$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: cUhrdVZJjYDY84JpC6b0qjAzQTDNnVQCiwsBV3iad5E= Subject key identifier: F3:C3:34:AD:2C:E8:5E:91:7B:CE:0A:D5:F0:6E:88:9C:03:42:7B:AB Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019EBE11360B11E27BD1E406DD693784F839 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 1956 Signing time: Fri 12 Jun 2026 23:00:59 +0000 Manifest this update: Fri 12 Jun 2026 23:00:59 +0000 Manifest next update: Sat 13 Jun 2026 23:00:59 +0000 Files and hashes: 1: 2jo8nJ0eUlaCrdXeCQLsnxqxv5c.roa (hash: E5+CdpbMvk4x9kQVSv8lulj9PRBdhLSmoXYqO8KmtiE=) 2: 8HNqyROtCPcfRiv1Sx49M6ONZYg.roa (hash: zFpstxzrvOg/IGEksLOhRDjWqdDtkzz+78pgZXkJ73Y=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: 5aVJ5L5DQyUKkheamtjVCqdg6WuGJd4jNUVc3eY8n/g=) 4: ODJrKCxhZJXL46-GyJpCGE1A_QM.roa (hash: +3sffUArpiGjIESwpid7XyaHYYYvbrxKYnkoG38bS64=) 5: SX9U68Arj-_uoekiWex6QgdNbwQ.roa (hash: joN8VUGdRybF07eLYHwoTuABQ2kur7JqOJpxlpvlHks=) 6: WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa (hash: BUe0stMaaOWFp6WiIn+aiGaAl/vpI8FjtrNGbrBCxE0=) 7: gEhVWWVbCAuop-zcWZ0zv4pjLxE.roa (hash: xokrZ815d4gYLrLWpgPe6s/SM+gm8TEbsLKu7jgKc28=) 8: gGeNvgahudXxUPNz9yBFk3kYHS4.roa (hash: 8c8Cgq9i3zCtWdYo/SCuVm2tnZ6RLv62A6IykYPbs7Y=) 9: iDkxuZs58srqOeUdyBvDJqrsf6g.roa (hash: fvVkp516bISUUseiQSRuMvIc4e9qx8ent9yHd+ZyB3o=) 10: jLaFsD-7kv57uS82Ky9IjH2qI7s.roa (hash: GKSCCv4N+IaXAABFBigYWinS7vfCaNGsxXry11fPlQE=) 11: y1YWxB7Fy5s5YzamhDItkot32uM.roa (hash: 8TggUtk0Rbk0S6hBWI88A8FYg1Cv2yGjFHoHN2htAJQ=) 12: z9CW8ENT4ms8qSgnRvUL6_vDjPY.roa (hash: lH3Kl/j3Y/mCc0yq2REHce8PieFSAQY5Zjhu7gCcN4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:11:36:0b:11:e2:7b:d1:e4:06:dd:69:37:84:f8:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Jun 12 23:00:59 2026 GMT Not After : Jun 13 23:00:59 2026 GMT Subject: CN=f3c334ad2ce85e917bce0ad5f06e889c03427bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:87:48:0c:36:b6:35:35:ea:60:67:a4:6b: fc:4c:85:ec:b7:e7:cb:fd:10:71:87:bc:25:38:5b: fb:67:43:fc:7a:b3:ca:1f:e3:25:9e:f8:4a:98:c4: 2c:b1:8b:c8:f5:a7:14:86:28:79:1e:ee:0f:d2:c6: db:0a:91:44:ea:c4:75:8c:0f:52:5d:03:a7:33:99: b6:9d:66:48:15:80:11:fb:0f:83:d8:66:cf:79:74: 15:96:d7:1d:cc:0b:84:78:85:75:92:ca:08:41:36: 79:1d:72:0e:df:06:ed:73:86:b7:f3:e0:b3:0c:80: dc:15:2d:d2:4a:aa:52:68:16:ca:42:30:02:05:cd: 42:e3:2f:35:8d:7b:b0:96:c9:27:9e:0d:01:cd:91: 27:7a:39:17:f8:ed:3b:94:fa:d9:f4:ae:29:b9:87: 99:b0:01:0a:c7:be:d2:75:13:33:0e:e7:c2:e5:8c: 81:cb:1c:e9:52:e7:e5:a3:e9:63:fb:7e:3d:4e:14: f9:b2:50:0a:e6:02:42:75:91:cc:ed:42:c1:ce:03: c8:f0:b2:a3:c1:46:fa:e3:7e:7d:cf:4b:5a:dc:30: 63:19:eb:29:bd:44:a8:1a:7a:04:1b:c9:7b:51:ec: 32:d9:8b:39:8c:c6:6b:82:a7:ee:c7:7d:ec:53:7c: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C3:34:AD:2C:E8:5E:91:7B:CE:0A:D5:F0:6E:88:9C:03:42:7B:AB X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:31:ec:8c:2d:5c:81:ec:32:b1:15:cb:8f:0f:64:2f:2b:72: 15:95:d4:d5:ab:c4:32:c1:a6:cb:2f:d3:32:65:c4:4b:9a:35: 00:e8:8c:84:2d:b6:a0:6f:d7:d7:70:72:7d:0c:53:1e:f6:47: 51:4b:6b:8b:8a:a3:82:18:d0:6f:6f:b9:8e:ab:90:c0:22:c5: 32:27:dd:11:55:cb:13:45:d4:fa:d6:89:c1:2d:da:0f:bc:ca: 92:aa:10:d0:c8:9a:7f:38:30:84:46:cf:fb:50:a7:1f:65:7b: 82:ee:0a:0d:de:03:0e:e1:eb:15:48:d5:7a:2f:c8:9d:af:62: 0f:20:f4:60:85:29:68:34:a7:54:60:85:a3:ef:d7:51:fc:fe: 24:91:3a:8a:0d:11:32:9d:c3:99:01:22:49:38:87:0f:d1:76: a3:21:d8:c7:f6:f1:91:0c:6c:bb:36:5b:22:b6:45:8a:83:2f: c8:a5:b8:84:05:58:16:fa:56:98:31:fb:06:92:1b:71:14:c7: 27:fc:75:22:e4:10:30:d1:44:ae:f9:59:83:00:cd:ae:14:84: 05:bc:d3:48:88:cb:ac:2c:8d:dd:94:c9:b6:f9:4a:0f:fe:74: ad:73:5e:dd:ad:30:1e:75:61:0f:45:76:14:ed:d2:5e:18:01: ce:26:80:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+ETYLEeJ70eQG3Wk3hPg5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjYwNjEyMjMwMDU5WhcNMjYwNjEzMjMwMDU5WjAzMTEwLwYDVQQD EyhmM2MzMzRhZDJjZTg1ZTkxN2JjZTBhZDVmMDZlODg5YzAzNDI3YmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPGHSAw2tjU16mBnpGv8TIXst+fL /RBxh7wlOFv7Z0P8erPKH+MlnvhKmMQssYvI9acUhih5Hu4P0sbbCpFE6sR1jA9S XQOnM5m2nWZIFYAR+w+D2GbPeXQVltcdzAuEeIV1ksoIQTZ5HXIO3wbtc4a38+Cz DIDcFS3SSqpSaBbKQjACBc1C4y81jXuwlsknng0BzZEnejkX+O07lPrZ9K4puYeZ sAEKx77SdRMzDufC5YyByxzpUuflo+lj+349ThT5slAK5gJCdZHM7ULBzgPI8LKj wUb64359z0ta3DBjGespvUSoGnoEG8l7Uewy2Ys5jMZrgqfux33sU3y2pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPDNK0s6F6Re84K1fBuiJwDQnurMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTHsjC1c gewysRXLjw9kLytyFZXU1avEMsGmyy/TMmXES5o1AOiMhC22oG/X13ByfQxTHvZH UUtri4qjghjQb2+5jquQwCLFMifdEVXLE0XU+taJwS3aD7zKkqoQ0MiafzgwhEbP +1CnH2V7gu4KDd4DDuHrFUjVei/Ina9iDyD0YIUpaDSnVGCFo+/XUfz+JJE6ig0R Mp3DmQEiSTiHD9F2oyHYx/bxkQxsuzZbIrZFioMvyKW4hAVYFvpWmDH7BpIbcRTH J/x1IuQQMNFErvlZgwDNrhSEBbzTSIjLrCyN3ZTJtvlKD/50rXNe3a0wHnVhD0V2 FO3SXhgBziaASw== -----END CERTIFICATE-----Generated at Sat Jun 13 09:40:46 2026 by rpki-client