$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft File: lAp03bdcaahF18xWmu2iZn8UG0Y.mft (raw, json) Hash identifier: Uk3T+0tuSsUfWV0WfbQtlqLUlm/R++nmFqSx1FnseP8= Subject key identifier: 25:E5:2A:FA:2C:DE:01:A5:E6:07:98:8B:1D:93:ED:65:B2:5D:41:39 Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46 Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46 Certificate serial: 019F72863F9AE30E9038AB8DE29C6D49ACE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft Manifest number: 30 Signing time: Sat 18 Jul 2026 00:00:28 +0000 Manifest this update: Sat 18 Jul 2026 00:00:28 +0000 Manifest next update: Sun 19 Jul 2026 00:00:28 +0000 Files and hashes: 1: Ax21UmMC0-KicwkMfpA7w8nCx0c.roa (hash: ltSg8LfKIU6cZnCzTqsVYJsYqcS6HCk2VCAS4iYtQ1c=) 2: CRweVTgebnTaIIJuvD2Vpm_hEI8.roa (hash: 0TfSHKCcdRm11P/Z+pghiutPw8OkEPy0pXyOhDApvC4=) 3: EAu9PVFOc2HMIqwl2TAEKVMKjhM.roa (hash: +RxDuulMgzt590ZJGALAr+G6BMF4rXunGyJvYgQw8JU=) 4: IjLtRrWaUXgGKy4qwi6kM6pSm9w.roa (hash: Vqmxt3BWqE/GJfg1ZTqUCwGCq0LbFCJvOwfHIeCWm6o=) 5: K3HHt021rxfspiJXL_jbb9NfheQ.roa (hash: J0SaNkkovQ/E9TIPjipdYFj6AWH79jJ7DyPTP9X1t68=) 6: TTvte-vG-uL-QJEIgq3vCyoRt5s.roa (hash: SkEV3UZWo3lRtSvULxQM+XKWPgskfo67/AN3jkd+Qtg=) 7: f1IHBZhxZ4ZdDVRS_NRodLQ9rrs.roa (hash: ZOBtlDa4skX18xmRlY6uCZ9cujDrQ2YISweWZDnuRwY=) 8: fOOP_exg4KET6deawpN7oz_WdzM.roa (hash: z2o86ioauTHfgn4E3LgCB4xZMv1SBlDr/6hS0phGqqc=) 9: lAp03bdcaahF18xWmu2iZn8UG0Y.crl (hash: bs/sbs0aqCkuRzZ5Uu1fbLfJ4+NBjjIhhbDk5LEz2f4=) 10: pZ7B3AgctzgfSs7T-w6ArLJB6W0.roa (hash: 6B92+t7EjqClqc9AMNDLM32J3Uyl6JKD1nH0ZOx3K2s=) 11: wscbDwHrmLx272pKZtGELGhuuXA.roa (hash: UY3EK2y/Cexn1/dQSElqlxjbeeV/MbtFdhvzL6gAd7k=) 12: yLdJIjgYrWUQ7TDFqO7qNYlFDjU.roa (hash: dXZjSLlSeRIZKGocGL3yryQVuOVReJZI8cSiDLaCvDc=) 13: zJGcoCrLQSthi3L8e5XtHzN0SoQ.roa (hash: hJXcwgL64tCaIHfaSt8f+ThD0JMQA7Qmi1BADBvOlLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Jul 2026 17:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:72:86:3f:9a:e3:0e:90:38:ab:8d:e2:9c:6d:49:ac:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46 Validity Not Before: Jul 18 00:00:28 2026 GMT Not After : Jul 19 00:00:28 2026 GMT Subject: CN=25e52afa2cde01a5e607988b1d93ed65b25d4139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fe:cf:d2:b5:39:72:31:ff:81:c1:30:1c:4a: b8:bb:f9:02:e2:4f:ae:d5:bf:5c:c5:bb:fc:74:43: 69:4f:ae:29:f5:68:07:72:f8:0c:2d:c0:bc:3e:41: 1a:72:ff:a7:c2:11:1f:24:f2:bc:b1:b5:79:4c:2b: 2b:8d:5f:2e:8b:08:db:cb:7f:d1:6e:41:84:af:90: d0:b9:c5:da:92:26:42:1b:18:94:06:a3:27:1f:99: cd:ca:cf:51:0c:01:76:27:28:3b:38:9f:02:c3:b5: 71:88:57:24:aa:38:36:b6:f6:38:30:a0:84:50:b3: 6c:32:1c:52:d6:a7:3d:70:24:55:e9:0d:b2:f6:04: 5e:e0:cb:55:f9:82:3e:01:96:95:8b:d7:ab:86:32: 33:29:40:8c:67:36:cd:f1:37:13:dc:24:1b:21:44: 6d:18:e7:72:26:c2:5d:ef:c1:c3:fa:18:49:a7:b1: e3:26:5f:41:b3:97:35:98:20:50:cc:f1:fd:61:10: c9:65:b8:b4:09:69:57:5f:ce:45:d9:fb:ff:0a:dd: 99:17:24:80:d3:a0:05:70:93:3c:1a:ff:f0:13:66: 11:62:14:66:d8:75:1a:08:93:ff:31:6e:a2:9b:23: 46:1e:fe:84:b9:b4:03:9d:95:b5:47:fe:59:6b:0a: 6b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E5:2A:FA:2C:DE:01:A5:E6:07:98:8B:1D:93:ED:65:B2:5D:41:39 X509v3 Authority Key Identifier: keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7d:5f:51:00:57:f9:42:82:be:ce:1b:68:be:4a:cb:0d:9f: d9:f6:c0:38:c2:9f:1f:c0:00:ed:7d:2f:d9:6f:22:93:39:6c: 2f:52:8d:25:6b:7c:e0:1b:1b:c8:82:65:cc:03:f8:b5:e0:62: d9:7f:9d:d1:6a:7b:ab:e5:46:72:ab:bf:fd:e6:b6:d2:67:c5: fd:46:f0:0c:c7:13:1c:6f:a1:89:f9:61:9e:f0:83:0b:29:87: 2b:59:08:06:5d:e4:a6:38:c8:c9:23:8d:0f:74:25:d3:76:7b: 4a:ea:6a:c6:6d:51:e4:56:47:54:bc:55:2a:65:41:85:e4:a2: 8a:07:13:68:43:a9:87:92:b3:16:f6:c3:1c:34:b2:88:ef:8d: 1c:7a:d5:c3:5c:d7:a7:1f:cc:94:ff:11:78:74:8a:a9:ff:5e: 31:34:ce:b6:ec:e7:02:5d:54:99:d7:0d:a5:b0:a5:7c:38:1b: b9:18:bd:c1:cd:1b:8b:06:b6:7d:42:6e:cc:65:7c:8d:12:7c: 96:0f:f5:48:2f:b5:bf:83:2d:d1:8d:ea:0a:c8:c1:44:4e:8b: 82:84:22:93:d2:9a:9b:bb:9a:29:dd:b8:25:15:6d:c5:8d:54: 98:4d:99:4f:7e:a1:5d:a7:47:eb:15:09:c9:5a:c9:22:61:8d: 06:45:21:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ9yhj+a4w6QOKuN4pxtSazpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGE3NGRkYjc1YzY5YTg0NWQ3Y2M1NjlhZWRhMjY2N2Yx NDFiNDYwHhcNMjYwNzE4MDAwMDI4WhcNMjYwNzE5MDAwMDI4WjAzMTEwLwYDVQQD EygyNWU1MmFmYTJjZGUwMWE1ZTYwNzk4OGIxZDkzZWQ2NWIyNWQ0MTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf7P0rU5cjH/gcEwHEq4u/kC4k+u 1b9cxbv8dENpT64p9WgHcvgMLcC8PkEacv+nwhEfJPK8sbV5TCsrjV8uiwjby3/R bkGEr5DQucXakiZCGxiUBqMnH5nNys9RDAF2Jyg7OJ8Cw7VxiFckqjg2tvY4MKCE ULNsMhxS1qc9cCRV6Q2y9gRe4MtV+YI+AZaVi9erhjIzKUCMZzbN8TcT3CQbIURt GOdyJsJd78HD+hhJp7HjJl9Bs5c1mCBQzPH9YRDJZbi0CWlXX85F2fv/Ct2ZFySA 06AFcJM8Gv/wE2YRYhRm2HUaCJP/MW6imyNGHv6EubQDnZW1R/5ZawprVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXlKvos3gGl5geYix2T7WWyXUE5MB8GA1UdIwQY MBaAFJQKdN23XGmoRdfMVprtomZ/FBtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADn1fUQBX +UKCvs4baL5Kyw2f2fbAOMKfH8AA7X0v2W8ikzlsL1KNJWt84BsbyIJlzAP4teBi 2X+d0Wp7q+VGcqu//ea20mfF/UbwDMcTHG+hiflhnvCDCymHK1kIBl3kpjjIySON D3Ql03Z7Supqxm1R5FZHVLxVKmVBheSiigcTaEOph5KzFvbDHDSyiO+NHHrVw1zX px/MlP8ReHSKqf9eMTTOtuznAl1UmdcNpbClfDgbuRi9wc0biwa2fUJuzGV8jRJ8 lg/1SC+1v4Mt0Y3qCsjBRE6LgoQik9Kam7uaKd24JRVtxY1UmE2ZT36hXadH6xUJ yVrJImGNBkUhEA== -----END CERTIFICATE-----Generated at Sat Jul 18 02:11:54 2026 by rpki-client