$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft File: LyoPogODMyo_QU8FR1OgtgsluhA.mft (raw, json) Hash identifier: OegZ0K7w4Cuemu3Hb+pN1OTscvhq7xQS+0sNvIrStDo= Subject key identifier: 99:C0:D4:A7:A6:F7:8A:36:47:87:F4:2E:45:38:12:37:B8:B6:8A:A1 Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Certificate serial: 019DCF3E3A49EC90B6BCCCBBF487585CBE82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft Manifest number: 0747 Signing time: Mon 27 Apr 2026 14:00:54 +0000 Manifest this update: Mon 27 Apr 2026 14:00:54 +0000 Manifest next update: Tue 28 Apr 2026 14:00:54 +0000 Files and hashes: 1: 6QujOxzf4C6K0r-hHQOFn_yfCUI.roa (hash: VpztrU2iFQ8Ah/D8jT+xPTLG0sW08bpvg3e6MmJ6Zdg=) 2: CnGC1xBcS_Hw0l7OYLlFgmMRghM.roa (hash: yl/TzXvizjcQkXaqTrcqSMtt/sGUH2HO4v5PSOx89k0=) 3: DlvqEbHES6ltEIxiAXhjM2CW4ec.roa (hash: Mj5DDW92tIkxs3VmT9Gs5UYbHsVDvGDo2+Bxg89LMQg=) 4: DwB6hCkbMaFBKRZqWfmt03tZkaQ.roa (hash: lu5eBLytjQ0/qRj8GGmMDiIsTss70m+efSZgH9kQHuY=) 5: E9M1Pbo6cojKNq6aCzRN9lYK2TI.roa (hash: 6xlPlwiU6/vgt77UfvKPKbZAHPmxOxzp9UBEFyHwp2U=) 6: IBVzEPC10N6US5KaErFSedKeI1Q.roa (hash: RU5umX0s3T/s0oLhPcgLEFjXt2aMHfj/aPPYStVkbnI=) 7: LyoPogODMyo_QU8FR1OgtgsluhA.crl (hash: Q81TOWz3gJ7HISx5don0HCYGojIE0Vbn9YuHoC2samY=) 8: OLmArH5IwWhE4X1-1oyWlt70SoU.roa (hash: qoAN1qHyDfHOZo1EmYKxtK2xB81mzjXDuLB7f175zdw=) 9: SX294m--1vDxMY6Pvv6-ci7dNJ4.roa (hash: bzsnnZDkBTJaiqPd5qwvFscE5qs3E0+zYHYP17Yj7CA=) 10: j24Xn1OVDzmRc0YHejjOlzAmgRk.roa (hash: /5EdM1LEZ2tK4zjsCtxS9n3mfLKzazy5AKKxuUfX/Lk=) 11: n2xUNvDk18rLqQSNe2f3PMEubyw.roa (hash: lX+8bFJSIgJTTebZpJKwme2ves5Fc8BoHxIIezCFcxs=) 12: nrx14wL0fPx4-9DshtLYIG-SPw0.asa (hash: tasi695yJoGT9axaG3Jwyukwoa6MAJVOedvjLTRox4E=) 13: oErviiUUckcCbYCAslFyv2tRz9E.roa (hash: Y085+N8hup5tVesc9mejvc1BZDNG6RY7vgZaKu/1+TA=) 14: y8hhS6WAcShM8g1VF8d7iEptGM8.roa (hash: QGPHljd/iJmNf8mAGKwr0X+/gQdNYGFQQHZFv3VTbHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cf:3e:3a:49:ec:90:b6:bc:cc:bb:f4:87:58:5c:be:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Validity Not Before: Apr 27 14:00:54 2026 GMT Not After : Apr 28 14:00:54 2026 GMT Subject: CN=99c0d4a7a6f78a364787f42e45381237b8b68aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a4:b1:33:2f:71:5e:45:13:62:ae:88:93:d7: 28:4f:fe:55:b5:6b:e6:a6:e6:6a:78:50:94:8f:c1: 16:78:84:38:9f:3f:05:26:48:e0:31:ce:08:f7:38: f5:33:83:df:3d:32:74:e3:98:70:af:20:6f:90:30: 31:18:92:02:27:a3:0c:65:cd:d9:b0:5b:76:e6:78: fd:89:71:c2:53:b7:ca:07:19:c8:29:0a:82:e9:6e: 1f:8e:a7:e7:d1:85:4a:6c:57:df:bb:ac:13:67:c1: 21:c4:92:3b:31:cb:b5:5b:ac:6e:c1:7f:54:c5:21: 30:2c:ec:89:33:83:e0:61:f3:72:b8:f8:11:6a:4c: df:9c:ed:08:21:71:a4:81:6d:cd:e6:96:8a:c3:7b: 38:24:ea:04:16:59:62:b8:54:e0:d2:15:b8:cd:07: 07:ad:83:67:ef:15:9a:84:6d:e0:ce:1f:10:94:e6: dd:36:ba:e3:6b:4a:59:cc:fa:a6:50:2e:3f:c1:ea: 11:3a:9a:dc:01:da:f3:67:33:bd:21:81:2c:fd:b2: a5:f2:05:d1:81:06:38:2a:ea:05:bf:5e:7f:b9:06: e9:4e:ca:ed:67:a3:b9:60:57:f9:43:96:23:56:b6: 19:f7:a6:53:e4:36:d1:e5:d1:fe:83:a0:27:ee:13: 21:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C0:D4:A7:A6:F7:8A:36:47:87:F4:2E:45:38:12:37:B8:B6:8A:A1 X509v3 Authority Key Identifier: keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:86:9a:90:bc:8c:84:ae:eb:1d:2e:53:38:87:fa:a4:7c:af: 08:e1:17:7d:6f:87:65:d9:46:67:5f:17:af:7d:c2:56:92:95: aa:25:ed:e1:9b:00:08:1f:2a:f3:04:6e:0c:c0:64:af:8e:a8: cc:a2:e4:e3:1f:8c:a9:6e:9e:f4:8f:fc:cb:0d:8f:ec:71:94: 80:ce:ae:34:09:70:e2:3a:28:b5:1d:bc:82:9d:0e:ed:29:5b: 70:16:86:4f:76:bb:2b:f7:ae:65:5d:ea:e8:28:b0:af:6e:92: 23:3b:ab:67:d0:91:31:08:d8:5b:28:0d:2f:87:35:d8:52:31: 3c:66:cf:56:36:a3:24:b0:aa:c0:10:0d:95:de:01:23:c3:fb: fd:e4:b1:3c:0a:cf:26:62:8f:22:b9:17:ea:27:c6:67:0b:82: 79:bd:db:7f:2b:4a:ba:be:76:4b:b5:20:c4:bb:1a:f5:0f:c5: 6e:a8:ba:9b:4b:c0:d6:af:9f:b6:78:61:37:33:80:35:35:1b: e2:a8:6f:19:39:8a:78:f1:30:48:37:fe:e2:33:24:13:ad:9e: 30:7f:ca:92:23:5a:dd:28:da:ae:1d:7d:0a:c5:ac:af:84:af: 56:97:0b:23:8d:70:f8:ba:d4:ad:58:14:f8:36:94:01:9f:00: c9:9e:d5:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3PPjpJ7JC2vMy79IdYXL6CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy NWJhMTAwHhcNMjYwNDI3MTQwMDU0WhcNMjYwNDI4MTQwMDU0WjAzMTEwLwYDVQQD Eyg5OWMwZDRhN2E2Zjc4YTM2NDc4N2Y0MmU0NTM4MTIzN2I4YjY4YWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16SxMy9xXkUTYq6Ik9coT/5VtWvm puZqeFCUj8EWeIQ4nz8FJkjgMc4I9zj1M4PfPTJ045hwryBvkDAxGJICJ6MMZc3Z sFt25nj9iXHCU7fKBxnIKQqC6W4fjqfn0YVKbFffu6wTZ8EhxJI7Mcu1W6xuwX9U xSEwLOyJM4PgYfNyuPgRakzfnO0IIXGkgW3N5paKw3s4JOoEFlliuFTg0hW4zQcH rYNn7xWahG3gzh8QlObdNrrja0pZzPqmUC4/weoROprcAdrzZzO9IYEs/bKl8gXR gQY4KuoFv15/uQbpTsrtZ6O5YFf5Q5YjVrYZ96ZT5DbR5dH+g6An7hMhHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnA1Kem94o2R4f0LkU4Eje4toqhMB8GA1UdIwQY MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt NTVhOTMwZmMwYzcxLzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIaakLyM hK7rHS5TOIf6pHyvCOEXfW+HZdlGZ18Xr33CVpKVqiXt4ZsACB8q8wRuDMBkr46o zKLk4x+MqW6e9I/8yw2P7HGUgM6uNAlw4jootR28gp0O7SlbcBaGT3a7K/euZV3q 6Ciwr26SIzurZ9CRMQjYWygNL4c12FIxPGbPVjajJLCqwBANld4BI8P7/eSxPArP JmKPIrkX6ifGZwuCeb3bfytKur52S7UgxLsa9Q/Fbqi6m0vA1q+ftnhhNzOANTUb 4qhvGTmKePEwSDf+4jMkE62eMH/KkiNa3Sjarh19CsWsr4SvVpcLI41w+LrUrVgU +DaUAZ8AyZ7VNw== -----END CERTIFICATE-----Generated at Mon Apr 27 19:47:49 2026 by rpki-client