$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json) Hash identifier: m6jBCH2+WayZPErv9x3txLN3pvRO4YRNqo8da+UL8v0= Subject key identifier: C0:CA:74:61:AE:9B:10:29:AC:FF:4E:4B:4E:4F:AC:B9:05:F2:C3:9C Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 01A0D125024EB1D0682106B0DD30F8B59770 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft Manifest number: 1868 Signing time: Thu 24 Sep 2026 02:00:58 +0000 Manifest this update: Thu 24 Sep 2026 02:00:58 +0000 Manifest next update: Fri 25 Sep 2026 02:00:58 +0000 Files and hashes: 1: 1-TPBZaPgwzpcoaeoNGcACcpRq9w.roa (hash: WRnBW6LaoaDyzWLmINt+9j7JPTxMQsEWQyTKmC15wRY=) 2: 2DVYJPCuOw7VG2htfdUNo_7kInE.asa (hash: LbgnkRdoQKLKe2iLxngixqfur+lgcj/sW3CZzzMeq2s=) 3: 7awGjvnOLuwHkizQWxmHuCLrtgg.asa (hash: jqxpdDzSYJL8J3lEotC6QolKhYdmA+CZjUvOtdm8fnc=) 4: 8MsLByo1h3OaBnfebYLNr5wUi7s.asa (hash: h8QJVB/q5RH0fYSkRlU6osV1v40WFA8xPDLPZUIF8W0=) 5: 8mjr1R6ZAxArqKrEVDuBknfRZCo.asa (hash: FyvDAOsK5ouRGQZfWInC0JEkh1RQHwIIfD9INW6d7FI=) 6: CQHinzbv6o94wyhsd8omqmTillg.roa (hash: YzWIhoEeIcHtjYrxUYU4G48aFXp4bwAmAKzACW84/QY=) 7: Ec_R_gx9uuWxENMcCsXqUjmf9FA.asa (hash: nSaTw/6ML8HPaeks9+U68v5/iYEKqqf/eJmppOSw45Y=) 8: HBV4KMTbTlGAl9QeIl0o9qHJ3JE.asa (hash: DH9DU6Hcd9jUW1bMh4Wxl6jSVLHN13SF+Z2URPs6X9w=) 9: JY8nDcX1pyy9gv3UYeCVu3Ts2a8.asa (hash: okNoGeT6tcWHbtS0EjoQ1qLQX683zgYAC3N15VDPgf4=) 10: LSXBvQHAo4zp0AtEmHoZVaivySk.roa (hash: swGFJmkZXioEtzQNNaxMbmAyGUjZpt6rG9u3Y6aW9mU=) 11: aWgyqnhlZS7MDekMFATvg7m1Chg.roa (hash: Ub6D7zkQHeFmXTT59TkJEXuDooqt1BaCbrMKmH7VmuU=) 12: bKMnasx78X1SjuZ69VG_6DO0hLE.asa (hash: Qq7T6I3DGZbcJ7ZwLKkK8uk9JE+JhLf5qJxgDpORjto=) 13: bsQYUbE6sDO4AlcYz2-reJ-1Oss.roa (hash: 5lfSQqmrli6qWcknzZ2NClTLbfidYTYGVF+eKK5IJEE=) 14: iLg25mvcmTCHH_OGEh2P98itdpY.roa (hash: wugv3jB//b2uxYYJseGcTrUZ2QkeB7l7mdgdccrFlEw=) 15: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: iiUi0zzGhqBvAtE4Ja8vAsnt9JUKyMcAm0SZQqa/hLM=) 16: lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa (hash: WdmuUrCIkBJHssHI2YPcgaS2VqSm8pQ//F+3L49VElw=) 17: lybU2-0lBoLkM6-OoilLNM4B_nM.roa (hash: l6togunOdeRBEWqxla5wbVF9WAZmGR3kHUt6QPrFu9w=) 18: ty1ff7-sDyLx4nDkaEvA6OsoOtQ.roa (hash: jgvaKJ/trlHrZqFZbc1zXXkzbtQm22Rj/n2MqvbIbWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d1:25:02:4e:b1:d0:68:21:06:b0:dd:30:f8:b5:97:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Sep 24 02:00:58 2026 GMT Not After : Sep 25 02:00:58 2026 GMT Subject: CN=c0ca7461ae9b1029acff4e4b4e4facb905f2c39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:83:90:69:30:42:89:63:62:7a:e7:a0:a3:84: ba:1c:11:5a:8c:3b:69:79:28:4c:ad:79:d5:08:4b: 3f:e0:3a:6a:5b:c8:a9:dd:63:e1:cd:85:f3:fa:a7: 43:a3:d6:f8:9c:ba:ed:6c:48:af:c8:96:da:83:a9: e1:23:2c:67:04:0f:21:2f:e0:75:a3:e0:0e:34:78: 22:33:f4:2a:f0:90:5c:8c:42:36:7f:fc:2d:25:72: 77:ec:a6:5d:78:68:5d:78:12:cb:de:39:73:fb:46: 04:94:ea:04:a6:63:77:40:ef:1b:ca:07:c7:0a:11: 1c:d9:ae:b3:9f:06:74:62:f8:7a:d6:11:d8:68:d2: af:e6:e7:49:08:59:77:1c:ac:08:78:14:be:d6:f7: 93:f0:43:94:e4:41:f1:b9:63:57:c4:6e:d8:d4:19: eb:06:10:76:0e:26:c5:71:5a:b3:d9:5b:3c:dd:11: 58:81:a2:ae:9c:43:bb:3e:02:09:c2:32:36:78:f4: ea:0b:18:a6:21:20:1f:b5:5b:d0:28:de:83:33:b1: c6:07:b7:51:34:14:a9:f6:3f:e7:40:76:38:fc:6a: 9b:e8:21:a5:4c:ae:49:0f:3d:34:df:77:5b:0b:6d: 73:ab:c1:15:3d:33:f5:c3:e4:9b:40:f0:33:0a:8c: aa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CA:74:61:AE:9B:10:29:AC:FF:4E:4B:4E:4F:AC:B9:05:F2:C3:9C X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:fc:95:d7:79:6f:48:b6:a3:a8:69:5e:05:6e:23:2f:65:a1: 5d:ea:e4:30:1f:52:6f:a8:db:3e:ca:b6:fa:18:7e:15:1f:8c: c7:f1:c9:71:27:74:b1:a5:7e:ba:42:4a:e7:6a:d2:a5:a0:5b: 2b:4f:ff:c0:f1:17:ca:0a:8f:e3:16:38:58:5b:77:16:67:14: 0c:6b:c9:03:ca:ac:24:f4:dd:2c:d7:ba:4a:67:1c:a5:52:da: 52:f3:45:a6:df:0a:ce:5e:f2:13:23:2a:f6:ea:ce:eb:74:22: 21:ee:31:e5:30:f4:30:21:da:a6:46:ae:9b:b5:9a:e1:c0:aa: ad:55:9a:a0:0c:f6:b0:d8:f1:46:7f:9b:51:5f:7a:73:28:05: d6:b6:51:a7:22:82:fb:1d:95:72:a9:a6:c4:6b:ac:e7:03:95: 98:15:55:b7:14:2d:06:df:7f:f7:3b:e5:a0:91:33:c1:5f:40: b8:9e:8a:24:42:bd:48:fd:d2:a6:e1:c6:7b:65:3e:b6:de:9f: b0:5c:bd:14:95:bc:35:f5:93:71:b0:e3:53:47:af:0a:bd:47: 24:0c:94:fc:17:d0:d9:02:82:29:a0:5a:ad:d0:c1:1b:3d:d3: 93:d1:b3:70:fa:4c:9c:9e:2e:91:76:1f:ea:5b:54:78:54:23: 8d:aa:6b:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDRJQJOsdBoIQaw3TD4tZdwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjYwOTI0MDIwMDU4WhcNMjYwOTI1MDIwMDU4WjAzMTEwLwYDVQQD EyhjMGNhNzQ2MWFlOWIxMDI5YWNmZjRlNGI0ZTRmYWNiOTA1ZjJjMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYOQaTBCiWNieuego4S6HBFajDtp eShMrXnVCEs/4DpqW8ip3WPhzYXz+qdDo9b4nLrtbEivyJbag6nhIyxnBA8hL+B1 o+AONHgiM/Qq8JBcjEI2f/wtJXJ37KZdeGhdeBLL3jlz+0YElOoEpmN3QO8bygfH ChEc2a6znwZ0Yvh61hHYaNKv5udJCFl3HKwIeBS+1veT8EOU5EHxuWNXxG7Y1Bnr BhB2DibFcVqz2Vs83RFYgaKunEO7PgIJwjI2ePTqCximISAftVvQKN6DM7HGB7dR NBSp9j/nQHY4/Gqb6CGlTK5JDz0033dbC21zq8EVPTP1w+SbQPAzCoyqXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDKdGGumxAprP9OS05PrLkF8sOcMB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfyV13lv SLajqGleBW4jL2WhXerkMB9Sb6jbPsq2+hh+FR+Mx/HJcSd0saV+ukJK52rSpaBb K0//wPEXygqP4xY4WFt3FmcUDGvJA8qsJPTdLNe6SmccpVLaUvNFpt8Kzl7yEyMq 9urO63QiIe4x5TD0MCHapkaum7Wa4cCqrVWaoAz2sNjxRn+bUV96cygF1rZRpyKC +x2VcqmmxGus5wOVmBVVtxQtBt9/9zvloJEzwV9AuJ6KJEK9SP3SpuHGe2U+tt6f sFy9FJW8NfWTcbDjU0evCr1HJAyU/BfQ2QKCKaBardDBGz3Tk9GzcPpMnJ4ukXYf 6ltUeFQjjaprrg== -----END CERTIFICATE-----Generated at Thu Sep 24 09:48:52 2026 by rpki-client