$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: PGiDxJgSy0w039Z/NK+WJuTtzfD0FLWL9LeeIs1UxZM= Subject key identifier: 94:70:95:D7:BF:6C:92:50:0A:23:4C:67:35:58:11:80:4E:2F:21:C3 Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 019F11F8A0D08F3DC6AB566437B266AEDBC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 1989 Signing time: Mon 29 Jun 2026 06:02:14 +0000 Manifest this update: Mon 29 Jun 2026 06:02:14 +0000 Manifest next update: Tue 30 Jun 2026 06:02:14 +0000 Files and hashes: 1: 1WyX2wYZfSpfBSYJmVIkxnQu2wQ.roa (hash: HByWovJax8W7lyVW8tq54HBM8ZSxxFTqPknO3ul1ROw=) 2: 2CXydi7pS_cJcMpLbvELMfs4pr4.roa (hash: 4VhEMr7PE71mfWduL3bPnzBAu34zlbw2TZ44djrJbfs=) 3: ABESchGm3xAWCWATli7x4kGiTzw.roa (hash: AnU+yC61NkHACr9HWnVDLRjrcdrvaYYu39Z2t2XH2V8=) 4: AkX-mzKyW-zWL7niXL60Uuhd2-M.roa (hash: KT91YU3baNR7x3ucuvqSZ47bi2WtNK8I/Rkt9bmg+ew=) 5: IwsvS8RMbeaKnb6W0isgZ_jGVmw.roa (hash: 4c2RJvFORctjrcpJUYKuJxaYNELJKpkNVKrS5LH92qg=) 6: J99XeamfX85WdvVj9bf7jMIVc1M.roa (hash: mqf7/m5EBvBpIA8HdJaRPy8S8x76AjMtaSPox8GG7EU=) 7: VOtCH4o4J2I_5xCMQITnNsVrQfM.roa (hash: lN9s8lkEygb8GJjfZSSBzQIfuy7TwscZaveIQRwQT+M=) 8: VsVyNiSsXQIos_8DFMvFrVCvPpA.roa (hash: R0tV98ZO0gRaUtsVcVg2fiIoo3NKUpn02E2MWrZq94I=) 9: _LeL1BNmnES7Us_tgk-2zM9WYz4.roa (hash: 6CIKHs+5sFlyV+xFBJTDb1/TPrK1K1Sk3+HBhp50WvE=) 10: aumQ2rFvvPhxeJtuueKJVvufvQo.roa (hash: ZFlq8TIHB2weJNR+r1TYQoztERUk3FxSRK57UxVkfCM=) 11: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: xQ9Smcew4QlpodYIQbVxUlKTUFojm8pIBuH8qQ0NdeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 06:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:11:f8:a0:d0:8f:3d:c6:ab:56:64:37:b2:66:ae:db:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Jun 29 06:02:14 2026 GMT Not After : Jun 30 06:02:14 2026 GMT Subject: CN=947095d7bf6c92500a234c67355811804e2f21c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1e:cb:63:5b:9f:a0:d0:d8:03:55:f4:22:f0: 12:cd:20:e4:3b:c2:ca:55:a8:b8:c0:30:a5:e0:c0: 3c:62:f3:56:aa:a5:2a:34:1b:09:6c:02:6b:14:b8: 47:8f:a8:82:56:52:48:73:d5:4b:41:7e:d6:95:f1: ca:fe:25:bf:4c:33:f7:cd:8b:00:ef:bd:de:ee:5b: 99:45:6a:25:22:8d:82:31:25:83:ce:c9:e5:64:64: fb:f9:ee:b4:86:29:d3:0a:e7:26:06:c2:e1:60:4f: c7:44:b1:01:f2:6e:5f:5d:ac:af:67:12:37:c3:37: eb:7d:68:d3:f3:9f:2c:ae:2c:89:94:b6:94:50:e8: 36:2e:0c:12:78:c5:dc:b7:32:05:bc:9e:e8:44:f3: 64:70:3c:9d:af:8b:28:ec:e8:cd:4a:7e:5e:e5:b8: c5:1b:f0:9e:03:b6:f3:bd:58:24:eb:d5:5a:28:f5: c4:48:a1:ed:55:85:60:d4:36:b4:9a:f2:0c:72:cb: f6:4c:b4:6a:4b:13:75:90:a1:36:a2:3c:6a:42:c3: 3a:42:b4:5a:91:f2:55:34:1e:3c:ab:8a:bf:62:51: 7e:7e:1b:ff:fe:e5:5a:72:ef:71:39:6a:31:b2:e7: d0:6e:3b:77:6f:88:ba:a6:09:55:a0:e3:b2:15:76: 68:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:70:95:D7:BF:6C:92:50:0A:23:4C:67:35:58:11:80:4E:2F:21:C3 X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:65:51:12:76:09:74:64:0c:94:d1:c8:28:85:09:cf:92:51: 5b:3a:64:2f:4d:26:68:92:2e:fa:22:21:30:08:a5:7d:dc:d1: f9:3a:43:27:78:31:68:7e:f0:3e:e5:51:ed:ca:5d:bb:8a:65: b1:76:92:fb:9a:ef:96:ec:e2:c8:5b:cb:54:07:32:b8:28:63: 0a:5d:9a:40:57:9f:37:1e:6c:8c:d7:6d:39:64:14:cc:e1:69: 72:bd:82:22:b0:c9:b4:80:55:e5:00:59:db:df:46:c8:25:f7: da:bb:0d:35:ab:da:16:23:ed:db:c5:e5:f9:61:88:20:2f:c3: 0f:58:4a:34:11:a2:26:6c:89:34:c8:4c:3c:8d:48:e5:76:59: ed:db:d5:95:d8:70:f6:fb:9e:87:67:c3:33:85:74:24:ab:92: 13:ec:da:7d:9d:5d:28:42:6a:39:6e:8f:f1:f5:82:bc:72:51: f1:59:13:a5:10:63:fe:3d:e8:ee:82:40:55:a8:c9:50:b9:b6: a6:a5:27:7c:9c:3f:7d:e8:14:5a:93:ad:17:68:fc:16:b7:3b: 2d:a0:48:55:cc:56:df:2e:68:fa:af:76:aa:be:68:75:54:05: a7:79:57:65:b4:07:27:20:75:46:e2:e4:f3:db:7e:de:63:18: a7:3d:02:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8R+KDQjz3Gq1ZkN7JmrtvHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjYwNjI5MDYwMjE0WhcNMjYwNjMwMDYwMjE0WjAzMTEwLwYDVQQD Eyg5NDcwOTVkN2JmNmM5MjUwMGEyMzRjNjczNTU4MTE4MDRlMmYyMWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x7LY1ufoNDYA1X0IvASzSDkO8LK Vai4wDCl4MA8YvNWqqUqNBsJbAJrFLhHj6iCVlJIc9VLQX7WlfHK/iW/TDP3zYsA 773e7luZRWolIo2CMSWDzsnlZGT7+e60hinTCucmBsLhYE/HRLEB8m5fXayvZxI3 wzfrfWjT858sriyJlLaUUOg2LgwSeMXctzIFvJ7oRPNkcDydr4so7OjNSn5e5bjF G/CeA7bzvVgk69VaKPXESKHtVYVg1Da0mvIMcsv2TLRqSxN1kKE2ojxqQsM6QrRa kfJVNB48q4q/YlF+fhv//uVacu9xOWoxsufQbjt3b4i6pglVoOOyFXZoQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRwlde/bJJQCiNMZzVYEYBOLyHDMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2VREnYJ dGQMlNHIKIUJz5JRWzpkL00maJIu+iIhMAilfdzR+TpDJ3gxaH7wPuVR7cpdu4pl sXaS+5rvluziyFvLVAcyuChjCl2aQFefNx5sjNdtOWQUzOFpcr2CIrDJtIBV5QBZ 299GyCX32rsNNavaFiPt28Xl+WGIIC/DD1hKNBGiJmyJNMhMPI1I5XZZ7dvVldhw 9vueh2fDM4V0JKuSE+zafZ1dKEJqOW6P8fWCvHJR8VkTpRBj/j3o7oJAVajJULm2 pqUnfJw/fegUWpOtF2j8Frc7LaBIVcxW3y5o+q92qr5odVQFp3lXZbQHJyB1RuLk 89t+3mMYpz0Caw== -----END CERTIFICATE-----Generated at Mon Jun 29 14:47:46 2026 by rpki-client