$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json) Hash identifier: aD2EkbVTQ4QIzPBfUIFdWpsc29FnkSgdUKoWrato59Y= Subject key identifier: A5:25:DD:71:6F:45:0F:C3:8D:5B:A5:22:31:03:22:6D:AD:8A:3B:F1 Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 019CAAC71E15D730A0CF8617AEE0BBC6637D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft Manifest number: 1640 Signing time: Sun 01 Mar 2026 19:01:41 +0000 Manifest this update: Sun 01 Mar 2026 19:01:41 +0000 Manifest next update: Mon 02 Mar 2026 19:01:41 +0000 Files and hashes: 1: 1-TPBZaPgwzpcoaeoNGcACcpRq9w.roa (hash: WRnBW6LaoaDyzWLmINt+9j7JPTxMQsEWQyTKmC15wRY=) 2: A_tEVik7EkSJhTC7T2FJIfD4hWE.asa (hash: 68EPop8TjMmm4peaii/vw95NHeqqlpJpXRJzZBSJs7g=) 3: DdZL2Ei2USqI1D8JQatISOxbCY0.roa (hash: A+x4OgPFDFV1yfcXqtt93yKXONOhfjjQIV2HOaMfwnQ=) 4: H2Gc0qKN46gAjUldVFBNpV93Xk4.asa (hash: KSarBkAjc6GXQsV+kmM1pcYpqDoYggEF4OpcfqU5XxI=) 5: HOso74W1VokYtKvyq7cUzsjtneE.asa (hash: XkgHTIUgOHbFT9e9eq8+M1TVv1ndaqq7zAajOmv3wN8=) 6: LSXBvQHAo4zp0AtEmHoZVaivySk.roa (hash: swGFJmkZXioEtzQNNaxMbmAyGUjZpt6rG9u3Y6aW9mU=) 7: RatTcANG4U3IM7MOV2hXua2pFMs.asa (hash: USM3oAd7uLAkywhJUjv79wjdyCIZfb2jA72kwTjAHbY=) 8: aWgyqnhlZS7MDekMFATvg7m1Chg.roa (hash: Ub6D7zkQHeFmXTT59TkJEXuDooqt1BaCbrMKmH7VmuU=) 9: b-VQSWuLpLV93gdEDV9Lftl-uXw.asa (hash: Em1YerFm1QMulEXhz/0NYeLEV5IMD8Fh+85COdjHx64=) 10: bsQYUbE6sDO4AlcYz2-reJ-1Oss.roa (hash: 5lfSQqmrli6qWcknzZ2NClTLbfidYTYGVF+eKK5IJEE=) 11: cszYTkQVDcY76z8Av8ncweFdHcQ.asa (hash: xNxgKjmWZqB0F8LoHh9M3iOQxo1YlNVcpRWSs0jkU1w=) 12: fU0ZQGxEIbYd-Y96okGNTpozeFs.asa (hash: sffo6lZCXVJqfJc7Hp2QR59SPfkJdF9crEZwTQ2dkII=) 13: iLg25mvcmTCHH_OGEh2P98itdpY.roa (hash: wugv3jB//b2uxYYJseGcTrUZ2QkeB7l7mdgdccrFlEw=) 14: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: 9wi7KMKpLyDMo/8Uh3B9iydQxEg8GfNVFwxFptx7pMA=) 15: lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa (hash: WdmuUrCIkBJHssHI2YPcgaS2VqSm8pQ//F+3L49VElw=) 16: lybU2-0lBoLkM6-OoilLNM4B_nM.roa (hash: l6togunOdeRBEWqxla5wbVF9WAZmGR3kHUt6QPrFu9w=) 17: ty1ff7-sDyLx4nDkaEvA6OsoOtQ.roa (hash: jgvaKJ/trlHrZqFZbc1zXXkzbtQm22Rj/n2MqvbIbWk=) 18: zdQE3nljteAvytR7FrZorPU0jyc.asa (hash: 7eznpWbdCzFgvZgA9g8kyOLAHMzeIfPZoCln8oZBAvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 19:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:c7:1e:15:d7:30:a0:cf:86:17:ae:e0:bb:c6:63:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Mar 1 19:01:41 2026 GMT Not After : Mar 2 19:01:41 2026 GMT Subject: CN=a525dd716f450fc38d5ba5223103226dad8a3bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:98:37:f2:78:f2:a9:81:88:cc:a7:4d:da:47: 9b:e0:8f:e8:c4:11:54:2e:74:cf:68:a8:a6:5a:6b: 4e:55:81:de:3c:77:39:59:53:dd:0e:c2:79:37:3e: 09:53:dc:95:dd:34:60:43:31:56:b6:00:73:d9:22: 33:41:89:ae:c4:4f:f1:e9:3c:b3:ce:68:98:f7:29: 3b:f0:fe:a2:70:27:93:70:ff:cd:a1:d2:91:eb:51: 76:1e:4e:29:c6:27:cb:9e:f0:82:de:74:85:33:8b: 7f:70:fd:69:a3:a3:0d:72:cf:7e:a6:2d:d5:49:4a: 2e:12:71:31:0a:be:5f:a1:45:54:3f:41:6d:af:b5: c1:81:59:e1:4e:cd:80:07:35:c0:dc:ae:64:c6:80: 4a:fa:96:75:60:b4:d7:38:e5:4a:53:9a:99:cc:5b: 05:c2:60:3e:7b:49:ef:26:0c:93:9e:28:11:ce:1b: 45:47:c2:1a:64:5e:08:6c:d7:bd:83:eb:65:b0:28: 6f:5e:01:79:12:eb:60:22:90:36:59:f0:e4:2e:f3: cb:4b:86:f2:59:1a:e5:c1:ad:d0:b5:55:27:2e:f8: 47:d1:1d:02:8e:8a:6b:f0:65:b7:39:c8:dd:4f:6c: 26:be:7b:10:87:73:2a:6a:27:d9:ad:15:4a:b9:92: 0f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:25:DD:71:6F:45:0F:C3:8D:5B:A5:22:31:03:22:6D:AD:8A:3B:F1 X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ea:7f:41:ab:de:cb:0e:2e:03:a7:e6:74:e5:f6:af:62:94: c2:19:88:c2:89:f3:66:b0:4d:d8:b5:a6:5c:1e:fd:6c:e9:07: 56:2c:6a:ff:10:39:a8:d4:94:e5:5a:bc:35:7a:87:7b:bb:be: b0:37:81:1b:f5:cf:c3:28:58:a8:03:a7:ed:ec:3a:f3:67:f7: c8:02:43:98:de:93:0e:61:ff:53:bd:08:14:00:2f:a2:8c:41: 1a:9d:74:5a:6c:37:a7:7f:9d:b6:9e:58:0d:46:1e:04:41:d0: 9a:fd:40:d4:ad:55:6c:3e:19:9f:18:37:cc:fa:12:f6:12:bc: bb:c3:b2:2f:8f:df:76:46:6c:e3:bd:15:ce:b8:f2:a8:02:7a: 03:9c:71:ca:20:b1:d4:cd:5e:e1:40:a8:7f:ec:cb:93:35:2a: 08:85:68:19:b2:46:9f:d2:c0:ae:fe:73:73:7a:4f:27:5d:8f: f5:09:e5:db:04:14:77:1b:30:3a:66:c1:ec:cf:6d:f5:35:8d: 5f:32:99:92:a8:ca:f8:86:d1:16:4a:2f:4b:d2:d0:63:87:42: 80:02:66:0d:b0:fd:d6:75:28:f5:c2:24:07:c8:4a:c8:73:8a: b7:19:d5:ec:ba:a1:4e:77:2e:08:ed:d4:10:70:d4:dd:fb:1e: 7d:c6:a6:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqxx4V1zCgz4YXruC7xmN9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjYwMzAxMTkwMTQxWhcNMjYwMzAyMTkwMTQxWjAzMTEwLwYDVQQD EyhhNTI1ZGQ3MTZmNDUwZmMzOGQ1YmE1MjIzMTAzMjI2ZGFkOGEzYmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5g38njyqYGIzKdN2keb4I/oxBFU LnTPaKimWmtOVYHePHc5WVPdDsJ5Nz4JU9yV3TRgQzFWtgBz2SIzQYmuxE/x6Tyz zmiY9yk78P6icCeTcP/NodKR61F2Hk4pxifLnvCC3nSFM4t/cP1po6MNcs9+pi3V SUouEnExCr5foUVUP0Ftr7XBgVnhTs2ABzXA3K5kxoBK+pZ1YLTXOOVKU5qZzFsF wmA+e0nvJgyTnigRzhtFR8IaZF4IbNe9g+tlsChvXgF5EutgIpA2WfDkLvPLS4by WRrlwa3QtVUnLvhH0R0Cjopr8GW3OcjdT2wmvnsQh3MqaifZrRVKuZIPFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUl3XFvRQ/DjVulIjEDIm2tijvxMB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArup/Qave yw4uA6fmdOX2r2KUwhmIwonzZrBN2LWmXB79bOkHVixq/xA5qNSU5Vq8NXqHe7u+ sDeBG/XPwyhYqAOn7ew682f3yAJDmN6TDmH/U70IFAAvooxBGp10Wmw3p3+dtp5Y DUYeBEHQmv1A1K1VbD4Znxg3zPoS9hK8u8OyL4/fdkZs470VzrjyqAJ6A5xxyiCx 1M1e4UCof+zLkzUqCIVoGbJGn9LArv5zc3pPJ12P9Qnl2wQUdxswOmbB7M9t9TWN XzKZkqjK+IbRFkovS9LQY4dCgAJmDbD91nUo9cIkB8hKyHOKtxnV7LqhTncuCO3U EHDU3fsefcamCw== -----END CERTIFICATE-----Generated at Mon Mar 2 05:57:38 2026 by rpki-client