$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: LJrcQtk2E40+NoleUOMOOO3kNnJKsDj3mE2PogesuZg= Subject key identifier: 7D:9E:08:67:13:5D:27:AD:80:D3:21:1C:74:07:35:04:9B:CE:90:AF Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 019FAA19F167DBD50BC51877F7FCB1FF264B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 19C8 Signing time: Tue 28 Jul 2026 19:00:54 +0000 Manifest this update: Tue 28 Jul 2026 19:00:54 +0000 Manifest next update: Wed 29 Jul 2026 19:00:54 +0000 Files and hashes: 1: 8dz0TrMtwzys9aId9S0iNBUOM6I.roa (hash: QLXQgTisSL5o9NDXTvqc31xSu43P2bWSnl0Mbj1LxKA=) 2: CG9ohWuinT5B93Rnr5fGvMKn1vY.roa (hash: PUMGIgV3wIfMf5d0ulCrvrKBPvAL6Ata0pqTX8puweA=) 3: JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa (hash: arGn6FJKM/5X/KQBvvmxnfiup95zCVTz6MKIcb88dnA=) 4: JutDRiQZPtkgRNn4DbKRtcU159k.roa (hash: TBfVgKnr15EdS367udNkZsLjUZkCmwigL6STK1CGALk=) 5: WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa (hash: EVCumPjXA28vp5ehPKHe+PCdpvR77Tfj3/cbydnM+o0=) 6: XXTLAzTN8ORt_-RYCj2-8C6GR00.roa (hash: 6BDh84FsMhXUtXLJgFo0Xh10o5gPmpg2C2PNspUTVCk=) 7: Y-SOlnUVIZjOVvcxnnWFzaAte_E.roa (hash: 2bLhdqPwt8VWaJXmqBQ8pl5vk0Pqbt7n4V7xQ3T9Dew=) 8: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: ZUBHE/r4YYUI80ZOvQsrWKwr0d9f8UoKIoBlRdvoJqM=) 9: m6mcSmpfmNAj9RbqZcHLhm1-GBQ.roa (hash: p83WPoiu14c7eyRfswAFJNoQrZPR/HEj5misljpRM2U=) 10: nkHJQxs3RvxryxXyywwLA5kWGDI.roa (hash: VuLzAxuuKrma6aeyKBkCPTnFtqwkCI2Bh/sV0lxF7Jc=) 11: vzjiQ62-Ida16ZpmsWaWVB-3g8U.roa (hash: jsH0jmCurlULuLa9fBp8xexVcDJDX4+DOBZF+vtnAlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:19:f1:67:db:d5:0b:c5:18:77:f7:fc:b1:ff:26:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Jul 28 19:00:54 2026 GMT Not After : Jul 29 19:00:54 2026 GMT Subject: CN=7d9e0867135d27ad80d3211c740735049bce90af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:ef:f0:c0:3a:3a:4d:44:4d:ac:55:98:41: 07:76:a1:ab:1f:d5:26:74:3a:e4:0f:93:48:3c:4f: 7d:f1:53:8b:86:83:26:8f:f2:d5:d3:d1:5b:9a:5b: d9:ec:70:8c:bb:36:c2:a2:2d:62:2a:84:29:eb:aa: 7c:a3:bc:01:36:98:b3:05:7c:da:f4:cf:a7:f4:6b: 81:a7:6f:2a:5d:cc:09:88:9e:35:cd:7e:c6:80:4e: de:3e:59:24:42:fa:fd:f3:52:0a:21:b1:4b:fb:69: ed:7e:40:b4:3e:f1:f3:5e:00:14:81:38:31:a2:dc: f2:1e:da:2c:10:76:59:20:0f:2a:2f:e4:d3:1c:27: df:86:d1:16:e4:af:d3:c7:57:68:93:32:6e:36:d3: 40:12:06:42:ab:a5:63:21:92:16:3f:bc:21:69:d3: 4b:91:b3:71:f6:93:e2:a6:e4:a5:87:1b:6a:66:b5: a3:ab:e0:7b:c2:46:df:f3:a5:da:97:03:0d:ae:7a: 06:79:75:d3:e4:34:58:c5:3b:e1:4b:72:3c:ee:e5: d1:b1:9a:a5:25:49:63:69:b7:4e:e5:24:8b:a7:92: 30:84:10:7e:47:84:ca:cd:aa:2f:27:75:99:7d:de: bf:f2:fd:15:b0:2d:92:a7:a1:9f:3d:c7:97:66:b5: 57:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9E:08:67:13:5D:27:AD:80:D3:21:1C:74:07:35:04:9B:CE:90:AF X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:01:64:6b:9c:45:3d:67:95:33:5d:33:c1:6f:a8:87:3d:e3: 4d:b1:3c:53:7c:09:2d:97:8d:94:58:01:ba:d5:57:38:a9:e6: 02:59:50:e1:3f:88:b1:2d:a3:32:42:8b:06:38:1f:3d:cf:60: 68:43:6e:8b:df:14:7d:74:24:1e:44:f4:df:4a:2e:6d:21:52: 79:44:a7:83:77:40:d0:c8:06:66:b5:4f:93:7d:0b:87:a3:70: e3:51:ee:73:b9:32:96:d2:5f:15:da:db:db:52:70:50:00:56: c6:f2:4d:db:5d:ef:51:03:f3:7c:c5:2e:04:e6:08:4f:ba:ac: 4c:6d:f0:07:89:f7:1e:0e:a4:9b:bd:59:74:d6:c4:75:1d:ef: 40:17:b3:6b:7b:05:8b:34:f1:8a:81:ca:93:4b:ad:04:6e:a7: 43:82:48:0e:6f:af:1e:d1:09:81:0d:d9:0d:c7:b6:36:39:37: 17:2d:8b:e2:f0:b5:f6:82:e1:01:87:a2:09:c4:a6:95:62:9d: bd:44:d7:3e:e0:88:e9:69:9e:97:dc:c2:f4:15:cf:01:c1:0a: a6:3d:6d:a6:30:78:c3:d1:0a:59:2e:19:52:08:e4:1a:a6:15: 21:94:e1:da:99:9d:44:eb:f5:1b:2a:78:7d:da:d9:4a:e2:e0: af:ad:41:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qGfFn29ULxRh39/yx/yZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYwNzI4MTkwMDU0WhcNMjYwNzI5MTkwMDU0WjAzMTEwLwYDVQQD Eyg3ZDllMDg2NzEzNWQyN2FkODBkMzIxMWM3NDA3MzUwNDliY2U5MGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5Hv8MA6Ok1ETaxVmEEHdqGrH9Um dDrkD5NIPE998VOLhoMmj/LV09FbmlvZ7HCMuzbCoi1iKoQp66p8o7wBNpizBXza 9M+n9GuBp28qXcwJiJ41zX7GgE7ePlkkQvr981IKIbFL+2ntfkC0PvHzXgAUgTgx otzyHtosEHZZIA8qL+TTHCffhtEW5K/Tx1dokzJuNtNAEgZCq6VjIZIWP7whadNL kbNx9pPipuSlhxtqZrWjq+B7wkbf86XalwMNrnoGeXXT5DRYxTvhS3I87uXRsZql JUljabdO5SSLp5IwhBB+R4TKzaovJ3WZfd6/8v0VsC2Sp6GfPceXZrVXtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2eCGcTXSetgNMhHHQHNQSbzpCvMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQFka5xF PWeVM10zwW+ohz3jTbE8U3wJLZeNlFgButVXOKnmAllQ4T+IsS2jMkKLBjgfPc9g aENui98UfXQkHkT030oubSFSeUSng3dA0MgGZrVPk30Lh6Nw41Huc7kyltJfFdrb 21JwUABWxvJN213vUQPzfMUuBOYIT7qsTG3wB4n3Hg6km71ZdNbEdR3vQBeza3sF izTxioHKk0utBG6nQ4JIDm+vHtEJgQ3ZDce2Njk3Fy2L4vC19oLhAYeiCcSmlWKd vUTXPuCI6Wmel9zC9BXPAcEKpj1tpjB4w9EKWS4ZUgjkGqYVIZTh2pmdROv1Gyp4 fdrZSuLgr61BAA== -----END CERTIFICATE-----Generated at Wed Jul 29 05:25:44 2026 by rpki-client