$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: 47zVDvFZ7R86HbVnaYzTaL7IiOytbA7CH2IssGlwfhg= Subject key identifier: B5:D8:85:92:97:45:8A:68:8B:1C:5F:52:13:11:86:F9:3B:40:60:09 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019FAA1971DE8CEF8323527E1CF28B26C2B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1A03 Signing time: Tue 28 Jul 2026 19:00:22 +0000 Manifest this update: Tue 28 Jul 2026 19:00:22 +0000 Manifest next update: Wed 29 Jul 2026 19:00:22 +0000 Files and hashes: 1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=) 2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=) 3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=) 4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=) 5: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=) 6: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=) 7: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=) 8: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=) 9: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=) 10: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=) 11: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=) 12: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=) 13: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=) 14: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: cJUx42KfHqj1C9KL8RKRDszc40IrlHWuPjI51jR++zU=) 15: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=) 16: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=) 17: lgdudiRubbn4kubyyDwuIWxdQas.roa (hash: Mto3E9aOm3/d28/F7shwzi6mJEuxr7zprdp5mund0Ik=) 18: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=) 19: uE7ORiNsRQGjdCc4HH6coM1CcnQ.roa (hash: sElnQC2IhBjiqBFU5wF4Odl3TglqL3IWyDtwzfQrYCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 19:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:19:71:de:8c:ef:83:23:52:7e:1c:f2:8b:26:c2:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jul 28 19:00:22 2026 GMT Not After : Jul 29 19:00:22 2026 GMT Subject: CN=b5d8859297458a688b1c5f52131186f93b406009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8c:ac:4c:50:e9:5d:e6:5d:7f:cc:21:43:68: 69:a8:d5:d8:be:60:93:cb:ba:34:58:e7:e7:ab:ef: e3:f6:d5:a0:53:b1:54:47:97:29:0a:45:20:8a:e5: f3:ad:ae:59:84:f2:60:d7:7d:30:b6:c3:cf:d9:be: 8d:53:ab:0e:44:4d:24:8e:0f:43:f0:92:f6:51:97: ad:d0:2d:05:d6:79:77:de:c0:1b:14:6d:9d:5f:e4: ba:e5:4b:ac:92:35:93:09:e1:5d:f9:6f:b7:23:ca: cb:d4:d2:a4:95:0a:7a:42:3c:63:de:d1:ea:90:ec: bd:21:f4:20:98:87:03:6d:ca:1a:20:71:3c:77:44: 3c:d3:76:ac:39:2c:43:0b:bd:24:61:c3:2a:a2:2d: 92:23:89:58:80:05:96:1c:2f:2f:e1:cf:b1:5b:b8: fc:66:64:40:92:87:3a:55:ee:5e:c2:75:03:ac:75: e8:b5:ea:9f:57:23:fe:e0:ea:2d:83:bc:b2:56:ee: 5d:65:91:4e:87:07:ac:a5:47:fa:14:04:b0:c4:82: e7:8c:7a:31:d5:1c:c9:9b:45:60:51:3e:6f:0f:df: 1e:38:49:8e:d3:5f:11:2c:ce:2f:6a:3c:a4:0f:b0: 0c:21:5f:e1:1c:d8:81:24:de:9c:23:aa:81:1c:2d: fa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D8:85:92:97:45:8A:68:8B:1C:5F:52:13:11:86:F9:3B:40:60:09 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b7:9f:02:4e:47:c1:2e:cd:97:3a:17:a5:64:de:e5:56:c5: 26:4b:bc:fe:06:17:1d:6c:e4:84:5d:53:6e:15:b7:16:cb:03: 37:c2:2a:89:9b:ea:77:2b:3c:85:18:15:b6:bd:9c:2f:bf:9a: 90:f9:32:36:92:91:d3:c4:4c:bc:c4:dd:e7:f5:e8:5e:15:45: 81:04:9d:b6:70:da:4e:74:ee:2d:db:77:00:b9:d4:d6:bf:3d: d1:9e:bd:6e:01:fa:56:5e:29:2f:a3:ab:0c:9b:b5:4a:89:b3: 34:b8:7f:e0:9e:c8:7e:ff:98:6b:e2:c7:47:ab:60:00:2c:71: 00:80:41:86:45:d4:bd:1b:c4:a6:01:da:90:a1:a6:04:e7:27: 6b:c3:b9:f2:57:6a:04:95:7d:ac:64:78:03:d3:96:61:6f:96: 69:30:b1:fe:47:23:fc:2e:f4:f6:49:ae:df:71:6f:25:3b:08: c1:e9:cc:f0:56:35:38:6f:d9:ea:4a:34:2a:b7:90:93:d8:00: ee:88:cd:22:cc:fb:5d:d4:dd:79:58:51:47:cc:9c:b3:4d:be: 82:f4:78:a7:4e:3c:e3:1a:a1:c0:43:36:ce:97:0d:17:ae:d9: 72:c6:fb:6f:a3:d8:5b:18:0a:a0:f0:00:f2:95:5b:ba:3b:2a: 4f:91:af:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qGXHejO+DI1J+HPKLJsK3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwNzI4MTkwMDIyWhcNMjYwNzI5MTkwMDIyWjAzMTEwLwYDVQQD EyhiNWQ4ODU5Mjk3NDU4YTY4OGIxYzVmNTIxMzExODZmOTNiNDA2MDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYysTFDpXeZdf8whQ2hpqNXYvmCT y7o0WOfnq+/j9tWgU7FUR5cpCkUgiuXzra5ZhPJg130wtsPP2b6NU6sORE0kjg9D 8JL2UZet0C0F1nl33sAbFG2dX+S65UuskjWTCeFd+W+3I8rL1NKklQp6Qjxj3tHq kOy9IfQgmIcDbcoaIHE8d0Q803asOSxDC70kYcMqoi2SI4lYgAWWHC8v4c+xW7j8 ZmRAkoc6Ve5ewnUDrHXoteqfVyP+4Ootg7yyVu5dZZFOhwespUf6FASwxILnjHox 1RzJm0VgUT5vD98eOEmO018RLM4vajykD7AMIV/hHNiBJN6cI6qBHC36JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXYhZKXRYpoixxfUhMRhvk7QGAJMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbefAk5H wS7NlzoXpWTe5VbFJku8/gYXHWzkhF1TbhW3FssDN8IqiZvqdys8hRgVtr2cL7+a kPkyNpKR08RMvMTd5/XoXhVFgQSdtnDaTnTuLdt3ALnU1r890Z69bgH6Vl4pL6Or DJu1SomzNLh/4J7Ifv+Ya+LHR6tgACxxAIBBhkXUvRvEpgHakKGmBOcna8O58ldq BJV9rGR4A9OWYW+WaTCx/kcj/C709kmu33FvJTsIwenM8FY1OG/Z6ko0KreQk9gA 7ojNIsz7XdTdeVhRR8ycs02+gvR4p0484xqhwEM2zpcNF67Zcsb7b6PYWxgKoPAA 8pVbujsqT5GvkQ== -----END CERTIFICATE-----Generated at Wed Jul 29 00:13:50 2026 by rpki-client