$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: DE9z30R77LkERHklDRAv+cHbdV02gn6U614xOc1WwEY= Subject key identifier: AB:2A:3E:88:8B:8A:87:F6:E8:0E:58:DC:32:3F:FB:E2:1F:84:68:31 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019EBEED17708920541FA01148DE2E0DB145 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 0602 Signing time: Sat 13 Jun 2026 03:01:09 +0000 Manifest this update: Sat 13 Jun 2026 03:01:09 +0000 Manifest next update: Sun 14 Jun 2026 03:01:09 +0000 Files and hashes: 1: 1-BlSXqYyBKUdfU94NGff_PAPul4.roa (hash: 5sWUhwz5Gcq5/MhNhTcOvD2uhQ0tuUa+W9GIH9V8OaQ=) 2: 1fRolkRjd-APCzNnG-5bwuoOqNg.roa (hash: uECN6gUKiv+lFioLhpnkI4G1xAlKUZVG1VCjkCRQOjI=) 3: 2F897qCWvfh11SUzKWZ5JUV2vMs.roa (hash: BDm7sSnQsdMShImHFreyfB5QnyPZWja62eMfrLC52Z0=) 4: 3DigKmaWxP-qw4TMo5nSEFFHNlw.roa (hash: SFQibSW8pDXFPKPG5MbvdKYY13AwQ4A4xl349zx1iCA=) 5: 91LDPauwCWQ9godr-xheoc62kZY.roa (hash: pLiJYVDF484K9mWtl+JKcTe0VgA4TfPZgkN8+ZrNjMs=) 6: 9XRLK1OdgukwixTDk2AKzFzTzbs.roa (hash: GCjLjdeI8luwyn1PGNY8s6Ygk/m/2VfxU7ui9AQ53ww=) 7: 9ohNILRN251EJCEOaFSvlOoDNJg.roa (hash: 2WRd0d2oEyTbSuOnacVQb9zr84nnPee4Alvgcj+3gVU=) 8: GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa (hash: 9wH2XPtuxgQ1BMZZEBYsg16k1bgpNYguMty8atBuYf4=) 9: H9OemdXyC7tAgnmNPQ8cKr4kXek.roa (hash: Y6oksDUVORVjfAcT/DowbWJFqVZVzW3cfm1/KNkAcoU=) 10: Jt1l3PmmzdbcYP2rfmhzsDtcPhI.roa (hash: zt/605nd1EgOMLhSVE8EHytRNsfa1q/ziCZNE0ebjzg=) 11: PTZMdAT0hDazMuAsVI3CEFaCfvE.roa (hash: Z9gyi8MZGuuvG1z3xCSCxfacu9FwpO6Pum1TmCZXgaA=) 12: RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa (hash: 7jSM+R7ontglcAC1koxA8s1vIKZN1w9IqBWxZkjEi38=) 13: Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa (hash: 49fIprccRJUVDzFPqcsAmiCiqNfTbqtbpr/g64iaVzQ=) 14: avrcnfB12N6L1uAItV4pxr4ZeBk.roa (hash: UCrkK/t7tVltSG/GoHf/iVcJnaXfqtG/1ac64yo7m4E=) 15: hMoYvytTC8MSE72GcaOmUQp55TM.roa (hash: QNj9222JszfBwsXWHLHqGbqHpk9emhsVOXPVoX1Flpc=) 16: hOj1q_woW_TnlRvs2YyjROgkzFQ.roa (hash: ps7n86yeUL7ggIASsOQ9fWrHGtyQ8wFxbcEnxp+seck=) 17: ipercfJU5O8E0XasUBHV6tWGchQ.roa (hash: HApdigE0Ka0edSDTXKLYJ8nXJSrgF6YaO6XyN4xCAg0=) 18: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: UNT/kNYWKFsj95a7u38lKL23LsgQ+mTjKOK0aKp8Xk8=) 19: jC80DyZfd08kqUPQfGLYtFSpqeA.roa (hash: QkkRAI+hrNUAThXm4mIodhuWyIPzbk15zdb1sYevpvs=) 20: pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa (hash: Zwjahs4SIZZ7mXWd1Naf3bCGTp7nVeEdZf7T1NQzjwE=) 21: r6qKV9nEirBUwP3KmuLyUTNtefg.roa (hash: iWqKDpTKfBVdyUC9r9QWpqk9OSg69kGIRh/unEHarFg=) 22: xJkF66cCvGxEcbXW72kYSvCe9pc.roa (hash: 8ukNpwANOCXSCFQousC6/SlMGWqDu4dvIjSPXAjmXlo=) 23: xQPVpv6oDfVejRnWElQGbmYJcaY.roa (hash: y3RHPAzs8tten2VXnVg+llQRjecqqHar32AXcJuIcWg=) 24: xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa (hash: uA7hO9E7hUzauisNryngMo6HASraVHp6A2BgzZx4YIE=) 25: y78xNtcYu21c47h3KufgEPgZVnE.roa (hash: MwiDwZITS/z04aTqMBZZx2J7qe1RkzKld+egFNWQZro=) 26: ycFTntx4cs4onGaGpj0o47JW98Y.roa (hash: Ttb49ZN4wbdVcFXW70bm/uwe/p5I14QSBI+L4GbrQys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:ed:17:70:89:20:54:1f:a0:11:48:de:2e:0d:b1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jun 13 03:01:09 2026 GMT Not After : Jun 14 03:01:09 2026 GMT Subject: CN=ab2a3e888b8a87f6e80e58dc323ffbe21f846831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:35:df:3a:10:b4:b1:80:32:3a:72:97:35:4c: ba:c7:48:48:22:05:8b:3e:a2:3d:42:5c:7e:b5:e9: a7:33:65:63:11:88:59:89:95:09:88:f1:f5:f0:3d: 5e:b3:d2:b3:22:b1:5c:50:8b:31:b6:13:b0:43:8d: 71:31:0b:f4:fd:be:55:e0:3e:de:3f:17:f7:51:ce: 14:39:83:9d:3f:c4:dc:ff:4a:8a:a0:5d:d6:b6:dd: 2f:ff:05:95:26:d7:bd:bb:81:6c:f9:83:41:6f:5b: 88:61:d7:ea:d3:33:7e:62:5d:28:84:16:b8:9e:53: 02:ff:45:d4:33:3f:97:ad:8a:47:8f:2d:5c:b1:0e: 10:74:7f:4e:3e:27:fa:67:0e:ef:da:9e:b2:0d:f7: 18:de:c4:ce:73:2e:d4:1d:ca:f6:b1:5d:13:06:94: c8:ae:fa:3e:8e:fd:d8:8f:69:96:cf:74:73:e0:9c: 67:b6:65:be:c2:c8:e1:80:1d:6d:66:41:32:a3:7a: 73:ff:91:ed:55:10:a8:0d:00:08:31:23:66:8a:1a: ef:41:ef:dc:8f:19:04:45:16:89:2d:9d:32:85:ba: 81:ff:7a:5a:55:90:d8:ad:bd:36:3a:e1:94:a9:71: df:a8:2d:ba:8f:73:97:fe:86:0d:e5:3e:b2:a0:ce: 37:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2A:3E:88:8B:8A:87:F6:E8:0E:58:DC:32:3F:FB:E2:1F:84:68:31 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:42:0e:06:16:cc:64:a1:fa:f7:e2:0a:3f:41:63:ac:3d:1e: f2:33:c8:cd:39:76:25:eb:20:3a:d2:49:a4:8a:fe:93:52:e9: a3:51:85:23:9f:41:57:99:7e:b2:a0:38:6f:80:03:56:c4:a4: 9c:ff:b6:f7:fe:15:d6:bd:7e:74:88:b2:7d:55:a6:15:ba:27: fb:14:7f:68:0e:94:90:a8:9a:10:a5:e6:36:dd:6c:2f:e1:e4: 14:11:e7:5b:c0:4f:77:10:83:cd:8c:3f:bf:da:32:3c:de:c9: f1:cf:82:f0:1e:85:43:93:87:89:b7:92:3e:6d:5a:f4:9d:d2: c1:77:2f:d2:91:8e:70:4a:cf:80:0a:41:f8:0c:14:00:78:05: 32:6e:c1:b0:0c:7f:d1:18:e1:e4:54:eb:18:c4:a8:d2:c3:4f: d4:df:a8:33:24:3e:29:2e:d8:94:aa:a8:3c:53:8f:5f:ef:52: 2c:e4:fd:2c:4e:fe:17:ab:5d:0c:76:05:db:17:81:c0:8a:1e: 36:3d:d7:7e:72:cc:bb:17:09:63:74:ef:cd:3a:17:04:c9:2d: f8:49:d6:81:a8:e1:35:0d:6e:00:d3:ad:bb:c8:b0:71:fd:43: 75:76:68:d8:98:44:29:51:88:e3:e9:0f:db:78:f1:61:cf:38: ef:2b:52:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+7RdwiSBUH6ARSN4uDbFFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwNjEzMDMwMTA5WhcNMjYwNjE0MDMwMTA5WjAzMTEwLwYDVQQD EyhhYjJhM2U4ODhiOGE4N2Y2ZTgwZTU4ZGMzMjNmZmJlMjFmODQ2ODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTXfOhC0sYAyOnKXNUy6x0hIIgWL PqI9Qlx+temnM2VjEYhZiZUJiPH18D1es9KzIrFcUIsxthOwQ41xMQv0/b5V4D7e Pxf3Uc4UOYOdP8Tc/0qKoF3Wtt0v/wWVJte9u4Fs+YNBb1uIYdfq0zN+Yl0ohBa4 nlMC/0XUMz+XrYpHjy1csQ4QdH9OPif6Zw7v2p6yDfcY3sTOcy7UHcr2sV0TBpTI rvo+jv3Yj2mWz3Rz4JxntmW+wsjhgB1tZkEyo3pz/5HtVRCoDQAIMSNmihrvQe/c jxkERRaJLZ0yhbqB/3paVZDYrb02OuGUqXHfqC26j3OX/oYN5T6yoM432QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsqPoiLiof26A5Y3DI/++IfhGgxMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREIOBhbM ZKH69+IKP0FjrD0e8jPIzTl2JesgOtJJpIr+k1Lpo1GFI59BV5l+sqA4b4ADVsSk nP+29/4V1r1+dIiyfVWmFbon+xR/aA6UkKiaEKXmNt1sL+HkFBHnW8BPdxCDzYw/ v9oyPN7J8c+C8B6FQ5OHibeSPm1a9J3SwXcv0pGOcErPgApB+AwUAHgFMm7BsAx/ 0Rjh5FTrGMSo0sNP1N+oMyQ+KS7YlKqoPFOPX+9SLOT9LE7+F6tdDHYF2xeBwIoe Nj3XfnLMuxcJY3TvzToXBMkt+EnWgajhNQ1uANOtu8iwcf1DdXZo2JhEKVGI4+kP 23jxYc847ytS6g== -----END CERTIFICATE-----Generated at Sat Jun 13 07:29:50 2026 by rpki-client