$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json) Hash identifier: 4J9HxaKiiNyXFfWGFSXy93B2dml3b4zoJccd7zSP2rs= Subject key identifier: 97:EF:3B:05:B2:16:D3:8F:59:26:C7:63:FD:DE:74:1A:08:84:7B:37 Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 019F8EA2461D9CDB64378D1FB1CE9BD4A5DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft Manifest number: 17C1 Signing time: Thu 23 Jul 2026 11:00:27 +0000 Manifest this update: Thu 23 Jul 2026 11:00:27 +0000 Manifest next update: Fri 24 Jul 2026 11:00:27 +0000 Files and hashes: 1: 1-TPBZaPgwzpcoaeoNGcACcpRq9w.roa (hash: WRnBW6LaoaDyzWLmINt+9j7JPTxMQsEWQyTKmC15wRY=) 2: 2DVYJPCuOw7VG2htfdUNo_7kInE.asa (hash: LbgnkRdoQKLKe2iLxngixqfur+lgcj/sW3CZzzMeq2s=) 3: 7awGjvnOLuwHkizQWxmHuCLrtgg.asa (hash: jqxpdDzSYJL8J3lEotC6QolKhYdmA+CZjUvOtdm8fnc=) 4: 8MsLByo1h3OaBnfebYLNr5wUi7s.asa (hash: h8QJVB/q5RH0fYSkRlU6osV1v40WFA8xPDLPZUIF8W0=) 5: 8mjr1R6ZAxArqKrEVDuBknfRZCo.asa (hash: FyvDAOsK5ouRGQZfWInC0JEkh1RQHwIIfD9INW6d7FI=) 6: CQHinzbv6o94wyhsd8omqmTillg.roa (hash: YzWIhoEeIcHtjYrxUYU4G48aFXp4bwAmAKzACW84/QY=) 7: Ec_R_gx9uuWxENMcCsXqUjmf9FA.asa (hash: nSaTw/6ML8HPaeks9+U68v5/iYEKqqf/eJmppOSw45Y=) 8: HBV4KMTbTlGAl9QeIl0o9qHJ3JE.asa (hash: DH9DU6Hcd9jUW1bMh4Wxl6jSVLHN13SF+Z2URPs6X9w=) 9: JY8nDcX1pyy9gv3UYeCVu3Ts2a8.asa (hash: okNoGeT6tcWHbtS0EjoQ1qLQX683zgYAC3N15VDPgf4=) 10: LSXBvQHAo4zp0AtEmHoZVaivySk.roa (hash: swGFJmkZXioEtzQNNaxMbmAyGUjZpt6rG9u3Y6aW9mU=) 11: aWgyqnhlZS7MDekMFATvg7m1Chg.roa (hash: Ub6D7zkQHeFmXTT59TkJEXuDooqt1BaCbrMKmH7VmuU=) 12: bKMnasx78X1SjuZ69VG_6DO0hLE.asa (hash: Qq7T6I3DGZbcJ7ZwLKkK8uk9JE+JhLf5qJxgDpORjto=) 13: bsQYUbE6sDO4AlcYz2-reJ-1Oss.roa (hash: 5lfSQqmrli6qWcknzZ2NClTLbfidYTYGVF+eKK5IJEE=) 14: iLg25mvcmTCHH_OGEh2P98itdpY.roa (hash: wugv3jB//b2uxYYJseGcTrUZ2QkeB7l7mdgdccrFlEw=) 15: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: Cdile1wZtQxOheOKFBt5F5YJWurABpCzmWwx54VVLOk=) 16: lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa (hash: WdmuUrCIkBJHssHI2YPcgaS2VqSm8pQ//F+3L49VElw=) 17: lybU2-0lBoLkM6-OoilLNM4B_nM.roa (hash: l6togunOdeRBEWqxla5wbVF9WAZmGR3kHUt6QPrFu9w=) 18: ty1ff7-sDyLx4nDkaEvA6OsoOtQ.roa (hash: jgvaKJ/trlHrZqFZbc1zXXkzbtQm22Rj/n2MqvbIbWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:a2:46:1d:9c:db:64:37:8d:1f:b1:ce:9b:d4:a5:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Jul 23 11:00:27 2026 GMT Not After : Jul 24 11:00:27 2026 GMT Subject: CN=97ef3b05b216d38f5926c763fdde741a08847b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bd:e4:d5:72:f0:a4:8e:58:e6:ac:dd:0e:12: 3d:88:d6:8e:25:24:76:b0:61:f1:fb:3a:3b:a7:35: 6c:3c:8c:76:12:cf:67:8d:79:12:03:80:75:72:05: 7f:f8:0c:3a:47:9b:eb:03:f4:fc:67:dc:2f:71:21: 09:c1:36:e4:d4:2e:28:a0:06:73:71:31:a4:04:a3: 2a:8b:0a:34:5d:81:13:21:2f:33:56:6e:1f:0d:aa: b8:9d:0f:ac:14:bd:1a:7c:ed:93:60:b6:a5:9c:97: b2:e3:d2:0a:0e:21:9d:a8:55:20:f8:36:2a:48:df: 26:09:70:3f:95:59:08:1a:6d:38:e3:57:92:57:dc: ca:87:b3:0d:e3:48:cc:fc:aa:a9:29:f8:6c:62:81: dd:a4:82:93:b0:c8:d2:80:a3:1a:54:90:ae:1c:24: db:48:48:76:8f:78:a6:60:0e:25:f3:90:33:d9:9f: 89:b2:84:80:ea:6f:95:77:88:8b:e0:8a:6b:88:f2: e8:ca:94:85:6e:cb:4e:ee:cd:07:5b:c0:a3:79:56: 89:8d:a1:b3:d7:d7:db:a3:cb:1c:88:c0:17:6b:34: a6:8b:fd:eb:9f:18:13:5f:b3:77:24:ab:24:ec:df: bd:86:c4:6b:8e:e3:c1:48:ac:75:73:e8:a5:c0:c5: 96:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EF:3B:05:B2:16:D3:8F:59:26:C7:63:FD:DE:74:1A:08:84:7B:37 X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d1:a4:37:4f:e4:3f:11:f7:4c:e1:bc:53:bb:4a:d7:d7:86: a0:86:29:bb:3e:6e:fe:92:a4:b8:28:e4:76:d6:ca:05:25:be: af:cd:51:a5:e4:d4:6e:b8:ba:64:17:e5:66:97:60:45:ff:2a: b3:21:5a:1f:c7:5d:7c:35:a5:b0:c1:31:aa:9d:b6:6b:7f:10: 50:b0:8c:ba:9f:5a:65:c7:11:ed:51:52:52:13:ce:e0:02:e9: ed:e2:7e:d9:76:26:fe:d9:74:77:8c:30:4a:20:bc:a4:df:eb: 73:13:50:1e:95:75:b1:9a:4a:96:26:34:b0:e4:cf:e3:b1:97: a4:8f:1d:a0:46:e1:08:b6:d0:75:43:35:dc:07:2c:4d:d9:2b: 3c:07:33:b3:9b:b7:b1:ca:1e:c7:72:20:96:f1:7a:e6:7c:e7: 37:fc:bb:1a:27:4e:68:38:4e:d2:eb:95:33:c1:64:65:be:e4: d9:e4:37:75:0e:e7:a0:7f:61:2d:b2:d9:b8:21:c3:cc:29:99: 53:a2:cb:85:c5:e5:80:4d:b1:8a:df:e2:83:ac:f5:2b:81:d8: 2b:35:ef:40:88:75:db:ea:67:54:a8:1e:2d:c9:ff:4e:b2:5d: a1:61:81:a0:ac:d2:ca:52:39:3f:09:ae:19:86:b1:5a:f9:07: a0:a0:d2:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+OokYdnNtkN40fsc6b1KXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjYwNzIzMTEwMDI3WhcNMjYwNzI0MTEwMDI3WjAzMTEwLwYDVQQD Eyg5N2VmM2IwNWIyMTZkMzhmNTkyNmM3NjNmZGRlNzQxYTA4ODQ3YjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4L3k1XLwpI5Y5qzdDhI9iNaOJSR2 sGHx+zo7pzVsPIx2Es9njXkSA4B1cgV/+Aw6R5vrA/T8Z9wvcSEJwTbk1C4ooAZz cTGkBKMqiwo0XYETIS8zVm4fDaq4nQ+sFL0afO2TYLalnJey49IKDiGdqFUg+DYq SN8mCXA/lVkIGm0441eSV9zKh7MN40jM/KqpKfhsYoHdpIKTsMjSgKMaVJCuHCTb SEh2j3imYA4l85Az2Z+JsoSA6m+Vd4iL4IpriPLoypSFbstO7s0HW8CjeVaJjaGz 19fbo8sciMAXazSmi/3rnxgTX7N3JKsk7N+9hsRrjuPBSKx1c+ilwMWWHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfvOwWyFtOPWSbHY/3edBoIhHs3MB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdGkN0/k PxH3TOG8U7tK19eGoIYpuz5u/pKkuCjkdtbKBSW+r81RpeTUbri6ZBflZpdgRf8q syFaH8ddfDWlsMExqp22a38QULCMup9aZccR7VFSUhPO4ALp7eJ+2XYm/tl0d4ww SiC8pN/rcxNQHpV1sZpKliY0sOTP47GXpI8doEbhCLbQdUM13AcsTdkrPAczs5u3 scoex3IglvF65nznN/y7GidOaDhO0uuVM8FkZb7k2eQ3dQ7noH9hLbLZuCHDzCmZ U6LLhcXlgE2xit/ig6z1K4HYKzXvQIh12+pnVKgeLcn/TrJdoWGBoKzSylI5Pwmu GYaxWvkHoKDSng== -----END CERTIFICATE-----Generated at Thu Jul 23 19:03:20 2026 by rpki-client