$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft File: lAp03bdcaahF18xWmu2iZn8UG0Y.mft (raw, json) Hash identifier: pb6H7wD+4h8tN6On8WfbtQ/yDgKnukvHBBvyRioLZXI= Subject key identifier: 1A:A2:C5:FF:E8:F2:AB:68:DD:D2:36:C9:C8:F5:55:82:08:69:0D:C2 Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46 Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46 Certificate serial: 01A05A443E4F442BB558471F2B22DA319EB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft Manifest number: A8 Signing time: Tue 01 Sep 2026 00:00:16 +0000 Manifest this update: Tue 01 Sep 2026 00:00:16 +0000 Manifest next update: Wed 02 Sep 2026 00:00:16 +0000 Files and hashes: 1: Ax21UmMC0-KicwkMfpA7w8nCx0c.roa (hash: ltSg8LfKIU6cZnCzTqsVYJsYqcS6HCk2VCAS4iYtQ1c=) 2: CRweVTgebnTaIIJuvD2Vpm_hEI8.roa (hash: 0TfSHKCcdRm11P/Z+pghiutPw8OkEPy0pXyOhDApvC4=) 3: EAu9PVFOc2HMIqwl2TAEKVMKjhM.roa (hash: +RxDuulMgzt590ZJGALAr+G6BMF4rXunGyJvYgQw8JU=) 4: IjLtRrWaUXgGKy4qwi6kM6pSm9w.roa (hash: Vqmxt3BWqE/GJfg1ZTqUCwGCq0LbFCJvOwfHIeCWm6o=) 5: K3HHt021rxfspiJXL_jbb9NfheQ.roa (hash: J0SaNkkovQ/E9TIPjipdYFj6AWH79jJ7DyPTP9X1t68=) 6: TTvte-vG-uL-QJEIgq3vCyoRt5s.roa (hash: SkEV3UZWo3lRtSvULxQM+XKWPgskfo67/AN3jkd+Qtg=) 7: f1IHBZhxZ4ZdDVRS_NRodLQ9rrs.roa (hash: ZOBtlDa4skX18xmRlY6uCZ9cujDrQ2YISweWZDnuRwY=) 8: fOOP_exg4KET6deawpN7oz_WdzM.roa (hash: z2o86ioauTHfgn4E3LgCB4xZMv1SBlDr/6hS0phGqqc=) 9: lAp03bdcaahF18xWmu2iZn8UG0Y.crl (hash: axp2CnIBR6ehJRVetbiWv+pJNpfp1fwtmxPCbv3aLEs=) 10: pZ7B3AgctzgfSs7T-w6ArLJB6W0.roa (hash: 6B92+t7EjqClqc9AMNDLM32J3Uyl6JKD1nH0ZOx3K2s=) 11: wscbDwHrmLx272pKZtGELGhuuXA.roa (hash: UY3EK2y/Cexn1/dQSElqlxjbeeV/MbtFdhvzL6gAd7k=) 12: yLdJIjgYrWUQ7TDFqO7qNYlFDjU.roa (hash: dXZjSLlSeRIZKGocGL3yryQVuOVReJZI8cSiDLaCvDc=) 13: zJGcoCrLQSthi3L8e5XtHzN0SoQ.roa (hash: hJXcwgL64tCaIHfaSt8f+ThD0JMQA7Qmi1BADBvOlLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Sep 2026 21:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:5a:44:3e:4f:44:2b:b5:58:47:1f:2b:22:da:31:9e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46 Validity Not Before: Sep 1 00:00:16 2026 GMT Not After : Sep 2 00:00:16 2026 GMT Subject: CN=1aa2c5ffe8f2ab68ddd236c9c8f5558208690dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:d0:41:37:66:84:e2:8e:85:d6:93:59:39: d7:b8:fe:69:c8:3d:4e:6f:62:cf:ec:ec:15:e2:8b: 8c:8e:bf:fe:da:59:ce:79:84:1e:70:af:3b:bf:f3: 65:a3:c6:74:8f:0f:7a:d8:cb:ca:0c:cf:e6:69:7d: 1f:cb:ad:76:99:fc:74:a3:9b:5e:7a:77:62:2b:37: 44:22:08:f1:70:80:7b:c3:6d:64:a1:00:11:19:39: 57:9c:f0:13:c7:59:4f:e2:b2:7e:f3:03:0a:b9:c5: ff:3c:10:69:cf:1d:2e:b6:a3:cd:86:7b:84:b7:df: 3c:67:08:ca:59:65:2e:8c:48:4b:c3:5b:79:b2:43: d9:2e:fd:4c:a6:36:52:02:e6:9a:58:df:f5:76:2f: 4e:78:65:81:4c:fd:23:5b:ca:04:e0:13:2c:11:c0: 6e:e2:d9:aa:2f:1e:dc:72:dc:a0:5e:0b:25:8b:44: d0:69:67:74:51:86:31:0a:a2:32:0f:96:9c:4b:a2: 9a:08:1e:73:47:d2:f4:bb:2c:8a:18:4a:5a:81:b4: 44:52:86:ca:2a:b1:06:12:79:d3:fe:b3:f4:9e:f5: 38:25:f7:03:16:b6:84:6a:50:54:9a:63:f2:01:d5: 04:2e:36:1b:c7:2e:e4:8b:1a:0f:fb:8b:ae:ac:d8: 40:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A2:C5:FF:E8:F2:AB:68:DD:D2:36:C9:C8:F5:55:82:08:69:0D:C2 X509v3 Authority Key Identifier: keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d4:a5:5b:71:f3:6f:43:e9:97:6e:95:a2:58:1b:20:64:36: 5d:50:fd:6b:ee:af:c6:c7:45:a0:82:06:ec:cf:dd:b3:d2:52: e1:37:be:bc:ab:04:24:9a:b8:50:6b:29:0f:f6:ec:67:dd:75: 52:cc:7f:6b:f5:8b:8b:3d:ae:0e:27:8f:fa:ad:04:23:a8:d6: a1:f2:65:5a:78:92:de:70:6c:68:68:73:93:70:fe:9b:be:64: 0e:4e:bb:d6:38:19:d2:71:66:a9:c6:d7:2c:23:83:4a:30:88: 7f:1d:c2:50:9d:73:6d:99:28:61:ba:6d:6f:41:b8:ee:dc:36: 0d:b4:dd:cc:91:ce:38:11:aa:02:b5:1c:81:df:6e:2e:f6:64: d8:ae:7f:3e:8d:09:73:b1:bd:1b:e1:da:d6:94:68:f7:9c:cc: 0f:52:b6:35:f6:be:64:1f:b8:7e:6f:7b:29:8e:7f:c2:89:e5: 68:8b:bd:87:57:00:9a:09:4c:25:97:05:39:31:8b:81:85:27: c9:35:9c:9c:83:24:97:49:35:4f:64:da:07:b5:04:95:0a:6c: 85:5d:39:bb:ae:24:e7:4c:92:18:b3:b9:7f:3a:b2:1e:4a:de: 30:bb:52:08:96:fe:6a:71:53:7f:d0:d7:ac:35:4c:fb:93:c0: ce:cc:04:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBaRD5PRCu1WEcfKyLaMZ64MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGE3NGRkYjc1YzY5YTg0NWQ3Y2M1NjlhZWRhMjY2N2Yx NDFiNDYwHhcNMjYwOTAxMDAwMDE2WhcNMjYwOTAyMDAwMDE2WjAzMTEwLwYDVQQD EygxYWEyYzVmZmU4ZjJhYjY4ZGRkMjM2YzljOGY1NTU4MjA4NjkwZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv7QQTdmhOKOhdaTWTnXuP5pyD1O b2LP7OwV4ouMjr/+2lnOeYQecK87v/Nlo8Z0jw962MvKDM/maX0fy612mfx0o5te endiKzdEIgjxcIB7w21koQARGTlXnPATx1lP4rJ+8wMKucX/PBBpzx0utqPNhnuE t988ZwjKWWUujEhLw1t5skPZLv1MpjZSAuaaWN/1di9OeGWBTP0jW8oE4BMsEcBu 4tmqLx7cctygXgsli0TQaWd0UYYxCqIyD5acS6KaCB5zR9L0uyyKGEpagbREUobK KrEGEnnT/rP0nvU4JfcDFraEalBUmmPyAdUELjYbxy7kixoP+4uurNhAUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqixf/o8qto3dI2ycj1VYIIaQ3CMB8GA1UdIwQY MBaAFJQKdN23XGmoRdfMVprtomZ/FBtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNSlW3Hz b0Ppl26VolgbIGQ2XVD9a+6vxsdFoIIG7M/ds9JS4Te+vKsEJJq4UGspD/bsZ911 Usx/a/WLiz2uDieP+q0EI6jWofJlWniS3nBsaGhzk3D+m75kDk671jgZ0nFmqcbX LCODSjCIfx3CUJ1zbZkoYbptb0G47tw2DbTdzJHOOBGqArUcgd9uLvZk2K5/Po0J c7G9G+Ha1pRo95zMD1K2Nfa+ZB+4fm97KY5/wonlaIu9h1cAmglMJZcFOTGLgYUn yTWcnIMkl0k1T2TaB7UElQpshV05u64k50ySGLO5fzqyHkreMLtSCJb+anFTf9DX rDVM+5PAzswE3A== -----END CERTIFICATE-----Generated at Tue Sep 1 03:41:26 2026 by rpki-client