$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: jaXbH/gRNT2Lo7oUnxVUQpilL9t6V5gA32BIsqMYVcw= Subject key identifier: E8:59:EB:D6:D5:20:7C:79:E5:CF:56:31:87:95:AC:E3:E0:37:F7:F8 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019FDBE2B598569C041C301E6EEBF8560984 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 1A01 Signing time: Fri 07 Aug 2026 11:01:35 +0000 Manifest this update: Fri 07 Aug 2026 11:01:35 +0000 Manifest next update: Sat 08 Aug 2026 11:01:35 +0000 Files and hashes: 1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=) 2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=) 3: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=) 4: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: 0DW6neisc5eI9sI4aGhaVdXhnquqjCaUlWHAbXAskDQ=) 5: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=) 6: WimZdTjw5Lm8MtebopYruWKL5rI.roa (hash: ZsNGt4iJIvs0TYMA8I/lIAfczIzjQsE/8A1JQl2JcVU=) 7: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=) 8: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=) 9: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=) 10: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=) 11: iKMbSLMsYD3IPy4aFTgWFbR5-7Q.roa (hash: FLy0rWO0Tm6EmloSEokoF4mkm9Xo/LOqQZJUxQFOv+k=) 12: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=) 13: wK7E2CITjHSS2oNwJxLPpiywZOo.asa (hash: oIOlXpucAgwg2lcnJgT+OLAJmqqKdwc6n/6fCi8en3s=) 14: waZz0IyLkJZ2XZs5mcy2zeGt7KA.roa (hash: PLFFtAchWYCJ5jmh6ddgth619HvoXK3NBze7KzilKF8=) 15: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 08 Aug 2026 11:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:db:e2:b5:98:56:9c:04:1c:30:1e:6e:eb:f8:56:09:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Aug 7 11:01:35 2026 GMT Not After : Aug 8 11:01:35 2026 GMT Subject: CN=e859ebd6d5207c79e5cf56318795ace3e037f7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:73:b6:83:eb:b2:c7:0a:d1:de:e1:a7:af:d7: bb:f2:d4:95:f5:cc:1c:58:a4:96:43:a4:82:69:11: c6:8e:4a:a2:bc:dd:41:0e:2c:2f:29:43:b7:7e:f7: 3e:11:f8:e7:34:d3:b6:c8:c1:c0:48:04:ae:4b:da: c7:d4:e6:26:be:31:72:5b:9b:ea:cb:ee:92:e3:cd: a5:40:8c:04:02:95:f5:ee:22:74:f6:5e:9a:06:58: 11:a8:52:15:90:5a:d2:c1:eb:4f:d8:f6:48:9d:0b: 69:86:6a:85:34:6e:4e:df:c7:ad:20:de:4e:4a:fc: ca:0b:7b:3c:22:1d:18:22:df:5f:d1:a7:f7:49:40: 23:5d:a9:41:6f:dc:9c:7d:b7:ad:39:24:0d:72:f5: 91:5b:bb:74:9c:2f:2f:92:c9:1d:01:93:a2:48:6a: 31:9d:75:8a:60:54:0d:b0:04:84:c5:18:b3:ac:36: 00:0f:ce:61:d5:ff:a1:1f:d9:48:7e:be:29:9f:62: be:ff:80:83:d5:80:c7:61:f3:5a:09:6a:0f:7b:c5: d5:3f:8c:c1:e3:c0:fb:3a:dd:ef:5a:1c:86:ca:37: 72:90:8a:a3:32:3d:fe:ed:ab:06:ca:ee:83:55:f1: 48:a6:4c:b1:ee:73:8d:75:ab:1e:58:7e:03:8b:8d: 2e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:59:EB:D6:D5:20:7C:79:E5:CF:56:31:87:95:AC:E3:E0:37:F7:F8 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:58:35:04:73:4f:f0:78:e9:8b:0d:95:0b:84:a4:c2:ef:54: 1a:4c:64:e6:6c:76:be:6c:75:a7:08:16:99:a3:0d:de:fb:17: f2:3b:05:c2:c7:c3:06:ad:0c:16:9b:b5:03:14:f9:4b:b9:f2: 5b:94:92:d5:d1:94:c7:6d:53:fe:27:fa:ed:90:a2:4b:dd:7c: 1b:f4:23:39:67:78:90:3a:67:33:c3:9f:13:31:bf:c4:9f:be: 67:98:95:24:28:46:19:bb:95:c7:7b:de:69:3d:fe:eb:a3:48: 96:27:41:0e:4e:9f:e8:31:fc:ef:66:72:3b:de:6f:e0:50:12: 89:d5:54:e2:e9:c3:6b:66:26:c9:a7:a4:cc:7b:c8:cd:f3:c1: 5c:3e:c5:e4:b4:52:b3:61:28:01:da:b9:0c:95:b8:12:4d:72: e3:94:89:23:2d:98:5e:0d:56:c9:d0:06:3e:39:c6:f6:1d:f7: fe:55:c7:15:d4:b6:78:fe:9e:c8:69:c2:72:38:d7:87:5a:d9: d2:0c:43:27:d6:3e:10:41:6a:52:bf:f5:af:92:81:90:8f:86: d8:c9:16:77:82:18:6b:2f:6c:99:cc:39:d0:82:0f:7b:48:2c: 64:53:cf:9e:cf:e0:a9:c5:52:f9:ab:ce:4f:8b:ff:93:8b:ba: 5b:75:02:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/b4rWYVpwEHDAebuv4VgmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwODA3MTEwMTM1WhcNMjYwODA4MTEwMTM1WjAzMTEwLwYDVQQD EyhlODU5ZWJkNmQ1MjA3Yzc5ZTVjZjU2MzE4Nzk1YWNlM2UwMzdmN2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHO2g+uyxwrR3uGnr9e78tSV9cwc WKSWQ6SCaRHGjkqivN1BDiwvKUO3fvc+EfjnNNO2yMHASASuS9rH1OYmvjFyW5vq y+6S482lQIwEApX17iJ09l6aBlgRqFIVkFrSwetP2PZInQtphmqFNG5O38etIN5O SvzKC3s8Ih0YIt9f0af3SUAjXalBb9ycfbetOSQNcvWRW7t0nC8vkskdAZOiSGox nXWKYFQNsASExRizrDYAD85h1f+hH9lIfr4pn2K+/4CD1YDHYfNaCWoPe8XVP4zB 48D7Ot3vWhyGyjdykIqjMj3+7asGyu6DVfFIpkyx7nONdaseWH4Di40u8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhZ69bVIHx55c9WMYeVrOPgN/f4MB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElg1BHNP 8Hjpiw2VC4Skwu9UGkxk5mx2vmx1pwgWmaMN3vsX8jsFwsfDBq0MFpu1AxT5S7ny W5SS1dGUx21T/if67ZCiS918G/QjOWd4kDpnM8OfEzG/xJ++Z5iVJChGGbuVx3ve aT3+66NIlidBDk6f6DH872ZyO95v4FASidVU4unDa2YmyaekzHvIzfPBXD7F5LRS s2EoAdq5DJW4Ek1y45SJIy2YXg1WydAGPjnG9h33/lXHFdS2eP6eyGnCcjjXh1rZ 0gxDJ9Y+EEFqUr/1r5KBkI+G2MkWd4IYay9smcw50IIPe0gsZFPPns/gqcVS+avO T4v/k4u6W3UC3w== -----END CERTIFICATE-----Generated at Fri Aug 7 17:18:44 2026 by rpki-client