$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json) Hash identifier: 9Bk5HMH2HEAyfJzWzA/5s5nndUjcSZceGrAWRuisyao= Subject key identifier: BE:D3:54:08:18:FE:5D:3D:9E:E2:B0:1A:61:65:29:63:A7:CC:7F:7C Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2 Certificate serial: 019FF94839D7A45DF2A983D57BD94899466B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft Manifest number: 1AC3 Signing time: Thu 13 Aug 2026 04:01:27 +0000 Manifest this update: Thu 13 Aug 2026 04:01:27 +0000 Manifest next update: Fri 14 Aug 2026 04:01:27 +0000 Files and hashes: 1: 5yZRraURZiKqlnX05fjyNx52w8o.roa (hash: +Z9OtbAB80W8dUmluQL2ejT5e57YATp7trdLCUv5PPc=) 2: F8c1izE-9RJV-qYbebPoSy0OO04.roa (hash: R4SfTxNG21QdwRjkrLqrgaOvhx8zK8zawB+KroMpRRM=) 3: GiXhPQ-0e2_VOSMPeT5jNBzlxCA.roa (hash: 0OdnNDd1VjIe91ip/f2oXTplzO+hZMDitnnCMaCZMcM=) 4: KHKpEj2THKj58bA0t2ta3IDNpvE.roa (hash: Pq1zZUJA84ZOxc7RlsG24SrZSENVQ5pv+oFLBtS7LdY=) 5: LrE5kuPxn2OtXj9y4fo3BBBJmPg.roa (hash: Gs3AunGylHB59F42LYhpjb1I/VnyDGsD26/q43JcIi0=) 6: Xp1cuH5GckRebQbl04bBVOXl9c0.roa (hash: G9DoetqG3+uFPEjScRTeA6vdZfkVk+8JEJjCMtB7vJ4=) 7: ckfmY3WSPr_4BWpV0qlaPUwbu8I.roa (hash: rA5xc/5hb1tqN7XSQMe8RP1nVeaWX6f+VPTMMamNxv0=) 8: kHJAbRZAn8BmDoNVsIR_1TrPdwU.roa (hash: MQR9UxJH6mrGqbSYbaZNH4TCjTvPKDgCy2uSCTLGIl4=) 9: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: alIfxYhFIPSuV723h21wXCDZSPIS8EldmJRgPlvnEYU=) 10: oFjLnFx0PgjFBuwtiF_MYSFpqmA.roa (hash: VK+JXOgRMBfH6LlIiFROL5a7HEYqeypevfrTL4MJN2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 04:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f9:48:39:d7:a4:5d:f2:a9:83:d5:7b:d9:48:99:46:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94166b704843d3d9754095c83a91b493828200a2 Validity Not Before: Aug 13 04:01:27 2026 GMT Not After : Aug 14 04:01:27 2026 GMT Subject: CN=bed3540818fe5d3d9ee2b01a61652963a7cc7f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:35:78:71:c9:ba:db:c2:e0:25:48:c7:e3:66: 66:0e:2f:98:99:44:e5:85:a1:32:eb:f3:e7:33:70: 7d:90:68:60:e7:6a:ab:31:75:97:95:8a:59:cd:9f: 75:77:da:8f:0c:01:6e:18:c1:43:0c:63:57:f0:59: fd:69:30:b4:eb:2d:c1:c4:d5:84:0a:c5:e0:62:36: ed:b1:e7:9d:44:b5:cf:10:c7:64:70:d2:99:a0:e6: b1:65:23:b9:06:5c:13:1b:19:40:eb:33:fd:2e:cd: 35:88:4e:4b:fd:70:a6:91:08:10:31:07:56:5d:ee: ed:65:66:98:95:15:5d:67:f8:96:87:c4:38:c3:3c: bf:f8:35:eb:d6:e5:2c:6d:d8:92:c5:95:76:8d:c2: 6a:18:52:a1:cb:51:b7:01:b2:13:bb:6f:c7:fa:2e: f8:96:0e:2b:c2:a5:77:21:35:7a:e3:35:67:44:c9: b9:ff:0b:6e:b8:f1:38:1b:0b:74:23:d8:2a:fc:5d: 0a:bc:e0:f0:63:50:08:b0:f2:85:90:99:3b:2d:2c: 89:4a:02:15:7d:83:78:a7:51:f7:2f:20:1f:5d:84: 56:f5:4d:2d:88:be:56:eb:6a:c9:a4:be:9c:64:87: 27:60:0c:6b:11:70:3c:07:e4:ee:80:cd:29:dc:9b: 80:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D3:54:08:18:FE:5D:3D:9E:E2:B0:1A:61:65:29:63:A7:CC:7F:7C X509v3 Authority Key Identifier: keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:48:91:03:b8:c9:7e:2b:14:92:ed:eb:88:5e:17:eb:88:d6: 6f:c3:4e:4a:3d:40:4f:f7:a4:41:63:eb:54:d2:90:6f:a0:b8: 8b:ad:02:75:2f:e7:9b:f9:23:06:f2:2c:70:12:48:e6:29:d0: f7:48:d6:68:0b:49:9d:09:36:71:58:5d:bc:8a:5e:87:d5:08: ed:ae:b9:79:ff:25:bb:5c:3a:61:f8:24:2d:b1:9a:e7:55:c4: 0b:e1:91:66:d0:9a:0e:3b:79:1f:1c:a9:e5:20:b2:9b:fc:76: 83:6f:8f:3b:96:63:7a:4c:4d:7f:b7:32:cb:96:74:2f:14:66: 05:d4:a4:68:43:c6:cb:e7:cd:e8:3b:1a:8e:76:a6:68:dc:ed: ce:20:af:ba:dd:34:1a:0c:08:a7:58:c5:cf:14:b6:71:bc:96: 04:99:65:ac:74:df:1b:79:59:ad:36:b9:4d:c0:49:2b:87:a1: e2:ba:6e:d6:34:07:81:2d:29:88:45:34:38:98:d9:b8:b1:e3: 2e:ff:85:43:ef:17:90:60:15:d4:90:e0:99:f5:d0:00:dc:28: d4:fe:70:f7:d1:0d:5d:24:fd:a5:16:17:3f:43:59:51:a1:d3: 8c:59:e8:ea:39:6b:16:eb:f3:96:b0:66:5a:ff:25:38:21:cf: 9c:2b:4c:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/5SDnXpF3yqYPVe9lImUZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4 MjAwYTIwHhcNMjYwODEzMDQwMTI3WhcNMjYwODE0MDQwMTI3WjAzMTEwLwYDVQQD EyhiZWQzNTQwODE4ZmU1ZDNkOWVlMmIwMWE2MTY1Mjk2M2E3Y2M3ZjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jV4ccm628LgJUjH42ZmDi+YmUTl haEy6/PnM3B9kGhg52qrMXWXlYpZzZ91d9qPDAFuGMFDDGNX8Fn9aTC06y3BxNWE CsXgYjbtseedRLXPEMdkcNKZoOaxZSO5BlwTGxlA6zP9Ls01iE5L/XCmkQgQMQdW Xe7tZWaYlRVdZ/iWh8Q4wzy/+DXr1uUsbdiSxZV2jcJqGFKhy1G3AbITu2/H+i74 lg4rwqV3ITV64zVnRMm5/wtuuPE4Gwt0I9gq/F0KvODwY1AIsPKFkJk7LSyJSgIV fYN4p1H3LyAfXYRW9U0tiL5W62rJpL6cZIcnYAxrEXA8B+TugM0p3JuA8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7TVAgY/l09nuKwGmFlKWOnzH98MB8GA1UdIwQY MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt NGJlMThlZjEyOGI0LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0 LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkiRA7jJ fisUku3riF4X64jWb8NOSj1AT/ekQWPrVNKQb6C4i60CdS/nm/kjBvIscBJI5inQ 90jWaAtJnQk2cVhdvIpeh9UI7a65ef8lu1w6YfgkLbGa51XEC+GRZtCaDjt5Hxyp 5SCym/x2g2+PO5ZjekxNf7cyy5Z0LxRmBdSkaEPGy+fN6DsajnamaNztziCvut00 GgwIp1jFzxS2cbyWBJllrHTfG3lZrTa5TcBJK4eh4rpu1jQHgS0piEU0OJjZuLHj Lv+FQ+8XkGAV1JDgmfXQANwo1P5w99ENXST9pRYXP0NZUaHTjFno6jlrFuvzlrBm Wv8lOCHPnCtMxw== -----END CERTIFICATE-----Generated at Thu Aug 13 13:23:18 2026 by rpki-client