$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: nHfsejpV9ckSC0UFzj4RDfcEYSDaJ6tuaxI9jzDXtdI= Subject key identifier: 1F:0D:66:23:F6:89:5E:E6:34:F3:7F:96:EF:A7:5E:7E:47:C6:C3:32 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019EE39F15D45181D4728DD08740EFC62D5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 0615 Signing time: Sat 20 Jun 2026 06:01:54 +0000 Manifest this update: Sat 20 Jun 2026 06:01:54 +0000 Manifest next update: Sun 21 Jun 2026 06:01:54 +0000 Files and hashes: 1: 1-BlSXqYyBKUdfU94NGff_PAPul4.roa (hash: 5sWUhwz5Gcq5/MhNhTcOvD2uhQ0tuUa+W9GIH9V8OaQ=) 2: 1fRolkRjd-APCzNnG-5bwuoOqNg.roa (hash: uECN6gUKiv+lFioLhpnkI4G1xAlKUZVG1VCjkCRQOjI=) 3: 2F897qCWvfh11SUzKWZ5JUV2vMs.roa (hash: BDm7sSnQsdMShImHFreyfB5QnyPZWja62eMfrLC52Z0=) 4: 3DigKmaWxP-qw4TMo5nSEFFHNlw.roa (hash: SFQibSW8pDXFPKPG5MbvdKYY13AwQ4A4xl349zx1iCA=) 5: 91LDPauwCWQ9godr-xheoc62kZY.roa (hash: pLiJYVDF484K9mWtl+JKcTe0VgA4TfPZgkN8+ZrNjMs=) 6: 9XRLK1OdgukwixTDk2AKzFzTzbs.roa (hash: GCjLjdeI8luwyn1PGNY8s6Ygk/m/2VfxU7ui9AQ53ww=) 7: 9ohNILRN251EJCEOaFSvlOoDNJg.roa (hash: 2WRd0d2oEyTbSuOnacVQb9zr84nnPee4Alvgcj+3gVU=) 8: GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa (hash: 9wH2XPtuxgQ1BMZZEBYsg16k1bgpNYguMty8atBuYf4=) 9: H9OemdXyC7tAgnmNPQ8cKr4kXek.roa (hash: Y6oksDUVORVjfAcT/DowbWJFqVZVzW3cfm1/KNkAcoU=) 10: Jt1l3PmmzdbcYP2rfmhzsDtcPhI.roa (hash: zt/605nd1EgOMLhSVE8EHytRNsfa1q/ziCZNE0ebjzg=) 11: PTZMdAT0hDazMuAsVI3CEFaCfvE.roa (hash: Z9gyi8MZGuuvG1z3xCSCxfacu9FwpO6Pum1TmCZXgaA=) 12: RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa (hash: 7jSM+R7ontglcAC1koxA8s1vIKZN1w9IqBWxZkjEi38=) 13: Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa (hash: 49fIprccRJUVDzFPqcsAmiCiqNfTbqtbpr/g64iaVzQ=) 14: avrcnfB12N6L1uAItV4pxr4ZeBk.roa (hash: UCrkK/t7tVltSG/GoHf/iVcJnaXfqtG/1ac64yo7m4E=) 15: hMoYvytTC8MSE72GcaOmUQp55TM.roa (hash: QNj9222JszfBwsXWHLHqGbqHpk9emhsVOXPVoX1Flpc=) 16: hOj1q_woW_TnlRvs2YyjROgkzFQ.roa (hash: ps7n86yeUL7ggIASsOQ9fWrHGtyQ8wFxbcEnxp+seck=) 17: ipercfJU5O8E0XasUBHV6tWGchQ.roa (hash: HApdigE0Ka0edSDTXKLYJ8nXJSrgF6YaO6XyN4xCAg0=) 18: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: oiPDEdmcx3uiFM94DzP4x6gv6lAH41LOPZK+i7RsoLI=) 19: jC80DyZfd08kqUPQfGLYtFSpqeA.roa (hash: QkkRAI+hrNUAThXm4mIodhuWyIPzbk15zdb1sYevpvs=) 20: pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa (hash: Zwjahs4SIZZ7mXWd1Naf3bCGTp7nVeEdZf7T1NQzjwE=) 21: r6qKV9nEirBUwP3KmuLyUTNtefg.roa (hash: iWqKDpTKfBVdyUC9r9QWpqk9OSg69kGIRh/unEHarFg=) 22: xJkF66cCvGxEcbXW72kYSvCe9pc.roa (hash: 8ukNpwANOCXSCFQousC6/SlMGWqDu4dvIjSPXAjmXlo=) 23: xQPVpv6oDfVejRnWElQGbmYJcaY.roa (hash: y3RHPAzs8tten2VXnVg+llQRjecqqHar32AXcJuIcWg=) 24: xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa (hash: uA7hO9E7hUzauisNryngMo6HASraVHp6A2BgzZx4YIE=) 25: y78xNtcYu21c47h3KufgEPgZVnE.roa (hash: MwiDwZITS/z04aTqMBZZx2J7qe1RkzKld+egFNWQZro=) 26: ycFTntx4cs4onGaGpj0o47JW98Y.roa (hash: Ttb49ZN4wbdVcFXW70bm/uwe/p5I14QSBI+L4GbrQys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Jun 2026 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:e3:9f:15:d4:51:81:d4:72:8d:d0:87:40:ef:c6:2d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jun 20 06:01:54 2026 GMT Not After : Jun 21 06:01:54 2026 GMT Subject: CN=1f0d6623f6895ee634f37f96efa75e7e47c6c332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e6:fa:76:9e:e4:e0:d3:ef:f3:73:71:42:7a: 9d:1f:49:ff:4c:b1:26:a9:8a:14:db:59:2c:f4:4b: 32:a9:fb:cf:40:12:5b:5d:bc:43:56:b2:6e:5c:1d: c4:5b:ce:a6:5a:d8:ef:1f:50:3c:41:1b:a4:b8:33: 0f:3c:dd:74:be:b3:a1:13:54:77:9e:c0:a1:52:6f: 16:04:cd:8a:a6:00:8a:83:8e:c1:b0:f6:13:4a:21: 16:1d:41:f1:6f:89:4e:98:1f:76:4e:7d:ae:b9:a4: 90:c7:f3:4f:22:99:63:12:b3:0d:55:ce:1a:a3:fb: 67:5d:3e:a6:c8:f9:c9:5f:7b:f9:f2:86:00:82:87: 42:fa:75:d9:15:22:38:45:be:0e:e4:b3:5f:52:2d: ea:5a:5f:30:3b:b4:f2:9c:77:d3:8c:05:cb:84:92: b3:41:b5:16:cc:11:88:6d:2a:3e:31:26:24:2a:57: 56:1a:32:d1:e3:78:8d:19:6b:a5:5b:80:ed:3e:4e: b4:43:a1:95:17:b4:c7:38:15:0a:61:54:ed:e1:96: 42:1e:f4:f1:36:55:7e:3e:5e:9d:79:29:6c:24:bc: 9c:63:03:72:6d:9a:83:96:ed:d5:d8:87:ed:7b:9a: 42:dd:c9:51:9a:a7:2d:bd:af:98:79:d1:22:da:8b: 0f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0D:66:23:F6:89:5E:E6:34:F3:7F:96:EF:A7:5E:7E:47:C6:C3:32 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ac:27:af:4d:be:7f:ec:44:46:20:c4:0c:28:38:61:50:5f: 01:02:48:73:b5:be:b9:7c:19:eb:9b:5c:e6:eb:26:b4:80:39: 2e:82:cc:26:26:d0:e8:f1:c9:2b:ab:cb:33:ee:08:fa:5f:10: 72:a4:4f:14:53:9a:48:2e:b4:66:e3:5d:0a:47:27:f7:86:b8: 0b:a0:46:3c:84:17:49:d3:50:29:3f:12:8d:bf:fb:a6:fd:0e: 04:d5:e8:d4:85:90:fd:ea:a5:af:c9:6c:a6:2c:1a:78:cd:9a: f9:c8:c5:2b:05:0c:8d:9b:de:0b:b0:9f:81:03:03:cb:9c:59: a8:a3:26:c5:c3:58:b8:2c:9b:d1:e0:23:42:68:b4:b8:a3:4b: 0b:e6:a9:2b:cc:fd:f2:b9:e6:60:27:e3:fe:de:da:68:1d:ab: 78:58:cb:12:3a:53:49:72:10:70:52:3f:38:4a:b7:b8:d5:c9: c2:b0:ba:e2:72:c3:c7:d2:31:b0:b6:27:cd:86:4f:ae:15:96: 4c:de:f1:69:17:f6:d3:8c:ac:ad:11:e6:48:0b:d0:ab:19:a2: e3:6d:cd:a4:93:48:7f:f2:37:ea:52:99:78:47:be:5b:e9:de: 25:82:18:1e:58:33:ed:18:0c:9f:2e:6d:22:b7:3f:2c:1e:cb: 2a:bf:fb:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7jnxXUUYHUco3Qh0Dvxi1aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwNjIwMDYwMTU0WhcNMjYwNjIxMDYwMTU0WjAzMTEwLwYDVQQD EygxZjBkNjYyM2Y2ODk1ZWU2MzRmMzdmOTZlZmE3NWU3ZTQ3YzZjMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+b6dp7k4NPv83NxQnqdH0n/TLEm qYoU21ks9EsyqfvPQBJbXbxDVrJuXB3EW86mWtjvH1A8QRukuDMPPN10vrOhE1R3 nsChUm8WBM2KpgCKg47BsPYTSiEWHUHxb4lOmB92Tn2uuaSQx/NPIpljErMNVc4a o/tnXT6myPnJX3v58oYAgodC+nXZFSI4Rb4O5LNfUi3qWl8wO7TynHfTjAXLhJKz QbUWzBGIbSo+MSYkKldWGjLR43iNGWulW4DtPk60Q6GVF7THOBUKYVTt4ZZCHvTx NlV+Pl6deSlsJLycYwNybZqDlu3V2Ifte5pC3clRmqctva+YedEi2osP2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8NZiP2iV7mNPN/lu+nXn5HxsMyMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqwnr02+ f+xERiDEDCg4YVBfAQJIc7W+uXwZ65tc5usmtIA5LoLMJibQ6PHJK6vLM+4I+l8Q cqRPFFOaSC60ZuNdCkcn94a4C6BGPIQXSdNQKT8Sjb/7pv0OBNXo1IWQ/eqlr8ls piwaeM2a+cjFKwUMjZveC7CfgQMDy5xZqKMmxcNYuCyb0eAjQmi0uKNLC+apK8z9 8rnmYCfj/t7aaB2reFjLEjpTSXIQcFI/OEq3uNXJwrC64nLDx9IxsLYnzYZPrhWW TN7xaRf204ysrRHmSAvQqxmi423NpJNIf/I36lKZeEe+W+neJYIYHlgz7RgMny5t Irc/LB7LKr/7Yw== -----END CERTIFICATE-----Generated at Sat Jun 20 13:14:55 2026 by rpki-client