$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft File: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft (raw, json) Hash identifier: lHUmSRI/bKfIJj2566in+wqy7Ydf60rflHJHb9LcuAw= Subject key identifier: 2F:7B:75:72:CF:BE:CC:D1:1E:97:51:46:A6:24:D9:94:5E:0C:20:E0 Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 019FA82BB67A161AF6999067DCBA106C22DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft Manifest number: 19DC Signing time: Tue 28 Jul 2026 10:01:04 +0000 Manifest this update: Tue 28 Jul 2026 10:01:04 +0000 Manifest next update: Wed 29 Jul 2026 10:01:04 +0000 Files and hashes: 1: BNGMVvTZ1XawSMPOVaywEKgFz8w.roa (hash: WMt9Jn62xWAvsFJt6BLgLhIXnUKvtSHXK/jsLiQ9wc0=) 2: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl (hash: vrwmN/RvnOBtX2XW5A9pQRumnkBg8pbRyP06/asw6j8=) 3: J_k_uJydXhJKkAPBLn_Xr9EpYmw.roa (hash: bMaFsCf1Hj+guhXQdkk7ZJ24ZgANPSnkOncPj3CW1pQ=) 4: S9D_ZvZP7Y2SyyqdAWt1mGxtagE.roa (hash: hH6PHrAp3gX28fWUuJtWpjV+rB9bYio8w3wI6R4XHQI=) 5: YPhzzBUAAD8W6PxdQ8Eo6J_1Xlo.roa (hash: QJjVxTN7Kd8ed1QYD92fFHesTbkRe6gyeZIi3S6D0so=) 6: Z8UyJlJrz_tPx2Lzi2wtF6sRSoY.roa (hash: pZEmU7QBOi+LmI67NMxNilqE5KRHfsee+sRCVmykeWE=) 7: gw26QBwPzQF9bT3yyu20z1tgJyk.roa (hash: iuHp19gpWORmcmt7JfC/koJtOp0jpGQxA/LoBFKsFao=) 8: mdj55pZO6nRDbpPFsXBoK-GkNU8.roa (hash: JU7FZwf7hl0KcJAATQ/by5oF+/xX9ntEZw2LOkX+3S0=) 9: n70k782e6Gxq_-Hc2YO_idjOcAs.roa (hash: 9xPDUcAeeZeb+V1tJdiN4n6+fuVQh1F2hwH4+x4MOiQ=) 10: pX4-zHrOaGGZmLrFodKOqsDRVt8.roa (hash: oNNoPaGL9tiGcsnmh6pVkfSYR8zyTqJrDL9WChZzfdA=) 11: vqLY8AJRdwBNZp1vMAKBzj7hYMk.roa (hash: QScIVVTzvA87+g4pWqcXEROo6Uo1IppOyeJM8oSgj8s=) 12: xgHR7y7J0aGtYD0R9jhr6WJbZm8.roa (hash: CHXV05nQbB5KxwYkctbAeeyJMsjXN6ysG0w+cPnzH+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:2b:b6:7a:16:1a:f6:99:90:67:dc:ba:10:6c:22:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: Jul 28 10:01:04 2026 GMT Not After : Jul 29 10:01:04 2026 GMT Subject: CN=2f7b7572cfbeccd11e975146a624d9945e0c20e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:47:c9:fc:bc:9a:a7:d4:b3:f0:30:dd:fe:8b: 4e:f9:c7:e0:04:c4:98:33:24:a4:11:56:f6:6e:b6: 13:43:1e:87:f0:28:72:ee:51:cc:7d:59:a3:0b:e5: 07:e4:96:6f:53:03:76:c9:8e:3c:3c:62:9f:34:ef: b9:ad:2a:da:a2:50:10:9f:d0:95:6c:d8:16:9b:1d: e0:40:7c:ee:55:3a:3a:31:5b:91:ff:93:6b:fb:2e: fd:78:03:f0:8c:be:3b:77:7e:ae:60:23:00:f7:b7: 2f:d5:d9:f1:1f:73:c5:5d:45:59:7d:2f:7a:47:11: cc:4b:6f:17:5c:9c:fe:d8:e5:96:d4:26:97:4c:5a: c9:c0:ff:17:7a:89:8b:83:60:1b:19:63:bb:c7:22: ff:7b:79:aa:a5:aa:1e:7f:ac:1c:5f:70:dc:05:29: 09:df:13:bd:4f:c2:8b:c9:4b:56:9e:4e:83:23:46: d1:ae:8e:d7:97:78:73:66:c1:47:5f:09:70:29:45: 0c:9d:61:d7:08:4b:8f:b0:97:c8:30:b5:f1:78:92: 1a:25:46:a6:45:d1:6a:7d:22:94:22:4e:5a:05:8d: bb:22:44:52:83:d3:96:82:00:1a:49:df:1f:dd:85: 25:3a:91:06:d3:d3:3c:23:91:3c:10:6b:f5:85:9c: 3d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7B:75:72:CF:BE:CC:D1:1E:97:51:46:A6:24:D9:94:5E:0C:20:E0 X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:32:13:03:8b:2d:91:9c:f1:51:cf:92:6e:8b:33:64:b4:bc: fc:39:e7:5b:70:dd:b8:30:8e:ec:78:04:32:5d:d9:89:37:5a: 8a:89:4b:a3:c3:86:96:9a:c8:cd:55:1e:36:47:95:de:7f:99: e2:f0:9a:10:7f:89:f2:1c:59:a6:16:e7:ca:94:ea:9f:e4:e0: f0:52:05:d9:27:a9:bd:0f:17:e7:e4:ed:14:db:d1:74:44:a4: 82:fe:1f:4b:0e:eb:68:7e:cd:cf:57:6a:4d:8e:de:37:65:bd: d1:ff:1b:98:4d:52:70:fa:b6:5f:0c:7b:fa:db:b9:3b:f0:7f: 3c:c5:00:ae:0a:8e:aa:04:77:0d:22:5b:77:10:fc:f0:9d:2a: 7a:db:6f:86:8b:86:93:77:20:39:09:3f:5d:c9:1a:b5:9a:b4: d4:20:97:16:61:07:a0:5a:ec:9d:bb:68:ab:7f:c0:5e:7a:f2: 7d:b2:0f:83:18:8d:25:41:2d:2f:48:64:b5:0e:b7:61:b2:4b: 78:32:e5:ef:ca:a8:d5:93:50:95:52:e0:f8:1f:d0:0e:28:e3: 75:21:a5:1a:67:84:a7:b4:9c:3a:ab:fe:f7:43:e0:1d:73:1b: ae:1d:6c:d2:10:ce:48:de:04:ea:17:28:88:5d:f3:5a:39:f6: 09:26:c4:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oK7Z6Fhr2mZBn3LoQbCLaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjYwNzI4MTAwMTA0WhcNMjYwNzI5MTAwMTA0WjAzMTEwLwYDVQQD EygyZjdiNzU3MmNmYmVjY2QxMWU5NzUxNDZhNjI0ZDk5NDVlMGMyMGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEfJ/Lyap9Sz8DDd/otO+cfgBMSY MySkEVb2brYTQx6H8Chy7lHMfVmjC+UH5JZvUwN2yY48PGKfNO+5rSraolAQn9CV bNgWmx3gQHzuVTo6MVuR/5Nr+y79eAPwjL47d36uYCMA97cv1dnxH3PFXUVZfS96 RxHMS28XXJz+2OWW1CaXTFrJwP8XeomLg2AbGWO7xyL/e3mqpaoef6wcX3DcBSkJ 3xO9T8KLyUtWnk6DI0bRro7Xl3hzZsFHXwlwKUUMnWHXCEuPsJfIMLXxeJIaJUam RdFqfSKUIk5aBY27IkRSg9OWggAaSd8f3YUlOpEG09M8I5E8EGv1hZw9qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC97dXLPvszRHpdRRqYk2ZReDCDgMB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzITA4st kZzxUc+SboszZLS8/DnnW3DduDCO7HgEMl3ZiTdaiolLo8OGlprIzVUeNkeV3n+Z 4vCaEH+J8hxZphbnypTqn+Tg8FIF2SepvQ8X5+TtFNvRdESkgv4fSw7raH7Nz1dq TY7eN2W90f8bmE1ScPq2Xwx7+tu5O/B/PMUArgqOqgR3DSJbdxD88J0qettvhouG k3cgOQk/XckatZq01CCXFmEHoFrsnbtoq3/AXnryfbIPgxiNJUEtL0hktQ63YbJL eDLl78qo1ZNQlVLg+B/QDijjdSGlGmeEp7ScOqv+90PgHXMbrh1s0hDOSN4E6hco iF3zWjn2CSbEbQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:54:16 2026 by rpki-client