$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json) Hash identifier: Y9L5Vct7HqwqAtyHNrF5a52lNtuAJVf24DzR9XLVmIg= Subject key identifier: EA:04:A1:CE:5E:D2:C4:AB:55:CD:AB:4E:47:06:1F:0B:8F:D6:D9:BF Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 019FA003C32FAC6384849AB6ED471F4A50ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft Manifest number: 17CA Signing time: Sun 26 Jul 2026 20:00:28 +0000 Manifest this update: Sun 26 Jul 2026 20:00:28 +0000 Manifest next update: Mon 27 Jul 2026 20:00:28 +0000 Files and hashes: 1: 1-TPBZaPgwzpcoaeoNGcACcpRq9w.roa (hash: WRnBW6LaoaDyzWLmINt+9j7JPTxMQsEWQyTKmC15wRY=) 2: 2DVYJPCuOw7VG2htfdUNo_7kInE.asa (hash: LbgnkRdoQKLKe2iLxngixqfur+lgcj/sW3CZzzMeq2s=) 3: 7awGjvnOLuwHkizQWxmHuCLrtgg.asa (hash: jqxpdDzSYJL8J3lEotC6QolKhYdmA+CZjUvOtdm8fnc=) 4: 8MsLByo1h3OaBnfebYLNr5wUi7s.asa (hash: h8QJVB/q5RH0fYSkRlU6osV1v40WFA8xPDLPZUIF8W0=) 5: 8mjr1R6ZAxArqKrEVDuBknfRZCo.asa (hash: FyvDAOsK5ouRGQZfWInC0JEkh1RQHwIIfD9INW6d7FI=) 6: CQHinzbv6o94wyhsd8omqmTillg.roa (hash: YzWIhoEeIcHtjYrxUYU4G48aFXp4bwAmAKzACW84/QY=) 7: Ec_R_gx9uuWxENMcCsXqUjmf9FA.asa (hash: nSaTw/6ML8HPaeks9+U68v5/iYEKqqf/eJmppOSw45Y=) 8: HBV4KMTbTlGAl9QeIl0o9qHJ3JE.asa (hash: DH9DU6Hcd9jUW1bMh4Wxl6jSVLHN13SF+Z2URPs6X9w=) 9: JY8nDcX1pyy9gv3UYeCVu3Ts2a8.asa (hash: okNoGeT6tcWHbtS0EjoQ1qLQX683zgYAC3N15VDPgf4=) 10: LSXBvQHAo4zp0AtEmHoZVaivySk.roa (hash: swGFJmkZXioEtzQNNaxMbmAyGUjZpt6rG9u3Y6aW9mU=) 11: aWgyqnhlZS7MDekMFATvg7m1Chg.roa (hash: Ub6D7zkQHeFmXTT59TkJEXuDooqt1BaCbrMKmH7VmuU=) 12: bKMnasx78X1SjuZ69VG_6DO0hLE.asa (hash: Qq7T6I3DGZbcJ7ZwLKkK8uk9JE+JhLf5qJxgDpORjto=) 13: bsQYUbE6sDO4AlcYz2-reJ-1Oss.roa (hash: 5lfSQqmrli6qWcknzZ2NClTLbfidYTYGVF+eKK5IJEE=) 14: iLg25mvcmTCHH_OGEh2P98itdpY.roa (hash: wugv3jB//b2uxYYJseGcTrUZ2QkeB7l7mdgdccrFlEw=) 15: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: LIEK3i5OZ7bElMLPTOOKRlT5hX3LeF8RvBIRNp+FPpI=) 16: lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa (hash: WdmuUrCIkBJHssHI2YPcgaS2VqSm8pQ//F+3L49VElw=) 17: lybU2-0lBoLkM6-OoilLNM4B_nM.roa (hash: l6togunOdeRBEWqxla5wbVF9WAZmGR3kHUt6QPrFu9w=) 18: ty1ff7-sDyLx4nDkaEvA6OsoOtQ.roa (hash: jgvaKJ/trlHrZqFZbc1zXXkzbtQm22Rj/n2MqvbIbWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 20:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a0:03:c3:2f:ac:63:84:84:9a:b6:ed:47:1f:4a:50:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Jul 26 20:00:28 2026 GMT Not After : Jul 27 20:00:28 2026 GMT Subject: CN=ea04a1ce5ed2c4ab55cdab4e47061f0b8fd6d9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:36:a7:6c:14:5f:a1:0a:63:26:f2:bd:da:df: 47:a8:e4:26:96:f4:3d:d6:6a:9d:6d:16:51:2d:74: c7:0b:17:05:77:d8:c4:f4:a9:7e:3a:47:9d:04:01: 9a:a5:5b:4c:91:b8:7f:dd:e7:bd:54:28:fd:1b:2f: 54:c3:d7:97:e3:4e:f7:8f:2e:53:9c:bc:b8:96:58: 91:3f:87:dc:39:f8:cf:74:9c:30:40:e6:5a:2c:98: 6f:92:d7:b6:e3:b3:01:8e:c7:97:af:50:96:a5:78: 7d:24:f8:a3:17:3e:92:5a:7b:63:0e:70:54:66:54: 91:60:1f:ec:21:fb:10:d1:8c:a3:c7:2a:a9:31:03: 7d:59:c7:8a:db:14:72:55:62:5b:52:8f:f1:17:a3: 69:b9:9b:6a:53:ad:fa:56:1d:59:74:7c:f7:56:56: 76:d7:fc:ae:fd:fb:d5:9a:9a:4f:ef:b0:8c:67:9d: f5:41:bc:e0:58:ae:95:54:bf:f7:7f:a5:75:4a:9d: ba:d5:8e:6c:8e:75:a6:be:84:a3:9d:06:e4:a3:19: ba:21:42:bf:6d:2a:c1:97:82:5c:77:c9:18:87:e4: ea:a9:a6:4c:0b:33:27:18:9c:a4:0e:f6:4b:a5:7d: 30:65:f8:c7:82:0f:ae:0e:8a:2f:bf:c7:fe:fd:76: 07:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:04:A1:CE:5E:D2:C4:AB:55:CD:AB:4E:47:06:1F:0B:8F:D6:D9:BF X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:e4:0e:39:79:38:c7:5b:2d:89:de:95:fe:94:1a:f8:ac:a8: 11:8c:70:09:bd:a2:bb:0b:ca:fd:7b:b1:93:44:50:e0:be:a5: 2d:f9:32:6e:c7:56:20:7e:14:36:28:20:db:7e:9f:96:b7:17: cb:cd:16:82:05:1c:dd:e4:a0:66:05:11:a2:b7:e7:e1:ca:a9: 28:0a:2c:68:2c:bf:d0:2a:39:db:84:34:2a:e4:f4:6e:39:95: 61:1b:63:e5:e0:1b:8b:4c:3f:20:a4:83:fe:06:33:ef:c8:d6: d6:11:64:21:be:98:ad:9d:5f:ee:81:05:9d:e5:6f:35:c2:5c: 90:fc:d2:bf:84:d4:24:fd:4b:5e:4e:df:e4:5f:ad:b4:00:15: 68:02:c7:da:12:ae:b6:72:90:85:a6:07:09:de:f3:47:66:e4: cc:f7:08:84:6a:83:0a:7f:83:21:0b:1b:ef:d1:cb:27:7b:8f: e8:68:0a:6e:4c:fc:ce:65:8c:2d:0d:f4:74:e5:51:ea:11:34: f5:8b:6f:b2:9c:c6:ec:92:a1:61:81:e5:0f:43:d4:0d:9a:55: f4:2f:7f:18:ca:14:60:7a:92:ed:41:1a:39:3f:cf:ba:62:a4: 8a:5b:92:74:68:31:65:e9:58:c9:57:e4:6b:65:b0:c5:76:95: 25:b2:21:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+gA8MvrGOEhJq27UcfSlDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjYwNzI2MjAwMDI4WhcNMjYwNzI3MjAwMDI4WjAzMTEwLwYDVQQD EyhlYTA0YTFjZTVlZDJjNGFiNTVjZGFiNGU0NzA2MWYwYjhmZDZkOWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTanbBRfoQpjJvK92t9HqOQmlvQ9 1mqdbRZRLXTHCxcFd9jE9Kl+OkedBAGapVtMkbh/3ee9VCj9Gy9Uw9eX4073jy5T nLy4lliRP4fcOfjPdJwwQOZaLJhvkte247MBjseXr1CWpXh9JPijFz6SWntjDnBU ZlSRYB/sIfsQ0YyjxyqpMQN9WceK2xRyVWJbUo/xF6NpuZtqU636Vh1ZdHz3VlZ2 1/yu/fvVmppP77CMZ531QbzgWK6VVL/3f6V1Sp261Y5sjnWmvoSjnQbkoxm6IUK/ bSrBl4Jcd8kYh+TqqaZMCzMnGJykDvZLpX0wZfjHgg+uDoovv8f+/XYHVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoEoc5e0sSrVc2rTkcGHwuP1tm/MB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApeQOOXk4 x1stid6V/pQa+KyoEYxwCb2iuwvK/Xuxk0RQ4L6lLfkybsdWIH4UNigg236flrcX y80WggUc3eSgZgURorfn4cqpKAosaCy/0Co524Q0KuT0bjmVYRtj5eAbi0w/IKSD /gYz78jW1hFkIb6YrZ1f7oEFneVvNcJckPzSv4TUJP1LXk7f5F+ttAAVaALH2hKu tnKQhaYHCd7zR2bkzPcIhGqDCn+DIQsb79HLJ3uP6GgKbkz8zmWMLQ30dOVR6hE0 9YtvspzG7JKhYYHlD0PUDZpV9C9/GMoUYHqS7UEaOT/PumKkiluSdGgxZelYyVfk a2WwxXaVJbIhxg== -----END CERTIFICATE-----Generated at Mon Jul 27 05:38:08 2026 by rpki-client