$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: L+Iq07NVqhX+ixxFjsniteGy9ygT372+9yCnzG2yLSA= Subject key identifier: D6:EE:C4:E3:6D:CE:E8:57:AC:84:FC:1D:02:40:30:E8:19:5D:0D:45 Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 019EC06D1DADA35C486928586A8ED83CA048 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 194F Signing time: Sat 13 Jun 2026 10:00:36 +0000 Manifest this update: Sat 13 Jun 2026 10:00:36 +0000 Manifest next update: Sun 14 Jun 2026 10:00:36 +0000 Files and hashes: 1: 8dz0TrMtwzys9aId9S0iNBUOM6I.roa (hash: QLXQgTisSL5o9NDXTvqc31xSu43P2bWSnl0Mbj1LxKA=) 2: CG9ohWuinT5B93Rnr5fGvMKn1vY.roa (hash: PUMGIgV3wIfMf5d0ulCrvrKBPvAL6Ata0pqTX8puweA=) 3: JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa (hash: arGn6FJKM/5X/KQBvvmxnfiup95zCVTz6MKIcb88dnA=) 4: JutDRiQZPtkgRNn4DbKRtcU159k.roa (hash: TBfVgKnr15EdS367udNkZsLjUZkCmwigL6STK1CGALk=) 5: WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa (hash: EVCumPjXA28vp5ehPKHe+PCdpvR77Tfj3/cbydnM+o0=) 6: XXTLAzTN8ORt_-RYCj2-8C6GR00.roa (hash: 6BDh84FsMhXUtXLJgFo0Xh10o5gPmpg2C2PNspUTVCk=) 7: Y-SOlnUVIZjOVvcxnnWFzaAte_E.roa (hash: 2bLhdqPwt8VWaJXmqBQ8pl5vk0Pqbt7n4V7xQ3T9Dew=) 8: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: yk9qJ8sXl4Aslb88dRf0+0xsnwWoWEH9eo+e4UCNUak=) 9: m6mcSmpfmNAj9RbqZcHLhm1-GBQ.roa (hash: p83WPoiu14c7eyRfswAFJNoQrZPR/HEj5misljpRM2U=) 10: nkHJQxs3RvxryxXyywwLA5kWGDI.roa (hash: VuLzAxuuKrma6aeyKBkCPTnFtqwkCI2Bh/sV0lxF7Jc=) 11: vzjiQ62-Ida16ZpmsWaWVB-3g8U.roa (hash: jsH0jmCurlULuLa9fBp8xexVcDJDX4+DOBZF+vtnAlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:6d:1d:ad:a3:5c:48:69:28:58:6a:8e:d8:3c:a0:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Jun 13 10:00:36 2026 GMT Not After : Jun 14 10:00:36 2026 GMT Subject: CN=d6eec4e36dcee857ac84fc1d024030e8195d0d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ea:a6:9a:14:99:f5:80:4e:f6:c3:32:48:cd: e6:33:37:72:81:fa:aa:73:2c:b4:28:ea:9a:28:83: 23:d8:c9:36:48:16:60:12:4e:c5:d7:18:62:f0:eb: 65:b5:9f:84:da:6e:bf:73:2c:8c:8b:55:1a:01:fe: 4a:ed:96:fb:a7:4d:96:ed:df:b3:34:a7:4d:aa:bd: 25:2c:0a:37:ab:ac:0a:1a:fd:cd:7c:63:5b:7e:9f: af:f2:c7:e0:02:90:b0:05:f3:a7:d8:26:45:80:70: 18:e8:ce:35:a5:58:3a:5f:5d:6e:50:53:94:7c:9c: 52:46:b5:d8:de:90:82:79:6c:13:38:6b:fe:5e:f3: e0:ce:dd:c1:f7:e8:64:44:b7:ef:59:d2:a1:e9:a4: b1:a1:3a:ff:2c:14:ad:75:d7:8f:16:23:ea:a4:3a: 9c:5c:ae:93:34:90:37:38:c8:e3:f9:24:19:bd:3a: bc:8c:90:13:70:27:ba:20:bd:69:63:8b:1e:bc:5f: 2f:66:73:78:c1:5d:02:55:f2:e5:5d:7a:83:62:34: fb:bc:9a:d7:b6:17:76:91:e5:48:81:7d:29:4a:1e: f2:55:1c:68:8a:81:f9:52:f8:9a:19:d3:20:41:1f: 80:f9:46:00:d1:dc:b4:ca:16:d8:92:6c:ec:01:34: 58:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EE:C4:E3:6D:CE:E8:57:AC:84:FC:1D:02:40:30:E8:19:5D:0D:45 X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:e1:83:6c:8b:ae:d4:d3:97:45:9e:8e:c5:2c:33:d8:93:83: 82:20:77:e8:8a:4a:ef:e3:28:52:8a:f0:ca:d6:13:2f:90:cb: 6b:4e:a9:7d:29:45:68:36:d9:f2:89:71:20:cf:58:53:64:15: 30:27:2c:cf:1d:23:89:2b:0d:17:39:af:89:a6:56:ce:7d:66: 21:5a:20:d9:8f:2e:d1:b2:6d:9e:b8:6b:55:a4:f6:35:14:0d: 45:25:98:18:d2:80:e3:17:b4:98:9e:83:bf:20:02:11:20:2e: 04:9e:90:75:79:40:ab:93:ef:10:5d:65:09:2a:a1:87:00:0c: bf:86:42:b2:bd:28:5a:95:5c:01:96:1e:c8:4d:10:5a:e8:39: 62:5b:00:5e:3c:a7:60:28:ef:4e:64:90:62:0a:68:1f:7f:51: c8:d8:bc:da:76:61:09:e7:ca:d1:8b:c2:8b:5a:73:89:c9:ac: 9a:48:a3:5f:65:45:5e:74:d7:d8:64:15:23:d7:41:0d:29:98: 81:20:83:6e:7f:27:8d:dc:d6:f5:88:74:b5:ed:43:81:70:11: 6c:08:3d:65:f1:63:bd:41:6e:bf:e7:5a:d6:c3:08:f0:bc:b7: 1c:b5:94:f3:99:78:83:75:77:d7:62:d2:8b:50:07:73:3c:49: 92:b2:57:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7AbR2to1xIaShYao7YPKBIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYwNjEzMTAwMDM2WhcNMjYwNjE0MTAwMDM2WjAzMTEwLwYDVQQD EyhkNmVlYzRlMzZkY2VlODU3YWM4NGZjMWQwMjQwMzBlODE5NWQwZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuqmmhSZ9YBO9sMySM3mMzdygfqq cyy0KOqaKIMj2Mk2SBZgEk7F1xhi8OtltZ+E2m6/cyyMi1UaAf5K7Zb7p02W7d+z NKdNqr0lLAo3q6wKGv3NfGNbfp+v8sfgApCwBfOn2CZFgHAY6M41pVg6X11uUFOU fJxSRrXY3pCCeWwTOGv+XvPgzt3B9+hkRLfvWdKh6aSxoTr/LBStddePFiPqpDqc XK6TNJA3OMjj+SQZvTq8jJATcCe6IL1pY4sevF8vZnN4wV0CVfLlXXqDYjT7vJrX thd2keVIgX0pSh7yVRxoioH5UviaGdMgQR+A+UYA0dy0yhbYkmzsATRYcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbuxONtzuhXrIT8HQJAMOgZXQ1FMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoeGDbIuu 1NOXRZ6OxSwz2JODgiB36IpK7+MoUorwytYTL5DLa06pfSlFaDbZ8olxIM9YU2QV MCcszx0jiSsNFzmviaZWzn1mIVog2Y8u0bJtnrhrVaT2NRQNRSWYGNKA4xe0mJ6D vyACESAuBJ6QdXlAq5PvEF1lCSqhhwAMv4ZCsr0oWpVcAZYeyE0QWug5YlsAXjyn YCjvTmSQYgpoH39RyNi82nZhCefK0YvCi1pzicmsmkijX2VFXnTX2GQVI9dBDSmY gSCDbn8njdzW9Yh0te1DgXARbAg9ZfFjvUFuv+da1sMI8Ly3HLWU85l4g3V312LS i1AHczxJkrJXmQ== -----END CERTIFICATE-----Generated at Sat Jun 13 19:06:01 2026 by rpki-client