$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft File: lAp03bdcaahF18xWmu2iZn8UG0Y.mft (raw, json) Hash identifier: VQXpvK+r5CVmM4dN38Tt/YngIVgjneqtLM2J4b4Fkpk= Subject key identifier: 99:35:15:A2:2B:5E:CE:BD:4B:2B:2D:69:DF:88:BD:E9:5E:B4:CB:D1 Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46 Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46 Certificate serial: 01A14C4FB5A61C5AE96D4A3A4CA994433E80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft Manifest number: 0127 Signing time: Sun 18 Oct 2026 00:00:54 +0000 Manifest this update: Sun 18 Oct 2026 00:00:54 +0000 Manifest next update: Mon 19 Oct 2026 00:00:54 +0000 Files and hashes: 1: Ax21UmMC0-KicwkMfpA7w8nCx0c.roa (hash: ltSg8LfKIU6cZnCzTqsVYJsYqcS6HCk2VCAS4iYtQ1c=) 2: CRweVTgebnTaIIJuvD2Vpm_hEI8.roa (hash: 0TfSHKCcdRm11P/Z+pghiutPw8OkEPy0pXyOhDApvC4=) 3: EAu9PVFOc2HMIqwl2TAEKVMKjhM.roa (hash: +RxDuulMgzt590ZJGALAr+G6BMF4rXunGyJvYgQw8JU=) 4: IjLtRrWaUXgGKy4qwi6kM6pSm9w.roa (hash: Vqmxt3BWqE/GJfg1ZTqUCwGCq0LbFCJvOwfHIeCWm6o=) 5: K3HHt021rxfspiJXL_jbb9NfheQ.roa (hash: J0SaNkkovQ/E9TIPjipdYFj6AWH79jJ7DyPTP9X1t68=) 6: TTvte-vG-uL-QJEIgq3vCyoRt5s.roa (hash: SkEV3UZWo3lRtSvULxQM+XKWPgskfo67/AN3jkd+Qtg=) 7: XhT-4APTELgjULu5pwHQO4PtpmM.roa (hash: +CkSHkW8ztUh8xHxuRZq43ecyQw3TY89oxatBJGHLhU=) 8: f1IHBZhxZ4ZdDVRS_NRodLQ9rrs.roa (hash: ZOBtlDa4skX18xmRlY6uCZ9cujDrQ2YISweWZDnuRwY=) 9: fOOP_exg4KET6deawpN7oz_WdzM.roa (hash: z2o86ioauTHfgn4E3LgCB4xZMv1SBlDr/6hS0phGqqc=) 10: lAp03bdcaahF18xWmu2iZn8UG0Y.crl (hash: qcYraAiph8ftsHzwVVURAPEb46p9AtR0KRF1BHFSCJw=) 11: pZ7B3AgctzgfSs7T-w6ArLJB6W0.roa (hash: 6B92+t7EjqClqc9AMNDLM32J3Uyl6JKD1nH0ZOx3K2s=) 12: wscbDwHrmLx272pKZtGELGhuuXA.roa (hash: UY3EK2y/Cexn1/dQSElqlxjbeeV/MbtFdhvzL6gAd7k=) 13: yLdJIjgYrWUQ7TDFqO7qNYlFDjU.roa (hash: dXZjSLlSeRIZKGocGL3yryQVuOVReJZI8cSiDLaCvDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Oct 2026 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:4c:4f:b5:a6:1c:5a:e9:6d:4a:3a:4c:a9:94:43:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46 Validity Not Before: Oct 18 00:00:54 2026 GMT Not After : Oct 19 00:00:54 2026 GMT Subject: CN=993515a22b5ecebd4b2b2d69df88bde95eb4cbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3e:4d:1d:02:98:8c:fc:cf:6b:eb:4f:e5:5f: aa:39:07:3a:7d:08:42:9d:8e:e6:81:bd:2e:12:e4: c3:36:c3:bc:69:c2:90:68:dd:0e:40:1e:11:d9:7e: fa:3a:bc:84:d7:54:1a:e6:36:94:e6:06:08:60:13: 1e:56:cf:0e:07:64:85:60:2b:72:6e:00:7b:b5:14: 98:93:29:8c:30:2e:3f:94:28:56:7a:3f:1f:c3:f5: fe:84:ea:d6:4e:e7:cc:cb:21:bf:a0:b5:b5:7e:1e: 18:ba:75:2a:be:23:44:b7:0e:ee:8c:65:9b:19:42: 4e:03:a9:3a:78:62:c1:14:f9:75:59:b2:c8:ba:7d: f5:a8:67:c1:41:09:0c:5a:62:b6:8c:e1:49:ff:5b: d6:70:ba:c3:48:e3:93:23:46:f7:cc:c3:f0:e0:1d: e2:51:9a:a9:17:82:79:ca:8e:15:0c:59:55:da:0f: 77:59:55:ba:4e:a6:6b:11:51:db:7c:8d:8a:ce:7e: 2d:4a:4b:be:3c:f9:ec:35:24:a3:41:16:aa:cc:76: 43:8a:70:5b:ca:76:d9:2b:c9:49:bc:4c:0b:d7:3c: 92:ce:99:a7:e3:2c:4f:ba:19:d4:71:1d:a9:48:90: d8:f1:ee:f1:73:cc:36:27:f4:b5:91:86:e8:ab:b6: 6b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:35:15:A2:2B:5E:CE:BD:4B:2B:2D:69:DF:88:BD:E9:5E:B4:CB:D1 X509v3 Authority Key Identifier: keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1e:41:aa:46:cf:8f:b6:7e:5e:b9:6d:46:de:a7:f0:45:d5: b7:c9:b8:75:1b:e1:98:b5:71:59:1d:cf:ad:27:88:f1:fb:35: e5:07:c0:90:d7:75:56:14:6b:b4:d3:5a:3e:4b:0d:ec:a3:8b: 17:2c:f4:85:0a:c6:b7:66:b6:f0:9b:e7:29:50:c5:5d:d2:e9: 71:db:e7:6f:18:05:ad:1e:7e:a1:b2:a5:53:31:59:75:d7:e4: b5:ea:7c:f8:fc:00:11:e1:ec:6c:91:25:4e:c3:19:ab:f2:c7: 53:7f:18:db:ea:a6:40:75:ac:1a:0f:0e:76:9a:b6:b4:84:94: ff:49:00:e7:89:e9:66:5a:54:67:56:9a:d6:15:df:42:b0:9e: 09:ed:22:3d:a2:57:4d:97:f6:0e:4c:6a:f5:e0:37:9e:cb:29: 1f:bb:42:37:06:86:bc:07:87:20:81:e8:5b:b1:29:f1:9c:4d: 34:ab:9e:56:0a:12:00:d5:6d:b1:32:74:87:b6:ff:13:99:c0: 48:b1:37:75:80:fd:89:71:1b:c9:4b:98:8d:42:77:49:32:35: 1f:bd:cf:e5:0f:6a:5c:a4:dc:0b:3d:0f:bf:18:0b:81:86:52: 4d:2e:03:04:42:08:9b:2d:18:ca:6f:3b:fc:78:0e:c4:f3:20: 75:9f:0d:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFMT7WmHFrpbUo6TKmUQz6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGE3NGRkYjc1YzY5YTg0NWQ3Y2M1NjlhZWRhMjY2N2Yx NDFiNDYwHhcNMjYxMDE4MDAwMDU0WhcNMjYxMDE5MDAwMDU0WjAzMTEwLwYDVQQD Eyg5OTM1MTVhMjJiNWVjZWJkNGIyYjJkNjlkZjg4YmRlOTVlYjRjYmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj5NHQKYjPzPa+tP5V+qOQc6fQhC nY7mgb0uEuTDNsO8acKQaN0OQB4R2X76OryE11Qa5jaU5gYIYBMeVs8OB2SFYCty bgB7tRSYkymMMC4/lChWej8fw/X+hOrWTufMyyG/oLW1fh4YunUqviNEtw7ujGWb GUJOA6k6eGLBFPl1WbLIun31qGfBQQkMWmK2jOFJ/1vWcLrDSOOTI0b3zMPw4B3i UZqpF4J5yo4VDFlV2g93WVW6TqZrEVHbfI2Kzn4tSku+PPnsNSSjQRaqzHZDinBb ynbZK8lJvEwL1zySzpmn4yxPuhnUcR2pSJDY8e7xc8w2J/S1kYboq7ZrAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJk1FaIrXs69Systad+IveletMvRMB8GA1UdIwQY MBaAFJQKdN23XGmoRdfMVprtomZ/FBtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAR5BqkbP j7Z+XrltRt6n8EXVt8m4dRvhmLVxWR3PrSeI8fs15QfAkNd1VhRrtNNaPksN7KOL Fyz0hQrGt2a28JvnKVDFXdLpcdvnbxgFrR5+obKlUzFZddfktep8+PwAEeHsbJEl TsMZq/LHU38Y2+qmQHWsGg8Odpq2tISU/0kA54npZlpUZ1aa1hXfQrCeCe0iPaJX TZf2Dkxq9eA3nsspH7tCNwaGvAeHIIHoW7Ep8ZxNNKueVgoSANVtsTJ0h7b/E5nA SLE3dYD9iXEbyUuYjUJ3STI1H73P5Q9qXKTcCz0PvxgLgYZSTS4DBEIImy0Yym87 /HgOxPMgdZ8NNg== -----END CERTIFICATE-----Generated at Sun Oct 18 07:10:41 2026 by rpki-client