$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: GklOhJMa3lSGSFm4ZljRRnGo0aJwxiwy/FO3fFTEhfU= Subject key identifier: 87:97:00:B3:1C:9D:0E:2A:4B:31:75:18:25:E8:F2:C4:87:7A:DB:8D Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019CABA20ABB6A430528A51ADB25DEB0F00D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 1870 Signing time: Sun 01 Mar 2026 23:00:49 +0000 Manifest this update: Sun 01 Mar 2026 23:00:49 +0000 Manifest next update: Mon 02 Mar 2026 23:00:49 +0000 Files and hashes: 1: 0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa (hash: q7lijpZcsnauEAX8HT2zNssS2eyKaRgPKnXCYMxmnow=) 2: 1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa (hash: a2WWRTi85qtiWX9jSpPt6KLXf/eSt441S1fdhlmq/do=) 3: 5tH7LLAkdhTinMcBwA5ZehHy3T8.roa (hash: FSVoKMxOOpnoQfuC/EJwrwRY/Zx+oB/dMyYOIOIr+Us=) 4: 7ca-yqYFy5zkEtowaK37eO4cWhw.roa (hash: qkXi06WNJoj9N2Ed/7Tck+0n8JOBZBK4mD8Jxcj+240=) 5: Ad5ZOS_jAAauJCNaeFLy7AgYsp0.roa (hash: IhdhpvNWV9vmRQNNrYY6F0SmY21dNHbLh2Cy+p+VQo8=) 6: Cbas0g2gR07ffn-dISh755Oa8jI.roa (hash: JrumCEaLcChVR162sO+6/nHAKdNjmGrmpSa1y3KAZ/A=) 7: EIOYZpIbkL6BC-x4564aTLDYD5I.roa (hash: z0WBT/Sycw1oUBchenD/iEcWbUKjtiNpM4WnCTpU/AQ=) 8: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: CR180W3w+X2lhNn9lloHJpYFDMhfIXmRrpGjAbBiG0M=) 9: NfpbtdoH2GzbqDfenHlYbv5zt_c.roa (hash: 89a648b6W+muQqrxylg+B9lJhIqBGoKMRio9Dz7PXhw=) 10: Qt-feGoA8-9E6Dhl7ZscFkTMSKI.roa (hash: trEGbh/W18kqxNXY/PaAExVg1jfIAWPTVVeIDtCCH4s=) 11: YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa (hash: /+pWCkv4pOpaQQ3pOwrh5OujER/vlTj+p3hHLSIAK64=) 12: aizTiTr3JBAyofrdSN5dAv2TZSE.roa (hash: zJwdzGPf1h0q9TZ+Muv6Cl42qffhVJBeW6ntkeRkbts=) 13: cXInX8MThhr-Q2P_0TCbxEVEnFM.roa (hash: 58A2aZSuymaJoOD/zxSFuC/w3QnUk8DmmWAzRDbCkH8=) 14: tMOM49mON-wD8zTtajFPDha_yco.roa (hash: X25vCvqdM17ldWbN+OsedMb7/hCVvVUgdyyal0kP0OU=) 15: zib85lalNfDUXLnbOxY6qMczZjs.roa (hash: jphImNCP2svx9og7fDdI/KwoYuS28d452U+DOyXWGsw=) 16: zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa (hash: J1GJgdFWQEf7k64nQl0mr5yPcHotjObvTQFYDrnoDYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:a2:0a:bb:6a:43:05:28:a5:1a:db:25:de:b0:f0:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Mar 1 23:00:49 2026 GMT Not After : Mar 2 23:00:49 2026 GMT Subject: CN=879700b31c9d0e2a4b31751825e8f2c4877adb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6b:ab:3f:31:07:74:8b:16:d9:00:04:b1:26: a2:48:20:7a:c4:58:d2:83:99:aa:e3:28:17:be:4b: c8:55:cf:19:3b:a7:4c:1a:c4:b6:f3:f6:2c:48:57: 60:ea:01:68:85:e1:fd:12:34:6b:3c:53:b3:76:02: c9:45:0d:11:04:a7:f6:b5:3a:5e:0b:73:3b:c5:05: c8:37:7e:39:41:7c:b5:52:05:4d:00:c3:40:73:bd: 30:88:63:01:cc:36:9f:5c:bd:2c:ec:f2:b3:37:42: 71:9b:a8:d3:f7:16:30:cc:e9:04:50:f2:d0:42:52: 44:84:c9:7d:89:c9:f8:9f:11:49:19:c6:6e:86:c5: 08:2f:a2:76:d0:e8:59:da:f4:bf:6c:9a:38:59:86: 5d:b8:67:28:78:ed:59:a5:22:34:31:e1:52:67:68: dd:76:e1:e0:e7:72:a7:52:07:97:4d:0b:7d:19:69: 2c:0e:23:40:6d:c4:46:c2:34:ab:38:99:13:3a:36: 1d:6b:df:0a:59:bd:93:2f:8b:64:d1:61:11:38:db: 98:2f:5a:fe:cf:5e:83:5c:ef:2d:fc:c0:41:f2:a0: 64:51:48:cb:e4:65:9b:23:77:b5:07:e4:9a:3e:e5: 7a:3e:94:ef:58:8c:10:cb:fc:f3:43:94:aa:6e:2c: 3c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:97:00:B3:1C:9D:0E:2A:4B:31:75:18:25:E8:F2:C4:87:7A:DB:8D X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:4e:e8:6b:7c:84:2b:70:e2:67:e9:8c:c1:36:cb:3f:3e:b6: aa:23:a0:d5:72:1c:45:2a:2e:60:e6:ab:05:ba:78:6a:25:9e: 7a:b7:d3:b1:3e:5c:51:1f:d2:f6:54:1f:be:25:df:e9:50:5d: 66:ca:1b:b7:dc:f7:83:8f:87:8a:3b:17:89:2f:0f:23:97:8d: 8e:52:88:5e:54:7c:60:e1:37:2c:f7:e3:dc:b3:99:55:f9:88: 25:3b:e9:be:03:51:e9:f0:06:01:dd:ef:02:1f:cb:0c:69:b4: c3:b7:f4:67:24:2b:49:10:3a:21:21:d2:b5:7a:f0:34:61:d3: dc:9c:58:91:3c:59:c8:4b:18:bc:b3:b6:35:ac:c2:e8:40:13: 6c:ca:8c:6b:89:c3:d1:a7:39:a7:16:ce:2f:95:b3:cf:f3:63: fb:7e:32:bd:29:56:77:6b:e2:c8:53:93:bf:61:ab:be:ba:7b: 04:f2:73:1c:6f:c9:d2:c1:f7:55:a1:28:b5:97:f8:a9:57:2e: d4:7c:d7:d0:a8:87:2c:d4:49:e4:35:09:6d:77:1d:05:87:d2: b9:e6:2e:93:b2:47:20:0d:0d:2a:5f:7d:fa:7f:5f:b3:b5:b2: 6c:f1:75:18:ae:f9:df:3a:35:fe:43:e6:60:21:93:8d:10:f5: a1:c3:9c:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrogq7akMFKKUa2yXesPANMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwMzAxMjMwMDQ5WhcNMjYwMzAyMjMwMDQ5WjAzMTEwLwYDVQQD Eyg4Nzk3MDBiMzFjOWQwZTJhNGIzMTc1MTgyNWU4ZjJjNDg3N2FkYjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGurPzEHdIsW2QAEsSaiSCB6xFjS g5mq4ygXvkvIVc8ZO6dMGsS28/YsSFdg6gFoheH9EjRrPFOzdgLJRQ0RBKf2tTpe C3M7xQXIN345QXy1UgVNAMNAc70wiGMBzDafXL0s7PKzN0Jxm6jT9xYwzOkEUPLQ QlJEhMl9icn4nxFJGcZuhsUIL6J20OhZ2vS/bJo4WYZduGcoeO1ZpSI0MeFSZ2jd duHg53KnUgeXTQt9GWksDiNAbcRGwjSrOJkTOjYda98KWb2TL4tk0WERONuYL1r+ z16DXO8t/MBB8qBkUUjL5GWbI3e1B+SaPuV6PpTvWIwQy/zzQ5Sqbiw8FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeXALMcnQ4qSzF1GCXo8sSHetuNMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARk7oa3yE K3DiZ+mMwTbLPz62qiOg1XIcRSouYOarBbp4aiWeerfTsT5cUR/S9lQfviXf6VBd Zsobt9z3g4+HijsXiS8PI5eNjlKIXlR8YOE3LPfj3LOZVfmIJTvpvgNR6fAGAd3v Ah/LDGm0w7f0ZyQrSRA6ISHStXrwNGHT3JxYkTxZyEsYvLO2NazC6EATbMqMa4nD 0ac5pxbOL5Wzz/Nj+34yvSlWd2viyFOTv2Grvrp7BPJzHG/J0sH3VaEotZf4qVcu 1HzX0KiHLNRJ5DUJbXcdBYfSueYuk7JHIA0NKl99+n9fs7WybPF1GK753zo1/kPm YCGTjRD1ocOc7A== -----END CERTIFICATE-----Generated at Mon Mar 2 06:18:45 2026 by rpki-client