$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: j9uihYFTU2qfaBu4JYCkI2WMfTcgazwx20FxeVGSFA4= Subject key identifier: 88:8F:E5:55:23:58:54:A4:00:FF:98:F9:D0:5C:09:26:64:95:A2:60 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 01A0C031B2642EEDC1EC87FDD0E0E6F0A4D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0BDA Signing time: Sun 20 Sep 2026 19:01:17 +0000 Manifest this update: Sun 20 Sep 2026 19:01:17 +0000 Manifest next update: Mon 21 Sep 2026 19:01:17 +0000 Files and hashes: 1: EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa (hash: td45xoqPpbc6Gcv+omp/fWPWBTYjdFq1Rce3dc0yMFE=) 2: GFld6khnEFpi6gQW0hMwMmLlwl0.roa (hash: I//YiN+Se4j9l8lgpKjzKKrJJsrwrv0cFrGyIWJUOJM=) 3: NIlWiQEY3RuqoaUyaoDMEQwOomA.roa (hash: 2SReN7GjSlbbBzqYc2FsbGOus9FoN+9Ni58tpYY9o5I=) 4: Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa (hash: EJSmVb0JmOGritsgWS3ZtbKYPG2hsEELjPpmAJHyJCw=) 5: bGDcrsy1uQ5Mie-xzDZjQZVH5Bc.roa (hash: BiNEWFnYGjmRdfcF3Lt+gPgQZVk5kMfGR526Ub/jeCI=) 6: cUAPfDvh9ctdBxtYWpRtEO8lG-g.roa (hash: b7MFeinCWo8o8FGB9kNt+44ggK2LvY6c1Zj//B8xVDY=) 7: eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa (hash: a793akF/TsnRIOMvjjqGG7ES5VGanrP8pXq6vUrCFVg=) 8: ix3G7JJ__thdkqzxBKhHSgEyUHQ.roa (hash: tqrv+mk7OqdSNSDsJu86ikaVD3U+743I3Wq1BdDs+CY=) 9: j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa (hash: gQFSyERJDH6nAPPc5747gmPm78inz3QBTsIip7aNmlE=) 10: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: 9KLLvXErAdZUxGJyqVMeWukR5x/4sWhK/cUT6vT6NJQ=) 11: tsos8eFPeooULoppkyeNfVcA8Jk.roa (hash: P1kvV9Q/5XqDoLtfOjAVY+r8AgKwUeqcSTXWYXo6SZk=) 12: ujxhGCIYEFST9j-DRoKisCQQu7c.roa (hash: AnXG8guwVLItbuN1JjYAFkgz+rL1QHqF7D8yDPRN/BY=) 13: wLzBl1TIo7EO7s1obxvC0i1YAfw.roa (hash: e/MgA8dzgW4G4QsjGyKgevc8bH2s9NTc1MsFkFjalAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 16:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c0:31:b2:64:2e:ed:c1:ec:87:fd:d0:e0:e6:f0:a4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Sep 20 19:01:17 2026 GMT Not After : Sep 21 19:01:17 2026 GMT Subject: CN=888fe555235854a400ff98f9d05c09266495a260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:d0:1c:17:88:60:eb:72:fd:dc:d6:ad:53: 5e:e5:be:cf:51:89:3f:40:01:40:ed:0e:ec:24:42: df:7d:7f:08:1e:e0:45:d1:ec:32:be:55:1b:54:e8: 81:ad:9f:ba:9b:bb:de:d5:4f:a0:20:96:16:ca:02: 7e:4a:84:b9:38:06:68:28:da:cd:25:a0:46:16:e0: ec:28:af:d2:16:4e:dd:88:55:df:7a:c7:44:13:18: 70:65:c0:ce:5d:64:71:f8:44:f4:05:f0:1c:12:50: 81:11:83:4e:41:19:8c:b2:59:88:27:de:94:39:66: 07:0a:60:2a:cd:cb:b9:a1:43:e6:a6:df:8f:80:a2: 8c:f0:b1:db:c3:cc:e1:0c:00:5c:f2:c8:dd:f6:fc: 87:27:90:3a:36:17:ef:4d:5d:f0:dc:c1:b1:34:29: 95:4a:a9:12:c1:60:cb:f8:30:a4:60:9b:14:58:7d: 02:b1:25:bd:15:4d:17:3c:c2:7f:63:b4:e7:3c:58: 19:db:fa:2a:86:82:a0:2c:c0:47:53:86:24:dc:32: 97:b9:0f:d2:9a:19:db:e8:8a:5d:4a:d1:95:af:cd: 20:91:bf:c7:42:fc:22:ae:0b:e1:c3:7b:73:96:4e: e2:1a:b9:1d:91:14:84:df:e9:aa:17:f3:45:07:f7: 54:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8F:E5:55:23:58:54:A4:00:FF:98:F9:D0:5C:09:26:64:95:A2:60 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c3:8e:25:19:1a:30:3b:1e:43:85:f1:ce:31:af:8b:7c:21: ce:7d:2c:97:92:7b:af:c9:ad:1d:47:5b:1a:c3:df:66:07:84: 3d:ea:0e:2a:86:17:b6:31:b8:2a:b2:82:68:50:80:6c:c0:06: 3e:ea:81:46:07:d6:6c:b0:07:4f:85:7d:67:5b:c7:df:f4:76: 9c:c1:e8:0e:0b:b7:ee:ca:75:6f:a6:55:ab:e0:ba:32:1d:73: 56:c0:f2:2e:30:30:41:06:77:a0:35:fb:1c:bf:cb:5a:c2:54: 77:45:ec:94:40:28:0b:e2:7b:fe:3f:d5:42:e5:c5:3b:07:2b: 6d:02:ec:ce:9a:d5:24:6a:e1:c9:cb:b1:e7:b0:3e:4e:d1:96: 10:27:e5:78:18:aa:c4:68:88:41:d0:9f:8d:ea:87:e4:11:2b: 4d:28:a1:7c:5f:02:47:34:9e:0d:e4:05:69:3f:70:65:ba:0a: 38:a8:97:53:a9:8a:0b:04:b7:06:aa:05:e7:0e:0c:c3:85:fe: cb:27:c5:8c:97:da:5a:71:1d:ef:3c:53:be:49:da:54:15:fc: c2:da:c0:08:6e:f9:76:28:62:bd:78:2e:d4:26:2b:f5:3c:c8: 26:46:8a:e9:2d:d6:7b:ca:ad:89:60:c2:cc:49:c5:47:e9:8d: 82:53:ef:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDAMbJkLu3B7If90ODm8KTQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwOTIwMTkwMTE3WhcNMjYwOTIxMTkwMTE3WjAzMTEwLwYDVQQD Eyg4ODhmZTU1NTIzNTg1NGE0MDBmZjk4ZjlkMDVjMDkyNjY0OTVhMjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjHQHBeIYOty/dzWrVNe5b7PUYk/ QAFA7Q7sJELffX8IHuBF0ewyvlUbVOiBrZ+6m7ve1U+gIJYWygJ+SoS5OAZoKNrN JaBGFuDsKK/SFk7diFXfesdEExhwZcDOXWRx+ET0BfAcElCBEYNOQRmMslmIJ96U OWYHCmAqzcu5oUPmpt+PgKKM8LHbw8zhDABc8sjd9vyHJ5A6NhfvTV3w3MGxNCmV SqkSwWDL+DCkYJsUWH0CsSW9FU0XPMJ/Y7TnPFgZ2/oqhoKgLMBHU4Yk3DKXuQ/S mhnb6IpdStGVr80gkb/HQvwirgvhw3tzlk7iGrkdkRSE3+mqF/NFB/dUZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiP5VUjWFSkAP+Y+dBcCSZklaJgMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsOOJRka MDseQ4XxzjGvi3whzn0sl5J7r8mtHUdbGsPfZgeEPeoOKoYXtjG4KrKCaFCAbMAG PuqBRgfWbLAHT4V9Z1vH3/R2nMHoDgu37sp1b6ZVq+C6Mh1zVsDyLjAwQQZ3oDX7 HL/LWsJUd0XslEAoC+J7/j/VQuXFOwcrbQLszprVJGrhycux57A+TtGWECfleBiq xGiIQdCfjeqH5BErTSihfF8CRzSeDeQFaT9wZboKOKiXU6mKCwS3BqoF5w4Mw4X+ yyfFjJfaWnEd7zxTvknaVBX8wtrACG75dihivXgu1CYr9TzIJkaK6S3We8qtiWDC zEnFR+mNglPvZQ== -----END CERTIFICATE-----Generated at Mon Sep 21 01:39:31 2026 by rpki-client