$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft File: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft (raw, json) Hash identifier: vaYCFxXnFUjoYUDgHl4dmKcVEtBrJAJxAdziKpHeTWQ= Subject key identifier: C1:F0:4E:D2:B8:35:18:DA:F2:C5:AD:27:12:4D:61:59:D9:8E:62:C4 Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 01A0E8C143FD6FBD1AC5F8049E660DDAC52E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft Manifest number: 1A82 Signing time: Mon 28 Sep 2026 16:02:54 +0000 Manifest this update: Mon 28 Sep 2026 16:02:54 +0000 Manifest next update: Tue 29 Sep 2026 16:02:54 +0000 Files and hashes: 1: BNGMVvTZ1XawSMPOVaywEKgFz8w.roa (hash: WMt9Jn62xWAvsFJt6BLgLhIXnUKvtSHXK/jsLiQ9wc0=) 2: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl (hash: RerZKLH1QP+K0PGLu2XnEFV4RHNOx11W5SrIRE97fJs=) 3: J_k_uJydXhJKkAPBLn_Xr9EpYmw.roa (hash: bMaFsCf1Hj+guhXQdkk7ZJ24ZgANPSnkOncPj3CW1pQ=) 4: S9D_ZvZP7Y2SyyqdAWt1mGxtagE.roa (hash: hH6PHrAp3gX28fWUuJtWpjV+rB9bYio8w3wI6R4XHQI=) 5: YPhzzBUAAD8W6PxdQ8Eo6J_1Xlo.roa (hash: QJjVxTN7Kd8ed1QYD92fFHesTbkRe6gyeZIi3S6D0so=) 6: Z8UyJlJrz_tPx2Lzi2wtF6sRSoY.roa (hash: pZEmU7QBOi+LmI67NMxNilqE5KRHfsee+sRCVmykeWE=) 7: gw26QBwPzQF9bT3yyu20z1tgJyk.roa (hash: iuHp19gpWORmcmt7JfC/koJtOp0jpGQxA/LoBFKsFao=) 8: mdj55pZO6nRDbpPFsXBoK-GkNU8.roa (hash: JU7FZwf7hl0KcJAATQ/by5oF+/xX9ntEZw2LOkX+3S0=) 9: n70k782e6Gxq_-Hc2YO_idjOcAs.roa (hash: 9xPDUcAeeZeb+V1tJdiN4n6+fuVQh1F2hwH4+x4MOiQ=) 10: pX4-zHrOaGGZmLrFodKOqsDRVt8.roa (hash: oNNoPaGL9tiGcsnmh6pVkfSYR8zyTqJrDL9WChZzfdA=) 11: vqLY8AJRdwBNZp1vMAKBzj7hYMk.roa (hash: QScIVVTzvA87+g4pWqcXEROo6Uo1IppOyeJM8oSgj8s=) 12: xgHR7y7J0aGtYD0R9jhr6WJbZm8.roa (hash: CHXV05nQbB5KxwYkctbAeeyJMsjXN6ysG0w+cPnzH+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 14:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e8:c1:43:fd:6f:bd:1a:c5:f8:04:9e:66:0d:da:c5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: Sep 28 16:02:54 2026 GMT Not After : Sep 29 16:02:54 2026 GMT Subject: CN=c1f04ed2b83518daf2c5ad27124d6159d98e62c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:67:ad:17:eb:0d:f0:e8:3a:2a:85:5d:23: 25:e4:f5:eb:94:ce:5e:da:d5:06:da:e8:ae:7f:15: 0c:00:1c:92:3e:50:f4:95:88:53:2c:b2:24:83:32: 8c:58:55:48:88:a0:f1:e7:52:94:0e:04:00:d7:ae: 04:b0:fa:ed:2f:8b:f3:11:ca:8e:20:22:18:aa:88: 7f:b6:19:62:67:31:5d:0f:da:36:c5:4e:6c:53:85: e3:b6:7f:23:0d:31:fd:ed:4c:4c:79:b0:04:4e:5b: 1a:e9:6a:10:45:d8:0c:c4:3f:42:17:14:e5:80:ae: 41:42:4a:1e:f8:7e:54:9d:80:57:da:3d:6a:43:6a: 9c:f4:95:af:1f:3d:ff:31:f8:97:08:34:a0:03:8b: 53:f9:98:66:c1:1b:03:ea:ba:a8:d5:81:86:42:5a: f0:60:fc:8b:31:3b:a1:3c:10:54:c9:70:4b:16:59: d4:64:16:8f:9d:a3:1b:40:31:eb:96:8e:aa:e2:4b: 1e:fa:35:12:ba:50:8d:ce:64:6c:1e:ef:3b:f6:91: 1d:97:05:1c:a9:75:a9:90:7d:97:98:d9:e9:47:c7: bd:b5:cc:54:3b:01:db:9e:9b:2d:78:69:39:85:da: 4a:b0:4e:0a:d4:5c:31:ed:71:f5:f7:a1:d0:34:0e: a6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F0:4E:D2:B8:35:18:DA:F2:C5:AD:27:12:4D:61:59:D9:8E:62:C4 X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e5:a1:07:cb:40:65:f4:08:2c:27:bd:ce:15:36:c8:a3:31: ab:d4:fc:64:a0:b1:31:57:ed:4a:07:33:47:f4:90:65:a4:61: 8e:f8:02:6d:78:29:1f:6c:c1:6c:1e:b3:91:40:a1:bd:aa:9d: d1:8c:4b:92:39:cf:f5:af:62:8b:f6:d8:63:12:bc:75:34:dc: 6a:5d:e1:21:5b:ae:d8:bc:9f:da:db:a0:67:15:5a:44:e6:fa: 76:6f:bb:3f:df:07:1c:94:8b:b1:7b:15:ab:ab:30:41:5a:43: b0:e7:d3:44:de:2f:e6:d3:3c:b2:22:a5:50:2a:e5:e9:25:1c: 2c:56:83:3c:d6:cf:1b:1f:5e:66:08:4b:1c:78:fb:09:8c:9b: b7:db:eb:a3:2e:44:05:b3:15:d9:81:c4:ed:86:66:51:3e:85: 60:7e:8d:e7:f1:b5:f6:a5:29:1e:40:c6:91:76:7d:0c:7e:6d: a0:6f:e6:af:61:23:de:5b:f6:26:e0:c8:d9:e2:83:e0:5d:6e: 09:f3:d3:eb:b6:38:48:d1:b8:37:20:fc:f5:fc:7d:44:b6:6d: 1f:dd:c7:ab:7a:30:48:43:20:3e:46:19:b1:d6:09:c0:12:ce: 2e:74:d9:f5:78:1b:d8:cf:06:88:2c:f6:59:88:28:5f:f8:ef: 01:03:56:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDowUP9b70axfgEnmYN2sUuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjYwOTI4MTYwMjU0WhcNMjYwOTI5MTYwMjU0WjAzMTEwLwYDVQQD EyhjMWYwNGVkMmI4MzUxOGRhZjJjNWFkMjcxMjRkNjE1OWQ5OGU2MmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBFnrRfrDfDoOiqFXSMl5PXrlM5e 2tUG2uiufxUMABySPlD0lYhTLLIkgzKMWFVIiKDx51KUDgQA164EsPrtL4vzEcqO ICIYqoh/thliZzFdD9o2xU5sU4Xjtn8jDTH97UxMebAETlsa6WoQRdgMxD9CFxTl gK5BQkoe+H5UnYBX2j1qQ2qc9JWvHz3/MfiXCDSgA4tT+ZhmwRsD6rqo1YGGQlrw YPyLMTuhPBBUyXBLFlnUZBaPnaMbQDHrlo6q4kse+jUSulCNzmRsHu879pEdlwUc qXWpkH2XmNnpR8e9tcxUOwHbnpsteGk5hdpKsE4K1Fwx7XH196HQNA6maQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHwTtK4NRja8sWtJxJNYVnZjmLEMB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+WhB8tA ZfQILCe9zhU2yKMxq9T8ZKCxMVftSgczR/SQZaRhjvgCbXgpH2zBbB6zkUChvaqd 0YxLkjnP9a9ii/bYYxK8dTTcal3hIVuu2Lyf2tugZxVaROb6dm+7P98HHJSLsXsV q6swQVpDsOfTRN4v5tM8siKlUCrl6SUcLFaDPNbPGx9eZghLHHj7CYybt9vroy5E BbMV2YHE7YZmUT6FYH6N5/G19qUpHkDGkXZ9DH5toG/mr2Ej3lv2JuDI2eKD4F1u CfPT67Y4SNG4NyD89fx9RLZtH93Hq3owSEMgPkYZsdYJwBLOLnTZ9Xgb2M8GiCz2 WYgoX/jvAQNW8w== -----END CERTIFICATE-----Generated at Mon Sep 28 18:53:13 2026 by rpki-client