$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: wlrDGKTYyfYzdYSkdu+8bjTmEbJmiVRAHrxGuDNu3Ek= Subject key identifier: 64:F2:44:0B:C8:F1:24:81:68:C1:0F:9E:63:38:8D:51:39:6D:47:66 Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 01A0CBC7AD139BC09C8E4B647DE11E042B78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 1A5E Signing time: Wed 23 Sep 2026 01:00:55 +0000 Manifest this update: Wed 23 Sep 2026 01:00:55 +0000 Manifest next update: Thu 24 Sep 2026 01:00:55 +0000 Files and hashes: 1: 8dz0TrMtwzys9aId9S0iNBUOM6I.roa (hash: QLXQgTisSL5o9NDXTvqc31xSu43P2bWSnl0Mbj1LxKA=) 2: CG9ohWuinT5B93Rnr5fGvMKn1vY.roa (hash: PUMGIgV3wIfMf5d0ulCrvrKBPvAL6Ata0pqTX8puweA=) 3: JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa (hash: arGn6FJKM/5X/KQBvvmxnfiup95zCVTz6MKIcb88dnA=) 4: JutDRiQZPtkgRNn4DbKRtcU159k.roa (hash: TBfVgKnr15EdS367udNkZsLjUZkCmwigL6STK1CGALk=) 5: WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa (hash: EVCumPjXA28vp5ehPKHe+PCdpvR77Tfj3/cbydnM+o0=) 6: XXTLAzTN8ORt_-RYCj2-8C6GR00.roa (hash: 6BDh84FsMhXUtXLJgFo0Xh10o5gPmpg2C2PNspUTVCk=) 7: Y-SOlnUVIZjOVvcxnnWFzaAte_E.roa (hash: 2bLhdqPwt8VWaJXmqBQ8pl5vk0Pqbt7n4V7xQ3T9Dew=) 8: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: B4uexaU+luuRVTmpS807gQctWsV2MRHVLOreeTO2I2c=) 9: m6mcSmpfmNAj9RbqZcHLhm1-GBQ.roa (hash: p83WPoiu14c7eyRfswAFJNoQrZPR/HEj5misljpRM2U=) 10: nkHJQxs3RvxryxXyywwLA5kWGDI.roa (hash: VuLzAxuuKrma6aeyKBkCPTnFtqwkCI2Bh/sV0lxF7Jc=) 11: vzjiQ62-Ida16ZpmsWaWVB-3g8U.roa (hash: jsH0jmCurlULuLa9fBp8xexVcDJDX4+DOBZF+vtnAlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 22:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cb:c7:ad:13:9b:c0:9c:8e:4b:64:7d:e1:1e:04:2b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Sep 23 01:00:55 2026 GMT Not After : Sep 24 01:00:55 2026 GMT Subject: CN=64f2440bc8f1248168c10f9e63388d51396d4766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:43:09:86:89:b6:3a:c9:0d:b1:0d:6d:11: e6:2c:94:a9:de:c0:22:0e:4f:69:02:6d:d8:cf:c3: 90:be:17:fd:81:0a:a9:70:1c:46:93:27:2f:18:84: 58:f8:56:0e:4d:0d:0d:e7:60:2e:46:ff:04:17:96: 6f:7c:a9:5e:74:6f:ef:4d:a5:ad:62:28:c7:05:74: 04:1d:ca:bf:fe:d8:92:f0:54:4f:3e:bd:e5:6a:29: 13:a0:54:36:91:05:e2:44:bf:a9:8a:66:87:85:7c: 2b:35:3c:f4:46:28:58:57:71:9e:f0:95:a7:fd:e7: 7f:e9:d5:b1:85:88:aa:68:9f:e3:e6:dc:fb:31:f1: 8b:37:b2:fe:f0:07:f8:15:7e:8d:1d:50:22:0b:98: 2f:61:d6:86:32:6d:72:5a:44:ee:61:02:c5:23:0d: 47:81:e4:b6:d5:f7:ab:8e:dc:f1:7b:1e:09:ae:35: e0:91:3c:d1:1d:9f:38:cf:8b:86:1d:07:12:f3:2f: de:e4:a2:dc:82:ef:65:ac:fa:d9:57:85:11:21:71: 12:50:72:39:03:e8:d2:0f:d8:3c:a3:2b:e2:87:a1: 6e:a4:7a:30:24:de:56:f3:b6:5c:44:e9:dd:e5:55: 89:df:d1:9e:57:3c:01:25:5e:d8:97:db:90:21:e3: 95:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F2:44:0B:C8:F1:24:81:68:C1:0F:9E:63:38:8D:51:39:6D:47:66 X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8f:db:e5:eb:c5:90:d2:6e:78:6b:85:54:9c:b7:94:9a:ad: 0e:33:62:d5:a9:3b:44:35:51:72:14:8c:08:93:66:1f:41:ea: b0:f2:ba:0b:56:c2:2a:1d:81:14:ac:f8:e3:06:3d:85:8d:cb: 6f:29:e9:8a:63:f2:e7:ab:12:a9:f9:42:82:1d:67:3c:99:0f: 11:f4:53:fd:ae:78:c7:96:24:50:b7:c5:f5:c9:f5:e1:25:7a: 44:91:74:a9:fa:47:b3:61:35:a3:01:e5:12:d3:73:4a:8b:fe: 2e:8b:da:d3:b0:7f:c0:9a:46:05:f4:f3:9a:fe:13:94:90:8c: 65:38:97:51:7c:42:c0:9d:58:49:ab:70:a9:a0:33:32:1f:e0: b6:c0:f3:27:f2:3b:25:c3:d3:07:40:62:08:6b:8e:cd:f5:fa: 8e:ec:15:0e:6d:56:51:46:83:4e:d9:3e:b1:f2:49:26:32:62: 2d:40:7e:a0:57:63:7b:42:04:4a:38:86:d1:6b:fc:eb:8a:59: ed:df:96:76:64:86:4c:05:5b:3a:e7:c9:3a:a8:55:84:c1:91: 37:df:0c:f4:f5:62:38:95:43:63:7c:65:eb:f7:0b:26:f5:7d: b9:47:17:02:4f:7c:e8:1d:68:6d:3b:97:d0:6d:d4:b4:92:6d: 21:77:07:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDLx60Tm8CcjktkfeEeBCt4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYwOTIzMDEwMDU1WhcNMjYwOTI0MDEwMDU1WjAzMTEwLwYDVQQD Eyg2NGYyNDQwYmM4ZjEyNDgxNjhjMTBmOWU2MzM4OGQ1MTM5NmQ0NzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvBDCYaJtjrJDbENbRHmLJSp3sAi Dk9pAm3Yz8OQvhf9gQqpcBxGkycvGIRY+FYOTQ0N52AuRv8EF5ZvfKledG/vTaWt YijHBXQEHcq//tiS8FRPPr3laikToFQ2kQXiRL+pimaHhXwrNTz0RihYV3Ge8JWn /ed/6dWxhYiqaJ/j5tz7MfGLN7L+8Af4FX6NHVAiC5gvYdaGMm1yWkTuYQLFIw1H geS21ferjtzxex4JrjXgkTzRHZ84z4uGHQcS8y/e5KLcgu9lrPrZV4URIXESUHI5 A+jSD9g8oyvih6FupHowJN5W87ZcROnd5VWJ39GeVzwBJV7Yl9uQIeOVqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTyRAvI8SSBaMEPnmM4jVE5bUdmMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPI/b5evF kNJueGuFVJy3lJqtDjNi1ak7RDVRchSMCJNmH0HqsPK6C1bCKh2BFKz44wY9hY3L bynpimPy56sSqflCgh1nPJkPEfRT/a54x5YkULfF9cn14SV6RJF0qfpHs2E1owHl EtNzSov+Lova07B/wJpGBfTzmv4TlJCMZTiXUXxCwJ1YSatwqaAzMh/gtsDzJ/I7 JcPTB0BiCGuOzfX6juwVDm1WUUaDTtk+sfJJJjJiLUB+oFdje0IESjiG0Wv864pZ 7d+WdmSGTAVbOufJOqhVhMGRN98M9PViOJVDY3xl6/cLJvV9uUcXAk986B1obTuX 0G3UtJJtIXcH9w== -----END CERTIFICATE-----Generated at Wed Sep 23 04:18:55 2026 by rpki-client