$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json) Hash identifier: v4FpvQffILMEorSazgHlSarNnBvSO1AVrajS8SYSBFM= Subject key identifier: 29:C2:6C:E8:63:F0:43:85:BF:28:96:D7:04:D4:09:95:E9:DF:21:37 Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 01A180E278DA331085A8C75CF6614F6D8207 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft Manifest number: 18C3 Signing time: Wed 28 Oct 2026 05:01:27 +0000 Manifest this update: Wed 28 Oct 2026 05:01:27 +0000 Manifest next update: Thu 29 Oct 2026 05:01:27 +0000 Files and hashes: 1: 1-TPBZaPgwzpcoaeoNGcACcpRq9w.roa (hash: WRnBW6LaoaDyzWLmINt+9j7JPTxMQsEWQyTKmC15wRY=) 2: 2DVYJPCuOw7VG2htfdUNo_7kInE.asa (hash: LbgnkRdoQKLKe2iLxngixqfur+lgcj/sW3CZzzMeq2s=) 3: 7awGjvnOLuwHkizQWxmHuCLrtgg.asa (hash: jqxpdDzSYJL8J3lEotC6QolKhYdmA+CZjUvOtdm8fnc=) 4: 8MsLByo1h3OaBnfebYLNr5wUi7s.asa (hash: h8QJVB/q5RH0fYSkRlU6osV1v40WFA8xPDLPZUIF8W0=) 5: 8mjr1R6ZAxArqKrEVDuBknfRZCo.asa (hash: FyvDAOsK5ouRGQZfWInC0JEkh1RQHwIIfD9INW6d7FI=) 6: CQHinzbv6o94wyhsd8omqmTillg.roa (hash: YzWIhoEeIcHtjYrxUYU4G48aFXp4bwAmAKzACW84/QY=) 7: Ec_R_gx9uuWxENMcCsXqUjmf9FA.asa (hash: nSaTw/6ML8HPaeks9+U68v5/iYEKqqf/eJmppOSw45Y=) 8: HBV4KMTbTlGAl9QeIl0o9qHJ3JE.asa (hash: DH9DU6Hcd9jUW1bMh4Wxl6jSVLHN13SF+Z2URPs6X9w=) 9: JY8nDcX1pyy9gv3UYeCVu3Ts2a8.asa (hash: okNoGeT6tcWHbtS0EjoQ1qLQX683zgYAC3N15VDPgf4=) 10: LSXBvQHAo4zp0AtEmHoZVaivySk.roa (hash: swGFJmkZXioEtzQNNaxMbmAyGUjZpt6rG9u3Y6aW9mU=) 11: aWgyqnhlZS7MDekMFATvg7m1Chg.roa (hash: Ub6D7zkQHeFmXTT59TkJEXuDooqt1BaCbrMKmH7VmuU=) 12: bKMnasx78X1SjuZ69VG_6DO0hLE.asa (hash: Qq7T6I3DGZbcJ7ZwLKkK8uk9JE+JhLf5qJxgDpORjto=) 13: bsQYUbE6sDO4AlcYz2-reJ-1Oss.roa (hash: 5lfSQqmrli6qWcknzZ2NClTLbfidYTYGVF+eKK5IJEE=) 14: iLg25mvcmTCHH_OGEh2P98itdpY.roa (hash: wugv3jB//b2uxYYJseGcTrUZ2QkeB7l7mdgdccrFlEw=) 15: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: USj2J5h6xUwjTuyQRy/HSTkpNbV9ucVmdBQpFK30BAA=) 16: lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa (hash: WdmuUrCIkBJHssHI2YPcgaS2VqSm8pQ//F+3L49VElw=) 17: lybU2-0lBoLkM6-OoilLNM4B_nM.roa (hash: l6togunOdeRBEWqxla5wbVF9WAZmGR3kHUt6QPrFu9w=) 18: ty1ff7-sDyLx4nDkaEvA6OsoOtQ.roa (hash: jgvaKJ/trlHrZqFZbc1zXXkzbtQm22Rj/n2MqvbIbWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 05:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:80:e2:78:da:33:10:85:a8:c7:5c:f6:61:4f:6d:82:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Oct 28 05:01:27 2026 GMT Not After : Oct 29 05:01:27 2026 GMT Subject: CN=29c26ce863f04385bf2896d704d40995e9df2137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cf:ae:4a:c7:a8:85:60:36:b3:fc:6c:2d:06: cf:29:9f:50:ab:70:9a:16:56:26:a6:e0:03:a8:b1: 74:a6:55:ab:3e:b1:a8:48:7a:62:37:cd:35:e7:06: 2f:8a:38:79:d8:85:cc:13:1d:33:09:96:05:d5:9b: 30:3e:de:83:d5:4e:24:87:42:de:41:74:29:93:ad: 6d:df:9c:82:40:4f:a7:2b:b4:03:37:2a:c7:26:b4: 3d:8e:48:3f:64:8b:f4:bb:31:a0:00:ea:64:6b:8d: 8b:f3:ca:12:e3:66:ab:31:e2:d6:f9:72:96:78:a2: 5d:e8:42:0f:ea:26:2b:25:b1:46:45:2d:b0:6f:67: 43:34:ce:2c:9a:32:48:4f:57:7e:9b:0a:1c:34:12: 86:7b:e3:25:91:25:29:b8:2b:2b:ec:df:87:77:91: 47:72:18:07:d4:a5:c5:69:2a:63:37:c7:b5:ea:a2: 95:c5:7e:15:d3:4b:fc:09:b1:27:f1:db:eb:ab:90: bb:c8:98:93:10:2b:e0:ac:1a:df:74:7d:e5:cc:13: fd:eb:7e:22:94:a1:ac:f7:73:62:24:e2:ef:cb:11: ac:dd:06:97:de:31:9c:cd:08:08:35:6e:da:ec:64: 8b:0a:17:9d:fc:39:4d:d0:f1:f8:ee:df:95:42:3a: 68:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C2:6C:E8:63:F0:43:85:BF:28:96:D7:04:D4:09:95:E9:DF:21:37 X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:2e:ee:c1:b5:25:91:65:1f:1f:9c:51:eb:1f:8d:d5:89:12: b5:ab:9a:dd:d0:a3:6e:89:91:16:f5:c1:02:73:9f:ea:51:84: cd:ab:af:33:98:1b:95:35:1f:b0:fd:13:ae:f5:21:14:a4:92: e2:cd:eb:1e:2e:d1:46:ca:6a:de:5b:3b:7d:15:2e:6e:76:cb: 17:db:be:5b:b9:b6:40:77:48:60:7e:a5:55:21:8d:a6:2e:c9: a4:cd:be:90:33:f4:f8:24:22:5f:d9:38:2f:5e:b6:0c:7b:9f: ee:42:a4:74:d7:99:4d:3c:cc:3e:88:05:3f:64:ea:e6:ac:8e: 0e:bc:93:67:a9:c0:8a:d9:89:a9:ea:1b:ff:50:51:fd:5a:d5: e8:40:37:e4:ff:54:f2:52:26:3e:b4:1e:23:3e:9d:83:25:24: 63:8f:d2:a7:59:bd:08:22:9c:fb:c6:f1:01:8e:55:ec:cb:9d: 4b:e9:d3:89:15:69:33:96:85:1e:18:77:7e:2f:1a:36:05:48: f8:b1:91:50:84:ef:83:69:ca:ed:3d:13:9a:70:ab:7e:23:d0: 67:6d:be:1e:92:ec:43:a3:ca:54:74:da:59:e2:8a:5e:17:2c: 86:08:3d:15:41:c2:84:22:21:1d:28:cb:75:a2:2b:51:ca:95: cd:70:f1:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGA4njaMxCFqMdc9mFPbYIHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjYxMDI4MDUwMTI3WhcNMjYxMDI5MDUwMTI3WjAzMTEwLwYDVQQD EygyOWMyNmNlODYzZjA0Mzg1YmYyODk2ZDcwNGQ0MDk5NWU5ZGYyMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8+uSseohWA2s/xsLQbPKZ9Qq3Ca FlYmpuADqLF0plWrPrGoSHpiN8015wYvijh52IXMEx0zCZYF1ZswPt6D1U4kh0Le QXQpk61t35yCQE+nK7QDNyrHJrQ9jkg/ZIv0uzGgAOpka42L88oS42arMeLW+XKW eKJd6EIP6iYrJbFGRS2wb2dDNM4smjJIT1d+mwocNBKGe+MlkSUpuCsr7N+Hd5FH chgH1KXFaSpjN8e16qKVxX4V00v8CbEn8dvrq5C7yJiTECvgrBrfdH3lzBP9634i lKGs93NiJOLvyxGs3QaX3jGczQgINW7a7GSLChed/DlN0PH47t+VQjpoDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnCbOhj8EOFvyiW1wTUCZXp3yE3MB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhy7uwbUl kWUfH5xR6x+N1YkStaua3dCjbomRFvXBAnOf6lGEzauvM5gblTUfsP0TrvUhFKSS 4s3rHi7RRspq3ls7fRUubnbLF9u+W7m2QHdIYH6lVSGNpi7JpM2+kDP0+CQiX9k4 L162DHuf7kKkdNeZTTzMPogFP2Tq5qyODryTZ6nAitmJqeob/1BR/VrV6EA35P9U 8lImPrQeIz6dgyUkY4/Sp1m9CCKc+8bxAY5V7MudS+nTiRVpM5aFHhh3fi8aNgVI +LGRUITvg2nK7T0TmnCrfiPQZ22+HpLsQ6PKVHTaWeKKXhcshgg9FUHChCIhHSjL daIrUcqVzXDxIg== -----END CERTIFICATE-----Generated at Wed Oct 28 14:34:55 2026 by rpki-client