$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json) Hash identifier: z3FoTKf5iTp2S7QZDMWYidBC75HORin0aEf1ozlV9X8= Subject key identifier: 64:FF:50:71:8C:67:5C:49:5A:A1:79:28:1E:65:2D:D0:50:67:5A:FE Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2 Certificate serial: 019F90FF7E422C05B0D6788E2F11D8DA937B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft Manifest number: 1A8D Signing time: Thu 23 Jul 2026 22:01:30 +0000 Manifest this update: Thu 23 Jul 2026 22:01:30 +0000 Manifest next update: Fri 24 Jul 2026 22:01:30 +0000 Files and hashes: 1: 5yZRraURZiKqlnX05fjyNx52w8o.roa (hash: +Z9OtbAB80W8dUmluQL2ejT5e57YATp7trdLCUv5PPc=) 2: F8c1izE-9RJV-qYbebPoSy0OO04.roa (hash: R4SfTxNG21QdwRjkrLqrgaOvhx8zK8zawB+KroMpRRM=) 3: GiXhPQ-0e2_VOSMPeT5jNBzlxCA.roa (hash: 0OdnNDd1VjIe91ip/f2oXTplzO+hZMDitnnCMaCZMcM=) 4: KHKpEj2THKj58bA0t2ta3IDNpvE.roa (hash: Pq1zZUJA84ZOxc7RlsG24SrZSENVQ5pv+oFLBtS7LdY=) 5: LrE5kuPxn2OtXj9y4fo3BBBJmPg.roa (hash: Gs3AunGylHB59F42LYhpjb1I/VnyDGsD26/q43JcIi0=) 6: Xp1cuH5GckRebQbl04bBVOXl9c0.roa (hash: G9DoetqG3+uFPEjScRTeA6vdZfkVk+8JEJjCMtB7vJ4=) 7: ckfmY3WSPr_4BWpV0qlaPUwbu8I.roa (hash: rA5xc/5hb1tqN7XSQMe8RP1nVeaWX6f+VPTMMamNxv0=) 8: kHJAbRZAn8BmDoNVsIR_1TrPdwU.roa (hash: MQR9UxJH6mrGqbSYbaZNH4TCjTvPKDgCy2uSCTLGIl4=) 9: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: elfj2Fu3lAfP1UG30RV1fANtU/FBKsUfzAx3dUucd/M=) 10: oFjLnFx0PgjFBuwtiF_MYSFpqmA.roa (hash: VK+JXOgRMBfH6LlIiFROL5a7HEYqeypevfrTL4MJN2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 22:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:ff:7e:42:2c:05:b0:d6:78:8e:2f:11:d8:da:93:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94166b704843d3d9754095c83a91b493828200a2 Validity Not Before: Jul 23 22:01:30 2026 GMT Not After : Jul 24 22:01:30 2026 GMT Subject: CN=64ff50718c675c495aa179281e652dd050675afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0c:dc:1b:f6:b8:65:90:d6:a6:84:b7:7b:13: 5e:a9:f6:61:23:88:e5:03:92:4a:e0:73:1e:32:1c: 25:ac:40:67:05:f5:27:e8:08:4b:75:f3:a4:d3:46: 6b:73:46:3d:a0:f3:2c:a3:61:6d:dc:6f:59:bc:de: 4f:1e:e5:4a:88:48:59:fc:d0:7a:76:bb:63:ed:3d: fe:5b:2a:b6:96:37:13:2d:0e:b6:35:2e:d8:37:5b: 6d:2d:e1:74:fb:01:ba:9e:44:c5:e9:09:86:83:99: ca:97:48:0b:75:32:02:f7:c6:c3:94:28:2d:e1:a2: d3:eb:0a:ca:34:6a:62:7b:76:58:a3:1a:ec:4f:63: 44:39:7f:14:91:a5:56:0d:f1:01:c4:c5:74:83:04: a4:bd:41:e5:de:80:59:7a:fc:15:c2:3b:8d:7b:13: 0f:a6:fa:49:a1:33:a2:b8:c7:a8:f0:12:51:82:04: dc:22:75:ed:e0:29:8d:97:92:c3:c7:42:19:ea:70: 29:38:de:12:bc:0f:dc:5d:8c:5c:41:6c:4c:75:5c: 39:09:f6:03:bf:a5:49:dd:61:27:6a:7b:bf:c4:bc: 08:89:e6:ce:8b:87:56:03:ae:0d:f3:5a:b9:c4:59: f6:09:9c:3f:ae:5d:c8:70:36:3e:68:ce:d6:18:9e: f6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FF:50:71:8C:67:5C:49:5A:A1:79:28:1E:65:2D:D0:50:67:5A:FE X509v3 Authority Key Identifier: keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:95:d7:5e:7d:09:a8:1c:44:3d:b8:da:2c:57:52:b8:a0:03: 7a:a8:9f:42:3f:ca:a7:af:cb:eb:13:4d:d8:d0:7a:b2:6e:a8: ec:b8:9e:8b:ec:84:dc:0f:98:2b:07:ea:72:ec:b7:00:09:47: 45:1d:82:de:bb:76:68:34:ea:55:10:ba:00:5b:62:e9:4c:59: 2a:8c:ae:83:20:0f:24:b8:b1:35:49:b6:c5:e2:9f:08:b6:fb: a3:0f:b5:25:1a:47:7a:7f:13:de:10:d2:42:fa:48:3c:e2:d4: 2b:ed:a8:17:8a:e0:fc:93:a9:f6:65:b0:03:b2:bc:55:dc:04: a4:e6:11:1c:c2:91:eb:9f:01:18:01:8a:4e:16:0f:79:0a:de: 9b:ba:f1:20:5d:51:2b:94:18:ca:70:74:76:06:3b:f2:ae:cd: cc:09:fe:09:d3:74:26:e3:8d:60:62:14:9d:96:96:02:28:23: 46:c8:43:4a:10:c8:0b:19:97:9a:af:75:c9:b4:aa:ab:8e:d0: 01:0e:d4:4d:db:7c:1e:d1:91:3b:a5:c6:28:cc:dd:f6:70:3d: f7:37:34:7d:a4:11:ca:ec:05:ff:d0:c8:e9:5a:af:9b:c5:2e: fd:8f:3d:c3:18:a3:98:0d:5c:30:9f:c1:16:19:2c:4b:54:87: 4d:d7:25:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Q/35CLAWw1niOLxHY2pN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4 MjAwYTIwHhcNMjYwNzIzMjIwMTMwWhcNMjYwNzI0MjIwMTMwWjAzMTEwLwYDVQQD Eyg2NGZmNTA3MThjNjc1YzQ5NWFhMTc5MjgxZTY1MmRkMDUwNjc1YWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AzcG/a4ZZDWpoS3exNeqfZhI4jl A5JK4HMeMhwlrEBnBfUn6AhLdfOk00Zrc0Y9oPMso2Ft3G9ZvN5PHuVKiEhZ/NB6 drtj7T3+Wyq2ljcTLQ62NS7YN1ttLeF0+wG6nkTF6QmGg5nKl0gLdTIC98bDlCgt 4aLT6wrKNGpie3ZYoxrsT2NEOX8UkaVWDfEBxMV0gwSkvUHl3oBZevwVwjuNexMP pvpJoTOiuMeo8BJRggTcInXt4CmNl5LDx0IZ6nApON4SvA/cXYxcQWxMdVw5CfYD v6VJ3WEnanu/xLwIiebOi4dWA64N81q5xFn2CZw/rl3IcDY+aM7WGJ72kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGT/UHGMZ1xJWqF5KB5lLdBQZ1r+MB8GA1UdIwQY MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt NGJlMThlZjEyOGI0LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0 LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5XXXn0J qBxEPbjaLFdSuKADeqifQj/Kp6/L6xNN2NB6sm6o7Liei+yE3A+YKwfqcuy3AAlH RR2C3rt2aDTqVRC6AFti6UxZKoyugyAPJLixNUm2xeKfCLb7ow+1JRpHen8T3hDS QvpIPOLUK+2oF4rg/JOp9mWwA7K8VdwEpOYRHMKR658BGAGKThYPeQrem7rxIF1R K5QYynB0dgY78q7NzAn+CdN0JuONYGIUnZaWAigjRshDShDICxmXmq91ybSqq47Q AQ7UTdt8HtGRO6XGKMzd9nA99zc0faQRyuwF/9DI6Vqvm8Uu/Y89wxijmA1cMJ/B FhksS1SHTdclmg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:59:46 2026 by rpki-client