$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: UfSyX88YiFvt7cJRLW9cTF66N/MlK2E1TMn5TR8kNN4= Subject key identifier: A2:5F:2B:44:C7:71:65:D2:74:0B:92:BB:13:9F:AD:35:B0:91:0D:7F Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 01A14F88A46E84716D13116912240B69B064 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 1AB3 Signing time: Sun 18 Oct 2026 15:01:57 +0000 Manifest this update: Sun 18 Oct 2026 15:01:57 +0000 Manifest next update: Mon 19 Oct 2026 15:01:57 +0000 Files and hashes: 1: 1WyX2wYZfSpfBSYJmVIkxnQu2wQ.roa (hash: HByWovJax8W7lyVW8tq54HBM8ZSxxFTqPknO3ul1ROw=) 2: 2CXydi7pS_cJcMpLbvELMfs4pr4.roa (hash: 4VhEMr7PE71mfWduL3bPnzBAu34zlbw2TZ44djrJbfs=) 3: ABESchGm3xAWCWATli7x4kGiTzw.roa (hash: AnU+yC61NkHACr9HWnVDLRjrcdrvaYYu39Z2t2XH2V8=) 4: AkX-mzKyW-zWL7niXL60Uuhd2-M.roa (hash: KT91YU3baNR7x3ucuvqSZ47bi2WtNK8I/Rkt9bmg+ew=) 5: IwsvS8RMbeaKnb6W0isgZ_jGVmw.roa (hash: 4c2RJvFORctjrcpJUYKuJxaYNELJKpkNVKrS5LH92qg=) 6: J99XeamfX85WdvVj9bf7jMIVc1M.roa (hash: mqf7/m5EBvBpIA8HdJaRPy8S8x76AjMtaSPox8GG7EU=) 7: Lk6SP2L13xjIZN2DNZ1tW01PFjk.asa (hash: YWTYWs5dD9oqQES2JzWC64QE3ZcryIjb3fBcdjy1kJs=) 8: VOtCH4o4J2I_5xCMQITnNsVrQfM.roa (hash: lN9s8lkEygb8GJjfZSSBzQIfuy7TwscZaveIQRwQT+M=) 9: VsVyNiSsXQIos_8DFMvFrVCvPpA.roa (hash: R0tV98ZO0gRaUtsVcVg2fiIoo3NKUpn02E2MWrZq94I=) 10: _LeL1BNmnES7Us_tgk-2zM9WYz4.roa (hash: 6CIKHs+5sFlyV+xFBJTDb1/TPrK1K1Sk3+HBhp50WvE=) 11: aumQ2rFvvPhxeJtuueKJVvufvQo.roa (hash: ZFlq8TIHB2weJNR+r1TYQoztERUk3FxSRK57UxVkfCM=) 12: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: w5qwHVRAsVyQgDT89esbHSSuMg4KUXxyCBgxq2jg0Fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Oct 2026 15:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:4f:88:a4:6e:84:71:6d:13:11:69:12:24:0b:69:b0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Oct 18 15:01:57 2026 GMT Not After : Oct 19 15:01:57 2026 GMT Subject: CN=a25f2b44c77165d2740b92bb139fad35b0910d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:28:f6:15:07:d6:23:42:b0:dc:9f:bf:f3: 87:73:ef:93:aa:97:46:d8:61:3e:66:36:31:16:91: 20:da:37:fc:d2:b6:2d:e4:dd:3f:fa:84:82:83:6e: 25:6a:ec:0e:de:82:4f:ce:22:48:9c:dd:d4:a5:c3: b6:ac:f2:b5:4e:5f:0c:62:ee:fb:1a:9d:15:d3:cb: b7:38:25:68:0d:b2:36:07:06:76:cf:9f:6a:84:b3: 49:f9:93:2c:b9:6c:11:0a:5b:22:bf:16:cb:65:f4: 9a:11:83:a1:da:dd:d8:03:3a:8f:49:77:dd:44:26: bf:98:9e:a1:7d:2d:48:47:04:90:1f:66:00:8f:b2: 66:5c:52:54:f3:57:08:fa:9a:66:d3:88:da:f4:2a: 6a:9e:90:86:ea:8c:fd:b8:26:ed:0b:f0:c2:ca:b6: 65:a8:43:7b:d0:ec:fe:1b:ec:68:2b:ff:1e:6c:74: d4:51:93:21:ae:48:94:be:e8:dd:75:ff:31:c3:7d: 48:a8:d6:c1:06:c3:97:69:14:19:6f:f9:23:36:35: 14:cd:21:ad:42:19:0c:33:06:19:19:dd:21:a6:48: 1b:0b:58:bd:2e:27:f7:3d:a1:37:41:2b:0d:03:4d: 0f:31:03:4b:c2:51:89:83:13:49:f5:c5:d5:b5:41: c3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5F:2B:44:C7:71:65:D2:74:0B:92:BB:13:9F:AD:35:B0:91:0D:7F X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:49:65:3a:7b:42:9e:4f:55:07:5a:de:64:2a:52:5c:10:e1: 1c:f0:f2:36:9b:3b:3b:41:12:0a:a6:10:1d:33:8e:9b:e4:b7: 3a:07:74:41:37:2a:6f:5c:39:02:bf:a4:df:91:81:dc:a6:e2: 0c:f5:c9:3e:28:e2:a8:57:81:18:25:93:73:50:60:2a:2d:53: 48:6a:19:e5:af:9d:7a:11:e9:c0:7c:71:a6:7c:9f:d9:23:22: 84:e1:7d:b1:6c:07:6b:5a:8c:68:0c:86:bd:f9:4c:e0:73:b9: df:b1:3c:ac:90:ce:8b:25:90:94:30:06:fd:42:35:aa:7e:fa: 68:7d:a4:d9:79:e5:20:0c:df:a4:57:06:37:c2:f9:01:01:12: e7:1b:38:c5:7c:98:bd:28:09:48:10:65:ac:bc:ee:f1:ce:cc: 2a:38:dd:33:aa:23:cd:94:65:77:b7:7e:c6:c1:f6:8f:33:ea: 55:4d:89:52:e6:ed:ab:97:2d:37:31:f0:f9:01:05:a8:11:0a: fd:29:72:95:62:4b:00:de:df:78:ba:80:6b:fa:23:65:8c:a3: df:62:97:60:43:5f:74:f2:81:61:73:6e:b9:13:3e:31:f7:84: 43:73:5c:dd:16:77:26:21:79:4a:11:4c:c6:3b:0e:ad:9e:b2: 48:70:b1:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFPiKRuhHFtExFpEiQLabBkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjYxMDE4MTUwMTU3WhcNMjYxMDE5MTUwMTU3WjAzMTEwLwYDVQQD EyhhMjVmMmI0NGM3NzE2NWQyNzQwYjkyYmIxMzlmYWQzNWIwOTEwZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMso9hUH1iNCsNyfv/OHc++TqpdG 2GE+ZjYxFpEg2jf80rYt5N0/+oSCg24lauwO3oJPziJInN3UpcO2rPK1Tl8MYu77 Gp0V08u3OCVoDbI2BwZ2z59qhLNJ+ZMsuWwRClsivxbLZfSaEYOh2t3YAzqPSXfd RCa/mJ6hfS1IRwSQH2YAj7JmXFJU81cI+ppm04ja9CpqnpCG6oz9uCbtC/DCyrZl qEN70Oz+G+xoK/8ebHTUUZMhrkiUvujddf8xw31IqNbBBsOXaRQZb/kjNjUUzSGt QhkMMwYZGd0hpkgbC1i9Lif3PaE3QSsNA00PMQNLwlGJgxNJ9cXVtUHDWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJfK0THcWXSdAuSuxOfrTWwkQ1/MB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUllOntC nk9VB1reZCpSXBDhHPDyNps7O0ESCqYQHTOOm+S3Ogd0QTcqb1w5Ar+k35GB3Kbi DPXJPijiqFeBGCWTc1BgKi1TSGoZ5a+dehHpwHxxpnyf2SMihOF9sWwHa1qMaAyG vflM4HO537E8rJDOiyWQlDAG/UI1qn76aH2k2XnlIAzfpFcGN8L5AQES5xs4xXyY vSgJSBBlrLzu8c7MKjjdM6ojzZRld7d+xsH2jzPqVU2JUubtq5ctNzHw+QEFqBEK /SlylWJLAN7feLqAa/ojZYyj32KXYENfdPKBYXNuuRM+MfeEQ3Nc3RZ3JiF5ShFM xjsOrZ6ySHCx0g== -----END CERTIFICATE-----Generated at Mon Oct 19 01:45:50 2026 by rpki-client