$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: uYVyj9Hr+jK633TF40ssgKk4iGTRUrYWVHu25ziED/I= Subject key identifier: 22:5A:F3:75:9E:A5:03:02:C4:C2:AA:53:ED:0F:6B:D7:0A:E6:76:97 Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019FAABEB6BAF65AF74C1D226123EA9957E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 19E4 Signing time: Tue 28 Jul 2026 22:00:53 +0000 Manifest this update: Tue 28 Jul 2026 22:00:53 +0000 Manifest next update: Wed 29 Jul 2026 22:00:53 +0000 Files and hashes: 1: 4Y6MQ3p-LB6KrtJDo2AEO8Db164.roa (hash: 5atEicVhW+L7Xp6D+LeVcw6nuJeehWHQba6IJiOM6Ms=) 2: As_pVbbnYy_pmBMm0RcX49iX6nY.roa (hash: qzus9UnBcueHhtxBHMySF8j/gf9sbzuNZT387lhMVtE=) 3: IauAxs74tysYNqUuPq3mwgGVBQY.roa (hash: I4y1ed39yJsl3DkGtY/KgIMLvKWqfNhrhjl/qeS45rw=) 4: Q7kjVEhiYHEz_AIBuFCX2o6kXpQ.roa (hash: MuV9xof7zxa6mZSUu9k4zgmUqNgq/+xzFvRw2ejciSU=) 5: UhbmNbA2hwd3CclD7uA5e7VB30s.roa (hash: juSkCYLLU3kVaC1Dq0hdQw2DrlMO0olfzSo1w3Y2IAk=) 6: VmKAAjA4J61Er2pV6nmm2We8eeg.roa (hash: H91QyBvG1I/wj9YFT3ovdtrMrR5xBG3HkuYFKTPkUdk=) 7: Z2JoyRveJcrOS84W6TpEPChd0u8.roa (hash: aEKu2ZE0v6kUC0OnwN6L0HbgZBJi/Gu9YSjx1j8FGfg=) 8: aC9Q_3qjddY1l6-wNmHh31rhiv4.roa (hash: uKO8uok9xpbvJA3MGYKk7ndaYzKJUW2pxyQNGvBjSDU=) 9: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: 5q9Ug2c1k3wlSO9njAVSDfu1gO3ZdTcfTcm53mLJHNM=) 10: ozLeruCkBhC4yZCUw5lMFfl-TtM.roa (hash: ygWG9N1PXEIgHYpH9dLMI7Qu5ggvIeMB+/+Dm4Mbbz4=) 11: q47qpt1p1Wj02CxPXYgOsikq_GY.roa (hash: RR0Z4b1X2W/yjPPcvR1hUKYG5qy0mYBUJ7YN4lZTqrk=) 12: s0Slj9yVMX7lCq79bqSGCqW6KPg.roa (hash: RaEewhp7TYWAZZHFh2A3/CMtjGLdyIT76c5b57zkYYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 22:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:be:b6:ba:f6:5a:f7:4c:1d:22:61:23:ea:99:57:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Jul 28 22:00:53 2026 GMT Not After : Jul 29 22:00:53 2026 GMT Subject: CN=225af3759ea50302c4c2aa53ed0f6bd70ae67697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5a:94:99:ae:a9:7b:9e:b8:71:b5:0e:c4:43: 2f:13:8a:d3:dd:de:31:a4:01:2b:d0:bb:cd:ad:7b: 26:cb:14:b9:c0:06:29:10:8c:e8:4b:54:21:e1:76: e3:be:8e:b4:70:83:eb:f4:30:60:2d:b3:e4:e9:ba: 03:1b:42:f5:95:c4:f1:06:1d:93:95:e6:53:f5:34: 9e:ef:bc:58:53:21:8c:54:58:65:d6:03:18:71:6d: 14:46:d3:da:94:f2:5e:94:1f:70:bb:65:8a:ce:68: bd:6c:f8:9c:0d:83:02:48:8b:fd:99:f0:38:5b:ac: 12:91:11:d2:0b:7c:d1:4a:a7:25:96:7e:ab:98:b3: 96:ba:df:a3:15:0d:5a:8a:a5:f3:91:e9:ef:4e:d0: cb:b5:3d:79:72:91:76:16:4d:00:23:3c:36:89:ac: 5b:48:c1:7d:c3:6d:ec:6a:e4:19:4b:2f:a8:52:c8: f1:fe:b2:71:64:16:91:3e:6d:e5:2c:1b:a7:25:8f: 55:01:fb:48:78:30:f4:76:08:70:0d:ec:b9:54:b6: fa:cb:fa:f0:a9:93:6c:f7:29:c6:44:98:ef:84:ce: 4b:6c:0e:d2:73:77:d5:6e:28:e2:f8:d1:cd:b7:9d: 1d:a5:aa:12:c1:c0:99:97:8c:cf:f8:f0:ec:47:be: 56:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5A:F3:75:9E:A5:03:02:C4:C2:AA:53:ED:0F:6B:D7:0A:E6:76:97 X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:99:6b:fa:0b:8e:ad:2f:1b:e9:8a:e7:89:73:a2:9f:8a:36: 39:e2:cb:b1:62:a7:fa:93:ca:3b:95:91:3b:5a:17:75:23:58: b0:21:a3:8e:76:18:89:ab:22:27:39:5b:e1:18:5f:2f:59:e8: d3:bf:c5:2a:8c:90:13:b0:6e:50:6a:74:05:fd:bd:01:be:7b: ec:5f:66:45:e3:7d:31:f1:f2:7b:c4:85:b3:7a:d8:2f:f2:ad: e0:f7:a9:88:84:bf:07:55:3a:49:6c:ef:79:88:b6:cf:18:57: da:1c:41:22:47:53:00:5a:0a:07:dd:33:ee:21:32:e2:fc:0f: 57:50:bd:cc:54:d3:d1:db:8f:b4:c9:3e:1e:aa:1b:73:4a:8d: db:02:10:4d:f7:88:aa:2c:74:13:51:3a:e5:ee:32:fd:f6:23: b2:aa:f1:c7:7b:80:4c:aa:89:dc:53:c4:a2:20:ea:25:62:af: ec:73:85:0d:e7:80:74:45:05:25:07:19:a4:bf:bc:cd:3c:73: 56:50:59:4d:1d:36:51:82:c1:6f:2d:af:94:69:67:ee:60:2a: 76:ff:12:a7:79:13:b5:d3:34:53:84:08:60:4f:62:04:3f:3d: 20:25:fa:43:3e:a6:81:61:47:b1:4a:b7:9e:0d:df:72:23:36: 4f:46:d5:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qvra69lr3TB0iYSPqmVfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYwNzI4MjIwMDUzWhcNMjYwNzI5MjIwMDUzWjAzMTEwLwYDVQQD EygyMjVhZjM3NTllYTUwMzAyYzRjMmFhNTNlZDBmNmJkNzBhZTY3Njk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11qUma6pe564cbUOxEMvE4rT3d4x pAEr0LvNrXsmyxS5wAYpEIzoS1Qh4Xbjvo60cIPr9DBgLbPk6boDG0L1lcTxBh2T leZT9TSe77xYUyGMVFhl1gMYcW0URtPalPJelB9wu2WKzmi9bPicDYMCSIv9mfA4 W6wSkRHSC3zRSqclln6rmLOWut+jFQ1aiqXzkenvTtDLtT15cpF2Fk0AIzw2iaxb SMF9w23sauQZSy+oUsjx/rJxZBaRPm3lLBunJY9VAftIeDD0dghwDey5VLb6y/rw qZNs9ynGRJjvhM5LbA7Sc3fVbiji+NHNt50dpaoSwcCZl4zP+PDsR75WdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJa83WepQMCxMKqU+0Pa9cK5naXMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZlr+guO rS8b6YrniXOin4o2OeLLsWKn+pPKO5WRO1oXdSNYsCGjjnYYiasiJzlb4RhfL1no 07/FKoyQE7BuUGp0Bf29Ab577F9mReN9MfHye8SFs3rYL/Kt4PepiIS/B1U6SWzv eYi2zxhX2hxBIkdTAFoKB90z7iEy4vwPV1C9zFTT0duPtMk+Hqobc0qN2wIQTfeI qix0E1E65e4y/fYjsqrxx3uATKqJ3FPEoiDqJWKv7HOFDeeAdEUFJQcZpL+8zTxz VlBZTR02UYLBby2vlGln7mAqdv8Sp3kTtdM0U4QIYE9iBD89ICX6Qz6mgWFHsUq3 ng3fciM2T0bV0Q== -----END CERTIFICATE-----Generated at Wed Jul 29 06:30:07 2026 by rpki-client