$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: lszfOvnaUA32wA7PXxkuFUBoVcFbfvirONfRAN+PP1A= Subject key identifier: 8B:22:09:6F:06:D1:FA:A3:DA:1F:C3:01:68:39:24:E0:1A:86:01:96 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019CA9B378EB037D8C1971B86091D392AA7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0EB1 Signing time: Sun 01 Mar 2026 14:00:37 +0000 Manifest this update: Sun 01 Mar 2026 14:00:37 +0000 Manifest next update: Mon 02 Mar 2026 14:00:37 +0000 Files and hashes: 1: 4RZTKbN1v-K-y22tAcFXWig3lW0.roa (hash: /VQ5TaILo3ZhfCH+yi7l1JJuhoymVfNhArSLZ/BLWfc=) 2: 4ti_BsGuOczeZfy0JTAwhM89ku8.roa (hash: F/FIDL6IQyGQZU0ynH10rsxr4Lh4/lqbKrwCKxOVIa4=) 3: CPRW8P-dWt3q43tk8wC_BcQDCs8.roa (hash: FS0mv+wp+q+UW726jj+JxZBQxP4OfD+roz+I1dPg1uo=) 4: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: 8DcckVQSDj34HV+1qVk+6YvwavpU2prUarioSEZ8upk=) 5: Rl_qinDDXLYmitpjtRByJBmFw8Q.roa (hash: FIEZwO0iYGed4rHn2e0vozi1+vIaMR5tKhvxYETa1no=) 6: SArRO3MQSGaWTmmk2uxpyRfjIhA.roa (hash: 2KeMVYeSLHqHO7gSfTf9qkO0W/higRj4sDuOR5LxLVE=) 7: SGBFgHqWXrPKqcu8kfnGkJkv920.roa (hash: 4w68C/XOmN5L2JXs1q6sk0hxyeUfPbGSQTUbmmfeGKI=) 8: Xx-SB8IlNsgbkMiQx4mSYmp_c3E.roa (hash: H5EmddF0UXVmW0gvQsSUA/i6ZSdl9kyVO20xUD/pd1Q=) 9: c0jlx2DfhOUv1wX4uYnYDf_mgec.roa (hash: Medsqu1K5XLBzaWPCRxE6D439h9wYIO/wIZhTKMOMVQ=) 10: j2bhtci2rRb7PBQlLKaByIjyvws.roa (hash: yVGrMjz7Zm3px5ln/KZr2nj2ezCEkV9wTHK0Rkt5dDc=) 11: n7JEFOPMbToJF6Wlw44ynHUW_nQ.roa (hash: YeLSRNCcwCED5HatZvH2oCjpqMUSo5ZkDRgue0flL4E=) 12: ppD5qF2w_FZLkQjFIE6ahHI-0Vo.roa (hash: EEtkfLj3d6lQBs/XTvoe8NaYONNMjgLX1x94kWcuAKQ=) 13: tNW5JglowYzeXwLaOgS0Yf8zgPA.roa (hash: fs4Ze65kVG+wfhXUy+9T7N6D/TUMaczqK8frGbt5RaE=) 14: z-wSduJj-NlM3DwsJdstrswF4Jc.roa (hash: weGeb9i8H2JUwKvKfq49l8Oa60dqN/W4SaoC0br02/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:b3:78:eb:03:7d:8c:19:71:b8:60:91:d3:92:aa:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Mar 1 14:00:37 2026 GMT Not After : Mar 2 14:00:37 2026 GMT Subject: CN=8b22096f06d1faa3da1fc301683924e01a860196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:b9:f4:cc:6c:8c:de:a5:2c:fb:50:ab:2c: 25:c7:cf:29:97:38:70:14:30:0a:57:c9:5e:42:78: e1:28:92:a0:1b:8c:24:c8:ba:55:db:c6:e6:70:11: 94:21:da:de:65:f8:53:fe:c5:27:0a:b8:8c:e8:c8: d8:0b:07:48:47:50:fc:94:74:9f:ee:5f:73:8c:70: 2a:af:24:2a:ef:42:25:2a:b9:74:b2:af:b7:f8:2b: 81:24:8e:47:2b:23:e6:30:7f:04:a8:b2:bb:12:a5: 12:18:59:cc:f3:a1:a0:fa:d1:61:f7:22:8f:48:77: 27:0f:e2:54:61:e9:90:8f:de:9e:8c:e1:4b:23:dd: 66:eb:85:a9:56:c9:6a:da:d3:52:2e:7b:9e:96:a3: 90:e3:00:38:9a:59:1d:c2:d7:68:4d:55:6c:44:01: 81:47:ac:6c:bb:66:f5:b3:8e:1c:2b:1c:32:76:2a: 28:2c:68:65:25:34:68:b5:fd:e7:ce:6d:99:40:ad: 46:bb:c7:38:59:0c:05:9e:ad:fd:b8:46:6b:8c:a9: 9d:05:34:0e:ad:7b:59:08:36:48:bf:6b:e9:50:94: e9:7b:39:9c:b0:a2:05:53:d9:89:c3:35:49:78:07: 18:da:78:cd:54:76:1d:74:79:5a:2f:6f:5b:5b:93: 61:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:22:09:6F:06:D1:FA:A3:DA:1F:C3:01:68:39:24:E0:1A:86:01:96 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:e6:e9:e8:c7:10:27:55:36:fa:2a:21:ce:67:b3:f8:63:e8: d4:e3:ad:7e:95:a1:c4:c5:f3:c7:40:64:1b:5f:9b:21:b9:30: 64:87:39:63:f9:32:53:5f:b1:46:1e:61:57:18:ed:6c:11:5d: 5f:89:4b:a8:89:4a:31:79:61:a2:ff:ad:c7:64:2b:1f:3a:2d: ad:73:7d:90:8d:12:3f:fd:bb:42:a2:ac:39:57:c7:af:b5:b8: e0:42:b7:83:bb:4a:10:ab:63:52:62:eb:0f:71:c9:f6:12:d7: 8c:1b:05:66:c4:04:c3:f6:7e:d4:24:a2:dd:29:ad:4a:ca:29: 6a:be:e4:83:47:b5:da:c9:46:3a:98:cf:88:52:72:67:56:14: b9:f9:50:3b:e0:0d:8a:02:48:66:bd:32:57:7a:98:c2:5d:22: 25:be:74:52:8a:46:8c:eb:c0:e9:51:a9:ae:b7:7d:87:0b:03: d3:36:0b:d7:67:b8:9c:61:70:a1:3f:40:55:5d:aa:51:f9:d3: 14:76:ae:d8:39:f6:ee:8c:76:50:b6:57:b0:26:ae:25:c4:b4: 1b:7a:6d:4d:f9:b4:6a:1f:05:61:76:9d:af:34:56:92:90:42: 12:07:ba:4f:69:fa:73:c0:25:36:a3:20:f9:32:84:d6:46:36: 93:79:4e:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyps3jrA32MGXG4YJHTkqp8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjYwMzAxMTQwMDM3WhcNMjYwMzAyMTQwMDM3WjAzMTEwLwYDVQQD Eyg4YjIyMDk2ZjA2ZDFmYWEzZGExZmMzMDE2ODM5MjRlMDFhODYwMTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS259MxsjN6lLPtQqywlx88plzhw FDAKV8leQnjhKJKgG4wkyLpV28bmcBGUIdreZfhT/sUnCriM6MjYCwdIR1D8lHSf 7l9zjHAqryQq70IlKrl0sq+3+CuBJI5HKyPmMH8EqLK7EqUSGFnM86Gg+tFh9yKP SHcnD+JUYemQj96ejOFLI91m64WpVslq2tNSLnuelqOQ4wA4mlkdwtdoTVVsRAGB R6xsu2b1s44cKxwydiooLGhlJTRotf3nzm2ZQK1Gu8c4WQwFnq39uEZrjKmdBTQO rXtZCDZIv2vpUJTpezmcsKIFU9mJwzVJeAcY2njNVHYddHlaL29bW5NhgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsiCW8G0fqj2h/DAWg5JOAahgGWMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFObp6McQ J1U2+iohzmez+GPo1OOtfpWhxMXzx0BkG1+bIbkwZIc5Y/kyU1+xRh5hVxjtbBFd X4lLqIlKMXlhov+tx2QrHzotrXN9kI0SP/27QqKsOVfHr7W44EK3g7tKEKtjUmLr D3HJ9hLXjBsFZsQEw/Z+1CSi3SmtSsopar7kg0e12slGOpjPiFJyZ1YUuflQO+AN igJIZr0yV3qYwl0iJb50UopGjOvA6VGprrd9hwsD0zYL12e4nGFwoT9AVV2qUfnT FHau2Dn27ox2ULZXsCauJcS0G3ptTfm0ah8FYXadrzRWkpBCEge6T2n6c8AlNqMg +TKE1kY2k3lO3A== -----END CERTIFICATE-----Generated at Sun Mar 1 23:43:46 2026 by rpki-client