$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft File: LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft (raw, json) Hash identifier: 6T5pWUwHaPmWc/l1ol85xyE93dtfgTmr8jeaa0M3DEs= Subject key identifier: 90:66:05:5D:FC:1B:FC:86:21:06:64:C2:02:34:5F:60:51:25:13:EA Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Certificate serial: 019F93C8CB0FF244D6ED32D3882391A64556 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft Manifest number: 11E8 Signing time: Fri 24 Jul 2026 11:00:37 +0000 Manifest this update: Fri 24 Jul 2026 11:00:37 +0000 Manifest next update: Sat 25 Jul 2026 11:00:37 +0000 Files and hashes: 1: 09L29M524JtLa5ZgogkXLXq_qVQ.roa (hash: vbKviP/C/Uh8p10yamrn572MJG8g6MCiVwGfvH2mWcc=) 2: CXjoG7tvIWNFCtKSa0QeykOVgjU.roa (hash: bQeAMi9fb7rUFfhAGK5k1fFLZVj6ofPNEt4NLS/erBo=) 3: IGOBSd3ZuJbm4C5TrnSQrR-a0jU.roa (hash: gqwFBRnGvAPBp+VnF0Uw0nntvsm6cNUPb90FQlaPVzo=) 4: LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl (hash: FKF1mYbAbWa/I4TDnE8vBPVmmFQuSGck3H2vBnyXQ6o=) 5: OOzqyBl-3IK9h8aAJujCwJk-92g.roa (hash: dpTGH67xDvSqmXU43ZPh6OckhG/DCpqHk3f/7ZGQqAE=) 6: RC6auerhl88_6riv7dybqchIS5U.roa (hash: SeZbnHyJbUAAlR1IcpsGOJobNmygz8xGZkv6xW1FK8g=) 7: ehxVaEtRSgmtXWibehJFSg2UxQg.roa (hash: t9f5OTDkYl9rwnvOFT12TZ8YPdY0wwMwMgp6Xvr9xCo=) 8: s2Ypy54WuhCWz54ggPtUGzQB9Y8.roa (hash: Cr4q6do/gJppREcmAQon0odH+YuL+eSFq022BhIG/4E=) 9: uqa1tyxWj6cFaANZUIcESG1vArI.roa (hash: vTGoqUA5XDYJlnJpWHgE1fB7R+WNNBHqxw/ULLm7ImA=) 10: wj6F-GbnlJ5PgQSNTpZExJxm390.roa (hash: YVJH3yfABwb076P/mjMjg3bUoVEsCOXMqF23WBWbaWk=) 11: yeY5AZEc-7vHR4MMxjSRHrJKiq8.roa (hash: EDUBfQI+6/FNbtkxVmUdESGv/HU1uqCrqvE17u5xwN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:93:c8:cb:0f:f2:44:d6:ed:32:d3:88:23:91:a6:45:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Validity Not Before: Jul 24 11:00:37 2026 GMT Not After : Jul 25 11:00:37 2026 GMT Subject: CN=9066055dfc1bfc86210664c202345f60512513ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:32:89:d4:ad:f5:d0:2e:7f:95:93:18:49:78: 99:c8:7a:dd:48:b4:a4:9e:4b:d3:1a:94:e4:b5:ab: 7d:98:9b:e3:b0:46:3f:7c:bd:e3:2e:03:4d:dc:d1: 22:7a:a1:4d:c1:a0:2e:de:a8:f4:26:27:8b:3c:16: 53:96:1e:87:c9:11:e6:89:0c:0f:ce:71:bf:1f:21: 28:17:98:a6:09:02:9b:da:54:2a:b6:44:39:21:c5: 71:65:d0:95:60:eb:98:c2:ee:01:ca:85:85:03:ae: 1e:7e:82:6f:23:9e:ad:15:d6:07:0a:ae:cd:11:c1: d3:a9:b8:92:6b:f4:00:21:30:24:62:94:ae:b1:92: fa:77:8c:80:1f:89:77:42:f5:32:f3:a9:a0:4d:f6: 34:30:22:b3:91:a0:eb:db:e6:d2:a9:81:9e:3d:8e: 50:1d:fc:17:92:0c:6c:a6:ad:5b:19:d5:0b:3f:75: 5f:17:98:66:fc:1d:de:8e:e2:62:39:8f:8b:00:08: 28:ef:3c:7a:94:f2:cb:c8:24:5c:57:ee:47:43:c4: 93:45:94:3d:b6:dc:b6:aa:95:0f:34:0c:d0:86:db: fd:d0:34:b5:6e:aa:7d:d6:0d:7f:5f:fa:60:35:ca: 53:b8:9b:ab:d3:eb:f8:6f:1f:c6:23:06:6d:5b:e4: eb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:66:05:5D:FC:1B:FC:86:21:06:64:C2:02:34:5F:60:51:25:13:EA X509v3 Authority Key Identifier: keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a8:8a:d1:75:45:e0:11:fe:a0:62:b4:54:cc:72:60:3e:b0: e8:79:00:26:c2:72:fb:22:9c:55:10:c8:e0:d3:b0:c4:fb:68: a4:10:d3:05:a0:15:75:bb:b4:ce:dd:71:60:2f:98:6e:3d:f7: 37:00:2a:42:7e:c6:6d:d9:d7:70:11:0d:25:9d:c4:38:44:f3: c8:db:93:4c:29:ac:dc:a3:8a:58:9b:9d:9b:04:45:0e:fa:30: 23:02:74:a3:b2:d9:4a:33:2c:c2:80:89:51:6f:61:45:b7:25: 9f:5d:1c:ac:c6:fb:ae:41:66:68:b4:65:34:b9:07:a6:25:f6: 6d:29:d0:3d:83:fe:7e:e1:b7:be:e1:2e:3b:ec:4b:5e:55:f4: 36:95:53:03:b5:04:2c:63:ae:8b:3e:30:d5:65:eb:ff:87:c8: 60:20:80:74:db:15:6b:87:8f:ef:0d:79:a4:ed:35:4e:d5:60: 28:71:fe:58:4f:06:e2:62:f2:0f:d3:49:f7:51:5d:69:63:e4: fb:7a:70:6c:46:4c:1e:da:07:d4:3e:da:eb:0b:26:2c:48:df: 3b:c7:03:98:e2:b0:8a:cd:e7:cb:09:75:84:0d:ad:df:a5:fe: 05:fe:a0:ba:e2:87:2b:6c:cd:ca:ed:b8:5f:f6:ef:6d:34:1c: 6e:25:5c:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+TyMsP8kTW7TLTiCORpkVWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh ODZhNDgwHhcNMjYwNzI0MTEwMDM3WhcNMjYwNzI1MTEwMDM3WjAzMTEwLwYDVQQD Eyg5MDY2MDU1ZGZjMWJmYzg2MjEwNjY0YzIwMjM0NWY2MDUxMjUxM2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjKJ1K310C5/lZMYSXiZyHrdSLSk nkvTGpTktat9mJvjsEY/fL3jLgNN3NEieqFNwaAu3qj0JieLPBZTlh6HyRHmiQwP znG/HyEoF5imCQKb2lQqtkQ5IcVxZdCVYOuYwu4ByoWFA64efoJvI56tFdYHCq7N EcHTqbiSa/QAITAkYpSusZL6d4yAH4l3QvUy86mgTfY0MCKzkaDr2+bSqYGePY5Q HfwXkgxspq1bGdULP3VfF5hm/B3ejuJiOY+LAAgo7zx6lPLLyCRcV+5HQ8STRZQ9 tty2qpUPNAzQhtv90DS1bqp91g1/X/pgNcpTuJur0+v4bx/GIwZtW+TrgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBmBV38G/yGIQZkwgI0X2BRJRPqMB8GA1UdIwQY MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt MTQyN2RkMTZlZmE0LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0 LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqiK0XVF 4BH+oGK0VMxyYD6w6HkAJsJy+yKcVRDI4NOwxPtopBDTBaAVdbu0zt1xYC+Ybj33 NwAqQn7GbdnXcBENJZ3EOETzyNuTTCms3KOKWJudmwRFDvowIwJ0o7LZSjMswoCJ UW9hRbcln10crMb7rkFmaLRlNLkHpiX2bSnQPYP+fuG3vuEuO+xLXlX0NpVTA7UE LGOuiz4w1WXr/4fIYCCAdNsVa4eP7w15pO01TtVgKHH+WE8G4mLyD9NJ91FdaWPk +3pwbEZMHtoH1D7a6wsmLEjfO8cDmOKwis3nywl1hA2t36X+Bf6guuKHK2zNyu24 X/bvbTQcbiVc7w== -----END CERTIFICATE-----Generated at Fri Jul 24 17:00:31 2026 by rpki-client