$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: YG5ww3sjrssCiuB7m6LPscVIX01M1RWwm4H0H5G0P1c= Subject key identifier: 50:46:90:72:6D:03:4F:53:B5:87:A8:8B:F7:BA:D5:68:9E:C9:42:D0 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019E1CEBD57F336229B1AA94EF86F7A0DB09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 0A02 Signing time: Tue 12 May 2026 16:01:18 +0000 Manifest this update: Tue 12 May 2026 16:01:18 +0000 Manifest next update: Wed 13 May 2026 16:01:18 +0000 Files and hashes: 1: 1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa (hash: AsfQqdl/xsaW9IYhySqScr2PgyTmm64VZ6eM34CvYX8=) 2: 3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa (hash: 37lpnBa4Nsmw9t09Qo02WLg5+MVXXnRKupYOqt10ZMk=) 3: 41UDb8PFLYomt2031aTgiY3AQ40.roa (hash: bmp07VNfPBzFitEFlf/fmkB49dR4XxuwZAwtFoPyweY=) 4: 46YPaJsxK-Hh8hedE4d_sKJPbo4.roa (hash: Ln4mKYRG2M1uFSlkxDfyNh3L7AXwbRgdpA6kJaEdsKY=) 5: 4v_iwBzOpciC0YWjVDg_w5r563M.roa (hash: F5kWV5HiM8c6dQiiFtOG3n7NW+KRh+raqsJXmMUP0SM=) 6: Do7W5qGfDMAJEMN6BzBVspjXxYU.roa (hash: SRYxQrkADeDmRh/1IPI3QXOB27eJYEqHNj2TfVv7whg=) 7: NJpLyq2ti9mgv7XrR8IcC5lB92k.roa (hash: X6oNrTIzLpsjoLrgrTl+vU7DqhTACh+EHu5pKkzZfC4=) 8: Ty5DpdqPOmydyDg_bQAaBkoGLp8.roa (hash: akNfDUTh82avi6l8pVfNZIbM0Tw4axKISXdVg+zVbtA=) 9: V9T0hlZ73UkhAau7M6ckTYNUkb4.roa (hash: fNCHN8qNcRcJku7ig7PyvdGoUoQirOawzI5B34WnFFM=) 10: YzVa-BUJnuWH4diErgPUKokymQ0.roa (hash: QcBSZdMSRm/lWv+szi2oRyb+M3WP6bg67A4t9dEA1tc=) 11: bjV9a84Navq2cjlLnnyQ7ZLZJQY.roa (hash: oXiEsLmzNMIEZvn6zcV/UwZ/24olqpUKpuRIwHp2tTQ=) 12: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: JQjSdRINqY7g+M/JP5JY5E6Y9a6xakD1LzvPE/JpJYY=) 13: yvu8AxQYxM3ws7oGYgq0UFdLwY4.roa (hash: 87fEDzcHgs5DE+7kqQ5/TAh2kzd7q9M1YgTV/N72Otc=) 14: zly0HPjprxdyVkXHR1aHuRvdMX0.roa (hash: AhwMXgJ+aAK91jE5Y/Rl3QNmkW9Lhcao2gRRENl3Nek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:eb:d5:7f:33:62:29:b1:aa:94:ef:86:f7:a0:db:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: May 12 16:01:18 2026 GMT Not After : May 13 16:01:18 2026 GMT Subject: CN=504690726d034f53b587a88bf7bad5689ec942d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:79:86:78:6a:8b:31:05:8c:ff:74:60:4a:f8: 9f:0f:44:ec:14:21:30:b2:64:89:9b:8b:da:b5:96: e0:13:31:e2:c0:01:42:12:e9:05:7e:de:9a:2d:8f: 37:97:f1:7a:1a:34:34:a5:7d:0e:27:e7:19:98:2e: 74:9e:cd:1d:72:77:a9:de:0c:9c:82:89:5c:7d:2f: e6:35:b2:12:53:76:3e:a6:8c:e8:65:d3:ce:a2:e5: 8a:6a:ee:ed:3e:bd:88:b8:b4:c9:a0:c5:1c:77:eb: b5:29:88:5f:c4:90:3f:fa:6a:9f:3c:65:04:95:42: 0c:17:98:1f:36:5a:3c:0e:43:e4:40:9e:89:c3:4e: 23:fa:b3:da:f4:f1:07:99:a9:4b:ac:97:f9:de:e8: 84:e4:38:e4:ed:d9:1d:b5:82:4d:93:c1:44:45:d4: 3f:ba:c2:ec:07:92:37:7b:4c:18:9e:dd:f0:8b:1c: 3d:ae:36:aa:7b:49:fe:59:c7:12:8a:2c:f1:ef:8b: c7:6f:e2:ca:b3:bc:cf:38:10:16:94:18:62:b3:13: 96:0a:e0:eb:b3:6d:73:b4:65:11:26:50:ee:64:cc: c7:87:2e:d5:f3:1a:da:1f:85:2e:fb:7e:3d:6e:24: 0c:14:08:44:52:3d:7f:eb:e6:29:7d:e6:95:81:23: 3c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:46:90:72:6D:03:4F:53:B5:87:A8:8B:F7:BA:D5:68:9E:C9:42:D0 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:95:8f:f6:df:9d:2b:82:03:6e:c5:ef:7e:36:9a:02:d4:99: 4f:71:f4:f7:61:7c:1e:ed:d9:8b:b9:cb:56:ce:92:8d:97:48: 8a:f1:36:92:3e:d3:1e:cc:f1:74:0b:f4:50:c1:59:f7:c1:c4: c8:8e:c6:23:8b:ca:f3:d8:e2:d4:9e:d9:af:15:87:76:c3:99: 25:03:f6:6f:c6:6a:50:a6:23:ae:b8:48:5a:a4:b0:21:d6:b4: f3:ce:2e:db:37:5d:de:0b:8a:3b:3c:73:67:74:ed:56:80:1a: 74:83:63:17:41:28:fc:1c:b7:47:a3:95:0b:72:1b:aa:45:5b: c5:46:1e:75:44:43:2b:2c:95:36:71:d2:03:74:2a:7b:d7:b6: cb:15:18:cb:f2:aa:7b:89:0d:05:b3:6c:f6:93:db:9d:7a:fb: 64:dd:30:7f:4a:9d:ee:eb:2e:35:35:c3:78:0c:ce:fe:90:c9: 7d:87:eb:53:16:be:ef:99:84:f7:84:94:bc:99:c9:ca:32:32: 7a:bc:61:7f:66:86:19:cb:9e:0e:33:d6:64:a6:51:8f:04:39: 28:86:ba:55:b9:29:94:e6:0b:67:94:d3:bb:cd:c2:33:8c:45: 6d:4a:cd:db:12:f5:fb:c0:90:61:3d:cb:95:9f:79:28:f7:4c: 75:ae:be:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4c69V/M2IpsaqU74b3oNsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwNTEyMTYwMTE4WhcNMjYwNTEzMTYwMTE4WjAzMTEwLwYDVQQD Eyg1MDQ2OTA3MjZkMDM0ZjUzYjU4N2E4OGJmN2JhZDU2ODllYzk0MmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XmGeGqLMQWM/3RgSvifD0TsFCEw smSJm4vatZbgEzHiwAFCEukFft6aLY83l/F6GjQ0pX0OJ+cZmC50ns0dcnep3gyc golcfS/mNbISU3Y+pozoZdPOouWKau7tPr2IuLTJoMUcd+u1KYhfxJA/+mqfPGUE lUIMF5gfNlo8DkPkQJ6Jw04j+rPa9PEHmalLrJf53uiE5Djk7dkdtYJNk8FERdQ/ usLsB5I3e0wYnt3wixw9rjaqe0n+WccSiizx74vHb+LKs7zPOBAWlBhisxOWCuDr s21ztGURJlDuZMzHhy7V8xraH4Uu+349biQMFAhEUj1/6+YpfeaVgSM8NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBGkHJtA09TtYeoi/e61WieyULQMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZWP9t+d K4IDbsXvfjaaAtSZT3H092F8Hu3Zi7nLVs6SjZdIivE2kj7THszxdAv0UMFZ98HE yI7GI4vK89ji1J7ZrxWHdsOZJQP2b8ZqUKYjrrhIWqSwIda0884u2zdd3guKOzxz Z3TtVoAadINjF0Eo/By3R6OVC3IbqkVbxUYedURDKyyVNnHSA3Qqe9e2yxUYy/Kq e4kNBbNs9pPbnXr7ZN0wf0qd7usuNTXDeAzO/pDJfYfrUxa+75mE94SUvJnJyjIy erxhf2aGGcueDjPWZKZRjwQ5KIa6VbkplOYLZ5TTu83CM4xFbUrN2xL1+8CQYT3L lZ95KPdMda6+CA== -----END CERTIFICATE-----Generated at Wed May 13 01:18:34 2026 by rpki-client