$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft File: lAp03bdcaahF18xWmu2iZn8UG0Y.mft (raw, json) Hash identifier: R9s+SKEsLPHFuhnUSb+A1cQqiX8piKBRI0sOSYZGa4U= Subject key identifier: CC:03:C9:C9:59:E1:E5:D8:82:D7:AC:D2:26:E4:BD:09:3B:70:2D:0E Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46 Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46 Certificate serial: 01A0CD48471E31F1E10E11646C938A55F7A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft Manifest number: E5 Signing time: Wed 23 Sep 2026 08:01:01 +0000 Manifest this update: Wed 23 Sep 2026 08:01:01 +0000 Manifest next update: Thu 24 Sep 2026 08:01:01 +0000 Files and hashes: 1: Ax21UmMC0-KicwkMfpA7w8nCx0c.roa (hash: ltSg8LfKIU6cZnCzTqsVYJsYqcS6HCk2VCAS4iYtQ1c=) 2: CRweVTgebnTaIIJuvD2Vpm_hEI8.roa (hash: 0TfSHKCcdRm11P/Z+pghiutPw8OkEPy0pXyOhDApvC4=) 3: EAu9PVFOc2HMIqwl2TAEKVMKjhM.roa (hash: +RxDuulMgzt590ZJGALAr+G6BMF4rXunGyJvYgQw8JU=) 4: IjLtRrWaUXgGKy4qwi6kM6pSm9w.roa (hash: Vqmxt3BWqE/GJfg1ZTqUCwGCq0LbFCJvOwfHIeCWm6o=) 5: K3HHt021rxfspiJXL_jbb9NfheQ.roa (hash: J0SaNkkovQ/E9TIPjipdYFj6AWH79jJ7DyPTP9X1t68=) 6: TTvte-vG-uL-QJEIgq3vCyoRt5s.roa (hash: SkEV3UZWo3lRtSvULxQM+XKWPgskfo67/AN3jkd+Qtg=) 7: f1IHBZhxZ4ZdDVRS_NRodLQ9rrs.roa (hash: ZOBtlDa4skX18xmRlY6uCZ9cujDrQ2YISweWZDnuRwY=) 8: fOOP_exg4KET6deawpN7oz_WdzM.roa (hash: z2o86ioauTHfgn4E3LgCB4xZMv1SBlDr/6hS0phGqqc=) 9: lAp03bdcaahF18xWmu2iZn8UG0Y.crl (hash: iom7E7gsuJLapwRecLO3DqnkG6phuk2w4zYcdhLEkL8=) 10: pZ7B3AgctzgfSs7T-w6ArLJB6W0.roa (hash: 6B92+t7EjqClqc9AMNDLM32J3Uyl6JKD1nH0ZOx3K2s=) 11: wscbDwHrmLx272pKZtGELGhuuXA.roa (hash: UY3EK2y/Cexn1/dQSElqlxjbeeV/MbtFdhvzL6gAd7k=) 12: yLdJIjgYrWUQ7TDFqO7qNYlFDjU.roa (hash: dXZjSLlSeRIZKGocGL3yryQVuOVReJZI8cSiDLaCvDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:48:47:1e:31:f1:e1:0e:11:64:6c:93:8a:55:f7:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46 Validity Not Before: Sep 23 08:01:01 2026 GMT Not After : Sep 24 08:01:01 2026 GMT Subject: CN=cc03c9c959e1e5d882d7acd226e4bd093b702d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9d:aa:0a:92:3b:ab:e8:9c:5b:6a:cf:c1:eb: 93:96:77:f3:23:fe:43:6f:86:53:49:1b:6d:51:6a: 27:8f:bf:25:5e:7c:36:03:f2:85:24:f4:be:53:35: 76:eb:6d:b1:bf:32:aa:b0:c4:a0:ad:41:a1:a2:26: c3:ff:d2:ba:95:0b:1d:cd:c1:ee:8f:a1:9a:c3:db: 74:47:ac:98:dc:b2:24:40:45:76:63:b9:a9:86:6b: 04:74:1b:01:e9:e9:0e:96:a1:54:2b:4d:02:de:91: 21:7b:68:bf:02:39:01:31:05:98:e0:e6:4a:7a:3d: bc:2e:7c:c7:30:c9:91:9b:bc:ef:43:0a:af:f8:40: 1f:e7:f0:80:e2:bb:bc:d2:06:48:cd:82:be:f1:fc: bd:a8:cd:e7:7f:65:f5:42:d5:64:e7:ee:11:19:27: d4:b0:9c:cc:a6:18:5c:ad:e8:81:e3:28:91:7b:64: 0d:1a:1b:e6:b3:2a:ce:5b:25:fe:94:5f:7e:d1:cd: 48:b0:cf:67:20:39:18:1c:64:24:e2:d6:af:31:a4: c0:ff:27:4a:12:c6:4c:c2:0c:43:65:10:0d:64:c8: 9d:22:51:34:d5:81:0d:00:70:95:6d:1e:bc:31:53: a8:2e:16:08:1a:60:cd:45:fc:05:42:57:f0:c4:71: 81:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:03:C9:C9:59:E1:E5:D8:82:D7:AC:D2:26:E4:BD:09:3B:70:2D:0E X509v3 Authority Key Identifier: keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:5c:52:15:68:7d:ee:4a:92:f6:4c:d7:43:02:95:b5:1b:a5: 74:26:47:12:a9:e9:5a:c2:c9:b9:b4:d3:53:e7:05:0e:fd:fd: e0:65:1b:e8:a4:6e:6b:0a:b2:b3:3c:dc:ed:e0:c6:96:89:ff: d8:ad:5c:f7:4e:58:cc:1f:36:17:81:97:0d:3d:8f:27:22:9b: 7f:79:a8:e9:35:6b:e3:70:65:03:9e:45:1d:fd:98:f5:9c:c6: 79:09:55:64:ee:12:73:eb:fe:90:64:1f:90:7e:bc:9d:b9:22: d1:ab:07:eb:69:87:ed:5b:d3:86:5b:d1:66:54:8d:17:94:e9: 2c:79:e7:37:32:0c:0c:c6:01:ce:d8:dd:28:f8:fc:3c:ea:80: 24:2b:45:14:dc:67:fe:38:fa:fa:4a:7b:6f:fc:fb:f4:f9:42: 63:de:b1:4b:89:12:bd:bf:de:30:c5:31:9a:88:8b:1a:c2:7a: 93:64:4a:b6:d9:30:17:c8:f5:06:b8:f9:d8:e8:3b:c7:4c:d6: 7e:ff:0c:b8:4d:5a:44:38:9a:47:53:18:ca:c7:74:f2:c3:3a: dc:44:ea:ff:5f:e9:e3:14:99:fd:40:17:bb:f6:d5:03:64:79: 46:98:d4:96:9d:28:0f:0f:8b:e1:ef:51:59:7d:87:cc:49:5a: b0:ae:37:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNSEceMfHhDhFkbJOKVfemMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGE3NGRkYjc1YzY5YTg0NWQ3Y2M1NjlhZWRhMjY2N2Yx NDFiNDYwHhcNMjYwOTIzMDgwMTAxWhcNMjYwOTI0MDgwMTAxWjAzMTEwLwYDVQQD EyhjYzAzYzljOTU5ZTFlNWQ4ODJkN2FjZDIyNmU0YmQwOTNiNzAyZDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu52qCpI7q+icW2rPweuTlnfzI/5D b4ZTSRttUWonj78lXnw2A/KFJPS+UzV2622xvzKqsMSgrUGhoibD/9K6lQsdzcHu j6Gaw9t0R6yY3LIkQEV2Y7mphmsEdBsB6ekOlqFUK00C3pEhe2i/AjkBMQWY4OZK ej28LnzHMMmRm7zvQwqv+EAf5/CA4ru80gZIzYK+8fy9qM3nf2X1QtVk5+4RGSfU sJzMphhcreiB4yiRe2QNGhvmsyrOWyX+lF9+0c1IsM9nIDkYHGQk4tavMaTA/ydK EsZMwgxDZRANZMidIlE01YENAHCVbR68MVOoLhYIGmDNRfwFQlfwxHGBDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwDyclZ4eXYgtes0ibkvQk7cC0OMB8GA1UdIwQY MBaAFJQKdN23XGmoRdfMVprtomZ/FBtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1xSFWh9 7kqS9kzXQwKVtRuldCZHEqnpWsLJubTTU+cFDv394GUb6KRuawqyszzc7eDGlon/ 2K1c905YzB82F4GXDT2PJyKbf3mo6TVr43BlA55FHf2Y9ZzGeQlVZO4Sc+v+kGQf kH68nbki0asH62mH7VvThlvRZlSNF5TpLHnnNzIMDMYBztjdKPj8POqAJCtFFNxn /jj6+kp7b/z79PlCY96xS4kSvb/eMMUxmoiLGsJ6k2RKttkwF8j1Brj52Og7x0zW fv8MuE1aRDiaR1MYysd08sM63ETq/1/p4xSZ/UAXu/bVA2R5RpjUlp0oDw+L4e9R WX2HzElasK43LQ== -----END CERTIFICATE-----Generated at Wed Sep 23 12:38:05 2026 by rpki-client