$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: gxKX8aDHB5CiT4JZhbYKGLVd46cBm98hoaMAzi7QzT0= Subject key identifier: 4B:9A:E4:C9:D0:FF:BA:D0:CA:F0:51:CD:23:E7:61:AF:6A:83:29:F3 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 01A1822B9DE2C1AD9D04627CC0F522933F51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 16A8 Signing time: Wed 28 Oct 2026 11:00:58 +0000 Manifest this update: Wed 28 Oct 2026 11:00:58 +0000 Manifest next update: Thu 29 Oct 2026 11:00:58 +0000 Files and hashes: 1: 0uKp1-06eDgDsHj7rV4YkgjeLC8.roa (hash: yWRLX1f4zIOqfJpNjFulQNPHUDNHVdS+Zh4JYZ3W4hQ=) 2: 11YShjM6iG1lgHk0sBIwxGUI_MU.roa (hash: zv1LSj4scuwBiIwmG809DfMSYAbVZ65wSUdzZngzxuU=) 3: 25USMCW28SlOYzjIhoJiiuh4h0I.roa (hash: k660Q4VTzt2dHaw/HTP9yUtrSZfRqK5ii3bgKkxIMvI=) 4: 2nlzAC-fmirqmeDSyK1kfGp4UDg.roa (hash: xgeFe0bHapUY2NDUZjiDbeEfO1hMMeK9WqFnUNq/iMY=) 5: AygaSJoY4X-N8pcfdiWT-0OzTH0.roa (hash: GpuGRR+uDCRH0KzkkUeOxZxQXmqHI/G6tCUG41o6giA=) 6: Gz0_KsyuxF_Mtua-1HhemOuZcQg.roa (hash: IbzaI7YpmiRgkQae6jLRwhProyJ2PzVbvEcbQ3Zj2TA=) 7: IQbbBAGL5glWWx4e9Q8YqKX71ZQ.roa (hash: /+kw3Jf9c4NZPVPKVZtaPsjwVDlCedMX58zv/ArRkAE=) 8: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: da/FcDdnKiUOB5aW/kA5VlOviqfxAFGR3Zal3OPjlbw=) 9: LwKRPE4ui1ybXwd-Avf8cPtqbdg.roa (hash: 1SCmn+dHZhfLv4aaD79jVsHLXJTyyZvIEd5MWEwSljk=) 10: _og34UxL66HAf1x6tJdapHB1KD4.roa (hash: MIlbN2zWAQQHEFQMrsU48v1H/MqxZJmHAhuOJZrCJMw=) 11: gZE3Te4FZ7-Lp4GEJQvQEkwqiDA.roa (hash: r4RCM40eYHCKKFN/sAxepQztxTn6V46H7fRE/7G8fQU=) 12: pUjgfHpSLJEroItVeYdePetGeno.roa (hash: 3GHGFzGCi0a87nJzoUGj4P1u3SwU6ateFJ0oPnoaNEM=) 13: ygZyjuYzflVbHgfVvcHOxvuu0E4.roa (hash: IH0YWQaBGEjd+Nsl8K72F6uJWsgW3OOY75p4PPRBdZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:82:2b:9d:e2:c1:ad:9d:04:62:7c:c0:f5:22:93:3f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Oct 28 11:00:58 2026 GMT Not After : Oct 29 11:00:58 2026 GMT Subject: CN=4b9ae4c9d0ffbad0caf051cd23e761af6a8329f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:4c:57:ea:43:d0:39:3f:72:f0:c9:ae:d4: d2:c5:ca:45:f0:43:54:b5:d3:9a:24:10:ba:c3:a2: 87:62:d6:11:45:61:c2:91:8e:aa:e6:aa:d0:91:88: 61:c2:1d:f8:de:f4:12:f5:51:55:8d:b6:36:83:e2: dc:62:cd:d6:e1:27:87:b7:aa:85:fe:db:fa:f0:eb: ae:48:bf:03:67:b9:bb:c4:df:a4:f0:d6:cd:f7:30: 90:da:45:ad:70:48:7d:0c:9d:15:5f:41:05:7e:4d: 2b:f6:5b:41:cc:ee:cf:4b:61:eb:0e:85:ba:7a:92: 44:a7:e0:bf:ba:9e:06:de:0b:d9:42:37:cc:dc:4b: 9f:f1:b1:5f:88:81:c4:68:a4:a0:e8:f2:c0:34:82: 62:7a:e7:76:73:c5:d2:4b:05:67:b7:b8:30:ef:49: 84:e1:90:67:c9:fd:e4:36:a5:42:f7:72:af:cd:e4: 7e:c3:41:e2:ab:3e:d3:ba:c7:9d:8b:1d:e1:ab:fb: fc:30:00:fa:e2:e3:7f:49:dc:2f:0f:0f:62:b2:a8: 75:34:ff:0f:ee:4b:f5:c4:52:af:b9:82:97:51:75: 1c:bb:6a:c6:c0:cd:32:9a:e6:13:0f:a8:41:02:34: e3:d6:23:45:18:de:3f:8a:ab:dd:5e:e2:7a:d7:c9: e2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9A:E4:C9:D0:FF:BA:D0:CA:F0:51:CD:23:E7:61:AF:6A:83:29:F3 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:e3:66:29:05:e7:32:26:db:d9:64:62:b9:f3:ea:f4:3b:de: 7a:1e:8b:62:87:94:8d:35:90:87:6e:9f:7a:52:f2:26:5d:0f: 21:8e:78:cf:b0:cc:64:43:05:ae:0f:49:f9:95:fa:00:13:a4: 64:18:82:10:0f:78:08:3f:7c:7e:8e:8b:8c:88:dc:cd:1a:5d: 52:f8:c8:30:ba:21:0e:a0:10:83:62:95:85:03:6f:97:53:35: 0a:d0:bd:ef:6e:f7:73:6d:bf:b8:a2:4d:7b:ec:54:51:89:48: 0f:0c:7f:52:1e:77:ba:1f:f0:00:1f:15:ca:67:21:57:e6:7d: 6d:19:24:d1:84:12:1c:39:79:61:67:c4:88:5f:e7:71:a2:19: 0d:54:00:6e:6a:b7:66:25:d5:53:da:42:d2:2c:a4:48:40:d8: 68:0b:6c:96:ab:63:33:f8:ba:d2:8e:07:b7:dc:8b:9f:c4:44: d7:2a:e9:31:0c:a9:eb:98:4c:da:59:b8:83:dd:7b:42:dc:68: 02:0e:d6:df:eb:09:8c:28:64:98:41:c9:76:0d:4c:37:5c:cd: 4d:ec:a7:2c:c0:2e:01:86:6b:e1:fd:6a:71:59:52:26:6f:1c: ba:8b:fb:23:67:72:01:8e:98:2b:d1:a8:00:37:93:32:84:4a: d8:38:fc:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGCK53iwa2dBGJ8wPUikz9RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjYxMDI4MTEwMDU4WhcNMjYxMDI5MTEwMDU4WjAzMTEwLwYDVQQD Eyg0YjlhZTRjOWQwZmZiYWQwY2FmMDUxY2QyM2U3NjFhZjZhODMyOWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtylMV+pD0Dk/cvDJrtTSxcpF8ENU tdOaJBC6w6KHYtYRRWHCkY6q5qrQkYhhwh343vQS9VFVjbY2g+LcYs3W4SeHt6qF /tv68OuuSL8DZ7m7xN+k8NbN9zCQ2kWtcEh9DJ0VX0EFfk0r9ltBzO7PS2HrDoW6 epJEp+C/up4G3gvZQjfM3Euf8bFfiIHEaKSg6PLANIJieud2c8XSSwVnt7gw70mE 4ZBnyf3kNqVC93KvzeR+w0Hiqz7Tusedix3hq/v8MAD64uN/SdwvDw9isqh1NP8P 7kv1xFKvuYKXUXUcu2rGwM0ymuYTD6hBAjTj1iNFGN4/iqvdXuJ618nicwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEua5MnQ/7rQyvBRzSPnYa9qgynzMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoeNmKQXn Mibb2WRiufPq9Dveeh6LYoeUjTWQh26felLyJl0PIY54z7DMZEMFrg9J+ZX6ABOk ZBiCEA94CD98fo6LjIjczRpdUvjIMLohDqAQg2KVhQNvl1M1CtC97273c22/uKJN e+xUUYlIDwx/Uh53uh/wAB8VymchV+Z9bRkk0YQSHDl5YWfEiF/ncaIZDVQAbmq3 ZiXVU9pC0iykSEDYaAtslqtjM/i60o4Ht9yLn8RE1yrpMQyp65hM2lm4g917Qtxo Ag7W3+sJjChkmEHJdg1MN1zNTeynLMAuAYZr4f1qcVlSJm8cuov7I2dyAY6YK9Go ADeTMoRK2Dj87Q== -----END CERTIFICATE-----Generated at Wed Oct 28 18:13:49 2026 by rpki-client