:73:0c:35:d8:26:78:46:4c:55:03:fe:7a:59:6a: f9:0e:9a:61:1f:66:ba:59:d9:04:03:6a:09:22:99:13:7e:63: cf:cc:d7:9b:32:5d:05:3d:2d:7e:06:23:c0:22:d2:78:b3:d9: 37:6d:6e:4d:84:ec:14:9b:1f:a1:5a:1f:34:90:65:59:91:2d: fa:91:d5:e5:84:cd:84:32:4c:7f:ca:55:32:c7:d3:c9:30:f2: ce:20:bd:21:5d:35:4a:ec:12:35:07:f7:eb:bb:70:13:c0:92: 93:2b:3d:52:13:07:f2:5b:be:a3:71:bb:8e:8e:9f:04:1e:3e: fa:96:62:5b:74:e4:bd:44:b5:2a:00:c0:dd:15:8b:72:8e:4b: db:e8:97:18:00:71:57:f9:85:93:12:29:44:d9:9e:7a:90:c2: 24:95:8b:a4:df:e7:40:26:19:8c:f3:45:4a:a5:4d:8f:8f:f3: 55:a6:fd:ab:3b:f7:c8:9e:9e:84:2e:bf:1b:fe:87:70:18:88: 12:30:70:47:8b:a0:94:3e:a9:95:d9:ec:d7:3c:f8:b7:46:b4: 1d:69:57:e0:a1:c4:2b:c5:9a:98:e9:f5:6b:00:70:8a:77:9f: 46:b4:c5:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4qOcXIpG/qCgryyo/ohT1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjYwNTE1MDYwMTI5WhcNMjYwNTE2MDYwMTI5WjAzMTEwLwYDVQQD EyhlODY3NWFkYzdkYjk2OGQxMDc0YjQzMmVkNjBiMDAwOTlkZWVjYWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCket3NEIb3C+U9rmkrMkSiDYqMA 9qkpqzyQKqzsgL+/s8LiY3JDmwlJvtl8VQtuEvSCXPVUFRMKgU3P1xEdo5BRhTtu neLoIS29ZVHfqDcp9D1aFmnMRw/YKKEC+4YLbgudb9bxnNdkBN9eJZj5S2kuGC8D lkaM8iG46kzovlsq9cQyGrjeYPwstM35BPwMA7SbNHnJ7+CPYxUm6itC5n9OBCco Hctw3+3LYp/E8VERg0js6IU50ZWaQ+Lxkglrl5VXLT8d86eB2LNIy+vgWKlboiSg Bo0ig6tV4gT9qVALTgrFhah0/UpreFzDCCROGcMDdA4XHrmzoR83m8kZmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhnWtx9uWjRB0tDLtYLAAmd7srLMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlpfdW3C 5dxGiGXVnglulwuYp/o5k3MMNdgmeEZMVQP+ellq+Q6aYR9mulnZBANqCSKZE35j z8zXmzJdBT0tfgYjwCLSeLPZN21uTYTsFJsfoVofNJBlWZEt+pHV5YTNhDJMf8pV MsfTyTDyziC9IV01SuwSNQf367twE8CSkys9UhMH8lu+o3G7jo6fBB4++pZiW3Tk vUS1KgDA3RWLco5L2+iXGABxV/mFkxIpRNmeepDCJJWLpN/nQCYZjPNFSqVNj4/z Vab9qzv3yJ6ehC6/G/6HcBiIEjBwR4uglD6pldns1zz4t0a0HWlX4KHEK8WamOn1 awBwinefRrTFKA== -----END CERTIFICATE-----Generated at Fri May 15 10:35:52 2026 by rpki-client