$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft File: IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json) Hash identifier: Snz/LaZJa0YU+cwYn9Xc15Fz7CuOV100ztWk6pt4vu8= Subject key identifier: 6B:2E:7F:5B:36:F5:18:9B:90:D6:42:31:C0:2F:51:4D:35:4A:C3:6D Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Certificate serial: 019FA116EA345451AE53BF43277FD5BA1FD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft Manifest number: 0D01 Signing time: Mon 27 Jul 2026 01:01:01 +0000 Manifest this update: Mon 27 Jul 2026 01:01:01 +0000 Manifest next update: Tue 28 Jul 2026 01:01:01 +0000 Files and hashes: 1: 1-Y24DkHX_YS8BQf944IXH_5kays.roa (hash: +VJRpnj8CgCWOeIl5a7z0P70ihS3i/FmFwSi/9utCPo=) 2: 9Hu5_KEvVkuaYsN5m6cQzzKMIjI.roa (hash: p+jhtgM1l26n79s209lOfRrA6/2Vzy+6l6es1YSywE4=) 3: HSoISsJ-isLr8N_DHmCBMl3TpWs.roa (hash: eFtDBlD8d0dAnIzoz+b3NcMyduLIBF9yLf8ySSSmIvA=) 4: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: Pn0BdbNtIM9NdFA/gjmB73RnT267BtF0YZcQBauIL5E=) 5: KSxgyXQgmuvgD3hsIbjoWlYRqkk.roa (hash: MfPYx4d8dGraW1R0Aep23IPqwadZP9+eAkLv5cmiWoM=) 6: M6wnPrDmWw7o372pn664G-6XMUM.roa (hash: vz3Xt9QAg5obB1AHMtVF5JrXwk6u3qtnMl8SakINxdQ=) 7: OTfefXpqJS5N6ZeJMEPi4o2glcE.roa (hash: EXmrtcvCwOgf/pC8L7II//3SohUrOG6Iw5W8LXbZAkA=) 8: _25UfYuLERvQd7ERXXNW_sly9Oo.roa (hash: mce8PC+zpkQB3aka/bSBor9uJVmt1ZEupgGD8nmRstI=) 9: _hBOrFv7fim--KrBCy30YmUAo3I.roa (hash: qzAl3O9RiG1n+2GEMGj8zSfO491bHrCZda9IZnWLPqI=) 10: dmOHwgbnoCRhoLg_fFLiu1Y5vZk.roa (hash: rfX+Iq8x7mvB73/s7COHDQopmGHF1orAq3S1Gp8T9wg=) 11: gr17UYbRi7cQ6eQ9EyDF-CuJIp4.roa (hash: NAQ/vI5+2VgZpVpsxQmGoZaiAZnJI/pT7XEYYA4d1IM=) 12: mwE7644yuRyikfXfTRLC6TQjC0w.roa (hash: KcHRogBcTVnQMGjCpBXC4Xr5iRWrDOZmEHuY1S/TOXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:16:ea:34:54:51:ae:53:bf:43:27:7f:d5:ba:1f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Validity Not Before: Jul 27 01:01:01 2026 GMT Not After : Jul 28 01:01:01 2026 GMT Subject: CN=6b2e7f5b36f5189b90d64231c02f514d354ac36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:21:84:24:55:16:e7:22:91:56:c6:34:cf:b6: d6:7f:72:a4:96:6b:3a:e6:6d:00:ad:c4:10:1a:96: b4:7c:10:81:db:85:a0:14:5a:9d:d0:43:61:49:77: e8:43:7b:15:3f:de:2c:81:84:6c:62:14:6c:bb:92: 16:46:34:6b:70:c8:c5:c3:20:8d:91:c0:21:2b:0a: 33:ee:65:e9:c8:d8:d5:02:25:96:f5:f8:ed:f8:15: e6:3d:ed:fc:c6:4f:bb:54:32:02:51:44:3c:44:7d: 33:a0:af:50:70:6b:ec:3f:9d:34:5e:6b:44:24:26: af:03:51:e9:16:76:98:30:a6:61:e9:22:24:9f:a0: 0c:d1:37:35:f7:6e:b3:7e:cb:dd:62:da:fc:2b:d4: c6:f7:56:8a:9d:03:60:98:4f:26:19:19:2e:08:43: 0e:5b:3d:14:e3:54:e2:5c:2d:d1:29:5c:1c:09:26: ec:aa:49:b8:bf:60:14:53:74:34:0c:74:94:e8:29: 20:12:a0:d7:b4:c5:60:4c:14:a4:fb:ea:5f:59:e8: 46:5c:c5:fd:b0:44:7d:3e:a4:3d:2c:b9:fe:de:3f: eb:77:db:12:4f:bf:7a:ae:18:89:db:6a:d5:a7:66: 78:81:11:84:03:d9:f1:00:b6:a9:85:4e:b6:ec:4b: 6d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2E:7F:5B:36:F5:18:9B:90:D6:42:31:C0:2F:51:4D:35:4A:C3:6D X509v3 Authority Key Identifier: keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:33:2c:eb:d8:94:02:fb:98:22:8e:cc:33:a6:a5:6e:fd:1a: 51:48:2f:e1:0a:67:13:72:c2:1e:7b:87:81:49:6c:c0:23:58: 13:f8:59:c7:28:bb:64:45:9e:0c:22:08:28:ce:e9:9e:12:44: f9:ba:fd:83:20:7d:01:04:b1:3d:6d:9a:c4:25:a3:54:bf:ea: c9:00:63:92:c3:27:94:0d:7b:64:58:b9:44:38:7a:6d:d5:8a: 34:ce:b9:5a:67:9a:e0:cb:b4:af:a6:e6:6b:41:9a:b2:79:77: 82:4f:17:a4:cd:a1:90:ba:18:39:29:60:b6:0a:2f:1a:ed:cb: 1a:14:9d:32:ee:a0:6c:ab:0c:83:92:99:4d:d8:7d:21:1e:ad: 7a:1d:41:74:dc:6b:11:dc:4f:97:af:73:1d:4c:e2:5a:c3:aa: 4e:6d:e2:28:e3:61:bc:3b:74:b3:99:02:b7:ad:c8:34:dd:ad: db:a3:cc:a9:7f:e7:d1:f3:24:7f:03:7d:20:5a:d4:77:d9:7b: e7:5f:f4:7d:4a:c9:6b:c1:a6:4a:4b:c8:e3:24:af:99:04:45: 03:5f:31:b2:ad:1b:69:d5:3d:91:2f:47:4a:df:cf:b7:65:a2: 0c:ed:d0:ab:7b:92:da:c5:bd:5f:1f:de:33:cf:7e:c8:df:8b: ba:a7:da:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+hFuo0VFGuU79DJ3/Vuh/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm Nzk2NzgwHhcNMjYwNzI3MDEwMTAxWhcNMjYwNzI4MDEwMTAxWjAzMTEwLwYDVQQD Eyg2YjJlN2Y1YjM2ZjUxODliOTBkNjQyMzFjMDJmNTE0ZDM1NGFjMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiGEJFUW5yKRVsY0z7bWf3Kklms6 5m0ArcQQGpa0fBCB24WgFFqd0ENhSXfoQ3sVP94sgYRsYhRsu5IWRjRrcMjFwyCN kcAhKwoz7mXpyNjVAiWW9fjt+BXmPe38xk+7VDICUUQ8RH0zoK9QcGvsP500XmtE JCavA1HpFnaYMKZh6SIkn6AM0Tc1926zfsvdYtr8K9TG91aKnQNgmE8mGRkuCEMO Wz0U41TiXC3RKVwcCSbsqkm4v2AUU3Q0DHSU6CkgEqDXtMVgTBSk++pfWehGXMX9 sER9PqQ9LLn+3j/rd9sST796rhiJ22rVp2Z4gRGEA9nxALaphU627EttxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsuf1s29RibkNZCMcAvUU01SsNtMB8GA1UdIwQY MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt NTkxY2FmNTM2ZWNjLzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTMs69iU AvuYIo7MM6albv0aUUgv4QpnE3LCHnuHgUlswCNYE/hZxyi7ZEWeDCIIKM7pnhJE +br9gyB9AQSxPW2axCWjVL/qyQBjksMnlA17ZFi5RDh6bdWKNM65Wmea4Mu0r6bm a0Gasnl3gk8XpM2hkLoYOSlgtgovGu3LGhSdMu6gbKsMg5KZTdh9IR6teh1BdNxr EdxPl69zHUziWsOqTm3iKONhvDt0s5kCt63INN2t26PMqX/n0fMkfwN9IFrUd9l7 51/0fUrJa8GmSkvI4ySvmQRFA18xsq0badU9kS9HSt/Pt2WiDO3Qq3uS2sW9Xx/e M89+yN+LuqfaCw== -----END CERTIFICATE-----Generated at Mon Jul 27 04:26:04 2026 by rpki-client