$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: m2MCQ+wzERqOPigTTTWB5nxQX2WJ42KvcGtJ4VTUkYo= Subject key identifier: 70:DA:87:60:4E:CF:B2:0D:82:CA:CA:79:FE:BA:8A:74:10:B3:35:FB Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019E90CAA32FF0B0B74C6AEB4CCE0E56E8EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1970 Signing time: Thu 04 Jun 2026 04:00:59 +0000 Manifest this update: Thu 04 Jun 2026 04:00:59 +0000 Manifest next update: Fri 05 Jun 2026 04:00:59 +0000 Files and hashes: 1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=) 2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=) 3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=) 4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=) 5: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=) 6: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=) 7: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=) 8: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=) 9: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=) 10: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=) 11: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=) 12: Qu1Mc8WQ6eeAPH9uUS6S5I-qTeo.roa (hash: VfijZBef7xJk1wzgvIwnq71YHQKXU+yJECoJTQRx0kE=) 13: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=) 14: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=) 15: X592uwt05oAZ6VZIQO9SpZfw_gI.roa (hash: 0RauDiHKBdaL0HxQQv2plSQtZnF5VRoiRUDqPfG3Cqs=) 16: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: CHnhLYHVtXy1FmxRzDLT/4b2rlW/ZuKtH/Kq0DnR/0E=) 17: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=) 18: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=) 19: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Jun 2026 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:90:ca:a3:2f:f0:b0:b7:4c:6a:eb:4c:ce:0e:56:e8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jun 4 04:00:59 2026 GMT Not After : Jun 5 04:00:59 2026 GMT Subject: CN=70da87604ecfb20d82caca79feba8a7410b335fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:3c:5d:be:40:02:0e:27:ee:06:25:8a:bd: db:5f:24:19:22:d4:4e:55:a6:87:61:ec:aa:cb:6e: 1a:94:9c:7d:4f:02:86:de:f5:7a:24:6d:c9:9e:96: d4:c1:35:92:2a:01:70:4b:26:bd:20:a1:7c:3b:a2: c7:df:fc:04:a0:22:dd:d9:b4:99:9c:15:c6:4e:69: 3e:b6:1b:ce:89:c6:5e:22:58:aa:89:77:11:82:b3: f8:fa:dd:98:93:17:fb:ac:49:ec:59:da:f6:1e:c2: c5:5f:fa:a6:ca:b4:b9:5b:2d:17:c4:8d:4e:32:d3: 2e:67:17:34:75:34:5c:f4:14:1b:f9:97:aa:b1:e9: c4:38:ec:2f:d0:11:c5:40:c7:f6:b5:e1:2c:2d:9e: 66:02:ac:0f:b5:23:59:58:17:fb:aa:39:b9:8c:27: 6f:f2:69:61:fc:f1:47:19:7b:c1:e9:7f:af:8d:7f: 97:e4:04:b6:da:b6:7a:7c:78:fa:6f:54:59:1d:2f: b4:22:d4:a3:0f:97:6b:ff:f0:19:1f:c2:b8:61:14: c5:30:d3:bb:69:0a:d0:35:11:35:f0:c7:d4:2d:96: 35:bc:18:1a:3b:07:05:ee:30:25:fc:39:d5:fe:68: b8:11:09:3e:61:70:d2:2a:2c:28:32:2e:bf:07:24: fe:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DA:87:60:4E:CF:B2:0D:82:CA:CA:79:FE:BA:8A:74:10:B3:35:FB X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:63:5b:d4:5a:30:c0:48:d7:74:27:9d:72:bd:6e:c7:cf:f5: 2e:70:60:90:dd:c3:c6:09:a8:53:8d:49:62:f4:2d:35:eb:31: 36:2d:e3:36:c8:d0:4e:7e:e6:82:e5:6c:31:01:5b:4f:4a:62: 83:d4:8b:1c:2f:ba:a5:34:38:a1:09:b7:28:08:26:05:b5:e0: d9:d5:63:3b:c1:7b:41:47:8b:8f:aa:4c:ae:d3:79:30:6a:8a: d5:80:b3:33:0b:e4:b5:1a:f8:e0:ce:0e:17:ba:70:3d:a3:ae: 55:2b:ef:94:ad:88:32:c7:a1:bf:a5:af:61:41:36:fd:99:0a: dc:22:38:fa:da:61:58:54:44:1e:a8:fe:35:15:f2:f6:90:d9: 36:26:af:cb:bd:e3:8b:c1:10:a2:31:99:a0:fe:05:e1:42:11: 5a:ba:a4:68:3b:2e:57:3f:76:95:6e:e5:d0:6d:57:b9:62:52: 7b:d2:33:37:c6:0c:6f:1a:68:ea:aa:1b:4c:88:56:df:df:af: cd:28:fa:36:ca:f4:54:cc:20:f8:d5:bc:25:1c:25:2f:14:e8: 61:9a:50:4c:b7:61:7f:af:11:29:a5:1d:31:c1:0e:d8:57:3c: 6e:73:92:b4:da:26:2e:17:3c:0e:80:62:1a:fe:51:e9:90:43: 9f:51:f3:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6QyqMv8LC3TGrrTM4OVujqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwNjA0MDQwMDU5WhcNMjYwNjA1MDQwMDU5WjAzMTEwLwYDVQQD Eyg3MGRhODc2MDRlY2ZiMjBkODJjYWNhNzlmZWJhOGE3NDEwYjMzNWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj88Xb5AAg4n7gYlir3bXyQZItRO VaaHYeyqy24alJx9TwKG3vV6JG3JnpbUwTWSKgFwSya9IKF8O6LH3/wEoCLd2bSZ nBXGTmk+thvOicZeIliqiXcRgrP4+t2Ykxf7rEnsWdr2HsLFX/qmyrS5Wy0XxI1O MtMuZxc0dTRc9BQb+ZeqsenEOOwv0BHFQMf2teEsLZ5mAqwPtSNZWBf7qjm5jCdv 8mlh/PFHGXvB6X+vjX+X5AS22rZ6fHj6b1RZHS+0ItSjD5dr//AZH8K4YRTFMNO7 aQrQNRE18MfULZY1vBgaOwcF7jAl/DnV/mi4EQk+YXDSKiwoMi6/ByT+YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDah2BOz7INgsrKef66inQQszX7MB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGNb1Fow wEjXdCedcr1ux8/1LnBgkN3DxgmoU41JYvQtNesxNi3jNsjQTn7mguVsMQFbT0pi g9SLHC+6pTQ4oQm3KAgmBbXg2dVjO8F7QUeLj6pMrtN5MGqK1YCzMwvktRr44M4O F7pwPaOuVSvvlK2IMsehv6WvYUE2/ZkK3CI4+tphWFREHqj+NRXy9pDZNiavy73j i8EQojGZoP4F4UIRWrqkaDsuVz92lW7l0G1XuWJSe9IzN8YMbxpo6qobTIhW39+v zSj6Nsr0VMwg+NW8JRwlLxToYZpQTLdhf68RKaUdMcEO2Fc8bnOStNomLhc8DoBi Gv5R6ZBDn1HzPA== -----END CERTIFICATE-----Generated at Thu Jun 4 08:01:36 2026 by rpki-client