$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft File: IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json) Hash identifier: Z6emBjREnZZ8LoWk+VsL2PqpTQVSriTRjpjT0bu1zgU= Subject key identifier: 7A:35:FD:A0:72:1F:76:F9:40:6E:31:AD:EC:00:75:21:0F:2C:2B:AB Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 019F1009E6A9C4F7CE8A6038B32F5A13FBEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft Manifest number: 14F5 Signing time: Sun 28 Jun 2026 21:01:51 +0000 Manifest this update: Sun 28 Jun 2026 21:01:51 +0000 Manifest next update: Mon 29 Jun 2026 21:01:51 +0000 Files and hashes: 1: 5Q5SmVwCYdWVR4jJ4yPXGm6nx4E.roa (hash: E+HPw/BSZoy+FRt+tdA/pl0xYJ8cBINy/SV66sa2K/Q=) 2: 5VJALfhFe7o_AUDjHLN1heHmdsg.roa (hash: 1gHtL7JZ6Kw9aV9pDDeqj4dLmT+0UP21NwOVssRKidM=) 3: 6V9r_f6L2m84KT2hfkYO8YKk4Qw.roa (hash: IggBLq2a8EpveAoDyReWvG833q0pjf83jxc+h1sihOI=) 4: DKzQQ-3c9fOllLADXKp3F81W6-A.roa (hash: jw/mwS4Ak7mqrGqRDzGrcRqXeDj4kvRniZLDaz5MSF8=) 5: Hs7JKhJtwC6A36Kjs-_4TZrgnpk.roa (hash: 099VsdRInIr4UycUi5XaCXZzdZOiho1gkx4lV1EIJOk=) 6: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: xzkMbEp+cCMZVpRREq0Ke9EMk3FSNPZP3p6wRWtgpis=) 7: M8WsoMnGPVNmkP0_GRgTxjZRJnE.roa (hash: +25YQ0hNnRgpLZqiohuE6AMcgCqjkbxQlkrhVlizZHg=) 8: PXFNsoTvcWLxutWM2U5o07bf39c.roa (hash: cG54vwBTWhTGlpn6HVoksrAbeIW3ITTreN2nYOiUpbE=) 9: PjuATr_UD6dPJ0RwbBG9WM6DQBU.roa (hash: FIh/JLPct1tPMk6cZXHr49IFJ+6jWnbcJViSmXmQnYI=) 10: V7PWzU2t3vkVAV89dEpwUD3smfA.roa (hash: NqsbYJcQ3xvsOoac8r1+2QIWje6UGU60aNdH7WHDSQo=) 11: VJ5x4bTZ9uK9NTcParFas1iO94c.roa (hash: YUotaVqMnXNqH2dTVeK+ioLm7GFUTiyLmJLQkyPf5rU=) 12: XetavruOlmwPuDQkb37aWeTU5Gs.roa (hash: OVMRMjZpXUWp7zeiQKGZgTeIS0wuW8Tr2m6fFrqkMg0=) 13: r3n82DH_kgDzSCiIox4JVvtuuKs.roa (hash: GscB1Y7vMXzC56pZeD7dY6Lb7cyydY/SgoKF16qKY1A=) 14: tgbG7zzhd0TpX7VXUJAj4569L48.roa (hash: XrlNtaTTKiEVZlZoi4ceAdhJeiK4Z6r68mciWuydsEY=) 15: uo5w_hamUoonPJRV5DL4G24KROY.roa (hash: aLK0bMT0B6Nh4M0ukHsojn4vtUCdZ1/I4BO6p+c6iOw=) 16: w2zfAC9OFoRmjotH_tHfZysWNMM.roa (hash: a05kJJ6+2j1m7iM1OBjj6aSX+sB+ZxnLme7+mqcwB44=) 17: xO4PnwUl40-LplCi16rGoCZS9YU.roa (hash: /JSxXf/o8DRoe32IgSj2KVEoIDnrUXVHn3+S3v/zp1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Jun 2026 17:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:10:09:e6:a9:c4:f7:ce:8a:60:38:b3:2f:5a:13:fb:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Jun 28 21:01:51 2026 GMT Not After : Jun 29 21:01:51 2026 GMT Subject: CN=7a35fda0721f76f9406e31adec0075210f2c2bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:3d:95:03:12:cc:13:f1:f8:b8:87:94:56: 56:ef:14:43:f5:2c:ee:c4:df:5c:46:db:6c:37:13: ca:9d:2b:2b:f7:c7:1d:9f:9f:1b:a5:ee:f1:1b:3e: 8f:20:b9:48:c0:f6:07:ea:7f:81:09:30:38:04:ab: 8b:3a:47:ff:b0:7b:53:f2:31:2f:fa:1c:89:2f:3d: 03:b0:6b:01:17:36:8f:cf:3d:e8:23:78:d8:22:09: d9:32:a6:a3:68:14:1e:35:74:93:ad:5f:ab:87:2b: d4:df:4c:ba:ad:e7:d4:7c:1d:88:84:d3:4a:d9:3b: 36:b7:98:2f:99:e9:f3:6e:62:12:ae:a6:32:32:b6: 54:54:c4:76:e2:28:e8:d1:9c:69:31:27:6a:78:9e: ba:bc:a2:f6:4e:10:c2:21:2c:a2:2a:8b:35:59:ac: d3:d7:02:2b:a4:7d:f9:db:5f:a7:01:2d:b3:12:65: 88:4d:ac:f0:4c:03:17:d0:32:72:2d:57:52:81:b0: d5:2f:70:dc:f7:1d:10:91:ef:7d:9d:b7:b4:e5:36: 51:30:91:7b:d8:8c:f5:cb:54:83:86:a9:f2:1a:5d: 82:79:66:5e:3f:de:51:b9:b1:6c:fd:aa:f6:38:2f: 24:67:46:fa:d9:b4:2d:ab:db:6f:26:f0:c3:9a:ad: e1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:35:FD:A0:72:1F:76:F9:40:6E:31:AD:EC:00:75:21:0F:2C:2B:AB X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:91:e5:ed:3b:f3:12:b3:e8:81:95:da:2a:00:70:8d:e2:d7: 1e:1c:95:94:7e:41:d3:1a:08:a8:93:74:f1:a1:81:75:9d:91: 31:99:39:f3:78:5e:26:09:cd:ad:07:01:24:a7:77:ef:f6:44: 03:d7:6a:5b:94:fc:a0:8b:45:17:fa:6c:6f:7c:b2:98:f4:86: fe:a6:b5:1b:b0:dd:f1:02:4f:32:d1:e7:4c:dd:82:86:63:94: 4b:29:0e:e3:ff:86:a3:60:61:32:88:d3:e2:16:e0:09:78:7f: be:59:14:d1:41:c6:9f:d1:63:3a:5a:53:b9:e7:7a:8d:56:b8: 2a:82:65:02:c2:b9:c2:33:89:80:a6:14:9e:01:7a:f6:b4:85: 4e:f1:8e:f5:68:83:b8:c1:db:38:1f:25:df:be:5e:11:75:85: 29:37:15:b0:0f:c9:64:0d:53:7b:14:47:2f:42:88:92:dc:d2: b3:a4:ef:99:df:78:05:85:c1:0a:28:bd:cf:e2:f5:bd:92:32: 70:e6:bc:05:6a:5d:48:8c:4c:bc:e3:c2:71:52:4a:48:0d:13: ea:9b:3c:d0:5b:36:b0:d4:07:7e:30:46:b9:54:2d:5d:d9:b8: 04:50:53:e4:01:b1:cf:f9:28:16:51:c5:8d:05:c9:59:0e:5b: d1:1e:19:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8QCeapxPfOimA4sy9aE/vuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjYwNjI4MjEwMTUxWhcNMjYwNjI5MjEwMTUxWjAzMTEwLwYDVQQD Eyg3YTM1ZmRhMDcyMWY3NmY5NDA2ZTMxYWRlYzAwNzUyMTBmMmMyYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcY9lQMSzBPx+LiHlFZW7xRD9Szu xN9cRttsNxPKnSsr98cdn58bpe7xGz6PILlIwPYH6n+BCTA4BKuLOkf/sHtT8jEv +hyJLz0DsGsBFzaPzz3oI3jYIgnZMqajaBQeNXSTrV+rhyvU30y6refUfB2IhNNK 2Ts2t5gvmenzbmISrqYyMrZUVMR24ijo0ZxpMSdqeJ66vKL2ThDCISyiKos1WazT 1wIrpH3521+nAS2zEmWITazwTAMX0DJyLVdSgbDVL3Dc9x0Qke99nbe05TZRMJF7 2Iz1y1SDhqnyGl2CeWZeP95RubFs/ar2OC8kZ0b62bQtq9tvJvDDmq3hKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHo1/aByH3b5QG4xrewAdSEPLCurMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5Hl7Tvz ErPogZXaKgBwjeLXHhyVlH5B0xoIqJN08aGBdZ2RMZk583heJgnNrQcBJKd37/ZE A9dqW5T8oItFF/psb3yymPSG/qa1G7Dd8QJPMtHnTN2ChmOUSykO4/+Go2BhMojT 4hbgCXh/vlkU0UHGn9FjOlpTued6jVa4KoJlAsK5wjOJgKYUngF69rSFTvGO9WiD uMHbOB8l375eEXWFKTcVsA/JZA1TexRHL0KIktzSs6Tvmd94BYXBCii9z+L1vZIy cOa8BWpdSIxMvOPCcVJKSA0T6ps80Fs2sNQHfjBGuVQtXdm4BFBT5AGxz/koFlHF jQXJWQ5b0R4Z4Q== -----END CERTIFICATE-----Generated at Mon Jun 29 00:58:03 2026 by rpki-client