$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: 9x4MSwwDLIP0Mn4pu1z7l53heGKWajKsjMX+hOtGAcs= Subject key identifier: 5D:AB:FC:70:A1:8E:61:8E:68:CC:B4:F0:64:C2:B3:2C:BD:F5:82:F8 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019FA9755745EC85AEEAA13438130B37231D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 1A04 Signing time: Tue 28 Jul 2026 16:01:07 +0000 Manifest this update: Tue 28 Jul 2026 16:01:07 +0000 Manifest next update: Wed 29 Jul 2026 16:01:07 +0000 Files and hashes: 1: 0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa (hash: q7lijpZcsnauEAX8HT2zNssS2eyKaRgPKnXCYMxmnow=) 2: 1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa (hash: a2WWRTi85qtiWX9jSpPt6KLXf/eSt441S1fdhlmq/do=) 3: 5tH7LLAkdhTinMcBwA5ZehHy3T8.roa (hash: FSVoKMxOOpnoQfuC/EJwrwRY/Zx+oB/dMyYOIOIr+Us=) 4: 7OwsFlnHxpebmwPMUCt2me-zyWI.roa (hash: 0Ig1S0d5NpWXySpctyJbfop5unyTsBugYNuECPwIRTg=) 5: 7xF1eBazbFn49vs2BNwnpcCQbU8.roa (hash: tqiV+OVtmDFe9Ok2QIOHbnLYBuKbyGIp9NdmnWlMMuw=) 6: Cbas0g2gR07ffn-dISh755Oa8jI.roa (hash: JrumCEaLcChVR162sO+6/nHAKdNjmGrmpSa1y3KAZ/A=) 7: EIOYZpIbkL6BC-x4564aTLDYD5I.roa (hash: z0WBT/Sycw1oUBchenD/iEcWbUKjtiNpM4WnCTpU/AQ=) 8: FX3QzUkxt_bOZJMEd68NoBa6xjw.roa (hash: Aeuem70DTwxuRaSzC0M0X4yGLZRf049S8H5di9SwmV0=) 9: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: w+67TzNeNYlDhYfQ8lkFQz7s+yHjiCjrdgSJ6A6pW9M=) 10: NfpbtdoH2GzbqDfenHlYbv5zt_c.roa (hash: 89a648b6W+muQqrxylg+B9lJhIqBGoKMRio9Dz7PXhw=) 11: YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa (hash: /+pWCkv4pOpaQQ3pOwrh5OujER/vlTj+p3hHLSIAK64=) 12: cXInX8MThhr-Q2P_0TCbxEVEnFM.roa (hash: 58A2aZSuymaJoOD/zxSFuC/w3QnUk8DmmWAzRDbCkH8=) 13: zib85lalNfDUXLnbOxY6qMczZjs.roa (hash: jphImNCP2svx9og7fDdI/KwoYuS28d452U+DOyXWGsw=) 14: zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa (hash: J1GJgdFWQEf7k64nQl0mr5yPcHotjObvTQFYDrnoDYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:75:57:45:ec:85:ae:ea:a1:34:38:13:0b:37:23:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Jul 28 16:01:07 2026 GMT Not After : Jul 29 16:01:07 2026 GMT Subject: CN=5dabfc70a18e618e68ccb4f064c2b32cbdf582f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:82:e8:f8:a1:4c:49:9b:99:af:4c:75:fc:4d: e2:b2:61:b1:28:c7:f9:8b:d6:72:5c:8c:30:b5:10: 3a:86:ce:09:9e:27:4f:26:ba:e9:af:f2:4c:f6:70: e8:ce:26:11:84:4b:41:31:57:8a:a0:ca:44:1d:54: 96:66:1d:53:fe:9c:c2:80:fa:55:63:ee:e3:de:a4: 3f:0c:49:63:76:92:0a:a7:5c:14:e0:83:0a:8d:60: 54:92:f2:84:04:55:04:1c:e3:ef:cf:14:70:9a:60: c9:a9:12:d6:1c:22:c2:f7:a6:e2:67:6c:7a:b9:d6: 92:4e:90:32:c3:d3:1d:29:2e:74:8c:ad:71:f7:ab: 08:a9:17:36:fc:79:2a:c8:b8:bf:3b:73:11:be:27: a9:2a:16:ce:37:15:ce:83:84:6f:ad:f3:04:47:54: d4:80:ad:af:e7:37:97:1f:6c:89:a5:cc:db:7a:f1: 9e:57:b3:6c:a1:84:7f:1d:ef:8a:db:c2:70:83:17: 9c:d0:e2:bf:0f:42:27:10:86:19:c3:87:81:5a:ab: d0:c4:c2:66:ff:e3:0c:eb:a6:07:49:22:8a:bd:81: b8:7c:f3:29:45:92:b6:b2:b8:19:60:c7:13:7d:b8: c9:05:65:2f:1d:8b:8f:e5:85:a2:57:90:5a:07:8f: 0f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AB:FC:70:A1:8E:61:8E:68:CC:B4:F0:64:C2:B3:2C:BD:F5:82:F8 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a3:64:87:eb:6a:a6:e0:d2:9e:59:60:b0:09:ee:b0:09:b4: f4:0e:a0:1f:d6:ba:36:88:ea:ce:df:50:84:26:43:80:46:05: af:36:0d:35:a4:64:f1:0c:5a:c5:5d:cb:fe:84:ee:d7:e8:64: 33:51:5a:f6:73:38:27:e3:74:4a:63:65:e7:2f:d6:8e:5a:dd: b7:a1:70:11:e3:66:55:f9:ad:b0:8d:a9:53:ac:31:87:1f:3d: d2:1e:2d:cc:46:75:c6:64:ff:c8:b3:ce:30:42:f3:e6:61:53: ca:b8:b2:6f:f2:45:58:85:63:9c:d5:5d:35:60:91:0f:6c:50: 39:71:7e:f2:c0:f6:bc:f4:8e:a2:ff:9a:75:d7:98:f4:11:46: 53:d3:65:70:20:ca:18:8d:92:40:34:05:f7:11:28:84:63:11: e0:d5:6d:56:81:0f:6e:f5:de:1a:60:41:87:bd:2e:f8:95:e4: e4:b4:f6:9f:f2:4a:78:42:ee:5f:e5:78:4c:de:59:45:af:cd: f5:71:b4:46:e2:35:e3:1c:c5:01:f8:39:7f:8a:13:5c:1f:77: 09:2d:a6:2c:f4:12:83:b4:9f:5c:e4:b2:2e:b6:ea:93:f3:76: a2:1f:10:3f:9b:00:a1:96:b1:ab:e3:6e:cd:86:3c:c8:c6:75: 47:5c:5b:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pdVdF7IWu6qE0OBMLNyMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwNzI4MTYwMTA3WhcNMjYwNzI5MTYwMTA3WjAzMTEwLwYDVQQD Eyg1ZGFiZmM3MGExOGU2MThlNjhjY2I0ZjA2NGMyYjMyY2JkZjU4MmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74Lo+KFMSZuZr0x1/E3ismGxKMf5 i9ZyXIwwtRA6hs4JnidPJrrpr/JM9nDoziYRhEtBMVeKoMpEHVSWZh1T/pzCgPpV Y+7j3qQ/DEljdpIKp1wU4IMKjWBUkvKEBFUEHOPvzxRwmmDJqRLWHCLC96biZ2x6 udaSTpAyw9MdKS50jK1x96sIqRc2/HkqyLi/O3MRviepKhbONxXOg4RvrfMER1TU gK2v5zeXH2yJpczbevGeV7NsoYR/He+K28Jwgxec0OK/D0InEIYZw4eBWqvQxMJm /+MM66YHSSKKvYG4fPMpRZK2srgZYMcTfbjJBWUvHYuP5YWiV5BaB48PQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2r/HChjmGOaMy08GTCsyy99YL4MB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqNkh+tq puDSnllgsAnusAm09A6gH9a6Nojqzt9QhCZDgEYFrzYNNaRk8QxaxV3L/oTu1+hk M1Fa9nM4J+N0SmNl5y/Wjlrdt6FwEeNmVfmtsI2pU6wxhx890h4tzEZ1xmT/yLPO MELz5mFTyriyb/JFWIVjnNVdNWCRD2xQOXF+8sD2vPSOov+addeY9BFGU9NlcCDK GI2SQDQF9xEohGMR4NVtVoEPbvXeGmBBh70u+JXk5LT2n/JKeELuX+V4TN5ZRa/N 9XG0RuI14xzFAfg5f4oTXB93CS2mLPQSg7SfXOSyLrbqk/N2oh8QP5sAoZaxq+Nu zYY8yMZ1R1xb3A== -----END CERTIFICATE-----Generated at Tue Jul 28 19:10:37 2026 by rpki-client