$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: pepJMj6H1qi6ZiNGKOXT+jCmBFSWs5BE/o78fmwesFA= Subject key identifier: 1E:E3:7B:07:58:49:F6:C2:59:D5:30:56:D0:1D:B7:44:BF:6D:E1:40 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019FA9073764883F3BAEEE72A6FB279DDC98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0B49 Signing time: Tue 28 Jul 2026 14:00:50 +0000 Manifest this update: Tue 28 Jul 2026 14:00:50 +0000 Manifest next update: Wed 29 Jul 2026 14:00:50 +0000 Files and hashes: 1: EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa (hash: td45xoqPpbc6Gcv+omp/fWPWBTYjdFq1Rce3dc0yMFE=) 2: GFld6khnEFpi6gQW0hMwMmLlwl0.roa (hash: I//YiN+Se4j9l8lgpKjzKKrJJsrwrv0cFrGyIWJUOJM=) 3: Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa (hash: EJSmVb0JmOGritsgWS3ZtbKYPG2hsEELjPpmAJHyJCw=) 4: bGDcrsy1uQ5Mie-xzDZjQZVH5Bc.roa (hash: BiNEWFnYGjmRdfcF3Lt+gPgQZVk5kMfGR526Ub/jeCI=) 5: cUAPfDvh9ctdBxtYWpRtEO8lG-g.roa (hash: b7MFeinCWo8o8FGB9kNt+44ggK2LvY6c1Zj//B8xVDY=) 6: eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa (hash: a793akF/TsnRIOMvjjqGG7ES5VGanrP8pXq6vUrCFVg=) 7: ix3G7JJ__thdkqzxBKhHSgEyUHQ.roa (hash: tqrv+mk7OqdSNSDsJu86ikaVD3U+743I3Wq1BdDs+CY=) 8: j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa (hash: gQFSyERJDH6nAPPc5747gmPm78inz3QBTsIip7aNmlE=) 9: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: yDyba5tbbslDmWHes8fjaUb8mSw4KUIEH6+b72bvjFk=) 10: tsos8eFPeooULoppkyeNfVcA8Jk.roa (hash: P1kvV9Q/5XqDoLtfOjAVY+r8AgKwUeqcSTXWYXo6SZk=) 11: ujxhGCIYEFST9j-DRoKisCQQu7c.roa (hash: AnXG8guwVLItbuN1JjYAFkgz+rL1QHqF7D8yDPRN/BY=) 12: wLzBl1TIo7EO7s1obxvC0i1YAfw.roa (hash: e/MgA8dzgW4G4QsjGyKgevc8bH2s9NTc1MsFkFjalAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:07:37:64:88:3f:3b:ae:ee:72:a6:fb:27:9d:dc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jul 28 14:00:50 2026 GMT Not After : Jul 29 14:00:50 2026 GMT Subject: CN=1ee37b075849f6c259d53056d01db744bf6de140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:57:44:e6:d4:12:fb:8b:4a:c3:0d:f8:3d:e5: 28:53:43:58:9f:5f:d8:3c:27:cb:79:2d:d9:fb:ca: 7e:a1:0d:10:1d:70:25:2b:e7:d7:6f:90:a3:7b:49: 79:27:cd:82:49:8b:99:66:21:c6:1b:75:94:cc:ca: b7:f0:39:ea:3e:f5:8a:68:80:21:b2:86:f1:3b:ab: ed:3b:db:f3:96:c3:77:28:14:e3:75:1a:01:8e:c0: 4a:4b:d3:dd:28:23:bc:19:a3:49:95:28:36:81:32: 2b:7f:ca:4f:a5:a0:f5:6e:ba:bb:aa:a7:44:55:5a: a9:83:1f:e3:d8:b9:c5:92:8d:28:29:79:55:7c:01: 5f:68:78:84:70:3d:99:36:fe:41:1c:a0:ce:a1:19: 31:67:10:7f:91:76:4c:fa:fa:06:45:97:72:8e:d2: 8d:36:65:90:ab:f9:bb:47:50:e9:1f:d9:64:58:e3: f5:b8:3b:e4:10:dd:75:70:6e:d0:f8:56:4a:e3:55: 21:6c:e2:67:f7:d1:00:c2:34:22:ea:ec:1e:87:59: 50:76:69:a1:ed:01:e2:95:cb:a5:95:4b:63:46:30: 18:75:cd:23:18:3e:fc:90:95:16:fc:17:90:7d:00: 2b:88:7e:9b:b5:de:b4:4e:0c:e3:78:3a:3b:09:47: aa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E3:7B:07:58:49:F6:C2:59:D5:30:56:D0:1D:B7:44:BF:6D:E1:40 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:61:cf:16:9e:37:12:a7:80:5b:08:5e:93:40:e4:3c:cf:e4: e7:28:2e:64:d0:9c:61:63:f3:14:7b:de:7b:a3:17:a9:d4:b3: 56:b3:04:98:db:6e:74:a0:1b:84:6a:c2:85:7f:f1:f1:7f:9d: 56:96:ad:3a:f4:2a:c4:9f:27:98:10:11:24:40:c1:7c:9f:ec: 46:31:d3:0d:3e:d2:9a:a3:46:8d:7c:29:0a:62:78:9c:f9:fc: ed:d0:de:1c:af:be:33:ca:c0:bd:2d:55:38:18:fd:eb:ac:57: bb:a9:cf:26:95:dc:39:85:98:7c:7a:d4:ef:55:27:26:40:0c: a6:bc:75:fd:04:b4:ec:02:8f:aa:62:2a:76:b2:8d:6c:ab:a7: a6:27:79:51:69:96:48:f3:75:53:d8:75:45:a4:18:1f:fa:f5: a1:b8:42:02:07:40:ad:fb:e6:cb:99:6f:63:f6:49:8d:a0:0b: b6:57:9f:52:44:51:bf:ad:57:1c:c4:20:c6:42:d1:28:89:45: c9:3d:a5:c0:69:63:79:98:29:65:5d:41:85:c4:2d:cf:2e:9a: d6:1d:30:69:cd:27:90:30:94:8d:23:0b:4e:72:ec:0b:0a:80: 9c:09:75:84:56:53:7e:18:e7:21:58:d0:f2:2a:c1:55:af:e2: e2:f0:b7:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pBzdkiD87ru5ypvsnndyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwNzI4MTQwMDUwWhcNMjYwNzI5MTQwMDUwWjAzMTEwLwYDVQQD EygxZWUzN2IwNzU4NDlmNmMyNTlkNTMwNTZkMDFkYjc0NGJmNmRlMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuldE5tQS+4tKww34PeUoU0NYn1/Y PCfLeS3Z+8p+oQ0QHXAlK+fXb5Cje0l5J82CSYuZZiHGG3WUzMq38DnqPvWKaIAh sobxO6vtO9vzlsN3KBTjdRoBjsBKS9PdKCO8GaNJlSg2gTIrf8pPpaD1brq7qqdE VVqpgx/j2LnFko0oKXlVfAFfaHiEcD2ZNv5BHKDOoRkxZxB/kXZM+voGRZdyjtKN NmWQq/m7R1DpH9lkWOP1uDvkEN11cG7Q+FZK41UhbOJn99EAwjQi6uweh1lQdmmh 7QHilcullUtjRjAYdc0jGD78kJUW/BeQfQAriH6btd60TgzjeDo7CUeqqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7jewdYSfbCWdUwVtAdt0S/beFAMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmHPFp43 EqeAWwhek0DkPM/k5yguZNCcYWPzFHvee6MXqdSzVrMEmNtudKAbhGrChX/x8X+d VpatOvQqxJ8nmBARJEDBfJ/sRjHTDT7SmqNGjXwpCmJ4nPn87dDeHK++M8rAvS1V OBj966xXu6nPJpXcOYWYfHrU71UnJkAMprx1/QS07AKPqmIqdrKNbKunpid5UWmW SPN1U9h1RaQYH/r1obhCAgdArfvmy5lvY/ZJjaALtlefUkRRv61XHMQgxkLRKIlF yT2lwGljeZgpZV1BhcQtzy6a1h0wac0nkDCUjSMLTnLsCwqAnAl1hFZTfhjnIVjQ 8irBVa/i4vC3HQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:34:53 2026 by rpki-client