$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft File: lAp03bdcaahF18xWmu2iZn8UG0Y.mft (raw, json) Hash identifier: 0bKuVWC8IZni3gXGwoELMmgcMyt6YD7aKfbjdCT7vQ8= Subject key identifier: 5E:4F:4A:73:C4:D6:E6:B3:B9:2D:76:0A:B4:3C:DB:63:21:88:98:63 Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46 Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46 Certificate serial: 01A1DF1504B2A66D7224A94CF52B421B0726 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft Manifest number: 0173 Signing time: Sun 15 Nov 2026 12:00:58 +0000 Manifest this update: Sun 15 Nov 2026 12:00:58 +0000 Manifest next update: Mon 16 Nov 2026 12:00:58 +0000 Files and hashes: 1: Ax21UmMC0-KicwkMfpA7w8nCx0c.roa (hash: ltSg8LfKIU6cZnCzTqsVYJsYqcS6HCk2VCAS4iYtQ1c=) 2: CRweVTgebnTaIIJuvD2Vpm_hEI8.roa (hash: 0TfSHKCcdRm11P/Z+pghiutPw8OkEPy0pXyOhDApvC4=) 3: EAu9PVFOc2HMIqwl2TAEKVMKjhM.roa (hash: +RxDuulMgzt590ZJGALAr+G6BMF4rXunGyJvYgQw8JU=) 4: IjLtRrWaUXgGKy4qwi6kM6pSm9w.roa (hash: Vqmxt3BWqE/GJfg1ZTqUCwGCq0LbFCJvOwfHIeCWm6o=) 5: K3HHt021rxfspiJXL_jbb9NfheQ.roa (hash: J0SaNkkovQ/E9TIPjipdYFj6AWH79jJ7DyPTP9X1t68=) 6: TTvte-vG-uL-QJEIgq3vCyoRt5s.roa (hash: SkEV3UZWo3lRtSvULxQM+XKWPgskfo67/AN3jkd+Qtg=) 7: XhT-4APTELgjULu5pwHQO4PtpmM.roa (hash: +CkSHkW8ztUh8xHxuRZq43ecyQw3TY89oxatBJGHLhU=) 8: f1IHBZhxZ4ZdDVRS_NRodLQ9rrs.roa (hash: ZOBtlDa4skX18xmRlY6uCZ9cujDrQ2YISweWZDnuRwY=) 9: fOOP_exg4KET6deawpN7oz_WdzM.roa (hash: z2o86ioauTHfgn4E3LgCB4xZMv1SBlDr/6hS0phGqqc=) 10: lAp03bdcaahF18xWmu2iZn8UG0Y.crl (hash: 2yGp5JSI9gfZEgxIs9LOXRd2uBycyQGaTC2WNBpv3uE=) 11: pZ7B3AgctzgfSs7T-w6ArLJB6W0.roa (hash: 6B92+t7EjqClqc9AMNDLM32J3Uyl6JKD1nH0ZOx3K2s=) 12: wscbDwHrmLx272pKZtGELGhuuXA.roa (hash: UY3EK2y/Cexn1/dQSElqlxjbeeV/MbtFdhvzL6gAd7k=) 13: yLdJIjgYrWUQ7TDFqO7qNYlFDjU.roa (hash: dXZjSLlSeRIZKGocGL3yryQVuOVReJZI8cSiDLaCvDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:15:04:b2:a6:6d:72:24:a9:4c:f5:2b:42:1b:07:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46 Validity Not Before: Nov 15 12:00:58 2026 GMT Not After : Nov 16 12:00:58 2026 GMT Subject: CN=5e4f4a73c4d6e6b3b92d760ab43cdb6321889863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:90:86:7a:10:ce:e8:86:95:ce:e1:f4:97:2c: 4a:49:e5:eb:fc:58:d3:8a:a3:aa:2a:6e:04:60:36: 50:52:99:41:be:47:4e:10:ae:e7:e7:ad:1d:0f:b1: 2b:b5:be:4d:c0:28:63:c3:bc:9d:7e:5a:c4:b6:bb: 39:34:d2:65:2d:b4:17:f0:20:ea:94:20:75:33:ed: cf:f0:3a:d0:fe:f3:8d:01:80:9f:7d:66:86:84:f8: 25:50:af:1c:f0:cd:a4:61:15:4a:19:a6:0a:7e:e2: be:50:b6:67:48:d2:14:5b:9c:ae:ae:3b:19:f5:b1: f1:00:2d:63:13:28:a5:a5:37:ed:65:21:d7:4e:e9: 41:31:fb:e0:4e:69:d3:14:58:f3:e3:a7:9d:e2:81: fa:f2:96:95:ed:d6:f4:09:5a:e1:11:f7:44:32:ba: e3:bb:02:86:ab:21:93:1c:93:f8:a8:4c:4d:08:6c: 5e:e2:48:15:69:0e:53:ec:8d:bb:67:91:ad:bc:1a: cf:18:d0:77:86:92:9b:86:9e:1f:e5:13:3f:78:36: 94:9b:9b:45:78:ca:63:a4:21:72:0d:6a:0a:4a:c2: ed:a0:46:aa:f0:35:a3:03:c7:6b:70:a6:5e:03:d0: 5e:7a:91:22:2b:3b:a5:de:58:5e:53:c1:44:e4:08: 3f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4F:4A:73:C4:D6:E6:B3:B9:2D:76:0A:B4:3C:DB:63:21:88:98:63 X509v3 Authority Key Identifier: keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:68:55:c4:60:3b:e1:ab:c9:15:67:bb:b7:a5:9d:17:70:30: 27:05:e0:46:cc:f7:7d:06:21:d4:58:02:cc:79:c1:8a:1a:54: 77:a7:b7:7f:2b:39:f0:1f:ea:01:99:50:e0:77:63:04:28:cd: 6a:a4:e4:b2:bd:f2:1d:27:b8:b3:dd:e3:5f:28:02:de:94:8a: 7a:5d:80:58:0d:3f:9f:28:d8:5f:bf:1a:dd:0f:fb:42:c0:54: 45:59:12:d8:55:55:1e:76:64:b8:ae:4a:1a:94:51:a4:94:7c: cf:70:58:ca:34:b6:2b:94:2f:9a:bf:c6:03:a5:13:99:d4:1c: f4:51:54:eb:8b:2c:a8:54:15:fa:4e:b0:83:75:63:01:2d:36: 0b:75:47:d0:56:0b:b7:32:9c:26:98:be:f4:bd:24:9c:74:ec: 18:f8:60:74:f2:e4:50:4f:43:06:cc:a6:65:b2:16:49:bd:a7: 2a:ab:38:75:22:b4:2e:62:a5:94:26:44:fe:19:9e:09:7f:2f: 53:60:38:5b:9d:97:0f:83:0d:f6:24:d8:67:a5:f5:ba:59:cd: a2:1f:61:04:12:46:cb:46:7c:96:6a:1d:42:88:f0:56:8f:dc: cd:69:ab:df:bd:6f:dc:1e:98:7f:42:74:e8:b8:95:a3:4a:6a: 4b:19:aa:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHfFQSypm1yJKlM9StCGwcmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGE3NGRkYjc1YzY5YTg0NWQ3Y2M1NjlhZWRhMjY2N2Yx NDFiNDYwHhcNMjYxMTE1MTIwMDU4WhcNMjYxMTE2MTIwMDU4WjAzMTEwLwYDVQQD Eyg1ZTRmNGE3M2M0ZDZlNmIzYjkyZDc2MGFiNDNjZGI2MzIxODg5ODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JCGehDO6IaVzuH0lyxKSeXr/FjT iqOqKm4EYDZQUplBvkdOEK7n560dD7Ertb5NwChjw7ydflrEtrs5NNJlLbQX8CDq lCB1M+3P8DrQ/vONAYCffWaGhPglUK8c8M2kYRVKGaYKfuK+ULZnSNIUW5yurjsZ 9bHxAC1jEyilpTftZSHXTulBMfvgTmnTFFjz46ed4oH68paV7db0CVrhEfdEMrrj uwKGqyGTHJP4qExNCGxe4kgVaQ5T7I27Z5GtvBrPGNB3hpKbhp4f5RM/eDaUm5tF eMpjpCFyDWoKSsLtoEaq8DWjA8drcKZeA9BeepEiKzul3lheU8FE5Ag/uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5PSnPE1uazuS12CrQ822MhiJhjMB8GA1UdIwQY MBaAFJQKdN23XGmoRdfMVprtomZ/FBtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2hVxGA7 4avJFWe7t6WdF3AwJwXgRsz3fQYh1FgCzHnBihpUd6e3fys58B/qAZlQ4HdjBCjN aqTksr3yHSe4s93jXygC3pSKel2AWA0/nyjYX78a3Q/7QsBURVkS2FVVHnZkuK5K GpRRpJR8z3BYyjS2K5Qvmr/GA6UTmdQc9FFU64ssqFQV+k6wg3VjAS02C3VH0FYL tzKcJpi+9L0knHTsGPhgdPLkUE9DBsymZbIWSb2nKqs4dSK0LmKllCZE/hmeCX8v U2A4W52XD4MN9iTYZ6X1ulnNoh9hBBJGy0Z8lmodQojwVo/czWmr371v3B6Yf0J0 6LiVo0pqSxmqKw== -----END CERTIFICATE-----Generated at Sun Nov 15 19:26:37 2026 by rpki-client