$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: TEQSqJsqMAu/J6EB9T+/6HAN+pexWwsuyq+PVJNGIoU= Subject key identifier: 66:B7:B5:19:EF:AE:37:69:E2:D4:0D:82:4A:CE:4B:C5:E7:08:80:BB Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 019FA95F7B27F239FA46CD5D481C59919DB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 15B3 Signing time: Tue 28 Jul 2026 15:37:14 +0000 Manifest this update: Tue 28 Jul 2026 15:37:14 +0000 Manifest next update: Wed 29 Jul 2026 15:37:14 +0000 Files and hashes: 1: 11YShjM6iG1lgHk0sBIwxGUI_MU.roa (hash: zv1LSj4scuwBiIwmG809DfMSYAbVZ65wSUdzZngzxuU=) 2: 4uhQK-ahMU-b686CpY3ebuHDcxA.roa (hash: jPmzy29N69ytvo0+nxFYwzpNOf0HZh68Epxb4V5zrHQ=) 3: 9JMNSgr9GTZCq7ECk8aWcWWpSWc.roa (hash: ZYWDq0P6qMgiPXizLcgupz8/qvO2gFU/jwxMaGxycaw=) 4: Aldb8rVQEYH7AIYKbirLccTqxfk.roa (hash: xKeQuE6N5Er4acIg7kKR9Q2RvuXmil18lO24CsbXiP0=) 5: AygaSJoY4X-N8pcfdiWT-0OzTH0.roa (hash: GpuGRR+uDCRH0KzkkUeOxZxQXmqHI/G6tCUG41o6giA=) 6: Gz0_KsyuxF_Mtua-1HhemOuZcQg.roa (hash: IbzaI7YpmiRgkQae6jLRwhProyJ2PzVbvEcbQ3Zj2TA=) 7: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: u6M4dZzT2I9jXoZQnD2dYXUmzs+lTaUAQ53DnaMPAMs=) 8: _og34UxL66HAf1x6tJdapHB1KD4.roa (hash: MIlbN2zWAQQHEFQMrsU48v1H/MqxZJmHAhuOJZrCJMw=) 9: gZE3Te4FZ7-Lp4GEJQvQEkwqiDA.roa (hash: r4RCM40eYHCKKFN/sAxepQztxTn6V46H7fRE/7G8fQU=) 10: lwmtxoWx5clkivlnh1Kh10qANc8.roa (hash: aox9Sa8RSdnqNanp7vV3UK2GlMEf/ITdwIirj370CTo=) 11: pUjgfHpSLJEroItVeYdePetGeno.roa (hash: 3GHGFzGCi0a87nJzoUGj4P1u3SwU6ateFJ0oPnoaNEM=) 12: vOyidTyiIS9RXt084gFh3QAi7BY.roa (hash: TBJz0+Ix8YJsKWxa0n0dLVQdi5WM4OAHaQ/OM30EBD4=) 13: ygZyjuYzflVbHgfVvcHOxvuu0E4.roa (hash: IH0YWQaBGEjd+Nsl8K72F6uJWsgW3OOY75p4PPRBdZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:5f:7b:27:f2:39:fa:46:cd:5d:48:1c:59:91:9d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Jul 28 15:37:14 2026 GMT Not After : Jul 29 15:37:14 2026 GMT Subject: CN=66b7b519efae3769e2d40d824ace4bc5e70880bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:ea:20:83:49:06:f3:d0:c1:d7:5b:fa:94: 69:ee:d1:7b:22:6a:67:ec:3a:69:f4:21:02:ec:53: 6f:ea:b7:ac:eb:82:22:4f:9d:9d:01:f4:f9:63:23: e1:b5:3c:32:02:5e:48:74:29:90:3e:dd:25:88:10: 38:35:1c:0a:46:c3:54:7b:3a:44:66:99:df:38:e8: 22:2d:77:84:99:fa:e1:35:73:16:06:04:6c:cd:98: aa:de:3e:7e:a9:f6:4a:ac:5b:58:7d:e3:a8:25:cf: 35:ce:f2:9b:29:84:70:67:53:4e:5c:d9:62:c5:71: 6f:97:90:4e:cf:e0:05:eb:30:3b:95:20:a8:78:54: f3:55:42:89:0f:45:8f:6f:17:a6:45:cd:1e:63:17: 4a:c6:ff:da:f5:40:7b:be:76:65:bf:74:d1:2a:37: 91:9e:b5:89:bf:04:16:61:18:fa:08:31:35:25:7b: 5e:25:d3:d0:8d:d2:25:83:2d:fd:b3:ce:9a:b3:c7: e7:2f:50:97:05:ee:f4:cf:6f:a1:83:77:ed:16:05: 01:ed:cc:9d:9d:98:0b:51:fd:93:9f:08:cb:32:1e: 97:c2:19:0c:16:21:5c:9c:e1:b6:f6:f9:5f:0d:1e: 79:91:2c:d6:7e:3f:9f:e6:fb:5c:bc:14:09:e7:84: a7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B7:B5:19:EF:AE:37:69:E2:D4:0D:82:4A:CE:4B:C5:E7:08:80:BB X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cb:ab:d1:53:3b:79:60:33:08:3d:a2:0a:0e:01:02:6f:96: e9:3e:d7:dc:94:38:cc:b7:05:2c:36:79:54:0e:f6:ff:13:68: b9:e8:a5:62:a8:fb:bf:fc:95:a0:12:11:bb:fd:8b:2f:82:c4: 7e:51:c6:ec:e6:a2:3c:38:42:57:5c:7f:e9:c0:8d:c4:94:df: 51:ce:af:9c:02:dc:62:d4:48:f2:e2:39:81:88:4b:15:af:58: 37:7e:08:d9:cd:21:b0:3e:48:09:e1:07:b4:03:6e:76:de:c6: ce:cb:d1:d4:14:b3:63:a2:60:72:5e:36:e8:14:3b:31:00:0b: ba:63:eb:35:ea:ed:2f:ec:20:ad:8c:57:52:f0:a6:de:5d:25: 6a:ce:e6:25:db:ae:68:57:f9:e2:10:0d:e9:a6:2a:1c:9b:ee: 3f:f9:61:a2:77:5b:54:90:6d:fa:14:4c:30:f2:e0:82:a4:a5: 82:ce:d4:94:b9:f6:64:c2:a3:33:18:16:00:51:3c:0c:01:5a: 0b:51:45:46:c1:ac:60:92:9f:ad:56:9d:44:28:cb:9a:96:43: 48:95:5d:74:ca:98:42:fc:e6:20:e7:a7:12:e0:49:80:12:32: 0a:b9:8f:40:eb:f2:0b:5c:70:9b:c9:80:17:62:8f:e9:79:4c: 2e:04:b7:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pX3sn8jn6Rs1dSBxZkZ2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjYwNzI4MTUzNzE0WhcNMjYwNzI5MTUzNzE0WjAzMTEwLwYDVQQD Eyg2NmI3YjUxOWVmYWUzNzY5ZTJkNDBkODI0YWNlNGJjNWU3MDg4MGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxPqIINJBvPQwddb+pRp7tF7Impn 7Dpp9CEC7FNv6res64IiT52dAfT5YyPhtTwyAl5IdCmQPt0liBA4NRwKRsNUezpE ZpnfOOgiLXeEmfrhNXMWBgRszZiq3j5+qfZKrFtYfeOoJc81zvKbKYRwZ1NOXNli xXFvl5BOz+AF6zA7lSCoeFTzVUKJD0WPbxemRc0eYxdKxv/a9UB7vnZlv3TRKjeR nrWJvwQWYRj6CDE1JXteJdPQjdIlgy39s86as8fnL1CXBe70z2+hg3ftFgUB7cyd nZgLUf2TnwjLMh6XwhkMFiFcnOG29vlfDR55kSzWfj+f5vtcvBQJ54SnxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGa3tRnvrjdp4tQNgkrOS8XnCIC7MB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsur0VM7 eWAzCD2iCg4BAm+W6T7X3JQ4zLcFLDZ5VA72/xNoueilYqj7v/yVoBIRu/2LL4LE flHG7OaiPDhCV1x/6cCNxJTfUc6vnALcYtRI8uI5gYhLFa9YN34I2c0hsD5ICeEH tANudt7GzsvR1BSzY6Jgcl426BQ7MQALumPrNertL+wgrYxXUvCm3l0las7mJduu aFf54hAN6aYqHJvuP/lhondbVJBt+hRMMPLggqSlgs7UlLn2ZMKjMxgWAFE8DAFa C1FFRsGsYJKfrVadRCjLmpZDSJVddMqYQvzmIOenEuBJgBIyCrmPQOvyC1xwm8mA F2KP6XlMLgS3Ng== -----END CERTIFICATE-----Generated at Tue Jul 28 18:41:48 2026 by rpki-client