$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json) Hash identifier: 2q3PmwS/VRZGzx6FItZyYu2Ie1yTFBWTc+yJRtduCBk= Subject key identifier: DF:8A:2E:71:5E:9B:99:5B:96:5F:CB:22:91:E3:99:41:CF:A1:26:C5 Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 019CE6A4948BC3983D326CCA4E021B3D516D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft Manifest number: 165F Signing time: Fri 13 Mar 2026 10:01:11 +0000 Manifest this update: Fri 13 Mar 2026 10:01:11 +0000 Manifest next update: Sat 14 Mar 2026 10:01:11 +0000 Files and hashes: 1: 1-TPBZaPgwzpcoaeoNGcACcpRq9w.roa (hash: WRnBW6LaoaDyzWLmINt+9j7JPTxMQsEWQyTKmC15wRY=) 2: A_tEVik7EkSJhTC7T2FJIfD4hWE.asa (hash: 68EPop8TjMmm4peaii/vw95NHeqqlpJpXRJzZBSJs7g=) 3: DdZL2Ei2USqI1D8JQatISOxbCY0.roa (hash: A+x4OgPFDFV1yfcXqtt93yKXONOhfjjQIV2HOaMfwnQ=) 4: H2Gc0qKN46gAjUldVFBNpV93Xk4.asa (hash: KSarBkAjc6GXQsV+kmM1pcYpqDoYggEF4OpcfqU5XxI=) 5: HOso74W1VokYtKvyq7cUzsjtneE.asa (hash: XkgHTIUgOHbFT9e9eq8+M1TVv1ndaqq7zAajOmv3wN8=) 6: LSXBvQHAo4zp0AtEmHoZVaivySk.roa (hash: swGFJmkZXioEtzQNNaxMbmAyGUjZpt6rG9u3Y6aW9mU=) 7: RatTcANG4U3IM7MOV2hXua2pFMs.asa (hash: USM3oAd7uLAkywhJUjv79wjdyCIZfb2jA72kwTjAHbY=) 8: aWgyqnhlZS7MDekMFATvg7m1Chg.roa (hash: Ub6D7zkQHeFmXTT59TkJEXuDooqt1BaCbrMKmH7VmuU=) 9: b-VQSWuLpLV93gdEDV9Lftl-uXw.asa (hash: Em1YerFm1QMulEXhz/0NYeLEV5IMD8Fh+85COdjHx64=) 10: bsQYUbE6sDO4AlcYz2-reJ-1Oss.roa (hash: 5lfSQqmrli6qWcknzZ2NClTLbfidYTYGVF+eKK5IJEE=) 11: cszYTkQVDcY76z8Av8ncweFdHcQ.asa (hash: xNxgKjmWZqB0F8LoHh9M3iOQxo1YlNVcpRWSs0jkU1w=) 12: fU0ZQGxEIbYd-Y96okGNTpozeFs.asa (hash: sffo6lZCXVJqfJc7Hp2QR59SPfkJdF9crEZwTQ2dkII=) 13: iLg25mvcmTCHH_OGEh2P98itdpY.roa (hash: wugv3jB//b2uxYYJseGcTrUZ2QkeB7l7mdgdccrFlEw=) 14: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: pt8RkBqeBWALChU9fdCIuU1aMUZMF0ukqGhlGW3O6bw=) 15: lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa (hash: WdmuUrCIkBJHssHI2YPcgaS2VqSm8pQ//F+3L49VElw=) 16: lybU2-0lBoLkM6-OoilLNM4B_nM.roa (hash: l6togunOdeRBEWqxla5wbVF9WAZmGR3kHUt6QPrFu9w=) 17: ty1ff7-sDyLx4nDkaEvA6OsoOtQ.roa (hash: jgvaKJ/trlHrZqFZbc1zXXkzbtQm22Rj/n2MqvbIbWk=) 18: zdQE3nljteAvytR7FrZorPU0jyc.asa (hash: 7eznpWbdCzFgvZgA9g8kyOLAHMzeIfPZoCln8oZBAvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 09:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e6:a4:94:8b:c3:98:3d:32:6c:ca:4e:02:1b:3d:51:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Mar 13 10:01:11 2026 GMT Not After : Mar 14 10:01:11 2026 GMT Subject: CN=df8a2e715e9b995b965fcb2291e39941cfa126c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9d:2e:0c:3e:c2:f9:95:c6:65:04:3e:37:ab: 0c:55:24:3a:f5:6d:5a:76:04:70:0d:ae:78:c1:ac: 7d:ae:b8:9f:c6:e1:d0:ed:3f:9d:aa:1b:79:ce:f8: 75:39:86:7b:72:4c:2f:f8:38:7a:d3:45:3d:6d:a6: a1:99:df:1a:7a:1d:63:dd:e6:83:61:0c:3e:a3:83: 94:d5:c6:92:8b:8b:00:b7:bf:56:5c:b7:96:76:18: 2c:f3:12:92:dd:31:60:cd:fc:83:0a:71:6e:11:d3: 38:0a:f0:ba:d0:ea:7a:d1:c4:7c:2b:75:8b:cd:46: 64:b9:c9:b2:71:fb:49:9f:88:55:bc:d8:46:0f:da: 2b:45:ed:66:c1:d0:dd:57:1b:66:42:b2:23:43:5c: ec:d6:f1:2e:04:1f:07:70:38:39:37:17:a3:a1:de: b9:6b:ea:e9:d1:d3:78:a3:7b:67:b1:43:14:f6:c9: e4:90:51:1e:30:0e:75:27:fc:82:6e:bb:f2:04:dd: 0d:d4:5f:d4:aa:88:2c:21:ef:5c:47:12:dc:85:8b: 3b:e8:ac:2b:68:e1:19:2d:0a:0d:39:2a:dc:d5:db: b7:5d:fb:d5:97:59:14:ca:86:e3:d5:f5:80:b6:fe: 79:38:7e:0d:bd:25:08:11:a1:4e:dd:8e:91:6c:ce: aa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8A:2E:71:5E:9B:99:5B:96:5F:CB:22:91:E3:99:41:CF:A1:26:C5 X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8c:96:9e:a1:b3:fa:c8:29:1a:fd:10:d4:f1:1b:69:e0:8c: da:76:9b:cb:22:b6:c7:8d:09:35:d2:46:9d:37:03:a0:70:97: 2a:98:95:50:e0:e2:76:78:7d:10:dc:ce:d0:df:9b:05:be:39: 1e:47:46:d0:d3:e1:34:b1:c7:ae:ee:b7:56:23:cf:41:5b:52: 4c:9f:b4:5e:75:8e:af:46:0f:d6:17:d0:84:f6:81:11:af:8a: 89:00:e0:f0:93:cb:94:bc:c9:31:53:9b:05:21:4a:24:83:03: cd:39:8f:54:17:53:22:cd:45:f3:80:02:b1:90:07:ed:4b:e0: a7:e8:f4:5e:02:b9:13:3c:a4:bf:23:e3:39:ee:0c:90:04:d9: dd:04:63:47:34:f4:6e:fe:05:fb:00:ce:d4:bd:7a:5d:c9:1c: 2b:e9:9b:14:c8:3a:bc:4b:20:c8:3c:47:4b:61:c9:f3:ec:88: 64:90:c2:21:74:ce:95:38:78:f7:7b:5d:6b:f1:bf:f6:ec:20: 83:83:71:81:c4:ce:12:73:4d:e2:02:65:aa:7b:6a:0c:7c:c3: 79:9f:57:a2:dc:5b:48:ae:0e:c9:25:a3:5d:1e:20:58:24:b6: 27:c5:3f:8f:aa:36:37:a5:31:68:86:e5:7a:0b:65:15:03:2f: 6c:ed:19:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzmpJSLw5g9MmzKTgIbPVFtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjYwMzEzMTAwMTExWhcNMjYwMzE0MTAwMTExWjAzMTEwLwYDVQQD EyhkZjhhMmU3MTVlOWI5OTViOTY1ZmNiMjI5MWUzOTk0MWNmYTEyNmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs50uDD7C+ZXGZQQ+N6sMVSQ69W1a dgRwDa54wax9rrifxuHQ7T+dqht5zvh1OYZ7ckwv+Dh600U9baahmd8aeh1j3eaD YQw+o4OU1caSi4sAt79WXLeWdhgs8xKS3TFgzfyDCnFuEdM4CvC60Op60cR8K3WL zUZkucmycftJn4hVvNhGD9orRe1mwdDdVxtmQrIjQ1zs1vEuBB8HcDg5Nxejod65 a+rp0dN4o3tnsUMU9snkkFEeMA51J/yCbrvyBN0N1F/UqogsIe9cRxLchYs76Kwr aOEZLQoNOSrc1du3XfvVl1kUyobj1fWAtv55OH4NvSUIEaFO3Y6RbM6qOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+KLnFem5lbll/LIpHjmUHPoSbFMB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4yWnqGz +sgpGv0Q1PEbaeCM2nabyyK2x40JNdJGnTcDoHCXKpiVUODidnh9ENzO0N+bBb45 HkdG0NPhNLHHru63ViPPQVtSTJ+0XnWOr0YP1hfQhPaBEa+KiQDg8JPLlLzJMVOb BSFKJIMDzTmPVBdTIs1F84ACsZAH7Uvgp+j0XgK5EzykvyPjOe4MkATZ3QRjRzT0 bv4F+wDO1L16XckcK+mbFMg6vEsgyDxHS2HJ8+yIZJDCIXTOlTh493tda/G/9uwg g4NxgcTOEnNN4gJlqntqDHzDeZ9XotxbSK4OySWjXR4gWCS2J8U/j6o2N6UxaIbl egtlFQMvbO0ZXg== -----END CERTIFICATE-----Generated at Fri Mar 13 14:31:00 2026 by rpki-client