$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: +csW9FIZXrirvfgkJsFWPyvI/qgr53e71xCOJcvxkwE= Subject key identifier: 1C:73:67:83:08:4C:22:9E:07:12:AF:C9:8A:F4:43:99:CF:08:07:4A Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 01A15C9E6BE2B82CF1443945793D72790D29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1AE5 Signing time: Wed 21 Oct 2026 04:00:48 +0000 Manifest this update: Wed 21 Oct 2026 04:00:48 +0000 Manifest next update: Thu 22 Oct 2026 04:00:48 +0000 Files and hashes: 1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=) 2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=) 3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=) 4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=) 5: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=) 6: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=) 7: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=) 8: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=) 9: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=) 10: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=) 11: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=) 12: R0aW1UlU2G9IJ0JSgRuhXpY0Qr0.roa (hash: 61Iq2Y9qBNlCXxjTubM5AW+momY69I+HgyILrPoypSI=) 13: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=) 14: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=) 15: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: rXs6v1+c7brFEDBydnmPM5/Wk+J2fuj9rD9eWKVD4hU=) 16: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=) 17: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=) 18: lgdudiRubbn4kubyyDwuIWxdQas.roa (hash: Mto3E9aOm3/d28/F7shwzi6mJEuxr7zprdp5mund0Ik=) 19: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 00:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:5c:9e:6b:e2:b8:2c:f1:44:39:45:79:3d:72:79:0d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Oct 21 04:00:48 2026 GMT Not After : Oct 22 04:00:48 2026 GMT Subject: CN=1c736783084c229e0712afc98af44399cf08074a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f6:20:6a:e1:80:de:44:fb:4b:8d:d1:b4:ba: e1:84:be:14:9b:14:3a:9e:ed:ef:cf:17:8c:c8:06: 96:6e:d7:0b:5c:99:4c:89:64:4a:32:65:bb:df:18: 90:f2:08:58:6e:57:26:51:c1:eb:16:2c:8a:27:94: 55:3d:f3:53:81:fb:d7:7e:7e:c7:36:e9:8a:c9:d3: 48:2e:0a:42:08:d2:61:00:95:f5:e7:a4:a8:56:77: a6:da:35:14:74:d6:29:86:3f:65:1e:6c:27:15:aa: f2:80:4a:9b:01:cb:f1:d7:ed:60:24:ea:c3:a9:ff: 62:48:4a:99:80:17:9d:3a:d4:57:ed:70:7f:92:bc: 56:5b:ee:1e:05:39:02:db:8f:63:ec:cc:3b:e9:d0: 33:f2:9d:03:8d:46:13:fc:61:c3:1b:fa:2a:af:1d: f9:70:3d:a1:3b:51:19:a7:ad:70:a3:44:fc:77:12: 2e:ef:ad:91:ca:d1:b1:0c:b4:6e:53:a3:82:7d:9d: a0:d3:fd:c6:82:ac:51:90:46:65:e0:12:6d:b2:7f: b1:9d:d9:78:45:9c:32:71:6a:08:70:fd:a8:f6:fa: 74:df:50:81:ad:31:bc:a3:f5:ae:17:49:95:a9:e9: 25:07:23:42:6b:fe:fc:68:af:c6:b1:2c:dc:94:fd: 3d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:73:67:83:08:4C:22:9E:07:12:AF:C9:8A:F4:43:99:CF:08:07:4A X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:98:29:cb:6d:87:e8:4b:28:ca:6c:c1:b6:ca:20:7c:0b:ab: 37:95:02:d8:4e:e2:fa:c3:86:b8:9c:17:8f:ff:64:d1:c2:14: 8f:da:4f:13:54:91:ef:49:b1:5e:93:d2:0b:0e:da:98:3c:3e: da:ca:20:8f:e0:a6:2a:4a:e7:04:43:eb:ea:a6:67:fe:b9:54: 2b:a3:76:93:2a:92:80:67:93:3a:2b:81:53:7b:e4:50:16:95: 6f:3f:4e:b1:55:d1:0e:75:8e:7e:d7:56:bd:12:21:0a:66:e1: 9d:2c:39:01:55:4e:10:54:a4:e3:4b:c4:25:5c:69:d8:06:cb: a6:44:69:3a:8e:79:97:f1:bf:3b:10:14:35:0d:b8:e3:16:6a: 76:93:04:c0:12:e7:e5:36:48:be:f7:4b:55:a6:67:84:58:a6: ae:0d:43:cd:57:5a:fe:e7:ed:a5:89:17:fd:14:9b:80:03:b7: 2b:87:c7:e5:28:3e:6b:c1:33:19:8d:55:69:b2:c3:a2:44:90: 6e:b2:a7:0a:37:cf:9e:a3:66:01:a6:c8:1f:aa:19:1c:75:d7: 27:a4:fc:71:fd:0c:80:04:60:2e:27:c2:c9:f7:df:17:54:f0: 02:51:f4:11:6c:43:43:17:e5:f5:6d:cf:fd:21:38:62:0f:5e: d9:84:34:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFcnmviuCzxRDlFeT1yeQ0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYxMDIxMDQwMDQ4WhcNMjYxMDIyMDQwMDQ4WjAzMTEwLwYDVQQD EygxYzczNjc4MzA4NGMyMjllMDcxMmFmYzk4YWY0NDM5OWNmMDgwNzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPYgauGA3kT7S43RtLrhhL4UmxQ6 nu3vzxeMyAaWbtcLXJlMiWRKMmW73xiQ8ghYblcmUcHrFiyKJ5RVPfNTgfvXfn7H NumKydNILgpCCNJhAJX156SoVnem2jUUdNYphj9lHmwnFarygEqbAcvx1+1gJOrD qf9iSEqZgBedOtRX7XB/krxWW+4eBTkC249j7Mw76dAz8p0DjUYT/GHDG/oqrx35 cD2hO1EZp61wo0T8dxIu762RytGxDLRuU6OCfZ2g0/3GgqxRkEZl4BJtsn+xndl4 RZwycWoIcP2o9vp031CBrTG8o/WuF0mVqeklByNCa/78aK/GsSzclP097QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxzZ4MITCKeBxKvyYr0Q5nPCAdKMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5gpy22H 6EsoymzBtsogfAurN5UC2E7i+sOGuJwXj/9k0cIUj9pPE1SR70mxXpPSCw7amDw+ 2sogj+CmKkrnBEPr6qZn/rlUK6N2kyqSgGeTOiuBU3vkUBaVbz9OsVXRDnWOftdW vRIhCmbhnSw5AVVOEFSk40vEJVxp2AbLpkRpOo55l/G/OxAUNQ244xZqdpMEwBLn 5TZIvvdLVaZnhFimrg1DzVda/uftpYkX/RSbgAO3K4fH5Sg+a8EzGY1VabLDokSQ brKnCjfPnqNmAabIH6oZHHXXJ6T8cf0MgARgLifCyfffF1TwAlH0EWxDQxfl9W3P /SE4Yg9e2YQ0ZA== -----END CERTIFICATE-----Generated at Wed Oct 21 07:38:44 2026 by rpki-client