$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json) Hash identifier: dr8vZUPUCLBc5XYd/So7WQkU/L9y14vUqTbM51I4w7c= Subject key identifier: 48:E0:A3:F6:8B:EA:CD:D0:A1:27:07:33:C6:F8:8A:4A:8F:05:6E:E4 Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 019E1BD8A237690B6B71232858C1D3173462 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft Manifest number: 1700 Signing time: Tue 12 May 2026 11:00:42 +0000 Manifest this update: Tue 12 May 2026 11:00:42 +0000 Manifest next update: Wed 13 May 2026 11:00:42 +0000 Files and hashes: 1: 1-TPBZaPgwzpcoaeoNGcACcpRq9w.roa (hash: WRnBW6LaoaDyzWLmINt+9j7JPTxMQsEWQyTKmC15wRY=) 2: 8MsLByo1h3OaBnfebYLNr5wUi7s.asa (hash: h8QJVB/q5RH0fYSkRlU6osV1v40WFA8xPDLPZUIF8W0=) 3: A_tEVik7EkSJhTC7T2FJIfD4hWE.asa (hash: 68EPop8TjMmm4peaii/vw95NHeqqlpJpXRJzZBSJs7g=) 4: DdZL2Ei2USqI1D8JQatISOxbCY0.roa (hash: A+x4OgPFDFV1yfcXqtt93yKXONOhfjjQIV2HOaMfwnQ=) 5: H2Gc0qKN46gAjUldVFBNpV93Xk4.asa (hash: KSarBkAjc6GXQsV+kmM1pcYpqDoYggEF4OpcfqU5XxI=) 6: LSXBvQHAo4zp0AtEmHoZVaivySk.roa (hash: swGFJmkZXioEtzQNNaxMbmAyGUjZpt6rG9u3Y6aW9mU=) 7: RatTcANG4U3IM7MOV2hXua2pFMs.asa (hash: USM3oAd7uLAkywhJUjv79wjdyCIZfb2jA72kwTjAHbY=) 8: aWgyqnhlZS7MDekMFATvg7m1Chg.roa (hash: Ub6D7zkQHeFmXTT59TkJEXuDooqt1BaCbrMKmH7VmuU=) 9: b-VQSWuLpLV93gdEDV9Lftl-uXw.asa (hash: Em1YerFm1QMulEXhz/0NYeLEV5IMD8Fh+85COdjHx64=) 10: bsQYUbE6sDO4AlcYz2-reJ-1Oss.roa (hash: 5lfSQqmrli6qWcknzZ2NClTLbfidYTYGVF+eKK5IJEE=) 11: cszYTkQVDcY76z8Av8ncweFdHcQ.asa (hash: xNxgKjmWZqB0F8LoHh9M3iOQxo1YlNVcpRWSs0jkU1w=) 12: fU0ZQGxEIbYd-Y96okGNTpozeFs.asa (hash: sffo6lZCXVJqfJc7Hp2QR59SPfkJdF9crEZwTQ2dkII=) 13: iLg25mvcmTCHH_OGEh2P98itdpY.roa (hash: wugv3jB//b2uxYYJseGcTrUZ2QkeB7l7mdgdccrFlEw=) 14: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: uCN7bVZV+NQsgDGT1sbEqV5pY4JcHokCI9VBMuk5vUs=) 15: lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa (hash: WdmuUrCIkBJHssHI2YPcgaS2VqSm8pQ//F+3L49VElw=) 16: lybU2-0lBoLkM6-OoilLNM4B_nM.roa (hash: l6togunOdeRBEWqxla5wbVF9WAZmGR3kHUt6QPrFu9w=) 17: ty1ff7-sDyLx4nDkaEvA6OsoOtQ.roa (hash: jgvaKJ/trlHrZqFZbc1zXXkzbtQm22Rj/n2MqvbIbWk=) 18: zdQE3nljteAvytR7FrZorPU0jyc.asa (hash: 7eznpWbdCzFgvZgA9g8kyOLAHMzeIfPZoCln8oZBAvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1b:d8:a2:37:69:0b:6b:71:23:28:58:c1:d3:17:34:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: May 12 11:00:42 2026 GMT Not After : May 13 11:00:42 2026 GMT Subject: CN=48e0a3f68beacdd0a1270733c6f88a4a8f056ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d3:d1:b4:eb:6d:34:06:21:4e:bf:85:4b:37: db:32:25:1f:7d:ae:86:a1:84:da:fb:19:49:73:8d: b1:6e:ec:d8:2e:44:a8:b2:75:33:d7:2f:35:d0:dd: 7f:b5:3b:e8:40:66:92:14:27:db:2c:56:d7:08:4f: 18:37:f4:a7:7b:1a:ad:fb:cd:1d:9f:ac:eb:6b:6a: a6:32:e4:1e:30:33:91:25:6f:3f:20:7e:6a:e5:98: f7:fc:63:a3:86:97:f2:94:4e:4f:35:a8:ad:8a:18: fb:f7:7b:5f:6f:47:fd:70:73:7e:04:db:0e:ec:2d: 08:8a:e2:b0:b4:64:37:64:12:8d:6f:70:38:f0:6d: ba:13:ba:ac:5d:0e:c2:af:db:90:b3:dd:b2:97:b6: e6:0e:91:b4:f1:34:45:51:f0:77:c6:51:9a:c6:a7: 89:1a:ff:e3:68:57:e6:aa:b5:9f:f8:89:ac:ec:4e: b2:08:8d:86:fe:b3:28:49:c8:b8:e1:91:d5:26:e8: 63:02:a1:e0:77:cb:ca:c4:e3:f9:b8:6a:b3:b8:38: e2:d9:84:c8:77:4a:98:72:86:c3:d2:f8:2f:1f:5d: c8:b0:9f:23:0f:da:e2:ba:93:d9:9c:5d:ed:6a:71: c7:62:c1:4b:95:9d:39:31:7d:e8:4e:c8:e5:a9:63: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E0:A3:F6:8B:EA:CD:D0:A1:27:07:33:C6:F8:8A:4A:8F:05:6E:E4 X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7e:37:58:88:68:d6:20:74:2c:19:fc:f3:11:90:d2:dd:74: a2:92:dd:2d:cc:ae:57:3f:6c:65:36:be:10:9c:f4:6c:8b:6a: b3:97:7c:d9:07:fe:78:0d:15:16:ba:e1:32:ed:05:1c:a5:2f: d7:4f:74:a9:32:91:7f:f2:04:37:25:87:e9:93:af:8a:e9:bb: 9b:bc:ed:ff:9e:81:cd:21:8e:1b:ac:ec:ad:a1:5c:53:86:4f: 95:24:0a:22:47:78:bb:de:a0:db:c1:36:0f:34:bf:64:6c:66: a2:f3:2f:ba:d7:c8:10:1c:28:6d:24:d5:52:1e:ca:6b:4f:96: ea:00:3b:33:30:5d:d7:9d:9b:8e:20:dd:78:dc:33:3b:73:4d: a9:ae:7c:3f:64:2a:32:f5:99:d9:15:53:20:2c:e2:28:b2:93: ae:2c:fd:94:e2:e4:40:8b:47:43:72:bf:5d:8b:e2:d3:e8:ba: 3f:e9:a8:fe:08:bf:96:15:fa:cf:73:c4:fa:8c:26:24:10:db: 1b:c1:1f:68:c9:55:12:a6:6c:86:0f:16:5f:40:b1:9f:0d:3d: 94:20:88:cc:94:cd:0a:f4:39:ec:1f:67:48:e1:08:09:0b:95: 56:0b:b5:d3:a8:2e:b7:89:9c:8b:88:29:c8:f7:69:87:2b:f2: 91:34:7c:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4b2KI3aQtrcSMoWMHTFzRiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjYwNTEyMTEwMDQyWhcNMjYwNTEzMTEwMDQyWjAzMTEwLwYDVQQD Eyg0OGUwYTNmNjhiZWFjZGQwYTEyNzA3MzNjNmY4OGE0YThmMDU2ZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dPRtOttNAYhTr+FSzfbMiUffa6G oYTa+xlJc42xbuzYLkSosnUz1y810N1/tTvoQGaSFCfbLFbXCE8YN/Snexqt+80d n6zra2qmMuQeMDORJW8/IH5q5Zj3/GOjhpfylE5PNaitihj793tfb0f9cHN+BNsO 7C0IiuKwtGQ3ZBKNb3A48G26E7qsXQ7Cr9uQs92yl7bmDpG08TRFUfB3xlGaxqeJ Gv/jaFfmqrWf+Ims7E6yCI2G/rMoSci44ZHVJuhjAqHgd8vKxOP5uGqzuDji2YTI d0qYcobD0vgvH13IsJ8jD9riupPZnF3tanHHYsFLlZ05MX3oTsjlqWMGJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjgo/aL6s3QoScHM8b4ikqPBW7kMB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAan43WIho 1iB0LBn88xGQ0t10opLdLcyuVz9sZTa+EJz0bItqs5d82Qf+eA0VFrrhMu0FHKUv 1090qTKRf/IENyWH6ZOvium7m7zt/56BzSGOG6zsraFcU4ZPlSQKIkd4u96g28E2 DzS/ZGxmovMvutfIEBwobSTVUh7Ka0+W6gA7MzBd152bjiDdeNwzO3NNqa58P2Qq MvWZ2RVTICziKLKTriz9lOLkQItHQ3K/XYvi0+i6P+mo/gi/lhX6z3PE+owmJBDb G8EfaMlVEqZshg8WX0Cxnw09lCCIzJTNCvQ57B9nSOEICQuVVgu106gut4mci4gp yPdphyvykTR8hQ== -----END CERTIFICATE-----Generated at Tue May 12 21:37:07 2026 by rpki-client