$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft File: ldEI8OhYaMK759ttc3cDTBMesiQ.mft (raw, json) Hash identifier: lPLQOjD4aWgcVxI0tQWPuH+hhE3qWGSlktt7Z3I7zxM= Subject key identifier: 86:A6:73:D2:A3:5F:B5:5F:31:5A:47:AB:64:7C:7B:81:54:09:C2:E0 Authority key identifier: 95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24 Certificate issuer: /CN=95d108f0e85868c2bbe7db6d7377034c131eb224 Certificate serial: 019EBEB5A80CE0DD46617AA4DC8BA3F657C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft Manifest number: 5D Signing time: Sat 13 Jun 2026 02:00:36 +0000 Manifest this update: Sat 13 Jun 2026 02:00:36 +0000 Manifest next update: Sun 14 Jun 2026 02:00:36 +0000 Files and hashes: 1: 0PDWE0nMAiZTt99GCoWTLfpUdds.roa (hash: 10Qjb6N84Go0JfMlcwy2hguZG6CNNMPMXT+0qVZv6NQ=) 2: 3FWP7V-FXpjXJ8qT_nK1ApWUTe8.roa (hash: 4qunKMd7lr5mGLKWGnGHlTizo4GbcKUIIoZzDR/Kfi8=) 3: 4NIgVNVxtvl1Le7xM9tk07FEDr0.roa (hash: D8yrqmJYc77fPtZi/3U1V+IUlhSOYsgr+HPqobUY/Dk=) 4: 7n2infgWrE4JL7k5asjX7qnGyAw.roa (hash: dte7Z2uBACH/Rgkx3WVltu9NnfogNr5K2lV1ZcQxYxg=) 5: B0SDH2aRnWorkQimCU9ZaN8sN8Y.roa (hash: I2N0LOYgt4RTmnxgI8qa7qZDcREZeIIkCXkZWjWAF+k=) 6: ChqyPMGCSOUDm1bdXQ9g6sWSH9c.roa (hash: hXm8PlWQJAuHviDWyYwa8XyAhPfPUrOKx9uQbDhqcfw=) 7: ExBLSJduFsOWh6AOVHx5e5Q1LwI.roa (hash: xkKV7sPTH+RmQwML8DNjE5FDz2+dIJ5yWuOJ3vyGkJ0=) 8: F8emzs3_B0YGWDwCVloq5B3EHIg.roa (hash: BMRGJRbw9tzwz0dEpd1mJdklDFG0Z3cF3+GRrdDYqgU=) 9: G85sD1kwmB21ByXHaKc0GV6KI9o.roa (hash: 7OuA71y4NDBK43Q3q72+2Xt8GEEBR4zBYlY0WhQZpHg=) 10: HvgsdOOmxn9VMlqyv8I6hsxFfnQ.roa (hash: 7H3TvppIP2Zon3/lh7pr4yH6wvv/bxu/N0+89lLb9GA=) 11: I_lv8f4Zd87SDL3QiO0bVVg2MT0.roa (hash: LnGuklmE++SRFqSxhtkYU2out4UNjwQParJVowwKeL0=) 12: K5ZK_0yHF7TKo5P6sKE9HQsx4as.roa (hash: NUbkiqk2ewgCgfuJMa/I176Kz4nu4H8nt4fQxUeycrw=) 13: NND9D0QUuqRwWfk2FQ5TLL1ITvQ.roa (hash: 0qTVd2PVqOt1Nyg+T/NMU+GljS/P/2b6OvQkmBMunY8=) 14: OUZSYrACRb0MtweQQlW8oQ6czSY.roa (hash: 4jVqaEPhxVWedKUSlq4RiAa7WXShcsBViIUW7w7OLjM=) 15: OztDmiepQwRYhrix-PRGHdAz6M8.roa (hash: sLCeAtP5z3iG+JsX1fowyEeFT/lZ+JODD3Wy5bQ7SzQ=) 16: SfhXmPqo2TkF6qz1ZFtHiaQPNso.roa (hash: R4Cg09rYG8YgQq3VlbbRT6XTdxzKjoe3T18chTy2C1Y=) 17: ShSeCANkTHe7RfqqNC0cxUUZq4k.roa (hash: L7yVdSHXXtYp7vs7i1S0WzfgSs/SdR1cCwYinXC7wTA=) 18: XPOEWfnMVhe80O0PhqrGqhClcfw.roa (hash: SlGsDafqes4vsxe9B3q0eS5Wdrhz1vStfHdoa8gVTIw=) 19: YH2vXeXFSATJBU77lTraWZOobkI.roa (hash: 3Rde0IgsWEHBVWB15AQuqpz+vasmoNOZ+JWVjrrdaJA=) 20: gdHHIht-p_J7WYLpqWp6qtdyvi4.roa (hash: nxF0HQ/YaR5bdB5T1haeYt6jDUjZIF4u9B0Mkug8U2U=) 21: j5XXmlGGY1dqOLF0DNHKK3ZRzkA.roa (hash: AiHtZhjIv2Oz/tKHfl8zkrHe8iUj0cOjhIMgLwQ0U6Y=) 22: ldEI8OhYaMK759ttc3cDTBMesiQ.crl (hash: F/sNhYAQZkbbHv/5t22FAVRN5pyuhbghit3PZxjPARQ=) 23: o8ligzOvQoUkECiT-w6w1996f1Q.roa (hash: qnsWdMt0ZdxKFxsTFLinPKUDT7ezBqYoDae3GnHUbxo=) 24: qoUOShqlBxi4uFIhSlbStE7M3e8.roa (hash: rC7ceLZFty/FA8ZSkSfbq9hz9oq7Rm9x7P/1AJw3hZw=) 25: uZbkTMDgiuHZdZDDd4qspq7Rqmk.roa (hash: qDORJv5XEXaYN8VvbkYvbmDenwpX1dMKSW1ci6gD9CA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:b5:a8:0c:e0:dd:46:61:7a:a4:dc:8b:a3:f6:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95d108f0e85868c2bbe7db6d7377034c131eb224 Validity Not Before: Jun 13 02:00:36 2026 GMT Not After : Jun 14 02:00:36 2026 GMT Subject: CN=86a673d2a35fb55f315a47ab647c7b815409c2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6c:d2:90:d6:d7:77:07:44:af:1d:ef:0e:f7: 48:0b:84:ea:4b:2c:6b:5a:a6:80:41:7c:bd:74:44: 17:88:c0:1c:d4:ea:d2:23:86:7f:8c:ef:50:db:1a: 7d:a4:61:ab:23:69:54:2c:bd:9d:5f:fe:62:21:7c: f1:cf:fe:2b:23:8b:86:78:7f:bd:c1:ff:f3:b5:42: a8:ea:d4:05:0f:ec:f6:b9:80:ea:c9:bf:cd:7e:77: a2:55:d7:20:f5:80:99:d9:60:b6:3b:b2:de:bc:15: 80:57:be:00:70:4d:98:d9:e1:19:4e:ef:6d:95:97: d5:7f:14:0a:6f:53:3f:60:eb:22:64:39:2f:b9:b3: 3d:9e:ae:5b:c4:97:5e:e1:68:26:a1:17:f3:5c:91: da:e5:6b:4d:1a:be:2f:fe:9e:fc:f0:22:ac:56:21: f0:f9:3e:c2:62:c7:ea:70:ac:66:e1:34:ef:03:fb: 4c:d3:be:eb:21:99:01:f4:02:71:d0:a4:f4:9d:65: 5d:f4:ce:58:49:28:ec:ff:b5:8b:fa:61:38:d4:1d: 70:25:73:96:96:15:54:38:8c:06:d7:d9:0f:4a:d3: a5:42:83:00:01:19:60:7b:ec:0a:5d:08:3b:62:a2: 01:79:bb:9f:24:9b:21:bf:4e:bf:dd:4b:a6:cc:c6: 02:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A6:73:D2:A3:5F:B5:5F:31:5A:47:AB:64:7C:7B:81:54:09:C2:E0 X509v3 Authority Key Identifier: keyid:95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:0e:28:49:77:9b:e8:33:4a:d1:3b:6e:60:c8:7d:d2:ad:7f: 50:78:56:0a:ec:af:70:2b:38:4f:9b:eb:2d:ff:ee:69:d0:fb: ac:85:e9:4b:b6:12:dc:e7:b3:bc:a3:c1:fc:33:bc:51:b3:9e: 8a:3c:43:00:1c:58:33:96:21:2a:4b:05:f0:65:e6:5f:16:71: 35:80:05:55:5c:ec:a5:70:de:3e:47:3b:12:87:5f:c6:63:f2: 53:ae:35:c1:ae:0c:3e:c3:b4:0a:04:e3:18:f9:de:62:8a:af: 1c:dd:45:04:58:5c:26:46:d4:4e:8f:12:cd:07:0a:5e:7a:e5: dc:51:85:b0:98:0d:9d:88:6f:60:c4:1c:47:d5:6e:e3:c4:b7: f6:42:0a:9f:52:92:4b:0b:e5:0d:f6:f8:c1:7e:be:13:5a:66: d7:43:f1:90:d6:c4:73:b4:11:3f:27:ba:be:f8:74:ec:31:7b: e4:3c:41:95:bc:ef:08:4d:1f:48:88:b8:62:63:32:9e:b2:c1: c7:ca:68:1b:fa:e0:4c:cc:07:ea:64:e6:ce:be:e9:5d:a0:c9: f9:90:de:d5:42:ec:93:6b:85:83:c8:7f:f7:55:8a:f0:64:89: d6:9d:ee:57:0c:14:5a:54:76:c7:88:f8:ce:8a:c2:e8:cb:46: e3:65:80:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+tagM4N1GYXqk3Iuj9lfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZDEwOGYwZTg1ODY4YzJiYmU3ZGI2ZDczNzcwMzRjMTMx ZWIyMjQwHhcNMjYwNjEzMDIwMDM2WhcNMjYwNjE0MDIwMDM2WjAzMTEwLwYDVQQD Eyg4NmE2NzNkMmEzNWZiNTVmMzE1YTQ3YWI2NDdjN2I4MTU0MDljMmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WzSkNbXdwdErx3vDvdIC4TqSyxr WqaAQXy9dEQXiMAc1OrSI4Z/jO9Q2xp9pGGrI2lULL2dX/5iIXzxz/4rI4uGeH+9 wf/ztUKo6tQFD+z2uYDqyb/NfneiVdcg9YCZ2WC2O7LevBWAV74AcE2Y2eEZTu9t lZfVfxQKb1M/YOsiZDkvubM9nq5bxJde4WgmoRfzXJHa5WtNGr4v/p788CKsViHw +T7CYsfqcKxm4TTvA/tM077rIZkB9AJx0KT0nWVd9M5YSSjs/7WL+mE41B1wJXOW lhVUOIwG19kPStOlQoMAARlge+wKXQg7YqIBebufJJshv06/3UumzMYCtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIamc9KjX7VfMVpHq2R8e4FUCcLgMB8GA1UdIwQY MBaAFJXRCPDoWGjCu+fbbXN3A0wTHrIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGRFSThPaFlhTUs3NTl0dGMzY0RUQk1lc2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYt NzJmYjk3ZDU5Y2U0LzEvbGRFSThPaFlhTUs3NTl0dGMzY0RUQk1lc2lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYtNzJmYjk3ZDU5Y2U0 LzEvbGRFSThPaFlhTUs3NTl0dGMzY0RUQk1lc2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoA4oSXeb 6DNK0TtuYMh90q1/UHhWCuyvcCs4T5vrLf/uadD7rIXpS7YS3OezvKPB/DO8UbOe ijxDABxYM5YhKksF8GXmXxZxNYAFVVzspXDePkc7EodfxmPyU641wa4MPsO0CgTj GPneYoqvHN1FBFhcJkbUTo8SzQcKXnrl3FGFsJgNnYhvYMQcR9Vu48S39kIKn1KS SwvlDfb4wX6+E1pm10PxkNbEc7QRPye6vvh07DF75DxBlbzvCE0fSIi4YmMynrLB x8poG/rgTMwH6mTmzr7pXaDJ+ZDe1ULsk2uFg8h/91WK8GSJ1p3uVwwUWlR2x4j4 zorC6MtG42WAFw== -----END CERTIFICATE-----Generated at Sat Jun 13 10:18:48 2026 by rpki-client