$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: l39hoomfDdRKNln/G04pMhvhfauFsxZCJNJ5rhcFXgQ= Subject key identifier: 97:B2:FB:B1:4B:20:3F:EA:9B:B7:94:75:59:BB:17:30:CA:24:4E:F0 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019FAA1957DC884054D6831CD017F3D44208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 1A1E Signing time: Tue 28 Jul 2026 19:00:15 +0000 Manifest this update: Tue 28 Jul 2026 19:00:15 +0000 Manifest next update: Wed 29 Jul 2026 19:00:15 +0000 Files and hashes: 1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=) 2: 1-_1qCNtot2hgU_IZPJL2qsTTFXc.roa (hash: Iaj382heCZM+jzCY8eetFxeK6yVOOq/mB7H0r3jsr2Y=) 3: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=) 4: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (hash: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8=) 5: 43Q8B1j8uCGR8HMdyPrt74IDtQ0.roa (hash: jg6HtmjBC3mwgDbDxK1J2hnGtmR596d4s1Ft0DjJQas=) 6: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=) 7: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=) 8: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=) 9: E3-_fXrx3WJEz1xqKZqUxJBmM-Q.roa (hash: aSCX2XxnC/aSPKRCNlxxflXs9icajrveCo9SBL09YdY=) 10: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=) 11: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=) 12: KV59OO7KJClf-nV-SktyqxjeQD0.roa (hash: +DyBXnPmKjRM65p+azkaO5DME2Q2gJhFVzsQryAN8lM=) 13: KsTzSaaFVIdfKiI35XLhL2mOYwY.roa (hash: +4JAmHk3Gn/aestC45pzoS352L2AknY9Wetv1FFGjm0=) 14: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=) 15: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=) 16: LQ2MMiTg73YogggMlO3q0fwzTYs.roa (hash: jiGxpN7PaAMkunNkUqVgtCVKMwjT12Y2+fuZm4c5duo=) 17: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=) 18: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=) 19: Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa (hash: 2GXJ33Dr4S4I4v3yZpn2MEA0G+YkALmc+OG+HXlP1Uo=) 20: Qe79LUiT3PJfRIEGPLNCl6k0V64.roa (hash: moL8jegGz0VXRX21YyGo37edkpvRmar1XACAXINhLYI=) 21: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=) 22: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=) 23: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=) 24: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=) 25: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=) 26: b9FVlLpsFxBIKBB7Kyvph_cz5R0.roa (hash: d/rt4wkS114V2Yg74RJgDLL2fbT20LSDB5Gyac2XFLQ=) 27: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=) 28: dhJildBdnZloo4poxJ4mC7kw6Ag.roa (hash: EWtd6p1SEWsSY07NqVyBMZcvWFTTHxhlSXR3BRJMANc=) 29: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: TGW6jPXOn8b6U0/UX1h+UQ7273JfJGw3ki0HHaNfPoQ=) 30: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=) 31: q2L5SyKqID2l1hg0Qhj5bxpMU78.roa (hash: Z9AmXohIpa+e04Joh+QhWbWtZMLnK/rjPBTVsW3zyT8=) 32: q9K5X-x5m3r2gOyHks1WDwyq-7Q.roa (hash: y0PtBOWuJ4HDoeaCO6HZcOEzqPu8pe2J9jjSvPgHyiU=) 33: qrB3Eo2Ov1FmKMVfZK8XfTmirqc.roa (hash: hZfGNLtJikKtYnLkrqax5kP9tjeXld/JNv+JEvk0F/g=) 34: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=) 35: uj4j6cfJ7bOcHn5Z6sqT_zROd8E.roa (hash: P13gsQor+N4Emp0P4NO+P2Eyz4EQ9E4uMhkwNyYMsOA=) 36: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=) 37: xe5Lcg3JTJHR_eWIXGRcFm9VxKM.roa (hash: 125ShwFH043Mwx/YVzTZ+aTSmLm1FUB4/5PjVBfP5So=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 19:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:19:57:dc:88:40:54:d6:83:1c:d0:17:f3:d4:42:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jul 28 19:00:15 2026 GMT Not After : Jul 29 19:00:15 2026 GMT Subject: CN=97b2fbb14b203fea9bb7947559bb1730ca244ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:94:34:ae:88:32:34:fb:70:7c:4f:12:af:de: b1:26:aa:3c:92:48:72:de:89:68:de:e5:52:fc:ba: 87:e7:ac:9a:2e:f0:f0:b6:12:a5:d0:41:5c:44:24: 7f:dc:54:d6:dc:6d:fe:58:15:f3:02:65:48:2d:10: 5b:2d:bd:c5:69:a2:00:d4:57:63:bf:c5:3c:3d:a2: 51:ca:84:57:29:29:2c:86:a6:5a:32:a8:cc:4b:da: 5b:f3:21:9e:5c:81:5d:ea:47:4a:77:75:66:dd:45: d7:06:72:6d:fb:17:eb:e4:9c:f0:30:b9:ca:97:fe: 10:25:81:2e:aa:e1:ba:f0:75:b1:5f:66:19:e4:65: 7e:c9:13:13:fc:ed:ed:18:b5:39:66:21:11:67:b9: 46:ac:8b:9c:dd:66:9e:ee:f9:3f:64:1f:92:eb:bf: 9c:f8:00:3f:01:91:33:a2:ee:d2:34:13:6d:42:b4: c2:16:6d:00:0b:08:72:09:29:a0:0a:45:1f:9b:f2: 38:22:81:d2:a1:f3:c5:4a:64:30:c0:b0:af:e7:2d: 3b:b2:43:8d:53:82:da:f9:15:c0:3d:df:9a:76:4f: 3c:ee:80:6a:b7:15:8f:7d:b3:86:6a:71:52:53:04: 62:67:be:7b:ca:67:68:60:26:20:5b:a3:ab:d1:4d: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B2:FB:B1:4B:20:3F:EA:9B:B7:94:75:59:BB:17:30:CA:24:4E:F0 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f1:0e:aa:0c:31:ec:21:88:ef:fc:b5:b9:d8:4d:fb:f8:3e: 7e:f8:0b:90:fd:a9:ec:5d:56:e6:e3:8f:b9:19:05:22:07:32: c3:63:52:eb:f6:75:80:7d:1d:c5:d9:42:29:fd:c5:92:74:98: d4:2f:1c:87:af:6d:77:d0:74:48:1c:42:b3:9a:43:9a:3e:a0: 70:5b:03:dd:46:21:ea:c7:ea:ee:fe:76:95:aa:76:80:ff:d4: 87:1a:81:7c:f1:0f:7c:2f:4f:d2:95:4c:79:96:88:70:72:eb: 9f:73:13:d6:07:22:1f:30:cd:22:3b:8a:34:c3:60:28:77:aa: 4c:47:fb:9e:e5:c5:3b:58:78:be:96:27:bd:8a:c2:89:bc:59: 72:f7:25:ee:0b:ea:e1:7c:f5:f7:38:e6:d7:46:28:76:45:d0: 61:7c:75:77:17:5d:b7:46:38:a7:f4:f6:ab:db:c4:77:43:31: 4f:c3:14:23:0f:99:e2:f0:44:51:8c:13:55:b7:7c:fe:7f:73: 33:b6:fd:dc:a6:ea:cd:72:d7:99:d7:a1:62:b3:b5:48:7d:fe: 55:6a:33:49:a8:94:57:dd:e8:da:97:a3:e7:7d:5d:0d:11:7d: 25:b7:1d:0b:64:20:70:74:ee:da:9c:e6:23:94:dc:9c:50:cf: c0:02:65:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qGVfciEBU1oMc0Bfz1EIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwNzI4MTkwMDE1WhcNMjYwNzI5MTkwMDE1WjAzMTEwLwYDVQQD Eyg5N2IyZmJiMTRiMjAzZmVhOWJiNzk0NzU1OWJiMTczMGNhMjQ0ZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZQ0rogyNPtwfE8Sr96xJqo8kkhy 3olo3uVS/LqH56yaLvDwthKl0EFcRCR/3FTW3G3+WBXzAmVILRBbLb3FaaIA1Fdj v8U8PaJRyoRXKSkshqZaMqjMS9pb8yGeXIFd6kdKd3Vm3UXXBnJt+xfr5JzwMLnK l/4QJYEuquG68HWxX2YZ5GV+yRMT/O3tGLU5ZiERZ7lGrIuc3Wae7vk/ZB+S67+c +AA/AZEzou7SNBNtQrTCFm0ACwhyCSmgCkUfm/I4IoHSofPFSmQwwLCv5y07skON U4La+RXAPd+adk887oBqtxWPfbOGanFSUwRiZ757ymdoYCYgW6Or0U0Y/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJey+7FLID/qm7eUdVm7FzDKJE7wMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfEOqgwx 7CGI7/y1udhN+/g+fvgLkP2p7F1W5uOPuRkFIgcyw2NS6/Z1gH0dxdlCKf3FknSY 1C8ch69td9B0SBxCs5pDmj6gcFsD3UYh6sfq7v52lap2gP/UhxqBfPEPfC9P0pVM eZaIcHLrn3MT1gciHzDNIjuKNMNgKHeqTEf7nuXFO1h4vpYnvYrCibxZcvcl7gvq 4Xz19zjm10YodkXQYXx1dxddt0Y4p/T2q9vEd0MxT8MUIw+Z4vBEUYwTVbd8/n9z M7b93KbqzXLXmdehYrO1SH3+VWozSaiUV93o2pej531dDRF9JbcdC2QgcHTu2pzm I5TcnFDPwAJlmw== -----END CERTIFICATE-----Generated at Wed Jul 29 00:51:11 2026 by rpki-client