$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: dYwRMG87d1g3JCH2CsSxQaMAV1UDP41Fu58lit4wnsQ= Subject key identifier: C8:CC:18:06:01:F1:91:AB:08:D2:E2:33:A8:35:E0:8D:A2:C0:F8:A2 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019F90C81EEF8B120BC0E45434C079876062 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0B3C Signing time: Thu 23 Jul 2026 21:01:01 +0000 Manifest this update: Thu 23 Jul 2026 21:01:01 +0000 Manifest next update: Fri 24 Jul 2026 21:01:01 +0000 Files and hashes: 1: 1Xx5yOqEiQ7w5oHl6pnI_Y99OJs.roa (hash: Qx3nCAa4Beyb+QGxZu/J+rc4mQgVdLQcLRYPOorkMM4=) 2: EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa (hash: td45xoqPpbc6Gcv+omp/fWPWBTYjdFq1Rce3dc0yMFE=) 3: GFld6khnEFpi6gQW0hMwMmLlwl0.roa (hash: I//YiN+Se4j9l8lgpKjzKKrJJsrwrv0cFrGyIWJUOJM=) 4: Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa (hash: EJSmVb0JmOGritsgWS3ZtbKYPG2hsEELjPpmAJHyJCw=) 5: bGDcrsy1uQ5Mie-xzDZjQZVH5Bc.roa (hash: BiNEWFnYGjmRdfcF3Lt+gPgQZVk5kMfGR526Ub/jeCI=) 6: cUAPfDvh9ctdBxtYWpRtEO8lG-g.roa (hash: b7MFeinCWo8o8FGB9kNt+44ggK2LvY6c1Zj//B8xVDY=) 7: eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa (hash: a793akF/TsnRIOMvjjqGG7ES5VGanrP8pXq6vUrCFVg=) 8: ix3G7JJ__thdkqzxBKhHSgEyUHQ.roa (hash: tqrv+mk7OqdSNSDsJu86ikaVD3U+743I3Wq1BdDs+CY=) 9: j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa (hash: gQFSyERJDH6nAPPc5747gmPm78inz3QBTsIip7aNmlE=) 10: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: sNRpNWiyO35ZOxQux1HJuAxVF7f/nY2WrCi9tS1DLLs=) 11: tsos8eFPeooULoppkyeNfVcA8Jk.roa (hash: P1kvV9Q/5XqDoLtfOjAVY+r8AgKwUeqcSTXWYXo6SZk=) 12: ujxhGCIYEFST9j-DRoKisCQQu7c.roa (hash: AnXG8guwVLItbuN1JjYAFkgz+rL1QHqF7D8yDPRN/BY=) 13: wLzBl1TIo7EO7s1obxvC0i1YAfw.roa (hash: e/MgA8dzgW4G4QsjGyKgevc8bH2s9NTc1MsFkFjalAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:c8:1e:ef:8b:12:0b:c0:e4:54:34:c0:79:87:60:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jul 23 21:01:01 2026 GMT Not After : Jul 24 21:01:01 2026 GMT Subject: CN=c8cc180601f191ab08d2e233a835e08da2c0f8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:f3:44:98:fd:d3:db:40:a0:fe:eb:93:5b: 62:4f:51:fd:af:8c:46:64:33:fc:64:03:bb:dd:ae: eb:7b:75:87:39:46:d5:19:53:72:a0:f4:f8:06:f2: 78:36:f1:86:f3:03:94:7d:bb:a7:06:82:38:95:09: a0:4a:4d:af:34:65:8f:44:47:66:e8:67:b1:40:7e: b2:e6:11:fa:92:a5:9e:e0:b6:6a:94:91:bd:07:5a: d3:1e:f1:8c:80:57:89:b0:15:ee:a9:17:49:84:ea: 89:f4:3b:7e:9d:dc:65:d9:3e:36:40:b2:8f:81:20: 41:71:df:d8:3b:54:78:ad:86:bf:e4:cc:e0:5b:db: f5:d0:f3:7a:e2:6e:d3:c5:52:07:fb:92:f3:34:25: 2b:b8:62:e5:32:c9:0c:5b:22:1e:cd:d7:8a:48:1f: ff:b7:83:b0:8b:af:35:5b:ba:26:b5:13:1e:4b:98: 11:96:8d:01:58:52:58:38:27:89:ca:5f:66:df:8f: 50:ff:5e:66:0c:4d:ba:08:6c:72:1a:33:f0:f7:bf: 1f:1f:78:73:ee:53:05:c8:bd:fb:9f:16:c4:b6:ed: 61:05:ee:01:d1:1f:24:81:f0:85:55:8b:ff:0b:72: c2:aa:ff:30:eb:cd:21:ea:3c:cd:d3:66:67:e6:08: ed:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CC:18:06:01:F1:91:AB:08:D2:E2:33:A8:35:E0:8D:A2:C0:F8:A2 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:98:06:ef:77:ff:43:81:26:11:52:c2:6f:0b:19:07:94:dd: 64:ab:22:eb:42:b3:d1:6d:9b:68:49:74:28:d1:96:fc:14:47: 32:39:98:5e:30:c7:1b:7d:41:7d:79:b8:4f:c2:9a:38:db:00: 91:7e:6c:7d:c9:f8:c7:23:d5:10:0e:e8:1d:46:97:5b:67:73: 96:65:1b:36:9e:05:e3:6e:5c:dd:9a:94:07:b5:14:25:33:bd: ab:63:f3:9c:29:95:e8:1b:6e:90:a1:4a:0b:9c:f5:e0:99:2b: 9d:4f:d9:11:8a:4b:75:21:b2:6a:ef:10:cf:88:2a:71:6f:5c: 4a:93:87:3c:14:a6:a1:de:5d:da:94:c6:07:39:fe:fc:c5:06: c1:25:41:6f:59:eb:22:be:03:93:f0:42:f0:7f:2a:15:22:91: 04:ca:ab:f3:3d:55:67:33:80:aa:64:ec:9d:c6:ec:8c:d9:b0: ba:4c:39:ce:dd:a6:3f:70:a0:c2:a0:bc:f0:93:a1:47:6d:99: 0f:fb:ae:11:92:27:54:8b:5d:5a:d7:1c:1f:a3:56:21:61:ec: 0f:a9:a7:e3:f1:f9:51:13:e9:dc:de:30:bc:cf:83:2d:e2:c8: 4e:20:9e:0e:49:c4:fb:41:3e:10:f9:42:ca:0a:59:8a:a9:13: 70:86:10:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QyB7vixILwORUNMB5h2BiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwNzIzMjEwMTAxWhcNMjYwNzI0MjEwMTAxWjAzMTEwLwYDVQQD EyhjOGNjMTgwNjAxZjE5MWFiMDhkMmUyMzNhODM1ZTA4ZGEyYzBmOGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ/zRJj909tAoP7rk1tiT1H9r4xG ZDP8ZAO73a7re3WHOUbVGVNyoPT4BvJ4NvGG8wOUfbunBoI4lQmgSk2vNGWPREdm 6GexQH6y5hH6kqWe4LZqlJG9B1rTHvGMgFeJsBXuqRdJhOqJ9Dt+ndxl2T42QLKP gSBBcd/YO1R4rYa/5MzgW9v10PN64m7TxVIH+5LzNCUruGLlMskMWyIezdeKSB// t4Owi681W7omtRMeS5gRlo0BWFJYOCeJyl9m349Q/15mDE26CGxyGjPw978fH3hz 7lMFyL37nxbEtu1hBe4B0R8kgfCFVYv/C3LCqv8w680h6jzN02Zn5gjt3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjMGAYB8ZGrCNLiM6g14I2iwPiiMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJgG73f/ Q4EmEVLCbwsZB5TdZKsi60Kz0W2baEl0KNGW/BRHMjmYXjDHG31BfXm4T8KaONsA kX5sfcn4xyPVEA7oHUaXW2dzlmUbNp4F425c3ZqUB7UUJTO9q2PznCmV6BtukKFK C5z14JkrnU/ZEYpLdSGyau8Qz4gqcW9cSpOHPBSmod5d2pTGBzn+/MUGwSVBb1nr Ir4Dk/BC8H8qFSKRBMqr8z1VZzOAqmTsncbsjNmwukw5zt2mP3CgwqC88JOhR22Z D/uuEZInVItdWtccH6NWIWHsD6mn4/H5URPp3N4wvM+DLeLITiCeDknE+0E+EPlC ygpZiqkTcIYQgw== -----END CERTIFICATE-----Generated at Thu Jul 23 22:48:05 2026 by rpki-client