$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: IXjv2cSAo/TR/Kmfu762xW1ylohnmbT2KULuf+hi/r0= Subject key identifier: C4:56:1B:76:A6:11:1B:1D:27:A9:B8:C3:A0:FD:89:67:A5:FF:6C:D8 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019EBF23C73328F02C23E554580E3A70A0A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 0A57 Signing time: Sat 13 Jun 2026 04:00:53 +0000 Manifest this update: Sat 13 Jun 2026 04:00:53 +0000 Manifest next update: Sun 14 Jun 2026 04:00:53 +0000 Files and hashes: 1: 1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa (hash: AsfQqdl/xsaW9IYhySqScr2PgyTmm64VZ6eM34CvYX8=) 2: 3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa (hash: 37lpnBa4Nsmw9t09Qo02WLg5+MVXXnRKupYOqt10ZMk=) 3: 41UDb8PFLYomt2031aTgiY3AQ40.roa (hash: bmp07VNfPBzFitEFlf/fmkB49dR4XxuwZAwtFoPyweY=) 4: 46YPaJsxK-Hh8hedE4d_sKJPbo4.roa (hash: Ln4mKYRG2M1uFSlkxDfyNh3L7AXwbRgdpA6kJaEdsKY=) 5: 4v_iwBzOpciC0YWjVDg_w5r563M.roa (hash: F5kWV5HiM8c6dQiiFtOG3n7NW+KRh+raqsJXmMUP0SM=) 6: NJpLyq2ti9mgv7XrR8IcC5lB92k.roa (hash: X6oNrTIzLpsjoLrgrTl+vU7DqhTACh+EHu5pKkzZfC4=) 7: Rj7C9HFWuzFDb2nAa-azSTKfGOQ.roa (hash: vFchV3jK24P/EgvD1iXL5CmPkvqderYcShvnrsGp47Y=) 8: Ty5DpdqPOmydyDg_bQAaBkoGLp8.roa (hash: akNfDUTh82avi6l8pVfNZIbM0Tw4axKISXdVg+zVbtA=) 9: V9T0hlZ73UkhAau7M6ckTYNUkb4.roa (hash: fNCHN8qNcRcJku7ig7PyvdGoUoQirOawzI5B34WnFFM=) 10: WVBHWhF2YnsBiDKywLiLep0rjBY.roa (hash: aN0kcBOQHoBE4eQsK5sIL2kbPPgYYdq34kQ1AVnyC9A=) 11: YzVa-BUJnuWH4diErgPUKokymQ0.roa (hash: QcBSZdMSRm/lWv+szi2oRyb+M3WP6bg67A4t9dEA1tc=) 12: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: /inRsUrE9T71goXs8Kj31a2U0pPAMCrEU7/4eooOvA8=) 13: yvu8AxQYxM3ws7oGYgq0UFdLwY4.roa (hash: 87fEDzcHgs5DE+7kqQ5/TAh2kzd7q9M1YgTV/N72Otc=) 14: zly0HPjprxdyVkXHR1aHuRvdMX0.roa (hash: AhwMXgJ+aAK91jE5Y/Rl3QNmkW9Lhcao2gRRENl3Nek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:23:c7:33:28:f0:2c:23:e5:54:58:0e:3a:70:a0:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Jun 13 04:00:53 2026 GMT Not After : Jun 14 04:00:53 2026 GMT Subject: CN=c4561b76a6111b1d27a9b8c3a0fd8967a5ff6cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:15:66:89:24:a2:0c:0c:43:ee:34:09:3c: 16:6b:e4:3a:63:11:39:4e:1d:b8:ac:6d:1d:8f:8c: a2:47:2f:c1:97:b3:46:39:83:f3:dd:21:34:74:f6: ab:e2:d0:f0:fa:a0:b0:15:23:70:f4:e8:89:4b:54: 65:93:ec:12:fd:0d:ff:67:3c:fb:40:14:37:06:bf: 79:6f:32:6c:1d:73:db:70:f8:70:83:04:d6:76:37: 53:36:ee:b5:ea:2f:b1:7a:3c:5b:ee:ef:2b:79:5b: bc:60:be:ad:bf:f3:bc:64:c5:a8:51:a4:6f:ca:e6: 54:05:2d:db:30:ca:5b:0d:7e:04:e6:dc:bb:84:7a: 90:bd:d5:57:2c:13:f2:4d:4f:8e:09:2a:2e:03:57: c5:f4:f1:6d:16:f0:79:d7:fb:a1:43:51:75:33:fe: f2:dd:6d:07:d1:09:97:47:e3:42:cc:f6:98:aa:cf: bd:50:56:69:54:f8:37:51:a5:0e:ba:f8:28:13:55: ad:0b:0a:16:f9:c0:04:5a:a8:f1:ce:0a:a8:d7:90: 26:ba:a6:46:fa:83:6c:94:cd:5d:23:73:eb:3e:79: d5:a2:7e:66:d0:88:6f:da:5e:38:7f:3d:dd:c4:98: f3:61:61:64:b1:7d:fb:6f:61:a1:7b:ea:78:fb:c9: d4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:56:1B:76:A6:11:1B:1D:27:A9:B8:C3:A0:FD:89:67:A5:FF:6C:D8 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4d:05:73:cd:4f:92:7d:39:bf:bb:2f:98:d8:f8:a6:79:6b: 55:d0:b1:8b:11:57:f9:f7:63:0f:4d:aa:79:72:3a:ce:99:0d: 01:6f:f7:17:93:fc:de:2e:84:ea:28:d3:1d:6a:69:c7:c6:ac: b8:5c:ec:25:77:44:3a:18:ad:8c:cd:c4:29:a6:30:c6:6d:4a: 95:49:93:db:af:66:95:69:b3:53:75:cf:67:c6:61:65:3b:14: 66:02:bb:dc:8c:09:c5:16:fb:9c:a9:f3:78:06:39:45:8e:12: ec:6e:83:1b:54:0f:04:dc:b4:d2:d7:4c:94:b8:59:bf:bf:34: f7:54:cb:33:b6:cc:01:68:98:0e:85:77:73:1d:5e:31:da:19: 0a:8d:0f:80:79:0c:06:28:06:13:1e:09:9b:33:c5:3e:88:1f: 77:45:4d:51:06:8d:c1:5d:0c:c4:95:e2:14:32:1e:70:ba:19: 5f:09:89:39:68:dd:2f:6c:a2:be:a8:f9:12:2e:82:e6:4d:75: 52:84:bc:48:a6:38:cc:91:ea:71:7a:c8:9c:f6:d4:9b:a4:25: 57:d6:82:4f:50:eb:ef:f5:03:95:34:17:4c:b0:ca:e7:87:4c: 74:68:56:6b:60:a8:76:a8:bb:44:f4:55:29:0c:77:3a:e2:82: 54:f3:b5:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/I8czKPAsI+VUWA46cKCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwNjEzMDQwMDUzWhcNMjYwNjE0MDQwMDUzWjAzMTEwLwYDVQQD EyhjNDU2MWI3NmE2MTExYjFkMjdhOWI4YzNhMGZkODk2N2E1ZmY2Y2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwYVZokkogwMQ+40CTwWa+Q6YxE5 Th24rG0dj4yiRy/Bl7NGOYPz3SE0dPar4tDw+qCwFSNw9OiJS1Rlk+wS/Q3/Zzz7 QBQ3Br95bzJsHXPbcPhwgwTWdjdTNu616i+xejxb7u8reVu8YL6tv/O8ZMWoUaRv yuZUBS3bMMpbDX4E5ty7hHqQvdVXLBPyTU+OCSouA1fF9PFtFvB51/uhQ1F1M/7y 3W0H0QmXR+NCzPaYqs+9UFZpVPg3UaUOuvgoE1WtCwoW+cAEWqjxzgqo15AmuqZG +oNslM1dI3PrPnnVon5m0Ihv2l44fz3dxJjzYWFksX37b2Ghe+p4+8nUEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRWG3amERsdJ6m4w6D9iWel/2zYMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ00Fc81P kn05v7svmNj4pnlrVdCxixFX+fdjD02qeXI6zpkNAW/3F5P83i6E6ijTHWppx8as uFzsJXdEOhitjM3EKaYwxm1KlUmT269mlWmzU3XPZ8ZhZTsUZgK73IwJxRb7nKnz eAY5RY4S7G6DG1QPBNy00tdMlLhZv78091TLM7bMAWiYDoV3cx1eMdoZCo0PgHkM BigGEx4JmzPFPogfd0VNUQaNwV0MxJXiFDIecLoZXwmJOWjdL2yivqj5Ei6C5k11 UoS8SKY4zJHqcXrInPbUm6QlV9aCT1Dr7/UDlTQXTLDK54dMdGhWa2Codqi7RPRV KQx3OuKCVPO15A== -----END CERTIFICATE-----Generated at Sat Jun 13 08:18:38 2026 by rpki-client