$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: G8PTRktZpKQDCBQXWg244/rDkucK4USONofBYEdO59Y= Subject key identifier: A6:1D:23:91:52:D7:A6:26:7D:ED:3B:55:B8:94:90:9B:95:EA:6A:15 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019E1DFE37D6A027D9B8B66DBD0D24BA67CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0A7C Signing time: Tue 12 May 2026 21:01:00 +0000 Manifest this update: Tue 12 May 2026 21:01:00 +0000 Manifest next update: Wed 13 May 2026 21:01:00 +0000 Files and hashes: 1: 1Xx5yOqEiQ7w5oHl6pnI_Y99OJs.roa (hash: Qx3nCAa4Beyb+QGxZu/J+rc4mQgVdLQcLRYPOorkMM4=) 2: EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa (hash: td45xoqPpbc6Gcv+omp/fWPWBTYjdFq1Rce3dc0yMFE=) 3: GFld6khnEFpi6gQW0hMwMmLlwl0.roa (hash: I//YiN+Se4j9l8lgpKjzKKrJJsrwrv0cFrGyIWJUOJM=) 4: Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa (hash: EJSmVb0JmOGritsgWS3ZtbKYPG2hsEELjPpmAJHyJCw=) 5: bGDcrsy1uQ5Mie-xzDZjQZVH5Bc.roa (hash: BiNEWFnYGjmRdfcF3Lt+gPgQZVk5kMfGR526Ub/jeCI=) 6: cUAPfDvh9ctdBxtYWpRtEO8lG-g.roa (hash: b7MFeinCWo8o8FGB9kNt+44ggK2LvY6c1Zj//B8xVDY=) 7: eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa (hash: a793akF/TsnRIOMvjjqGG7ES5VGanrP8pXq6vUrCFVg=) 8: ix3G7JJ__thdkqzxBKhHSgEyUHQ.roa (hash: tqrv+mk7OqdSNSDsJu86ikaVD3U+743I3Wq1BdDs+CY=) 9: j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa (hash: gQFSyERJDH6nAPPc5747gmPm78inz3QBTsIip7aNmlE=) 10: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: MRlgtJMZeJQxC+1w4E0H1Xgx7raGlHOUb1Oq5DO1b7o=) 11: tsos8eFPeooULoppkyeNfVcA8Jk.roa (hash: P1kvV9Q/5XqDoLtfOjAVY+r8AgKwUeqcSTXWYXo6SZk=) 12: ujxhGCIYEFST9j-DRoKisCQQu7c.roa (hash: AnXG8guwVLItbuN1JjYAFkgz+rL1QHqF7D8yDPRN/BY=) 13: wLzBl1TIo7EO7s1obxvC0i1YAfw.roa (hash: e/MgA8dzgW4G4QsjGyKgevc8bH2s9NTc1MsFkFjalAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:37:d6:a0:27:d9:b8:b6:6d:bd:0d:24:ba:67:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: May 12 21:01:00 2026 GMT Not After : May 13 21:01:00 2026 GMT Subject: CN=a61d239152d7a6267ded3b55b894909b95ea6a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5f:6a:f8:ab:30:b3:96:fc:bb:f8:d2:51:2b: 23:61:aa:9e:a1:7a:9e:93:b4:22:84:10:cf:52:ad: f4:69:77:2b:6f:2f:f9:07:4f:95:4e:0d:bf:28:83: 71:56:9c:2d:05:0f:a2:33:36:f8:ce:b4:08:ad:87: cd:9a:d7:81:22:23:2f:05:07:91:cc:b3:f3:dc:b5: 84:00:74:ab:78:45:88:86:e6:fe:c3:1b:28:21:10: 44:8e:3b:7e:d9:04:91:98:c0:0f:d9:14:46:43:bf: 89:0c:45:59:d9:69:cf:28:22:6f:5c:45:2f:d8:90: 15:db:ba:4b:4f:0d:10:29:c8:d9:a7:0c:bc:d6:5f: a8:4d:cb:ed:f6:4b:50:0d:8e:95:ba:29:f7:09:7a: 45:79:bd:aa:3f:d5:c3:6a:5b:fb:9d:ee:57:b4:8c: fd:8e:c3:4b:5b:74:9e:9e:f9:4f:89:c7:19:71:57: 81:85:42:29:78:79:a5:2c:90:7a:34:c7:2a:18:91: fc:58:e2:2c:b5:1b:5e:11:27:15:29:b2:19:2b:ab: 5a:d7:16:d7:54:5c:93:f6:9d:1f:2f:49:f7:3e:18: 72:d0:e0:ab:04:88:a1:f3:1d:e5:d4:a6:3c:e4:be: 88:38:6a:69:f5:8d:15:b4:1f:5f:ae:d6:1b:f9:e6: 04:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1D:23:91:52:D7:A6:26:7D:ED:3B:55:B8:94:90:9B:95:EA:6A:15 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:80:64:a6:e7:eb:5d:6f:15:64:f1:0f:2a:bb:19:bc:59:70: 29:ca:e1:d2:ff:9b:af:ac:b4:4a:d5:3d:06:5e:2a:3d:54:af: 04:29:9a:8a:f2:88:86:cc:37:66:68:04:60:89:42:b7:b6:24: 6f:c6:cc:fb:7e:d0:62:d1:b3:d4:e0:59:ef:99:d5:a7:f1:90: 8b:cf:37:56:ae:ee:e4:20:6c:66:c0:46:66:ae:35:da:25:12: e6:f0:d1:d3:56:70:17:28:d2:9e:d7:64:34:26:e5:63:28:11: 4a:6b:6e:7b:31:d5:67:06:1b:99:32:f0:9c:52:86:ce:ea:95: dd:52:06:06:db:97:51:a6:d8:64:c6:82:17:3a:64:7d:bb:34: 57:9e:a6:10:fa:53:6a:70:84:58:43:90:6e:aa:85:0a:c5:bb: 3c:06:62:8d:39:9f:02:12:96:85:4b:36:19:eb:2c:da:4c:a9: 56:54:08:13:db:b8:f5:51:fb:00:67:ab:f3:57:2a:61:44:6f: 58:81:85:46:b7:11:55:64:5f:d4:cb:93:6c:03:79:97:5d:72: 10:f1:91:9e:fc:f1:45:c8:b9:7d:b9:74:22:96:a9:c1:ae:87: 63:5f:e6:1d:0d:8f:04:12:d6:8f:e5:a4:32:e5:a8:4b:ad:1b: 61:c6:95:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/jfWoCfZuLZtvQ0kumfMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwNTEyMjEwMTAwWhcNMjYwNTEzMjEwMTAwWjAzMTEwLwYDVQQD EyhhNjFkMjM5MTUyZDdhNjI2N2RlZDNiNTViODk0OTA5Yjk1ZWE2YTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF9q+Ksws5b8u/jSUSsjYaqeoXqe k7QihBDPUq30aXcrby/5B0+VTg2/KINxVpwtBQ+iMzb4zrQIrYfNmteBIiMvBQeR zLPz3LWEAHSreEWIhub+wxsoIRBEjjt+2QSRmMAP2RRGQ7+JDEVZ2WnPKCJvXEUv 2JAV27pLTw0QKcjZpwy81l+oTcvt9ktQDY6Vuin3CXpFeb2qP9XDalv7ne5XtIz9 jsNLW3SenvlPiccZcVeBhUIpeHmlLJB6NMcqGJH8WOIstRteEScVKbIZK6ta1xbX VFyT9p0fL0n3Phhy0OCrBIih8x3l1KY85L6IOGpp9Y0VtB9frtYb+eYE/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYdI5FS16Ymfe07VbiUkJuV6moVMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4Bkpufr XW8VZPEPKrsZvFlwKcrh0v+br6y0StU9Bl4qPVSvBCmaivKIhsw3ZmgEYIlCt7Yk b8bM+37QYtGz1OBZ75nVp/GQi883Vq7u5CBsZsBGZq412iUS5vDR01ZwFyjSntdk NCblYygRSmtuezHVZwYbmTLwnFKGzuqV3VIGBtuXUabYZMaCFzpkfbs0V56mEPpT anCEWEOQbqqFCsW7PAZijTmfAhKWhUs2Gess2kypVlQIE9u49VH7AGer81cqYURv WIGFRrcRVWRf1MuTbAN5l11yEPGRnvzxRci5fbl0Ipapwa6HY1/mHQ2PBBLWj+Wk MuWoS60bYcaVdA== -----END CERTIFICATE-----Generated at Wed May 13 00:07:09 2026 by rpki-client