$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: huhyypZtJ0qQlMIPwCA3h54bHVhim59S9XiWTcqGOOE= Subject key identifier: 74:7E:AA:1D:0A:85:E5:5D:5D:7C:FF:16:82:26:B5:6C:FD:5F:70:D8 Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 019D992B75606A8FAD8ABB227DAFF4A336B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 18B3 Signing time: Fri 17 Apr 2026 02:00:55 +0000 Manifest this update: Fri 17 Apr 2026 02:00:55 +0000 Manifest next update: Sat 18 Apr 2026 02:00:55 +0000 Files and hashes: 1: 8_MkA_mT9KIdkBcNq59qKHbc9ho.roa (hash: E24Q5XRNZzYhaFekHtHmSqKUrlGX20Uvqt/+tLWhFo4=) 2: 8dz0TrMtwzys9aId9S0iNBUOM6I.roa (hash: QLXQgTisSL5o9NDXTvqc31xSu43P2bWSnl0Mbj1LxKA=) 3: ATr9on9NXfN5KaeCexdDhihuhvE.roa (hash: fRmU0RyX9cmxFGh6vh7b2kq/1xI8atRRIR73j9hG4+Y=) 4: JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa (hash: arGn6FJKM/5X/KQBvvmxnfiup95zCVTz6MKIcb88dnA=) 5: JutDRiQZPtkgRNn4DbKRtcU159k.roa (hash: TBfVgKnr15EdS367udNkZsLjUZkCmwigL6STK1CGALk=) 6: WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa (hash: EVCumPjXA28vp5ehPKHe+PCdpvR77Tfj3/cbydnM+o0=) 7: XXTLAzTN8ORt_-RYCj2-8C6GR00.roa (hash: 6BDh84FsMhXUtXLJgFo0Xh10o5gPmpg2C2PNspUTVCk=) 8: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: B+7rxdGYNDUJC420qYu0f2aTtI+NSZz7FLCYKxGyNqw=) 9: m6mcSmpfmNAj9RbqZcHLhm1-GBQ.roa (hash: p83WPoiu14c7eyRfswAFJNoQrZPR/HEj5misljpRM2U=) 10: nkHJQxs3RvxryxXyywwLA5kWGDI.roa (hash: VuLzAxuuKrma6aeyKBkCPTnFtqwkCI2Bh/sV0lxF7Jc=) 11: vzjiQ62-Ida16ZpmsWaWVB-3g8U.roa (hash: jsH0jmCurlULuLa9fBp8xexVcDJDX4+DOBZF+vtnAlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:2b:75:60:6a:8f:ad:8a:bb:22:7d:af:f4:a3:36:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Apr 17 02:00:55 2026 GMT Not After : Apr 18 02:00:55 2026 GMT Subject: CN=747eaa1d0a85e55d5d7cff168226b56cfd5f70d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5f:60:9a:61:5e:9b:84:31:53:5e:ce:b8:da: f6:ea:88:3e:f2:a6:84:39:50:7a:e6:06:5b:45:4f: 6e:62:63:c1:c1:16:eb:1a:a2:af:3a:62:70:27:22: 7f:c7:08:e5:f1:bd:d9:85:f3:93:89:99:35:3a:fb: 86:b3:e9:21:2e:38:eb:4a:90:f4:c3:b2:48:d6:b5: 5b:ef:bf:ad:12:30:e7:0a:50:26:b6:85:cb:b8:62: a5:c8:8f:8a:1b:41:54:32:9c:b2:3b:83:59:28:46: 65:13:24:13:8e:7b:1d:5a:98:9a:40:73:0f:b4:da: 10:38:82:2a:ba:ee:19:08:71:e1:58:84:cc:b0:e7: 62:f9:02:60:d8:5a:cb:1b:e7:f1:47:f4:ce:22:fa: 8d:4d:d8:66:0b:27:6d:09:c9:c4:07:3e:fa:6d:12: 3e:2e:d0:fa:39:2b:27:b7:1e:4e:41:f8:b0:ff:c7: 31:b4:0a:02:ea:04:68:67:e1:f1:e8:c1:c0:c6:a1: bb:32:1c:99:a2:85:d4:5a:3c:de:50:57:ff:c8:5e: fb:c4:c4:5d:55:62:c1:d3:87:66:5c:5f:d2:04:52: 22:cc:f6:74:f2:76:b7:11:29:e1:05:da:e3:0f:a7: be:12:19:c5:45:db:60:5d:03:14:e0:c9:2c:8d:0d: 91:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7E:AA:1D:0A:85:E5:5D:5D:7C:FF:16:82:26:B5:6C:FD:5F:70:D8 X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:71:25:ef:58:20:9c:8e:79:83:02:40:02:6f:9a:82:8d:d2: ae:55:6e:81:9e:c6:7b:84:72:d1:8f:9a:f6:16:10:e8:cf:ff: 28:27:91:34:36:bc:c6:4a:c9:bf:3d:fd:2f:42:1b:3f:b4:8f: 61:5d:fd:2f:f5:01:58:fb:32:09:c1:cc:5f:59:39:ad:bb:eb: 4d:1a:6d:3b:46:7c:0a:fa:f9:81:94:da:bb:82:9e:94:88:77: a1:99:3d:1f:cc:2b:93:ad:2c:5c:c7:f3:4b:b3:50:38:fc:02: 2f:ea:23:2d:7a:18:d5:5e:6a:5b:31:5a:d1:4f:cf:0e:ef:31: 47:e3:f0:45:a4:39:37:98:0e:25:9b:8b:6d:6e:25:a1:aa:0c: 94:98:a2:81:87:2c:f9:c1:3f:3a:60:e8:40:8d:2a:e5:37:31: d7:ef:cb:2d:19:5d:87:10:ed:72:52:72:c3:9a:96:51:66:44: 95:cd:93:e6:2d:d3:94:f6:ba:fd:38:f5:b0:0a:c6:cc:c4:39: 89:93:5e:e5:7d:26:f1:8b:b1:85:f3:f9:7f:2e:6a:e0:69:e9: 80:a7:3a:d3:f4:59:dd:5f:18:58:a8:d7:e9:8f:cb:f4:c1:66: 50:b5:72:25:b0:1e:ee:4e:97:14:87:b5:ab:a4:70:b2:ee:82: 7d:ac:84:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZK3Vgao+tirsifa/0ozazMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYwNDE3MDIwMDU1WhcNMjYwNDE4MDIwMDU1WjAzMTEwLwYDVQQD Eyg3NDdlYWExZDBhODVlNTVkNWQ3Y2ZmMTY4MjI2YjU2Y2ZkNWY3MGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq19gmmFem4QxU17OuNr26og+8qaE OVB65gZbRU9uYmPBwRbrGqKvOmJwJyJ/xwjl8b3ZhfOTiZk1OvuGs+khLjjrSpD0 w7JI1rVb77+tEjDnClAmtoXLuGKlyI+KG0FUMpyyO4NZKEZlEyQTjnsdWpiaQHMP tNoQOIIquu4ZCHHhWITMsOdi+QJg2FrLG+fxR/TOIvqNTdhmCydtCcnEBz76bRI+ LtD6OSsntx5OQfiw/8cxtAoC6gRoZ+Hx6MHAxqG7MhyZooXUWjzeUFf/yF77xMRd VWLB04dmXF/SBFIizPZ08na3ESnhBdrjD6e+EhnFRdtgXQMU4MksjQ2RpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHR+qh0KheVdXXz/FoImtWz9X3DYMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnEl71gg nI55gwJAAm+ago3SrlVugZ7Ge4Ry0Y+a9hYQ6M//KCeRNDa8xkrJvz39L0IbP7SP YV39L/UBWPsyCcHMX1k5rbvrTRptO0Z8Cvr5gZTau4KelIh3oZk9H8wrk60sXMfz S7NQOPwCL+ojLXoY1V5qWzFa0U/PDu8xR+PwRaQ5N5gOJZuLbW4loaoMlJiigYcs +cE/OmDoQI0q5Tcx1+/LLRldhxDtclJyw5qWUWZElc2T5i3TlPa6/Tj1sArGzMQ5 iZNe5X0m8YuxhfP5fy5q4GnpgKc60/RZ3V8YWKjX6Y/L9MFmULVyJbAe7k6XFIe1 q6Rwsu6CfayETg== -----END CERTIFICATE-----Generated at Fri Apr 17 12:32:39 2026 by rpki-client