$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: Oo6UOH2AM7m96PnKoN3hc2IhQdNyM5hxC3abSHMSAJs= Subject key identifier: 7E:9B:89:49:33:E3:84:C5:C2:06:2D:78:EF:05:EB:4F:CD:40:21:48 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019E1EA39ACF0ACB21E32E04222FBC3879C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0F74 Signing time: Wed 13 May 2026 00:01:38 +0000 Manifest this update: Wed 13 May 2026 00:01:38 +0000 Manifest next update: Thu 14 May 2026 00:01:38 +0000 Files and hashes: 1: 4ti_BsGuOczeZfy0JTAwhM89ku8.roa (hash: F/FIDL6IQyGQZU0ynH10rsxr4Lh4/lqbKrwCKxOVIa4=) 2: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: Xr4rmHaZ/gBd6Qu6epKeJ/vqMK3+mH6CeSGmQ4xgj/0=) 3: Rl_qinDDXLYmitpjtRByJBmFw8Q.roa (hash: FIEZwO0iYGed4rHn2e0vozi1+vIaMR5tKhvxYETa1no=) 4: SArRO3MQSGaWTmmk2uxpyRfjIhA.roa (hash: 2KeMVYeSLHqHO7gSfTf9qkO0W/higRj4sDuOR5LxLVE=) 5: SGBFgHqWXrPKqcu8kfnGkJkv920.roa (hash: 4w68C/XOmN5L2JXs1q6sk0hxyeUfPbGSQTUbmmfeGKI=) 6: Xx-SB8IlNsgbkMiQx4mSYmp_c3E.roa (hash: H5EmddF0UXVmW0gvQsSUA/i6ZSdl9kyVO20xUD/pd1Q=) 7: c0jlx2DfhOUv1wX4uYnYDf_mgec.roa (hash: Medsqu1K5XLBzaWPCRxE6D439h9wYIO/wIZhTKMOMVQ=) 8: dXvzyfOdOJH0q6xYVkjSdHKWSdE.roa (hash: 7SC4vR0R2kuqeE6TaEujJclCq7gK1eHalGhCH7IVpOw=) 9: fUaZWG_IPZnqKDdAMhvv99c2mz0.roa (hash: RwmFqSWLrw9UABaecDwpgjoOqF5LfYrQuwlDYozBirU=) 10: j2bhtci2rRb7PBQlLKaByIjyvws.roa (hash: yVGrMjz7Zm3px5ln/KZr2nj2ezCEkV9wTHK0Rkt5dDc=) 11: n7JEFOPMbToJF6Wlw44ynHUW_nQ.roa (hash: YeLSRNCcwCED5HatZvH2oCjpqMUSo5ZkDRgue0flL4E=) 12: ppD5qF2w_FZLkQjFIE6ahHI-0Vo.roa (hash: EEtkfLj3d6lQBs/XTvoe8NaYONNMjgLX1x94kWcuAKQ=) 13: tNW5JglowYzeXwLaOgS0Yf8zgPA.roa (hash: fs4Ze65kVG+wfhXUy+9T7N6D/TUMaczqK8frGbt5RaE=) 14: z-wSduJj-NlM3DwsJdstrswF4Jc.roa (hash: weGeb9i8H2JUwKvKfq49l8Oa60dqN/W4SaoC0br02/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:a3:9a:cf:0a:cb:21:e3:2e:04:22:2f:bc:38:79:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: May 13 00:01:38 2026 GMT Not After : May 14 00:01:38 2026 GMT Subject: CN=7e9b894933e384c5c2062d78ef05eb4fcd402148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f0:57:74:13:85:71:dd:c3:cc:7d:c0:1e:24: cc:a7:39:dd:ab:47:33:d3:61:d3:79:aa:24:70:50: 1f:0b:a1:97:58:a8:70:aa:56:a5:60:6d:7d:8e:9e: ba:07:b4:29:85:02:a4:ca:df:b4:1c:b6:18:0e:97: f5:c1:3c:0d:6e:ea:0d:c8:6c:dd:65:12:f0:5a:95: 92:24:33:59:52:b9:18:ec:eb:65:8d:51:0e:53:e7: f4:cd:79:35:c9:da:20:c4:65:7d:52:00:32:ae:8f: 92:b5:79:d3:e4:e1:d2:0b:b5:73:87:73:06:1d:f3: b1:4e:f9:63:30:b4:67:9f:d5:f7:f5:3b:e2:c3:f2: 0a:38:6a:ff:1f:18:5d:bd:cd:a2:f2:1c:ec:18:d5: f0:bc:e7:e9:72:cd:89:be:dd:2f:2e:e5:55:cd:27: 38:ac:61:30:50:38:51:aa:c0:93:b8:49:bd:8f:0a: 4d:3a:39:a6:09:25:f0:b1:f9:f8:af:be:3a:2c:75: f8:26:04:48:bc:9c:15:8e:47:0e:a0:54:a9:bc:10: 79:41:4c:fd:4c:4d:b6:6f:6e:03:0a:6e:b2:8b:e3: e8:74:92:b1:de:af:f5:f8:73:64:d5:c8:3d:67:1f: 96:44:5f:ca:c2:30:1c:65:4e:50:f4:7b:c8:9c:e4: 24:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9B:89:49:33:E3:84:C5:C2:06:2D:78:EF:05:EB:4F:CD:40:21:48 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:cd:48:4e:4c:42:23:11:82:66:8a:e8:86:1b:ff:8b:bc:d3: 86:2e:4a:e9:43:e6:f3:4b:77:a4:ca:c5:da:82:17:02:82:4a: 55:42:2b:e0:83:ac:f1:78:72:45:01:66:a5:11:3b:26:a1:e5: 5d:75:2f:3d:e2:d2:84:dc:31:89:5a:c5:97:d7:88:90:3a:58: 0c:be:a6:9e:7b:9f:b2:8d:1f:b5:9c:79:c8:ee:cb:00:6f:d7: 78:f4:1d:fc:2a:c9:28:ec:57:87:b3:26:17:f1:b1:8b:40:f9: 41:5e:db:bd:fd:3d:b2:1f:1d:eb:d7:6a:fe:6c:1d:61:00:76: 58:92:39:5b:0c:60:b9:92:5a:81:5f:b6:5d:4a:3f:52:2f:36: fc:02:18:ec:c5:0c:4e:d1:b0:d1:9b:f4:d7:d7:c5:5c:33:88: 98:f5:06:e2:9e:d4:64:7a:6a:90:73:64:59:60:59:0a:3d:32: 2c:bb:63:d9:f1:01:78:43:d5:27:40:68:c1:2c:d2:f3:a3:8d: e3:98:76:95:01:3f:dc:ad:22:c9:54:f2:b0:94:c0:82:88:eb: 2b:26:4a:bc:89:2b:b7:1b:5f:79:32:bd:94:ff:ef:6c:da:99: a5:bb:dc:b9:ed:0d:ea:d8:a5:52:4f:3f:11:04:64:c9:8c:32: e7:54:3d:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eo5rPCssh4y4EIi+8OHnJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjYwNTEzMDAwMTM4WhcNMjYwNTE0MDAwMTM4WjAzMTEwLwYDVQQD Eyg3ZTliODk0OTMzZTM4NGM1YzIwNjJkNzhlZjA1ZWI0ZmNkNDAyMTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fBXdBOFcd3DzH3AHiTMpzndq0cz 02HTeaokcFAfC6GXWKhwqlalYG19jp66B7QphQKkyt+0HLYYDpf1wTwNbuoNyGzd ZRLwWpWSJDNZUrkY7OtljVEOU+f0zXk1ydogxGV9UgAyro+StXnT5OHSC7Vzh3MG HfOxTvljMLRnn9X39Tviw/IKOGr/Hxhdvc2i8hzsGNXwvOfpcs2Jvt0vLuVVzSc4 rGEwUDhRqsCTuEm9jwpNOjmmCSXwsfn4r746LHX4JgRIvJwVjkcOoFSpvBB5QUz9 TE22b24DCm6yi+PodJKx3q/1+HNk1cg9Zx+WRF/KwjAcZU5Q9HvInOQkHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6biUkz44TFwgYteO8F60/NQCFIMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEc1ITkxC IxGCZorohhv/i7zThi5K6UPm80t3pMrF2oIXAoJKVUIr4IOs8XhyRQFmpRE7JqHl XXUvPeLShNwxiVrFl9eIkDpYDL6mnnufso0ftZx5yO7LAG/XePQd/CrJKOxXh7Mm F/Gxi0D5QV7bvf09sh8d69dq/mwdYQB2WJI5WwxguZJagV+2XUo/Ui82/AIY7MUM TtGw0Zv019fFXDOImPUG4p7UZHpqkHNkWWBZCj0yLLtj2fEBeEPVJ0BowSzS86ON 45h2lQE/3K0iyVTysJTAgojrKyZKvIkrtxtfeTK9lP/vbNqZpbvcue0N6tilUk8/ EQRkyYwy51Q97g== -----END CERTIFICATE-----Generated at Wed May 13 05:16:58 2026 by rpki-client