$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft File: IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json) Hash identifier: c7XqFYWTAZk68YL+0GQga4VQ2o030yBR2yL72dg2q28= Subject key identifier: 0D:AF:F1:9C:F6:24:BB:0B:2F:BA:02:E7:87:7D:4C:4B:6F:38:5D:48 Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Certificate serial: 019EBFFF6BF5BBA487F251234E38ADCC9EF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft Manifest number: 0C8C Signing time: Sat 13 Jun 2026 08:00:48 +0000 Manifest this update: Sat 13 Jun 2026 08:00:48 +0000 Manifest next update: Sun 14 Jun 2026 08:00:48 +0000 Files and hashes: 1: 1-Y24DkHX_YS8BQf944IXH_5kays.roa (hash: +VJRpnj8CgCWOeIl5a7z0P70ihS3i/FmFwSi/9utCPo=) 2: HSoISsJ-isLr8N_DHmCBMl3TpWs.roa (hash: eFtDBlD8d0dAnIzoz+b3NcMyduLIBF9yLf8ySSSmIvA=) 3: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: oXL/JyFUqeM6/xP06IW5vJYnF8xS7WaAUz2CXFp37BY=) 4: KSxgyXQgmuvgD3hsIbjoWlYRqkk.roa (hash: MfPYx4d8dGraW1R0Aep23IPqwadZP9+eAkLv5cmiWoM=) 5: M6wnPrDmWw7o372pn664G-6XMUM.roa (hash: vz3Xt9QAg5obB1AHMtVF5JrXwk6u3qtnMl8SakINxdQ=) 6: _25UfYuLERvQd7ERXXNW_sly9Oo.roa (hash: mce8PC+zpkQB3aka/bSBor9uJVmt1ZEupgGD8nmRstI=) 7: _6RAmWnPpmERwBYNK-TrrE7oVIA.roa (hash: aa7qoUpTL/t8ummAI7ryHIK1nARbf8cHlGEdf+aw+Hs=) 8: _hBOrFv7fim--KrBCy30YmUAo3I.roa (hash: qzAl3O9RiG1n+2GEMGj8zSfO491bHrCZda9IZnWLPqI=) 9: cnvwLGbVEITaoX8cDVSNQAcxcqk.roa (hash: HW2ZpeT6aGnIzGKKy1byADe7gS6Pw3jj7fdnL63L26E=) 10: gr17UYbRi7cQ6eQ9EyDF-CuJIp4.roa (hash: NAQ/vI5+2VgZpVpsxQmGoZaiAZnJI/pT7XEYYA4d1IM=) 11: mwE7644yuRyikfXfTRLC6TQjC0w.roa (hash: KcHRogBcTVnQMGjCpBXC4Xr5iRWrDOZmEHuY1S/TOXA=) 12: rYBbbZbaSpYI3VsNcTxJfCny0P8.roa (hash: dXyRGY+rTBPSQJnVZHUIy5ttKRmSJde9WkRmwq0FUYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:ff:6b:f5:bb:a4:87:f2:51:23:4e:38:ad:cc:9e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Validity Not Before: Jun 13 08:00:48 2026 GMT Not After : Jun 14 08:00:48 2026 GMT Subject: CN=0daff19cf624bb0b2fba02e7877d4c4b6f385d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:05:2b:7d:35:ad:8b:27:d5:a9:40:11:17: 48:02:0e:9b:39:ee:e4:f5:6b:1a:c7:7d:37:35:e0: d0:4a:60:ae:79:94:1e:5c:13:1d:25:ab:27:82:4e: 8a:96:ef:58:ac:fb:5d:40:a2:7d:ed:69:c3:0a:20: 2f:86:c0:63:f8:3c:e5:06:ba:ee:cd:dd:99:89:ee: cf:06:71:51:b3:4a:8a:e4:fe:e6:e4:92:e7:46:ff: 37:ff:86:7d:20:fb:e9:25:28:23:f8:12:79:be:f5: 2e:32:d2:bd:34:b7:4f:f1:38:95:64:59:c2:fb:6c: 43:9a:00:4c:79:99:93:bb:54:d7:41:97:bd:d2:71: 6f:06:0e:91:02:26:43:9a:ff:73:80:82:1d:27:6f: fa:07:73:f1:07:1c:50:b1:3c:c4:0e:26:da:dd:5e: b3:13:79:4e:26:69:5f:5f:17:17:b6:2e:07:d8:bb: 1f:d6:32:4c:b5:f7:13:e6:b0:e5:d5:9b:d1:ca:e3: 6f:66:db:02:46:e3:6d:15:4e:fc:82:fb:af:dc:e7: 34:05:d3:f1:7f:83:25:83:17:47:55:bf:46:34:32: cc:3e:27:b4:02:e1:42:64:99:8f:97:f8:a6:7a:40: 6a:4d:92:a2:5a:64:9d:f8:ec:c6:dd:a8:4e:bd:c2: 58:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AF:F1:9C:F6:24:BB:0B:2F:BA:02:E7:87:7D:4C:4B:6F:38:5D:48 X509v3 Authority Key Identifier: keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:3a:4a:8f:0e:80:00:46:1b:69:4f:a4:6c:d6:66:57:12:68: 1c:1e:70:51:69:24:ed:c1:15:31:8c:7b:53:4a:97:e0:97:e6: 38:d8:ad:d6:39:f2:d7:1d:7b:b6:86:9f:b5:10:ec:6a:f0:d5: df:41:0b:be:14:4d:cc:69:b7:ee:77:6d:60:0c:e4:1f:e0:40: 45:93:91:3f:b6:98:c1:93:48:9b:cc:61:70:60:9c:11:f7:b2: e6:7f:ac:72:ef:74:64:2e:33:b0:b7:d2:c8:3f:71:9a:79:12: 09:e4:4c:e1:68:d4:3f:73:71:fd:58:24:97:3b:70:02:fc:b7: 44:f1:65:b3:e3:8b:db:d7:d8:3f:f2:87:c8:ae:22:3c:8c:c5: 60:8a:65:0b:32:45:a8:10:89:ce:42:06:35:40:2f:b8:71:c8: f4:75:b1:91:c0:89:e5:a2:15:c9:7b:42:0c:e4:9c:e9:24:4e: 65:84:50:ff:1b:0d:f8:55:02:2f:66:be:3e:52:b9:25:9c:9e: 01:1f:2e:e5:d4:15:ab:b8:de:2a:ee:fc:16:83:49:6a:f8:13: a3:a0:4e:ca:89:0e:5e:b8:68:a8:f0:29:c3:a9:d6:1f:36:68: 54:e2:44:4d:cd:1d:b6:43:3d:84:f4:b6:47:84:3c:26:b7:17: 61:2d:6f:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6//2v1u6SH8lEjTjitzJ72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm Nzk2NzgwHhcNMjYwNjEzMDgwMDQ4WhcNMjYwNjE0MDgwMDQ4WjAzMTEwLwYDVQQD EygwZGFmZjE5Y2Y2MjRiYjBiMmZiYTAyZTc4NzdkNGM0YjZmMzg1ZDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVgFK301rYsn1alAERdIAg6bOe7k 9Wsax303NeDQSmCueZQeXBMdJasngk6Klu9YrPtdQKJ97WnDCiAvhsBj+DzlBrru zd2Zie7PBnFRs0qK5P7m5JLnRv83/4Z9IPvpJSgj+BJ5vvUuMtK9NLdP8TiVZFnC +2xDmgBMeZmTu1TXQZe90nFvBg6RAiZDmv9zgIIdJ2/6B3PxBxxQsTzEDiba3V6z E3lOJmlfXxcXti4H2Lsf1jJMtfcT5rDl1ZvRyuNvZtsCRuNtFU78gvuv3Oc0BdPx f4MlgxdHVb9GNDLMPie0AuFCZJmPl/imekBqTZKiWmSd+OzG3ahOvcJYCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2v8Zz2JLsLL7oC54d9TEtvOF1IMB8GA1UdIwQY MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt NTkxY2FmNTM2ZWNjLzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjpKjw6A AEYbaU+kbNZmVxJoHB5wUWkk7cEVMYx7U0qX4JfmONit1jny1x17toaftRDsavDV 30ELvhRNzGm37ndtYAzkH+BARZORP7aYwZNIm8xhcGCcEfey5n+scu90ZC4zsLfS yD9xmnkSCeRM4WjUP3Nx/VgklztwAvy3RPFls+OL29fYP/KHyK4iPIzFYIplCzJF qBCJzkIGNUAvuHHI9HWxkcCJ5aIVyXtCDOSc6SROZYRQ/xsN+FUCL2a+PlK5JZye AR8u5dQVq7jeKu78FoNJavgTo6BOyokOXrhoqPApw6nWHzZoVOJETc0dtkM9hPS2 R4Q8JrcXYS1vFQ== -----END CERTIFICATE-----Generated at Sat Jun 13 11:15:51 2026 by rpki-client