$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: p9Jo+F6puSS49dnsVhUTDNvH9Ej+JEvigFByM1qPCpg= Subject key identifier: DE:C2:80:64:3C:E0:EA:CC:57:00:7D:5C:02:72:9F:EE:FD:FD:56:E9 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 01A0C520A2DD3E30A02106C0CBB514057CF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 1A9A Signing time: Mon 21 Sep 2026 18:00:45 +0000 Manifest this update: Mon 21 Sep 2026 18:00:45 +0000 Manifest next update: Tue 22 Sep 2026 18:00:45 +0000 Files and hashes: 1: 0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa (hash: q7lijpZcsnauEAX8HT2zNssS2eyKaRgPKnXCYMxmnow=) 2: 1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa (hash: a2WWRTi85qtiWX9jSpPt6KLXf/eSt441S1fdhlmq/do=) 3: 5tH7LLAkdhTinMcBwA5ZehHy3T8.roa (hash: FSVoKMxOOpnoQfuC/EJwrwRY/Zx+oB/dMyYOIOIr+Us=) 4: 7OwsFlnHxpebmwPMUCt2me-zyWI.roa (hash: 0Ig1S0d5NpWXySpctyJbfop5unyTsBugYNuECPwIRTg=) 5: 7xF1eBazbFn49vs2BNwnpcCQbU8.roa (hash: tqiV+OVtmDFe9Ok2QIOHbnLYBuKbyGIp9NdmnWlMMuw=) 6: Cbas0g2gR07ffn-dISh755Oa8jI.roa (hash: JrumCEaLcChVR162sO+6/nHAKdNjmGrmpSa1y3KAZ/A=) 7: EIOYZpIbkL6BC-x4564aTLDYD5I.roa (hash: z0WBT/Sycw1oUBchenD/iEcWbUKjtiNpM4WnCTpU/AQ=) 8: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: J7elkUvVGttrK2fXRmoKjaLXfWJ/efdvHKYNraxADWQ=) 9: NfpbtdoH2GzbqDfenHlYbv5zt_c.roa (hash: 89a648b6W+muQqrxylg+B9lJhIqBGoKMRio9Dz7PXhw=) 10: YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa (hash: /+pWCkv4pOpaQQ3pOwrh5OujER/vlTj+p3hHLSIAK64=) 11: Ytj0U6XkrheA-ulyRiwoygUy2PE.roa (hash: kTvsXh5scJZT1sBb1vEyZPTtitPkJZHzzOBVXCq/ERw=) 12: cXInX8MThhr-Q2P_0TCbxEVEnFM.roa (hash: 58A2aZSuymaJoOD/zxSFuC/w3QnUk8DmmWAzRDbCkH8=) 13: nRDN1vEHzaEZnMI3qR3L_MkZzjo.roa (hash: mgnK6g1VitEYDRZxuk2/lwLjkbGOufzmOfyHhd2Awg0=) 14: zib85lalNfDUXLnbOxY6qMczZjs.roa (hash: jphImNCP2svx9og7fDdI/KwoYuS28d452U+DOyXWGsw=) 15: zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa (hash: J1GJgdFWQEf7k64nQl0mr5yPcHotjObvTQFYDrnoDYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:20:a2:dd:3e:30:a0:21:06:c0:cb:b5:14:05:7c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Sep 21 18:00:45 2026 GMT Not After : Sep 22 18:00:45 2026 GMT Subject: CN=dec280643ce0eacc57007d5c02729feefdfd56e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f7:e6:d8:9c:50:a2:88:96:01:75:cf:66:51: da:fe:8d:47:a3:ad:b8:e8:da:18:b3:bf:80:ee:50: 60:a0:8e:f4:0c:f4:29:a7:23:f6:4b:f2:40:19:ae: 1c:96:dd:db:d4:9c:10:d9:b1:8b:42:31:56:52:c1: 74:7a:98:25:c2:3a:d9:80:5b:11:43:6e:e3:62:6e: 3c:a4:8d:bb:58:27:75:a0:87:35:f5:fa:bf:85:d1: 5b:46:06:e6:aa:09:ca:7d:0d:ae:b0:1e:18:31:a5: 02:ca:a4:5d:47:01:e1:91:e6:ed:9e:fa:1a:fa:56: 8b:b2:a7:21:4d:9c:d6:6a:4e:b3:7c:5d:5e:14:b1: ea:12:8e:1b:28:ad:b3:b9:51:76:77:6e:04:63:b2: 30:a5:21:d7:67:22:6b:b2:e5:d6:b5:0f:54:17:80: 9f:4c:dd:04:32:c2:73:d4:89:26:04:b8:6e:f1:67: cc:59:ac:ea:69:01:1f:b0:e5:36:57:a4:2d:f4:72: 47:d1:0d:e5:47:9d:05:8e:a2:f3:99:52:f9:78:bd: 3b:c3:15:54:4d:bc:5b:f4:f2:46:3a:31:74:b7:84: 9d:1e:1a:f4:bc:78:00:6a:11:25:17:37:e0:71:2d: 19:0f:fc:e7:fb:bb:16:d1:c3:84:a0:3e:af:20:dc: 4a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C2:80:64:3C:E0:EA:CC:57:00:7D:5C:02:72:9F:EE:FD:FD:56:E9 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:20:fb:17:b6:ba:a9:a1:94:19:55:45:ab:3a:74:ab:f7:1b: 26:2d:6c:f3:7e:67:06:d9:1a:82:77:7c:c4:10:20:6c:01:13: 06:a5:39:cf:c9:bd:72:4e:e8:8d:47:c3:f4:ef:54:82:3f:24: 66:fe:4a:54:62:75:3a:cb:73:85:fd:2c:69:cb:02:2a:71:f5: 02:74:85:40:c9:da:d7:66:64:37:2b:29:83:3e:b8:06:dd:59: 2c:73:ca:80:c6:b9:b3:c7:bd:00:74:9a:40:85:f9:48:8c:a1: 24:41:8c:b8:87:e8:55:a5:1d:01:25:a9:f5:b0:8a:f8:dc:e8: c9:26:5f:c0:89:6e:a3:da:22:a4:0d:a0:3a:76:e1:ed:1f:58: 62:f2:95:36:42:8a:fd:46:3c:b5:c2:76:2d:3c:9b:9c:e2:e7: 38:9c:38:4a:6b:15:b1:8c:15:d2:fd:c6:eb:93:0e:14:4f:3c: 9a:50:f5:06:51:40:0a:71:13:aa:4e:c6:bf:50:86:ee:1d:82: f0:38:fe:a5:0e:83:09:3a:00:5e:f0:f1:bd:8d:58:b8:ae:09: 03:84:a0:ce:ea:dd:fc:be:12:dd:5b:33:bf:94:17:dd:88:6b: 54:b0:8e:cc:bd:8e:0b:c7:55:c6:97:6f:cf:4c:ef:b5:b2:30: 8f:18:f3:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDFIKLdPjCgIQbAy7UUBXz2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwOTIxMTgwMDQ1WhcNMjYwOTIyMTgwMDQ1WjAzMTEwLwYDVQQD EyhkZWMyODA2NDNjZTBlYWNjNTcwMDdkNWMwMjcyOWZlZWZkZmQ1NmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Pfm2JxQooiWAXXPZlHa/o1Ho624 6NoYs7+A7lBgoI70DPQppyP2S/JAGa4clt3b1JwQ2bGLQjFWUsF0epglwjrZgFsR Q27jYm48pI27WCd1oIc19fq/hdFbRgbmqgnKfQ2usB4YMaUCyqRdRwHhkebtnvoa +laLsqchTZzWak6zfF1eFLHqEo4bKK2zuVF2d24EY7IwpSHXZyJrsuXWtQ9UF4Cf TN0EMsJz1IkmBLhu8WfMWazqaQEfsOU2V6Qt9HJH0Q3lR50FjqLzmVL5eL07wxVU Tbxb9PJGOjF0t4SdHhr0vHgAahElFzfgcS0ZD/zn+7sW0cOEoD6vINxKKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7CgGQ84OrMVwB9XAJyn+79/VbpMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSD7F7a6 qaGUGVVFqzp0q/cbJi1s835nBtkagnd8xBAgbAETBqU5z8m9ck7ojUfD9O9Ugj8k Zv5KVGJ1Ostzhf0sacsCKnH1AnSFQMna12ZkNyspgz64Bt1ZLHPKgMa5s8e9AHSa QIX5SIyhJEGMuIfoVaUdASWp9bCK+NzoySZfwIluo9oipA2gOnbh7R9YYvKVNkKK /UY8tcJ2LTybnOLnOJw4SmsVsYwV0v3G65MOFE88mlD1BlFACnETqk7Gv1CG7h2C 8Dj+pQ6DCToAXvDxvY1YuK4JA4Sgzurd/L4S3Vszv5QX3YhrVLCOzL2OC8dVxpdv z0zvtbIwjxjztQ== -----END CERTIFICATE-----Generated at Tue Sep 22 03:23:48 2026 by rpki-client