$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft File: Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json) Hash identifier: 5ywttoX3ZNFUaITCKf7cb5XwfcYzhJsMflux4OVQUnc= Subject key identifier: DD:3B:AA:E8:4E:98:1C:1C:62:05:08:D3:B2:02:9E:BE:75:8D:75:C7 Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 019FA8D07FAAD0C5CAA24F978AEE321772A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft Manifest number: 133B Signing time: Tue 28 Jul 2026 13:01:04 +0000 Manifest this update: Tue 28 Jul 2026 13:01:04 +0000 Manifest next update: Wed 29 Jul 2026 13:01:04 +0000 Files and hashes: 1: 0qcRgVORJ6l9UlTI2CKPLzjbfog.roa (hash: wvJhHDw0n2QTgzGbPUH8xt0FfoOscXlBHhG0tJvFt98=) 2: 2EkuPAqVHEWEKp6ASw2K5zmACQk.roa (hash: n72y5YkbbuFUJAYmxmxnzR7f3ZsUZLnhTxeGIE67Cko=) 3: FLjvYn5Mu6OSQ1vmJsficIZ3oAg.roa (hash: WAKAnnjMgQbJs7Wfu2NA1DQe3FG0M4jG7s2jCVV8t08=) 4: LKqcV__iHBkuJmHBTgVTMKe7jfs.roa (hash: LzRNG01pbqOOrg9Ke+0IrSjljXKIcSklaBxsB5gc1AU=) 5: PxxNVNL5BOB3QrAZZvS5ahJKLOQ.roa (hash: tFLry/v07lnhSlHBjf2oO0BxwozcI2XhOgOvdmFzcjY=) 6: TuXsasZ-4b8nW75mHIofbfVtahQ.roa (hash: WQY2WQVSqHmWvAPhxSmdnowvY1X9klQmLQ7FkZqoEzE=) 7: U74ViGODTud33ngPAmj4w73NK6o.roa (hash: 8g7ud1guSPB+L+sklXn8DfQQ/RtzcbmpgZcJ8hWX/2M=) 8: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: v9WiImP26q6D4K7wW1UODMQCd/e6CoseWHD9m16WhSM=) 9: ajUdjtPuTYK4cJ-GDNgzwU_V7QU.roa (hash: zq0p6TTpyxJr1rlBswAzuDS0To2T7g83akxmSzfwXWY=) 10: esQiMgPaySQVW0k54pO3jc5Zyuc.roa (hash: 2aftWcOZmt2bVeY6qt170y22emZnUo4u4rs+oiqH7rU=) 11: n9NpVtjQ4CgC347DPdZBbkrl1rk.roa (hash: F/VcD/rkVFmMD8EIR8zYpeskYz8L7PTmG19l/6//DPo=) 12: qzDK1lhCM39SxM8PACxbyKkom_M.roa (hash: nfWxgyb2gt4+A8mM3hL0XhTI+0dXdf9+3PuS2IdhMMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:d0:7f:aa:d0:c5:ca:a2:4f:97:8a:ee:32:17:72:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Jul 28 13:01:04 2026 GMT Not After : Jul 29 13:01:04 2026 GMT Subject: CN=dd3baae84e981c1c620508d3b2029ebe758d75c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:97:36:a2:3b:20:1b:d3:6d:b0:87:eb:12: c1:c7:67:df:53:a7:75:fb:58:2e:dc:73:02:83:4e: 3a:bd:3b:89:0f:d7:db:c2:6f:28:ee:f7:42:c3:78: 7e:f5:0c:de:1b:5c:06:38:8c:c2:15:76:d5:a8:a1: ce:8e:4d:ec:c3:83:1d:35:45:a2:cf:df:1b:c1:7f: 54:c2:f2:00:d5:9c:22:a5:10:7e:61:54:16:5e:25: 70:87:54:53:33:ff:00:30:48:2b:10:61:0f:25:46: a3:d7:54:cc:3e:2c:a3:c0:5c:60:f2:b1:1f:5e:e7: 5b:6a:de:6b:d9:97:cf:dd:8a:62:40:f0:70:84:5e: 07:46:ac:2a:c5:c2:22:14:9a:49:dc:42:b9:4b:b2: 4c:a3:70:e8:96:df:72:56:2f:55:09:63:db:29:41: d5:8e:e1:aa:36:f9:f9:ad:6a:99:95:cc:59:ef:c0: 3d:94:1e:a0:9f:b9:17:59:2a:00:aa:01:76:6f:cd: 19:05:3d:ad:ed:77:1f:04:dc:9a:ee:49:fd:2c:32: 72:98:27:fa:ff:be:7f:7d:24:b0:f2:96:38:bf:75: a3:1f:be:91:49:45:ee:e5:72:27:d0:14:6c:da:4f: c5:f7:4f:10:14:ee:43:bb:e2:2f:c9:69:c7:7b:cb: d5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3B:AA:E8:4E:98:1C:1C:62:05:08:D3:B2:02:9E:BE:75:8D:75:C7 X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:eb:00:21:9f:9b:5e:93:56:0f:a6:50:7d:93:8f:39:4f:9f: 05:70:30:b3:c2:3b:ce:ac:04:88:8a:0d:6c:42:3f:1d:b7:a1: ed:07:b7:43:f1:5e:7c:cd:96:d2:b9:65:8d:b0:4e:28:0e:4b: 66:db:f4:29:79:06:0d:ca:5b:5a:44:b8:0b:31:da:4f:61:77: 6a:8b:6d:b7:5f:9c:b5:13:7c:8b:95:62:43:40:3f:32:25:26: de:39:6e:a1:16:55:10:84:73:8c:07:e5:e6:f8:3d:d8:6b:00: 3d:b1:e9:9c:93:50:71:5a:ad:69:6a:bf:98:ba:6e:1d:51:ab: 4f:37:40:94:e0:b4:cd:fe:68:a1:20:f1:f0:42:9a:dd:05:04: c7:08:1d:15:c5:13:e5:3f:9c:25:c2:fb:84:8f:fd:4f:58:4d: 7d:5c:c0:d2:d1:c9:20:fa:32:c2:86:3f:06:87:34:b0:47:27: 22:43:1d:50:45:fa:c1:2c:c8:58:f4:7a:d0:8a:20:4b:6d:fe: 78:91:9e:b3:54:05:72:43:74:ce:6b:27:64:36:30:4d:30:ac: 2c:33:e2:c1:4b:60:8d:53:1f:ce:0d:6a:3d:78:e5:52:72:9d: 9f:cd:2b:43:26:20:b8:b6:5a:6b:f3:68:bb:0b:2a:b5:54:7d: 7d:64:3f:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+o0H+q0MXKok+Xiu4yF3KlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjYwNzI4MTMwMTA0WhcNMjYwNzI5MTMwMTA0WjAzMTEwLwYDVQQD EyhkZDNiYWFlODRlOTgxYzFjNjIwNTA4ZDNiMjAyOWViZTc1OGQ3NWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03qXNqI7IBvTbbCH6xLBx2ffU6d1 +1gu3HMCg046vTuJD9fbwm8o7vdCw3h+9QzeG1wGOIzCFXbVqKHOjk3sw4MdNUWi z98bwX9UwvIA1ZwipRB+YVQWXiVwh1RTM/8AMEgrEGEPJUaj11TMPiyjwFxg8rEf Xudbat5r2ZfP3YpiQPBwhF4HRqwqxcIiFJpJ3EK5S7JMo3Dolt9yVi9VCWPbKUHV juGqNvn5rWqZlcxZ78A9lB6gn7kXWSoAqgF2b80ZBT2t7XcfBNya7kn9LDJymCf6 /75/fSSw8pY4v3WjH76RSUXu5XIn0BRs2k/F908QFO5Du+IvyWnHe8vVjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN07quhOmBwcYgUI07ICnr51jXXHMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOsAIZ+b XpNWD6ZQfZOPOU+fBXAws8I7zqwEiIoNbEI/Hbeh7Qe3Q/FefM2W0rlljbBOKA5L Ztv0KXkGDcpbWkS4CzHaT2F3aottt1+ctRN8i5ViQ0A/MiUm3jluoRZVEIRzjAfl 5vg92GsAPbHpnJNQcVqtaWq/mLpuHVGrTzdAlOC0zf5ooSDx8EKa3QUExwgdFcUT 5T+cJcL7hI/9T1hNfVzA0tHJIPoywoY/Boc0sEcnIkMdUEX6wSzIWPR60IogS23+ eJGes1QFckN0zmsnZDYwTTCsLDPiwUtgjVMfzg1qPXjlUnKdn80rQyYguLZaa/No uwsqtVR9fWQ/Cg== -----END CERTIFICATE-----Generated at Tue Jul 28 20:14:39 2026 by rpki-client