$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: yWJwgPfNrQ0rRLSiuZ6S8v75Yi/78JQk4InSoHJtEsE= Subject key identifier: 58:17:F3:EB:F8:67:0E:61:C9:40:2F:E1:B8:A5:8C:2B:74:6B:9C:46 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019CAD90705031966B3C6311B0E1506D9F9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 1871 Signing time: Mon 02 Mar 2026 08:00:50 +0000 Manifest this update: Mon 02 Mar 2026 08:00:50 +0000 Manifest next update: Tue 03 Mar 2026 08:00:50 +0000 Files and hashes: 1: 0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa (hash: q7lijpZcsnauEAX8HT2zNssS2eyKaRgPKnXCYMxmnow=) 2: 1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa (hash: a2WWRTi85qtiWX9jSpPt6KLXf/eSt441S1fdhlmq/do=) 3: 5tH7LLAkdhTinMcBwA5ZehHy3T8.roa (hash: FSVoKMxOOpnoQfuC/EJwrwRY/Zx+oB/dMyYOIOIr+Us=) 4: 7ca-yqYFy5zkEtowaK37eO4cWhw.roa (hash: qkXi06WNJoj9N2Ed/7Tck+0n8JOBZBK4mD8Jxcj+240=) 5: Ad5ZOS_jAAauJCNaeFLy7AgYsp0.roa (hash: IhdhpvNWV9vmRQNNrYY6F0SmY21dNHbLh2Cy+p+VQo8=) 6: Cbas0g2gR07ffn-dISh755Oa8jI.roa (hash: JrumCEaLcChVR162sO+6/nHAKdNjmGrmpSa1y3KAZ/A=) 7: EIOYZpIbkL6BC-x4564aTLDYD5I.roa (hash: z0WBT/Sycw1oUBchenD/iEcWbUKjtiNpM4WnCTpU/AQ=) 8: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: f9qVzRNc07lYzCjkb+MsQm4lzMUjhJxR40hI/pjsQag=) 9: NfpbtdoH2GzbqDfenHlYbv5zt_c.roa (hash: 89a648b6W+muQqrxylg+B9lJhIqBGoKMRio9Dz7PXhw=) 10: Qt-feGoA8-9E6Dhl7ZscFkTMSKI.roa (hash: trEGbh/W18kqxNXY/PaAExVg1jfIAWPTVVeIDtCCH4s=) 11: YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa (hash: /+pWCkv4pOpaQQ3pOwrh5OujER/vlTj+p3hHLSIAK64=) 12: aizTiTr3JBAyofrdSN5dAv2TZSE.roa (hash: zJwdzGPf1h0q9TZ+Muv6Cl42qffhVJBeW6ntkeRkbts=) 13: cXInX8MThhr-Q2P_0TCbxEVEnFM.roa (hash: 58A2aZSuymaJoOD/zxSFuC/w3QnUk8DmmWAzRDbCkH8=) 14: tMOM49mON-wD8zTtajFPDha_yco.roa (hash: X25vCvqdM17ldWbN+OsedMb7/hCVvVUgdyyal0kP0OU=) 15: zib85lalNfDUXLnbOxY6qMczZjs.roa (hash: jphImNCP2svx9og7fDdI/KwoYuS28d452U+DOyXWGsw=) 16: zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa (hash: J1GJgdFWQEf7k64nQl0mr5yPcHotjObvTQFYDrnoDYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:90:70:50:31:96:6b:3c:63:11:b0:e1:50:6d:9f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Mar 2 08:00:50 2026 GMT Not After : Mar 3 08:00:50 2026 GMT Subject: CN=5817f3ebf8670e61c9402fe1b8a58c2b746b9c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6e:a6:62:cd:71:6c:ba:af:cf:b9:cf:43:fa: 90:4d:ac:68:36:ae:13:b7:d7:38:29:35:2e:a7:7a: 4f:3b:07:9e:54:e8:c9:ac:78:7b:aa:35:3a:2d:5b: 63:a1:d4:46:c4:b5:41:ec:d4:57:6a:d7:19:cd:65: 14:0d:ab:33:19:0d:69:17:72:1c:a4:00:f4:03:c6: a9:53:c2:e6:29:aa:59:d7:4f:93:4c:7a:dc:94:0d: 46:17:24:07:5e:6b:3f:c1:dd:06:db:90:4f:b2:70: 23:8b:9a:d0:a0:a6:9b:c7:6e:d6:b0:90:c2:75:2f: f0:75:a1:f9:99:12:6d:cf:b5:77:40:89:6c:db:68: 79:57:b1:bb:c7:77:33:97:b6:37:8a:62:ac:97:d1: 38:69:ef:1a:9d:41:5f:31:cf:1d:85:ba:4f:b4:c9: f3:43:48:7c:c4:9d:99:fb:87:ee:58:dc:ef:ba:c3: 2d:3f:b8:60:af:c2:99:18:8d:3f:b9:d1:f0:a8:1b: 1d:48:0b:00:b3:0c:c7:0f:64:0a:e5:08:5d:b1:f8: e0:58:dd:8c:0a:58:1a:be:3a:ef:78:0f:5b:97:72: 17:44:bf:3e:6b:f6:7a:b9:eb:c0:d9:58:b0:b1:04: 12:c0:d9:56:9f:05:28:06:be:91:7a:ed:37:70:41: 4d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:17:F3:EB:F8:67:0E:61:C9:40:2F:E1:B8:A5:8C:2B:74:6B:9C:46 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:0f:28:3c:79:aa:5c:cf:87:6f:77:c3:1f:9a:a4:6e:48:fe: f6:8d:ca:ef:44:0a:08:82:e3:5f:0c:87:2e:a7:9e:15:b9:cf: b4:bd:f9:b0:eb:c6:00:76:a1:2b:83:33:44:a8:d2:ea:53:f6: af:bb:48:b7:c4:5a:f0:bb:bf:46:f3:4d:5b:eb:31:c9:a8:07: 6e:8e:ce:61:61:94:a6:60:fa:c4:4c:e0:c9:65:36:d6:a5:f8: 65:a5:70:24:b2:f1:5c:da:5b:1a:b6:46:ca:7a:0d:82:2d:10: 19:a5:96:cc:dc:ab:85:af:0e:fa:1a:ab:6a:d9:64:38:74:4c: c0:7c:a7:0f:63:b7:53:8e:34:7c:a3:18:35:87:27:60:2a:3b: b7:2d:7c:6f:d9:c3:47:52:48:d1:ee:6a:4d:df:bf:b6:87:32: b4:5f:86:d0:a2:6b:6f:54:ee:77:6d:cf:ea:45:75:93:42:c6: 6d:dd:f0:73:e7:b0:29:3e:0f:8b:a8:7b:da:5d:ca:93:00:8e: ed:12:f5:f9:be:b4:79:3a:44:f7:75:c3:0b:a8:e1:85:6b:64: 8f:c2:9d:17:fd:ac:7a:e0:c8:c8:6e:2f:f6:8e:9b:aa:f2:fd: 8c:c2:96:2a:28:31:89:9e:0f:8d:12:e4:be:bb:47:c7:dd:a0: 87:04:a4:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytkHBQMZZrPGMRsOFQbZ+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwMzAyMDgwMDUwWhcNMjYwMzAzMDgwMDUwWjAzMTEwLwYDVQQD Eyg1ODE3ZjNlYmY4NjcwZTYxYzk0MDJmZTFiOGE1OGMyYjc0NmI5YzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7G6mYs1xbLqvz7nPQ/qQTaxoNq4T t9c4KTUup3pPOweeVOjJrHh7qjU6LVtjodRGxLVB7NRXatcZzWUUDaszGQ1pF3Ic pAD0A8apU8LmKapZ10+TTHrclA1GFyQHXms/wd0G25BPsnAji5rQoKabx27WsJDC dS/wdaH5mRJtz7V3QIls22h5V7G7x3czl7Y3imKsl9E4ae8anUFfMc8dhbpPtMnz Q0h8xJ2Z+4fuWNzvusMtP7hgr8KZGI0/udHwqBsdSAsAswzHD2QK5QhdsfjgWN2M ClgavjrveA9bl3IXRL8+a/Z6uevA2ViwsQQSwNlWnwUoBr6Reu03cEFNXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgX8+v4Zw5hyUAv4biljCt0a5xGMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQ8oPHmq XM+Hb3fDH5qkbkj+9o3K70QKCILjXwyHLqeeFbnPtL35sOvGAHahK4MzRKjS6lP2 r7tIt8Ra8Lu/RvNNW+sxyagHbo7OYWGUpmD6xEzgyWU21qX4ZaVwJLLxXNpbGrZG ynoNgi0QGaWWzNyrha8O+hqratlkOHRMwHynD2O3U440fKMYNYcnYCo7ty18b9nD R1JI0e5qTd+/tocytF+G0KJrb1Tud23P6kV1k0LGbd3wc+ewKT4Pi6h72l3KkwCO 7RL1+b60eTpE93XDC6jhhWtkj8KdF/2seuDIyG4v9o6bqvL9jMKWKigxiZ4PjRLk vrtHx92ghwSk1A== -----END CERTIFICATE-----Generated at Mon Mar 2 11:17:43 2026 by rpki-client