$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: geIezgzC1Tys+Jg5hhxUAU10zQw+aCZkM6SZy+LqIJg= Subject key identifier: 74:49:95:15:64:98:7C:20:F3:D6:51:FD:A9:D9:EC:2C:16:A9:27:E3 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019FA7BD3B08128B898C10DF7BE434EAD1F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 19E6 Signing time: Tue 28 Jul 2026 08:00:24 +0000 Manifest this update: Tue 28 Jul 2026 08:00:24 +0000 Manifest next update: Wed 29 Jul 2026 08:00:24 +0000 Files and hashes: 1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=) 2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=) 3: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=) 4: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: AJNgDjpaqCasWf9U+ECTszxNfIGfb0EnmWSrvZmwRf0=) 5: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=) 6: WimZdTjw5Lm8MtebopYruWKL5rI.roa (hash: ZsNGt4iJIvs0TYMA8I/lIAfczIzjQsE/8A1JQl2JcVU=) 7: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=) 8: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=) 9: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=) 10: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=) 11: iKMbSLMsYD3IPy4aFTgWFbR5-7Q.roa (hash: FLy0rWO0Tm6EmloSEokoF4mkm9Xo/LOqQZJUxQFOv+k=) 12: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=) 13: wK7E2CITjHSS2oNwJxLPpiywZOo.asa (hash: oIOlXpucAgwg2lcnJgT+OLAJmqqKdwc6n/6fCi8en3s=) 14: waZz0IyLkJZ2XZs5mcy2zeGt7KA.roa (hash: PLFFtAchWYCJ5jmh6ddgth619HvoXK3NBze7KzilKF8=) 15: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 08:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a7:bd:3b:08:12:8b:89:8c:10:df:7b:e4:34:ea:d1:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Jul 28 08:00:24 2026 GMT Not After : Jul 29 08:00:24 2026 GMT Subject: CN=7449951564987c20f3d651fda9d9ec2c16a927e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d1:d9:51:24:d5:14:e1:86:c1:87:78:f3:c2: fc:fe:8b:e5:36:31:91:65:d4:a0:79:04:dd:bd:6e: a8:3a:46:cc:2b:ea:3f:38:aa:56:1e:62:c2:09:4b: e7:77:65:c9:2e:5c:b7:aa:ad:50:84:c5:7d:95:ef: cc:1e:ae:b3:a2:09:79:9f:20:0e:20:47:7e:eb:50: 9b:fa:73:47:89:03:72:22:42:1b:48:bb:7e:fd:d5: da:d9:ad:c8:7b:c5:ba:94:85:2c:18:3b:a2:4a:8f: 6f:77:f0:10:04:27:fe:94:17:e4:af:4c:1a:32:07: 23:d9:c4:36:17:2c:e7:a9:b9:91:f8:11:30:38:1a: 52:35:43:1f:da:22:4e:a7:14:78:a3:e5:b9:48:1b: 82:5d:f4:55:88:42:5e:5c:67:c7:42:b4:f9:e1:8b: 79:6b:b2:66:48:a2:0f:4f:47:54:18:f7:1a:18:63: ab:f9:22:48:cd:a5:c0:80:4b:8c:83:53:2b:97:f6: 3d:06:8b:ec:80:48:ed:ca:d7:79:b2:9b:64:63:a2: 85:2b:ae:af:7f:9c:3c:10:e8:db:de:ba:b7:ea:79: 9a:ae:ba:c6:57:15:a0:97:86:b6:0f:b1:99:27:b6: 5d:a6:4d:c5:fa:7a:e1:d3:22:db:48:bc:3d:75:72: 39:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:49:95:15:64:98:7C:20:F3:D6:51:FD:A9:D9:EC:2C:16:A9:27:E3 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b9:57:6b:d6:78:ef:44:c2:5e:e4:71:2e:aa:02:ae:4c:0c: ec:73:d1:4a:48:1f:e9:74:06:42:4f:3c:af:99:63:3b:96:0f: 0c:57:a7:87:bc:7c:0d:0b:e3:e1:f8:a9:f5:c5:91:5a:13:ef: a8:07:89:8c:85:70:82:88:ef:f3:e3:a2:6a:90:8d:23:4b:9d: 31:26:1c:fb:f6:7c:50:bd:d1:46:83:0f:98:65:bf:e4:7b:48: 74:ec:f6:53:59:c4:d3:52:2c:0a:4d:af:31:c7:ef:15:a8:67: 02:2b:3c:59:4d:7e:ba:4e:3e:cd:f5:a1:be:cb:ef:80:0c:3a: f5:1a:96:f7:8f:65:41:c3:42:51:87:12:20:06:50:00:a4:34: ba:8a:5b:7e:8f:2f:c5:32:fb:67:38:71:0e:5a:45:b2:19:c2: 33:5c:51:a6:90:6e:60:94:3a:28:0a:c3:60:f6:f5:fd:68:2d: da:96:11:ee:6e:84:fb:f2:c4:8b:b9:b7:80:53:db:d2:c9:6b: 8f:14:cb:91:9c:a0:fe:fe:97:63:84:6c:ca:55:ec:80:5e:26: f0:1b:bf:bb:02:2b:a8:e6:5a:42:1d:a8:e1:e6:9a:8c:37:98: 48:5c:20:ce:ad:5d:5e:54:7c:75:c4:c7:ba:8a:b3:5b:a6:7f: 07:1b:5c:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+nvTsIEouJjBDfe+Q06tH0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwNzI4MDgwMDI0WhcNMjYwNzI5MDgwMDI0WjAzMTEwLwYDVQQD Eyg3NDQ5OTUxNTY0OTg3YzIwZjNkNjUxZmRhOWQ5ZWMyYzE2YTkyN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodHZUSTVFOGGwYd488L8/ovlNjGR ZdSgeQTdvW6oOkbMK+o/OKpWHmLCCUvnd2XJLly3qq1QhMV9le/MHq6zogl5nyAO IEd+61Cb+nNHiQNyIkIbSLt+/dXa2a3Ie8W6lIUsGDuiSo9vd/AQBCf+lBfkr0wa Mgcj2cQ2FyznqbmR+BEwOBpSNUMf2iJOpxR4o+W5SBuCXfRViEJeXGfHQrT54Yt5 a7JmSKIPT0dUGPcaGGOr+SJIzaXAgEuMg1Mrl/Y9BovsgEjtytd5sptkY6KFK66v f5w8EOjb3rq36nmarrrGVxWgl4a2D7GZJ7Zdpk3F+nrh0yLbSLw9dXI5iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRJlRVkmHwg89ZR/anZ7CwWqSfjMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7lXa9Z4 70TCXuRxLqoCrkwM7HPRSkgf6XQGQk88r5ljO5YPDFenh7x8DQvj4fip9cWRWhPv qAeJjIVwgojv8+OiapCNI0udMSYc+/Z8UL3RRoMPmGW/5HtIdOz2U1nE01IsCk2v McfvFahnAis8WU1+uk4+zfWhvsvvgAw69RqW949lQcNCUYcSIAZQAKQ0uopbfo8v xTL7ZzhxDlpFshnCM1xRppBuYJQ6KArDYPb1/Wgt2pYR7m6E+/LEi7m3gFPb0slr jxTLkZyg/v6XY4RsylXsgF4m8Bu/uwIrqOZaQh2o4eaajDeYSFwgzq1dXlR8dcTH uoqzW6Z/Bxtc1Q== -----END CERTIFICATE-----Generated at Tue Jul 28 16:47:22 2026 by rpki-client