$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: N2NbVr8yZLvwIBX87AbJRJM95zWnIIO69tLY3QruqHY= Subject key identifier: B9:7E:15:76:F5:3E:0E:C3:D7:B4:D2:6D:A4:47:0F:2D:3C:B3:27:D9 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019FD128D93CCD650CDECA5448B246E340FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 0691 Signing time: Wed 05 Aug 2026 09:02:22 +0000 Manifest this update: Wed 05 Aug 2026 09:02:22 +0000 Manifest next update: Thu 06 Aug 2026 09:02:22 +0000 Files and hashes: 1: 1-BlSXqYyBKUdfU94NGff_PAPul4.roa (hash: 5sWUhwz5Gcq5/MhNhTcOvD2uhQ0tuUa+W9GIH9V8OaQ=) 2: 1fRolkRjd-APCzNnG-5bwuoOqNg.roa (hash: uECN6gUKiv+lFioLhpnkI4G1xAlKUZVG1VCjkCRQOjI=) 3: 2F897qCWvfh11SUzKWZ5JUV2vMs.roa (hash: BDm7sSnQsdMShImHFreyfB5QnyPZWja62eMfrLC52Z0=) 4: 3DigKmaWxP-qw4TMo5nSEFFHNlw.roa (hash: SFQibSW8pDXFPKPG5MbvdKYY13AwQ4A4xl349zx1iCA=) 5: 91LDPauwCWQ9godr-xheoc62kZY.roa (hash: pLiJYVDF484K9mWtl+JKcTe0VgA4TfPZgkN8+ZrNjMs=) 6: 9XRLK1OdgukwixTDk2AKzFzTzbs.roa (hash: GCjLjdeI8luwyn1PGNY8s6Ygk/m/2VfxU7ui9AQ53ww=) 7: 9ohNILRN251EJCEOaFSvlOoDNJg.roa (hash: 2WRd0d2oEyTbSuOnacVQb9zr84nnPee4Alvgcj+3gVU=) 8: GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa (hash: 9wH2XPtuxgQ1BMZZEBYsg16k1bgpNYguMty8atBuYf4=) 9: H9OemdXyC7tAgnmNPQ8cKr4kXek.roa (hash: Y6oksDUVORVjfAcT/DowbWJFqVZVzW3cfm1/KNkAcoU=) 10: Jt1l3PmmzdbcYP2rfmhzsDtcPhI.roa (hash: zt/605nd1EgOMLhSVE8EHytRNsfa1q/ziCZNE0ebjzg=) 11: PI0GWokWQCIYbfxBSxMKrWG4rlA.roa (hash: qRwJTh2gHSy2lv6qJPXbAlMzsB4kzURHt7CqQP0XkRU=) 12: PTZMdAT0hDazMuAsVI3CEFaCfvE.roa (hash: Z9gyi8MZGuuvG1z3xCSCxfacu9FwpO6Pum1TmCZXgaA=) 13: RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa (hash: 7jSM+R7ontglcAC1koxA8s1vIKZN1w9IqBWxZkjEi38=) 14: Y0JbxOj_u8eJzUeHjUqUp5ZzdjI.roa (hash: upN3TgIZvGzCE5YLEWAdPuZbKmynb15EXTQ5pfRhfMc=) 15: Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa (hash: 49fIprccRJUVDzFPqcsAmiCiqNfTbqtbpr/g64iaVzQ=) 16: avrcnfB12N6L1uAItV4pxr4ZeBk.roa (hash: UCrkK/t7tVltSG/GoHf/iVcJnaXfqtG/1ac64yo7m4E=) 17: hMoYvytTC8MSE72GcaOmUQp55TM.roa (hash: QNj9222JszfBwsXWHLHqGbqHpk9emhsVOXPVoX1Flpc=) 18: ipercfJU5O8E0XasUBHV6tWGchQ.roa (hash: HApdigE0Ka0edSDTXKLYJ8nXJSrgF6YaO6XyN4xCAg0=) 19: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: ZlF1Kx7wCFNf9UdgjrhEXVQR7NYqi/0YoJY9+hVlJM4=) 20: jC80DyZfd08kqUPQfGLYtFSpqeA.roa (hash: QkkRAI+hrNUAThXm4mIodhuWyIPzbk15zdb1sYevpvs=) 21: pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa (hash: Zwjahs4SIZZ7mXWd1Naf3bCGTp7nVeEdZf7T1NQzjwE=) 22: r6qKV9nEirBUwP3KmuLyUTNtefg.roa (hash: iWqKDpTKfBVdyUC9r9QWpqk9OSg69kGIRh/unEHarFg=) 23: xJkF66cCvGxEcbXW72kYSvCe9pc.roa (hash: 8ukNpwANOCXSCFQousC6/SlMGWqDu4dvIjSPXAjmXlo=) 24: xQPVpv6oDfVejRnWElQGbmYJcaY.roa (hash: y3RHPAzs8tten2VXnVg+llQRjecqqHar32AXcJuIcWg=) 25: xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa (hash: uA7hO9E7hUzauisNryngMo6HASraVHp6A2BgzZx4YIE=) 26: y78xNtcYu21c47h3KufgEPgZVnE.roa (hash: MwiDwZITS/z04aTqMBZZx2J7qe1RkzKld+egFNWQZro=) 27: ycFTntx4cs4onGaGpj0o47JW98Y.roa (hash: Ttb49ZN4wbdVcFXW70bm/uwe/p5I14QSBI+L4GbrQys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Aug 2026 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:d1:28:d9:3c:cd:65:0c:de:ca:54:48:b2:46:e3:40:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Aug 5 09:02:22 2026 GMT Not After : Aug 6 09:02:22 2026 GMT Subject: CN=b97e1576f53e0ec3d7b4d26da4470f2d3cb327d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:de:0a:41:76:45:2c:e4:b7:f8:92:30:fe: 36:36:74:c1:88:2d:74:d4:5f:6d:d8:d1:e6:1b:4c: 39:45:92:7d:6d:20:a1:01:ce:d0:7f:65:1e:e0:16: fe:58:47:30:78:b4:1e:1a:90:bd:e2:c9:e5:38:25: 9a:13:3c:14:b8:64:02:8c:56:e7:7d:b3:77:42:45: 74:fa:51:43:e8:ce:11:83:b0:c6:05:82:73:70:9f: 5e:69:4d:aa:58:71:e6:05:1b:d3:bc:3f:d0:c7:11: da:5b:61:61:58:9b:2b:83:75:7b:26:49:88:ea:1e: cc:9c:d9:b7:5b:dc:de:0c:1d:3e:53:9d:c6:bc:f1: 29:b1:bc:97:e2:a0:58:ac:5e:43:f9:83:cd:86:9b: 14:a3:0c:21:5a:32:b7:82:5e:b3:12:d7:0d:d3:86: 58:5a:ef:03:ae:00:c6:4f:d9:4c:f9:5f:59:d3:91: 14:cb:55:c2:00:f3:84:a7:52:9e:d3:c6:05:65:d2: 51:a5:03:0e:e5:94:53:41:00:08:3c:26:cd:e5:25: f6:90:2f:e1:38:ec:66:3d:bd:f9:80:2f:5b:81:57: 1a:b8:33:a9:7d:18:8f:5b:bd:75:fd:2d:e8:bd:be: 28:7a:3e:d9:bf:47:48:89:5b:f0:d3:0c:3c:4c:d4: 0e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7E:15:76:F5:3E:0E:C3:D7:B4:D2:6D:A4:47:0F:2D:3C:B3:27:D9 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4f:29:ad:41:24:c3:1f:d9:1f:ec:dd:73:7e:83:1e:69:e2: 01:46:bb:2e:72:6a:c7:f3:35:26:43:4d:a7:ac:2a:91:ca:34: cd:3f:12:a5:66:7c:e2:6d:f4:9c:8c:b1:2d:c4:ca:f9:c6:0a: b6:92:b0:9c:0f:d9:ae:b1:98:b0:40:84:2e:1c:a2:52:85:8e: d4:a8:d1:2e:83:9d:7a:6c:34:fd:89:4c:b7:0b:e1:d4:f7:94: 46:16:b7:69:a1:e0:ff:dd:1c:d4:40:7b:25:88:85:dd:b2:4e: 73:a8:da:6f:7b:9d:ef:b8:f8:eb:84:a3:54:17:c1:e5:f7:8f: 7a:7e:d0:55:d1:49:d5:fc:4b:1d:01:b2:de:fe:ae:3e:ff:41: 77:c4:d1:ec:ce:ab:46:72:cc:e8:8e:66:ed:a7:45:23:09:1c: 27:c7:39:51:18:41:4f:12:64:28:93:70:2a:bc:ad:53:aa:4d: 1d:06:66:f9:15:a0:8b:ee:9f:4b:5e:34:c2:20:6e:29:0b:85: 1d:04:bb:c6:d9:bf:38:05:e8:c0:15:67:ef:8a:1e:8d:fb:d4: 08:34:75:82:53:78:34:a0:bb:f0:68:09:d6:cc:68:5d:ee:80: ca:08:7b:e8:70:a0:97:bc:7e:97:19:2d:95:f1:42:39:d6:ca: 47:e1:1e:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/RKNk8zWUM3spUSLJG40D6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwODA1MDkwMjIyWhcNMjYwODA2MDkwMjIyWjAzMTEwLwYDVQQD EyhiOTdlMTU3NmY1M2UwZWMzZDdiNGQyNmRhNDQ3MGYyZDNjYjMyN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn7eCkF2RSzkt/iSMP42NnTBiC10 1F9t2NHmG0w5RZJ9bSChAc7Qf2Ue4Bb+WEcweLQeGpC94snlOCWaEzwUuGQCjFbn fbN3QkV0+lFD6M4Rg7DGBYJzcJ9eaU2qWHHmBRvTvD/QxxHaW2FhWJsrg3V7JkmI 6h7MnNm3W9zeDB0+U53GvPEpsbyX4qBYrF5D+YPNhpsUowwhWjK3gl6zEtcN04ZY Wu8DrgDGT9lM+V9Z05EUy1XCAPOEp1Ke08YFZdJRpQMO5ZRTQQAIPCbN5SX2kC/h OOxmPb35gC9bgVcauDOpfRiPW711/S3ovb4oej7Zv0dIiVvw0ww8TNQOtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLl+FXb1Pg7D17TSbaRHDy08syfZMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXk8prUEk wx/ZH+zdc36DHmniAUa7LnJqx/M1JkNNp6wqkco0zT8SpWZ84m30nIyxLcTK+cYK tpKwnA/ZrrGYsECELhyiUoWO1KjRLoOdemw0/YlMtwvh1PeURha3aaHg/90c1EB7 JYiF3bJOc6jab3ud77j464SjVBfB5fePen7QVdFJ1fxLHQGy3v6uPv9Bd8TR7M6r RnLM6I5m7adFIwkcJ8c5URhBTxJkKJNwKrytU6pNHQZm+RWgi+6fS140wiBuKQuF HQS7xtm/OAXowBVn74oejfvUCDR1glN4NKC78GgJ1sxoXe6Aygh76HCgl7x+lxkt lfFCOdbKR+Eepg== -----END CERTIFICATE-----Generated at Wed Aug 5 11:24:30 2026 by rpki-client