$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: 6zZL1DKi21DOTDLeBeypZGu3KnB3X8J54BtRWfknLis= Subject key identifier: 32:73:0E:53:1E:9A:EA:FD:68:21:1A:E4:7D:CA:29:7C:51:6D:00:55 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019DA89E8D6A11A9327761E643B6A548CE3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 09C4 Signing time: Mon 20 Apr 2026 02:00:56 +0000 Manifest this update: Mon 20 Apr 2026 02:00:56 +0000 Manifest next update: Tue 21 Apr 2026 02:00:56 +0000 Files and hashes: 1: 1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa (hash: AsfQqdl/xsaW9IYhySqScr2PgyTmm64VZ6eM34CvYX8=) 2: 3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa (hash: 37lpnBa4Nsmw9t09Qo02WLg5+MVXXnRKupYOqt10ZMk=) 3: 41UDb8PFLYomt2031aTgiY3AQ40.roa (hash: bmp07VNfPBzFitEFlf/fmkB49dR4XxuwZAwtFoPyweY=) 4: 4v_iwBzOpciC0YWjVDg_w5r563M.roa (hash: F5kWV5HiM8c6dQiiFtOG3n7NW+KRh+raqsJXmMUP0SM=) 5: Do7W5qGfDMAJEMN6BzBVspjXxYU.roa (hash: SRYxQrkADeDmRh/1IPI3QXOB27eJYEqHNj2TfVv7whg=) 6: IM5_eIuCChOU0hAdp1zJIv4yOMs.roa (hash: VA5/Mu9B9mqKC3R4eDVMT7aNe6I5GNd86uRr7j7Zj64=) 7: NJpLyq2ti9mgv7XrR8IcC5lB92k.roa (hash: X6oNrTIzLpsjoLrgrTl+vU7DqhTACh+EHu5pKkzZfC4=) 8: V9T0hlZ73UkhAau7M6ckTYNUkb4.roa (hash: fNCHN8qNcRcJku7ig7PyvdGoUoQirOawzI5B34WnFFM=) 9: YzVa-BUJnuWH4diErgPUKokymQ0.roa (hash: QcBSZdMSRm/lWv+szi2oRyb+M3WP6bg67A4t9dEA1tc=) 10: bjV9a84Navq2cjlLnnyQ7ZLZJQY.roa (hash: oXiEsLmzNMIEZvn6zcV/UwZ/24olqpUKpuRIwHp2tTQ=) 11: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: npzZeayh9XWwfpV+JQkGvW9y1sXzqyHakAi1XSvnouY=) 12: yvu8AxQYxM3ws7oGYgq0UFdLwY4.roa (hash: 87fEDzcHgs5DE+7kqQ5/TAh2kzd7q9M1YgTV/N72Otc=) 13: zly0HPjprxdyVkXHR1aHuRvdMX0.roa (hash: AhwMXgJ+aAK91jE5Y/Rl3QNmkW9Lhcao2gRRENl3Nek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a8:9e:8d:6a:11:a9:32:77:61:e6:43:b6:a5:48:ce:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Apr 20 02:00:56 2026 GMT Not After : Apr 21 02:00:56 2026 GMT Subject: CN=32730e531e9aeafd68211ae47dca297c516d0055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:b9:99:fe:f5:e6:0a:2e:69:38:47:ca:c9: cc:da:e9:58:95:0c:76:f4:e3:08:2d:fc:5b:3b:28: 9a:69:6b:c5:aa:7a:d4:b5:be:95:58:b4:2f:bb:ba: c9:93:b2:8c:f3:08:2c:31:e6:b6:19:02:8c:e8:71: 49:93:b8:cb:be:7c:19:f5:23:91:c9:fc:c4:ff:64: de:40:39:0f:4b:8f:30:26:c3:a1:ed:77:e3:bf:b1: 55:47:a2:64:77:da:a6:af:85:85:29:1d:b6:97:5e: c4:e1:24:b2:41:b3:b1:c9:5d:16:03:be:80:ed:a5: 75:48:7c:b2:3e:94:88:2b:9f:0f:0e:39:ea:33:53: cf:0f:9d:ac:63:1f:2d:10:e3:f0:55:33:48:72:42: a1:f1:ef:0a:3d:a3:f3:f6:72:b5:50:dd:d9:d2:73: e6:9e:72:8f:72:d0:0d:c3:7d:3e:28:06:98:12:9b: c7:14:2c:ea:f2:45:f0:ff:ac:61:c4:af:b5:b3:3f: ee:74:be:25:55:f9:44:3a:97:d5:dc:e0:92:c5:d4: 75:01:f6:34:08:39:2a:5c:89:9c:bb:5e:65:48:81: b9:84:3f:21:a3:6e:b5:f8:10:d2:e8:08:d6:2c:2f: c2:80:32:f9:25:87:d7:fc:96:ed:66:9a:bf:bc:c6: 46:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:73:0E:53:1E:9A:EA:FD:68:21:1A:E4:7D:CA:29:7C:51:6D:00:55 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:dc:85:6e:3a:4d:8b:db:63:bc:24:88:80:99:9c:ff:8a:b7: 0b:bd:8e:c9:6f:da:ad:32:0b:85:9e:e9:2e:03:a1:aa:85:c3: 75:23:c2:cb:39:1c:6b:29:73:ed:8a:fd:83:f5:5e:54:56:24: dc:88:36:34:52:9e:48:f3:a6:ae:e5:69:7b:fb:2c:5d:5f:15: 2f:00:2b:8b:0d:74:7a:94:fa:f1:8e:b2:4f:81:03:d2:3a:4e: 88:b5:29:fb:5f:8e:42:6e:d0:36:a2:71:51:15:e6:6f:c5:a3: 47:af:df:58:fc:4e:91:f6:22:c0:43:e0:30:c1:29:c4:6b:8e: 1d:06:cd:92:c7:8f:a6:e3:19:c6:d7:ce:0b:bc:8b:32:7b:f5: 04:62:56:5a:c7:3f:ee:82:26:a0:b0:03:6b:fd:f5:c6:e5:29: 60:42:10:52:18:32:c7:5c:b4:3a:3b:af:dd:94:fa:15:bd:f2: f3:d1:4e:d5:df:7a:0c:26:f2:73:95:2e:d8:3f:c9:8c:5b:01: a5:ee:b5:86:54:f6:0f:c7:f5:f6:6f:25:70:09:21:dd:03:76: 30:1a:5f:f2:65:d6:87:4b:35:08:90:2a:7b:11:72:eb:63:c2: 51:00:97:3e:77:f7:13:74:b3:f8:18:d2:b3:e5:15:f7:28:a7: 84:0c:2e:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ono1qEakyd2HmQ7alSM46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwNDIwMDIwMDU2WhcNMjYwNDIxMDIwMDU2WjAzMTEwLwYDVQQD EygzMjczMGU1MzFlOWFlYWZkNjgyMTFhZTQ3ZGNhMjk3YzUxNmQwMDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr025mf715gouaThHysnM2ulYlQx2 9OMILfxbOyiaaWvFqnrUtb6VWLQvu7rJk7KM8wgsMea2GQKM6HFJk7jLvnwZ9SOR yfzE/2TeQDkPS48wJsOh7Xfjv7FVR6Jkd9qmr4WFKR22l17E4SSyQbOxyV0WA76A 7aV1SHyyPpSIK58PDjnqM1PPD52sYx8tEOPwVTNIckKh8e8KPaPz9nK1UN3Z0nPm nnKPctANw30+KAaYEpvHFCzq8kXw/6xhxK+1sz/udL4lVflEOpfV3OCSxdR1AfY0 CDkqXImcu15lSIG5hD8ho261+BDS6AjWLC/CgDL5JYfX/JbtZpq/vMZGWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJzDlMemur9aCEa5H3KKXxRbQBVMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntyFbjpN i9tjvCSIgJmc/4q3C72OyW/arTILhZ7pLgOhqoXDdSPCyzkcaylz7Yr9g/VeVFYk 3Ig2NFKeSPOmruVpe/ssXV8VLwAriw10epT68Y6yT4ED0jpOiLUp+1+OQm7QNqJx URXmb8WjR6/fWPxOkfYiwEPgMMEpxGuOHQbNksePpuMZxtfOC7yLMnv1BGJWWsc/ 7oImoLADa/31xuUpYEIQUhgyx1y0Ojuv3ZT6Fb3y89FO1d96DCbyc5Uu2D/JjFsB pe61hlT2D8f19m8lcAkh3QN2MBpf8mXWh0s1CJAqexFy62PCUQCXPnf3E3Sz+BjS s+UV9yinhAwumw== -----END CERTIFICATE-----Generated at Mon Apr 20 06:05:10 2026 by rpki-client