$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: EWqpJEBTHGFVjNVjzgAsAhQNnYFNuGT3P/4+MnujfQg= Subject key identifier: 01:0F:48:6C:75:64:B8:59:80:F7:FE:FE:AB:34:00:63:C2:EF:6D:2E Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019DF91606E5A0F2CE5E0C1742D71E12E0F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 059B Signing time: Tue 05 May 2026 17:01:03 +0000 Manifest this update: Tue 05 May 2026 17:01:03 +0000 Manifest next update: Wed 06 May 2026 17:01:03 +0000 Files and hashes: 1: 1-BlSXqYyBKUdfU94NGff_PAPul4.roa (hash: 5sWUhwz5Gcq5/MhNhTcOvD2uhQ0tuUa+W9GIH9V8OaQ=) 2: 1fRolkRjd-APCzNnG-5bwuoOqNg.roa (hash: uECN6gUKiv+lFioLhpnkI4G1xAlKUZVG1VCjkCRQOjI=) 3: 2F897qCWvfh11SUzKWZ5JUV2vMs.roa (hash: BDm7sSnQsdMShImHFreyfB5QnyPZWja62eMfrLC52Z0=) 4: 2ecqjdvwwVeADzgAXi31Tj-9uMY.roa (hash: PYkuLmF1i/LptCyvK8hoFYIwFZUAA+w8WWm3Jdteb0o=) 5: 3DigKmaWxP-qw4TMo5nSEFFHNlw.roa (hash: SFQibSW8pDXFPKPG5MbvdKYY13AwQ4A4xl349zx1iCA=) 6: 91LDPauwCWQ9godr-xheoc62kZY.roa (hash: pLiJYVDF484K9mWtl+JKcTe0VgA4TfPZgkN8+ZrNjMs=) 7: 9XRLK1OdgukwixTDk2AKzFzTzbs.roa (hash: GCjLjdeI8luwyn1PGNY8s6Ygk/m/2VfxU7ui9AQ53ww=) 8: 9ohNILRN251EJCEOaFSvlOoDNJg.roa (hash: 2WRd0d2oEyTbSuOnacVQb9zr84nnPee4Alvgcj+3gVU=) 9: GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa (hash: 9wH2XPtuxgQ1BMZZEBYsg16k1bgpNYguMty8atBuYf4=) 10: H9OemdXyC7tAgnmNPQ8cKr4kXek.roa (hash: Y6oksDUVORVjfAcT/DowbWJFqVZVzW3cfm1/KNkAcoU=) 11: Jt1l3PmmzdbcYP2rfmhzsDtcPhI.roa (hash: zt/605nd1EgOMLhSVE8EHytRNsfa1q/ziCZNE0ebjzg=) 12: PTZMdAT0hDazMuAsVI3CEFaCfvE.roa (hash: Z9gyi8MZGuuvG1z3xCSCxfacu9FwpO6Pum1TmCZXgaA=) 13: RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa (hash: 7jSM+R7ontglcAC1koxA8s1vIKZN1w9IqBWxZkjEi38=) 14: UCw29YjY3cKmFjpAxHmvqF-bUCI.roa (hash: K5I6bkFEX1PYMGH5TucPKknBQXRBL1MadI7utz2hd/A=) 15: Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa (hash: 49fIprccRJUVDzFPqcsAmiCiqNfTbqtbpr/g64iaVzQ=) 16: avrcnfB12N6L1uAItV4pxr4ZeBk.roa (hash: UCrkK/t7tVltSG/GoHf/iVcJnaXfqtG/1ac64yo7m4E=) 17: hMoYvytTC8MSE72GcaOmUQp55TM.roa (hash: QNj9222JszfBwsXWHLHqGbqHpk9emhsVOXPVoX1Flpc=) 18: ipercfJU5O8E0XasUBHV6tWGchQ.roa (hash: HApdigE0Ka0edSDTXKLYJ8nXJSrgF6YaO6XyN4xCAg0=) 19: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: iFzLz/e/FnR5W4Nk/PR5NexsGGxREESDXpsNS5RWkho=) 20: jC80DyZfd08kqUPQfGLYtFSpqeA.roa (hash: QkkRAI+hrNUAThXm4mIodhuWyIPzbk15zdb1sYevpvs=) 21: pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa (hash: Zwjahs4SIZZ7mXWd1Naf3bCGTp7nVeEdZf7T1NQzjwE=) 22: r6qKV9nEirBUwP3KmuLyUTNtefg.roa (hash: iWqKDpTKfBVdyUC9r9QWpqk9OSg69kGIRh/unEHarFg=) 23: xJkF66cCvGxEcbXW72kYSvCe9pc.roa (hash: 8ukNpwANOCXSCFQousC6/SlMGWqDu4dvIjSPXAjmXlo=) 24: xQPVpv6oDfVejRnWElQGbmYJcaY.roa (hash: y3RHPAzs8tten2VXnVg+llQRjecqqHar32AXcJuIcWg=) 25: xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa (hash: uA7hO9E7hUzauisNryngMo6HASraVHp6A2BgzZx4YIE=) 26: y78xNtcYu21c47h3KufgEPgZVnE.roa (hash: MwiDwZITS/z04aTqMBZZx2J7qe1RkzKld+egFNWQZro=) 27: ycFTntx4cs4onGaGpj0o47JW98Y.roa (hash: Ttb49ZN4wbdVcFXW70bm/uwe/p5I14QSBI+L4GbrQys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 17:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f9:16:06:e5:a0:f2:ce:5e:0c:17:42:d7:1e:12:e0:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: May 5 17:01:03 2026 GMT Not After : May 6 17:01:03 2026 GMT Subject: CN=010f486c7564b85980f7fefeab340063c2ef6d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:83:82:ce:64:87:66:54:76:68:02:5d:f7: d0:a7:0a:c2:5e:a0:d7:0b:85:9e:e1:6f:a0:76:cd: 94:4a:da:da:d1:16:4c:26:89:bf:05:3b:0b:f6:c2: 04:0c:0c:be:23:58:a6:cc:0e:52:99:90:9c:f3:c6: e2:bc:c9:a6:4d:3e:22:54:86:0a:1f:fe:6c:4c:0c: 24:26:ae:60:0a:21:bf:55:2b:a8:bb:5a:fb:7b:41: c2:39:e1:41:d5:00:54:4e:ff:ec:05:f6:88:a6:81: df:ad:7f:d0:94:5d:9f:51:e8:17:c5:c6:0c:6c:20: b7:33:7d:7c:85:e4:12:2d:af:9b:4f:c4:fa:c8:58: d0:d6:e5:50:74:c4:d7:78:ab:53:74:13:60:6b:95: 86:9d:55:84:b3:44:22:c6:48:d4:de:05:47:2e:f3: d4:a9:6b:72:75:91:6b:b2:0a:84:5f:84:10:f2:9e: 89:be:90:28:0b:c8:da:cc:b0:28:3f:a7:ae:ee:f9: b0:fa:88:70:7a:b1:08:33:4a:bb:36:74:11:ad:20: 67:b4:bd:c9:81:79:e0:bc:ad:e6:19:25:d5:09:c3: dc:83:da:b3:6c:4e:c2:63:f8:89:d9:43:82:a4:bc: 78:5d:38:43:a3:06:45:4e:49:32:4f:88:0a:9b:bb: e9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0F:48:6C:75:64:B8:59:80:F7:FE:FE:AB:34:00:63:C2:EF:6D:2E X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:95:59:ab:b3:63:37:73:e4:fa:42:ef:66:d4:59:d7:6b:2a: c6:20:32:ab:ec:c9:4e:78:57:d8:85:c6:e5:fc:99:ff:97:7e: d0:ce:b1:1c:27:0c:92:8c:df:a7:5d:04:74:fd:75:1a:21:57: 13:5f:5d:6b:7f:c0:58:e9:25:b1:e8:22:4e:98:ad:08:e4:cc: 9b:a2:4c:13:cb:48:82:76:14:e9:78:35:71:8f:a9:9d:c7:1c: 27:03:5c:26:ab:55:eb:87:df:f5:69:49:8a:4a:8f:13:41:2b: 40:80:0b:70:96:a7:fb:05:0c:89:71:d8:6c:89:23:a3:6d:3f: 51:8d:bf:d0:0f:bc:8b:39:e1:c6:5d:97:89:c4:c4:65:aa:65: a0:24:c8:77:2b:52:9d:55:bc:57:fe:16:0f:d8:21:98:d1:f6: 79:c6:c2:ff:6e:dd:ec:99:53:ed:4f:91:da:4b:bb:b1:1c:e7: 36:6b:3a:a1:11:ec:78:47:44:63:e5:ad:8b:92:f4:ae:3a:86: 76:c4:f6:0c:a2:4d:12:94:2a:59:85:e8:5d:09:af:f2:48:85: 9f:1d:b9:16:39:64:e4:3b:ed:95:17:36:83:d3:05:77:13:68: ab:dc:d1:16:a3:de:2d:a3:40:0a:44:fb:81:3f:7e:f7:79:3f: 60:05:d2:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ35FgbloPLOXgwXQtceEuDyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwNTA1MTcwMTAzWhcNMjYwNTA2MTcwMTAzWjAzMTEwLwYDVQQD EygwMTBmNDg2Yzc1NjRiODU5ODBmN2ZlZmVhYjM0MDA2M2MyZWY2ZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr6Dgs5kh2ZUdmgCXffQpwrCXqDX C4We4W+gds2UStra0RZMJom/BTsL9sIEDAy+I1imzA5SmZCc88bivMmmTT4iVIYK H/5sTAwkJq5gCiG/VSuou1r7e0HCOeFB1QBUTv/sBfaIpoHfrX/QlF2fUegXxcYM bCC3M318heQSLa+bT8T6yFjQ1uVQdMTXeKtTdBNga5WGnVWEs0QixkjU3gVHLvPU qWtydZFrsgqEX4QQ8p6JvpAoC8jazLAoP6eu7vmw+ohwerEIM0q7NnQRrSBntL3J gXngvK3mGSXVCcPcg9qzbE7CY/iJ2UOCpLx4XThDowZFTkkyT4gKm7vpkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEPSGx1ZLhZgPf+/qs0AGPC720uMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyZVZq7Nj N3Pk+kLvZtRZ12sqxiAyq+zJTnhX2IXG5fyZ/5d+0M6xHCcMkozfp10EdP11GiFX E19da3/AWOklsegiTpitCOTMm6JME8tIgnYU6Xg1cY+pncccJwNcJqtV64ff9WlJ ikqPE0ErQIALcJan+wUMiXHYbIkjo20/UY2/0A+8iznhxl2XicTEZaploCTIdytS nVW8V/4WD9ghmNH2ecbC/27d7JlT7U+R2ku7sRznNms6oRHseEdEY+Wti5L0rjqG dsT2DKJNEpQqWYXoXQmv8kiFnx25Fjlk5DvtlRc2g9MFdxNoq9zRFqPeLaNACkT7 gT9+93k/YAXSkg== -----END CERTIFICATE-----Generated at Wed May 6 00:20:48 2026 by rpki-client