$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: Tr4zdkn0FvBoYhCVWe3p7jEzaSdFlEDsy3que+1IAQ8= Subject key identifier: C1:26:5A:9C:6D:44:0B:1A:47:B9:DF:FE:87:8D:5B:06:F6:2B:64:EC Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 019CABA238604D5AE2899595DAC33BB90B59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 1838 Signing time: Sun 01 Mar 2026 23:01:01 +0000 Manifest this update: Sun 01 Mar 2026 23:01:01 +0000 Manifest next update: Mon 02 Mar 2026 23:01:01 +0000 Files and hashes: 1: 8_MkA_mT9KIdkBcNq59qKHbc9ho.roa (hash: E24Q5XRNZzYhaFekHtHmSqKUrlGX20Uvqt/+tLWhFo4=) 2: 8dz0TrMtwzys9aId9S0iNBUOM6I.roa (hash: QLXQgTisSL5o9NDXTvqc31xSu43P2bWSnl0Mbj1LxKA=) 3: ATr9on9NXfN5KaeCexdDhihuhvE.roa (hash: fRmU0RyX9cmxFGh6vh7b2kq/1xI8atRRIR73j9hG4+Y=) 4: JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa (hash: arGn6FJKM/5X/KQBvvmxnfiup95zCVTz6MKIcb88dnA=) 5: JutDRiQZPtkgRNn4DbKRtcU159k.roa (hash: TBfVgKnr15EdS367udNkZsLjUZkCmwigL6STK1CGALk=) 6: WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa (hash: EVCumPjXA28vp5ehPKHe+PCdpvR77Tfj3/cbydnM+o0=) 7: XXTLAzTN8ORt_-RYCj2-8C6GR00.roa (hash: 6BDh84FsMhXUtXLJgFo0Xh10o5gPmpg2C2PNspUTVCk=) 8: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: P1ZZmKRovzNyCDGblIQ3AAh8ZZw+lTne6SH/Kw1vTzE=) 9: m6mcSmpfmNAj9RbqZcHLhm1-GBQ.roa (hash: p83WPoiu14c7eyRfswAFJNoQrZPR/HEj5misljpRM2U=) 10: nkHJQxs3RvxryxXyywwLA5kWGDI.roa (hash: VuLzAxuuKrma6aeyKBkCPTnFtqwkCI2Bh/sV0lxF7Jc=) 11: vzjiQ62-Ida16ZpmsWaWVB-3g8U.roa (hash: jsH0jmCurlULuLa9fBp8xexVcDJDX4+DOBZF+vtnAlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:a2:38:60:4d:5a:e2:89:95:95:da:c3:3b:b9:0b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Mar 1 23:01:01 2026 GMT Not After : Mar 2 23:01:01 2026 GMT Subject: CN=c1265a9c6d440b1a47b9dffe878d5b06f62b64ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e3:5b:36:c3:64:cc:db:65:e1:73:96:b1:22: 2d:f1:a8:f3:1f:25:78:8c:b3:53:a2:f7:e2:8f:25: d1:07:82:86:ed:2e:8e:70:86:e4:19:82:94:f6:4d: 49:75:f6:89:76:65:95:40:83:bb:f3:95:33:b8:6a: 4e:05:68:a0:36:1a:37:0e:ae:fe:e6:3d:ee:1b:b5: 9e:8e:bf:e8:8a:2c:ea:3e:d8:9f:89:4f:65:44:d0: 28:76:43:44:95:8f:78:eb:5a:67:ac:69:a8:94:d7: fe:f9:42:be:e6:f1:63:88:82:8c:93:af:31:08:8e: f1:85:58:04:50:d3:7f:56:69:2e:19:53:62:25:58: 9c:36:17:e0:39:14:e0:8d:96:41:81:a9:d0:e7:d6: 2f:82:ad:cd:8e:ad:28:c5:41:ba:81:e9:25:31:cd: 3d:61:2b:14:bc:68:92:ce:cc:18:f8:c4:dc:e0:1d: 93:2c:c0:75:59:2a:e5:b9:f5:52:ef:9f:eb:1e:ce: 48:6e:4c:64:03:6c:0f:9f:5c:40:46:de:89:c9:1d: 17:d5:9e:b0:5c:ba:82:f6:fe:f0:20:c2:ca:6a:6d: bd:c4:e7:22:6a:12:22:a2:15:1f:35:a2:7d:88:84: 89:2b:22:dc:96:32:51:31:c2:2e:3a:c0:4e:ff:dd: d9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:26:5A:9C:6D:44:0B:1A:47:B9:DF:FE:87:8D:5B:06:F6:2B:64:EC X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a6:36:22:94:b9:53:34:a0:89:93:c2:2d:5a:49:ba:43:b8: cd:43:a9:0a:23:ef:c3:0c:19:34:38:c3:06:98:78:26:b0:fa: 51:7e:23:57:32:a6:e2:fa:73:aa:f0:bd:31:48:74:78:ff:b6: ea:72:af:fb:08:83:ab:66:9a:34:01:10:d7:7c:9f:a9:39:57: 94:71:d0:45:9f:c9:77:ad:cc:fd:47:25:84:6b:68:08:60:45: 7c:e5:7e:ae:ed:1d:0e:d0:16:00:cc:92:3d:5f:b2:ef:b9:5c: fb:9a:a3:cf:ff:ce:d1:05:d7:dd:02:a7:b1:67:d2:39:ef:6a: a5:1e:ba:84:e7:04:f7:1a:a1:0c:cb:7b:82:4c:78:40:8b:1b: 84:e4:71:e9:28:96:ec:86:a0:7c:fc:5c:15:64:5b:de:16:d8: 56:4f:f8:12:16:63:f4:27:e7:a2:a3:22:2d:87:a7:77:b4:28: c4:ae:92:aa:59:1a:49:8b:45:a9:29:8b:46:0d:a0:eb:01:e3: 5e:05:06:68:e5:52:36:d7:b6:50:57:38:73:2a:83:3d:ec:d7: 91:59:c2:ea:c2:5d:96:58:31:af:dd:9f:4e:a0:59:66:f3:7a: 3d:3f:27:a5:3c:78:cd:23:90:e3:0a:29:fd:f7:c1:d2:ff:59: 5b:0c:9e:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrojhgTVriiZWV2sM7uQtZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYwMzAxMjMwMTAxWhcNMjYwMzAyMjMwMTAxWjAzMTEwLwYDVQQD EyhjMTI2NWE5YzZkNDQwYjFhNDdiOWRmZmU4NzhkNWIwNmY2MmI2NGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eNbNsNkzNtl4XOWsSIt8ajzHyV4 jLNTovfijyXRB4KG7S6OcIbkGYKU9k1JdfaJdmWVQIO785UzuGpOBWigNho3Dq7+ 5j3uG7Wejr/oiizqPtifiU9lRNAodkNElY9461pnrGmolNf++UK+5vFjiIKMk68x CI7xhVgEUNN/VmkuGVNiJVicNhfgORTgjZZBganQ59Yvgq3Njq0oxUG6geklMc09 YSsUvGiSzswY+MTc4B2TLMB1WSrlufVS75/rHs5IbkxkA2wPn1xARt6JyR0X1Z6w XLqC9v7wIMLKam29xOciahIiohUfNaJ9iISJKyLcljJRMcIuOsBO/93ZzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEmWpxtRAsaR7nf/oeNWwb2K2TsMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqY2IpS5 UzSgiZPCLVpJukO4zUOpCiPvwwwZNDjDBph4JrD6UX4jVzKm4vpzqvC9MUh0eP+2 6nKv+wiDq2aaNAEQ13yfqTlXlHHQRZ/Jd63M/UclhGtoCGBFfOV+ru0dDtAWAMyS PV+y77lc+5qjz//O0QXX3QKnsWfSOe9qpR66hOcE9xqhDMt7gkx4QIsbhORx6SiW 7IagfPxcFWRb3hbYVk/4EhZj9CfnoqMiLYend7QoxK6SqlkaSYtFqSmLRg2g6wHj XgUGaOVSNte2UFc4cyqDPezXkVnC6sJdllgxr92fTqBZZvN6PT8npTx4zSOQ4wop /ffB0v9ZWwyeKg== -----END CERTIFICATE-----Generated at Mon Mar 2 03:55:43 2026 by rpki-client