$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft File: IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json) Hash identifier: emtvt+j5iT3yJs+CxV8z7vamMaHiFWWri5y/hoF0Woc= Subject key identifier: 4B:4D:A2:25:26:44:E1:DB:36:C2:59:AE:43:FD:C6:52:91:D7:20:D8 Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Certificate serial: 01A17D73F561239669DEA445833B6A07A09F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft Manifest number: 0DF8 Signing time: Tue 27 Oct 2026 13:01:53 +0000 Manifest this update: Tue 27 Oct 2026 13:01:53 +0000 Manifest next update: Wed 28 Oct 2026 13:01:53 +0000 Files and hashes: 1: 1-Y24DkHX_YS8BQf944IXH_5kays.roa (hash: +VJRpnj8CgCWOeIl5a7z0P70ihS3i/FmFwSi/9utCPo=) 2: 93ecOGMnd7Y-s5RhPxswRsvhxCo.roa (hash: He1fOw5Cf4EewUbKrykJy5YvOuvE3gcqYbxJ9oSfgJk=) 3: 9Hu5_KEvVkuaYsN5m6cQzzKMIjI.roa (hash: p+jhtgM1l26n79s209lOfRrA6/2Vzy+6l6es1YSywE4=) 4: 9JLkBsOIckt0fGh8k6XdADBHfHQ.roa (hash: TLvoYKT4BtmNh7oG4OJUqX5oIA4J7XUzNEdSMA4HlZ8=) 5: HSoISsJ-isLr8N_DHmCBMl3TpWs.roa (hash: eFtDBlD8d0dAnIzoz+b3NcMyduLIBF9yLf8ySSSmIvA=) 6: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: zFflKPie1330Y6NNLUbMsEt0x8Yjt+1vKiSbFU4u1OQ=) 7: KSxgyXQgmuvgD3hsIbjoWlYRqkk.roa (hash: MfPYx4d8dGraW1R0Aep23IPqwadZP9+eAkLv5cmiWoM=) 8: M6wnPrDmWw7o372pn664G-6XMUM.roa (hash: vz3Xt9QAg5obB1AHMtVF5JrXwk6u3qtnMl8SakINxdQ=) 9: OTfefXpqJS5N6ZeJMEPi4o2glcE.roa (hash: EXmrtcvCwOgf/pC8L7II//3SohUrOG6Iw5W8LXbZAkA=) 10: _25UfYuLERvQd7ERXXNW_sly9Oo.roa (hash: mce8PC+zpkQB3aka/bSBor9uJVmt1ZEupgGD8nmRstI=) 11: _hBOrFv7fim--KrBCy30YmUAo3I.roa (hash: qzAl3O9RiG1n+2GEMGj8zSfO491bHrCZda9IZnWLPqI=) 12: gr17UYbRi7cQ6eQ9EyDF-CuJIp4.roa (hash: NAQ/vI5+2VgZpVpsxQmGoZaiAZnJI/pT7XEYYA4d1IM=) 13: mwE7644yuRyikfXfTRLC6TQjC0w.roa (hash: KcHRogBcTVnQMGjCpBXC4Xr5iRWrDOZmEHuY1S/TOXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7d:73:f5:61:23:96:69:de:a4:45:83:3b:6a:07:a0:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Validity Not Before: Oct 27 13:01:53 2026 GMT Not After : Oct 28 13:01:53 2026 GMT Subject: CN=4b4da2252644e1db36c259ae43fdc65291d720d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:71:f7:98:28:b1:5e:03:43:94:e0:84:35:cd: 29:69:b2:00:86:3b:32:95:90:16:58:3c:9b:0c:76: 8a:6e:db:53:9f:d4:1a:7e:5e:76:1b:66:93:23:e2: 41:c1:68:de:49:52:a5:09:3a:01:87:14:e2:0d:40: 6f:87:22:20:6c:25:73:58:1c:dc:bd:0e:de:b2:68: 9d:ef:33:60:b7:63:9b:a2:85:82:14:8c:82:a7:02: 61:8a:28:a4:c9:a1:fc:c4:13:10:e4:e1:6e:08:d5: 0b:8d:5d:b2:e5:83:d1:3a:13:84:0a:13:72:28:9f: 66:24:9d:79:9e:61:5d:b9:32:86:14:cb:c5:60:96: 44:cc:46:de:ac:d2:0b:05:ce:2a:83:53:4c:fa:42: 70:b0:bc:61:18:52:03:5d:6d:3e:6e:a1:7f:57:a8: 22:b5:8b:27:ee:33:1f:cd:15:31:1d:2e:52:96:a6: 38:d6:c7:ae:a2:e3:18:47:3f:e7:03:3b:7a:a9:23: 25:ce:c5:1f:8a:6a:67:f4:df:68:42:7b:e0:62:01: 29:36:46:53:50:09:b1:f5:90:cb:76:f6:f7:3c:31: 10:14:fa:84:20:6d:d9:93:89:92:71:72:09:70:44: b7:ac:9d:f7:60:c0:c5:84:ff:7a:b5:f8:fb:a9:2f: 97:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4D:A2:25:26:44:E1:DB:36:C2:59:AE:43:FD:C6:52:91:D7:20:D8 X509v3 Authority Key Identifier: keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:90:6d:bb:92:89:b8:c0:ea:09:70:60:73:19:e8:7a:f3:a2: b1:81:4b:5a:05:f1:d4:32:45:9e:3b:dd:6e:be:b2:e3:36:27: 7a:97:5a:77:52:48:52:44:49:09:73:dc:c8:73:7a:6a:49:24: fc:95:d4:c0:6f:0a:96:34:37:9c:ea:95:d4:7a:64:ba:d5:a1: c9:c0:4d:da:78:58:7b:1b:0c:f8:e0:99:16:97:91:9b:0a:a4: 0a:fd:d5:5d:ea:81:ca:23:47:74:dd:21:82:14:d3:a1:18:2f: 0f:3b:4d:01:7c:ac:ac:59:00:96:f0:43:91:af:61:33:b8:b8: 99:e9:41:69:45:17:73:f7:c1:ea:61:f3:71:57:b6:d9:70:d8: fd:d8:25:c5:45:d0:23:cf:06:e6:2b:1f:e1:1e:34:30:c0:9f: 1b:28:f1:08:3b:14:db:1c:c4:3d:06:87:11:04:8f:36:8d:d2: 29:a7:f6:9a:f4:6b:86:85:ee:b3:6b:4d:60:b1:52:25:1f:cd: 56:4e:59:27:57:a8:40:1f:cb:19:2e:45:4d:a3:65:df:4a:ad: d8:4a:f5:0c:6c:63:75:b0:02:bc:64:7a:98:c9:33:33:1c:8d: 23:9f:de:e6:eb:a4:a3:c1:51:ec:ca:21:45:ef:e5:19:d3:de: fd:20:06:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF9c/VhI5Zp3qRFgztqB6CfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm Nzk2NzgwHhcNMjYxMDI3MTMwMTUzWhcNMjYxMDI4MTMwMTUzWjAzMTEwLwYDVQQD Eyg0YjRkYTIyNTI2NDRlMWRiMzZjMjU5YWU0M2ZkYzY1MjkxZDcyMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nH3mCixXgNDlOCENc0pabIAhjsy lZAWWDybDHaKbttTn9Qafl52G2aTI+JBwWjeSVKlCToBhxTiDUBvhyIgbCVzWBzc vQ7esmid7zNgt2ObooWCFIyCpwJhiiikyaH8xBMQ5OFuCNULjV2y5YPROhOEChNy KJ9mJJ15nmFduTKGFMvFYJZEzEberNILBc4qg1NM+kJwsLxhGFIDXW0+bqF/V6gi tYsn7jMfzRUxHS5SlqY41seuouMYRz/nAzt6qSMlzsUfimpn9N9oQnvgYgEpNkZT UAmx9ZDLdvb3PDEQFPqEIG3Zk4mScXIJcES3rJ33YMDFhP96tfj7qS+XKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtNoiUmROHbNsJZrkP9xlKR1yDYMB8GA1UdIwQY MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt NTkxY2FmNTM2ZWNjLzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJBtu5KJ uMDqCXBgcxnoevOisYFLWgXx1DJFnjvdbr6y4zYnepdad1JIUkRJCXPcyHN6akkk /JXUwG8KljQ3nOqV1HpkutWhycBN2nhYexsM+OCZFpeRmwqkCv3VXeqByiNHdN0h ghTToRgvDztNAXysrFkAlvBDka9hM7i4melBaUUXc/fB6mHzcVe22XDY/dglxUXQ I88G5isf4R40MMCfGyjxCDsU2xzEPQaHEQSPNo3SKaf2mvRrhoXus2tNYLFSJR/N Vk5ZJ1eoQB/LGS5FTaNl30qt2Er1DGxjdbACvGR6mMkzMxyNI5/e5uuko8FR7Moh Re/lGdPe/SAGUA== -----END CERTIFICATE-----Generated at Tue Oct 27 22:27:17 2026 by rpki-client