$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: gtNbrQ5TyFU1gEj/Yrs/dFw83jmVDNblb7ctVCqug/s= Subject key identifier: B6:DA:AA:E3:9C:EB:23:9E:3A:9F:31:8B:94:ED:3F:DE:A2:96:87:C4 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 01A177DEC147047B199E5CA20BC09989B16A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 1A8E Signing time: Mon 26 Oct 2026 11:00:49 +0000 Manifest this update: Mon 26 Oct 2026 11:00:49 +0000 Manifest next update: Tue 27 Oct 2026 11:00:49 +0000 Files and hashes: 1: 1RXLSMCQxm6vHzpOwWgDUAInFdg.roa (hash: tiFDxiab3e0Tsjr6KVenyf0JU8F/yU/38yIyF4rjX4k=) 2: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (hash: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw=) 3: 1wCmT1IS3a1us8DcUmoOVIkFSg8.roa (hash: EXytnx0XqERcz+GskCmk6gzJBp0TdjpyBxSN2abosn8=) 4: 3k_DXo4ofAXcZYPDcNLzBletpVk.roa (hash: ziaq+fvQdyZn6u+jlF4Bvlh3Rp/2kXUfv41qFJFnMKU=) 5: 7v4FlDgaUhB0KwYLuf0DrtJYiZE.roa (hash: 1Wu7rdYg7HSjG0fNpexA7LGI5X9w1Yvqs/8X7UlrRkY=) 6: 97YhHHaKFWN5cfJI4mjYZVezzyU.roa (hash: 08BBW4X87ePQH4+YJNSK8t+aTyoXsosoSNXbcmwllmg=) 7: 9oGj_OTZDt4Ll_vKPrwMI0SluuI.roa (hash: hS1b+rTpG8UQvxoJJzInCTvb9ZH6f7lRK1QCbd2J6Rw=) 8: Bza0u1KrAMDMGupZL29e32A3MCc.roa (hash: pZiFonQx+AjzAflURZDKbh/3OCh69YGkDga9U2khExM=) 9: JHXRcwdGLV-x0tFgIpk_GdvVv9E.roa (hash: 3yZYckxEFNC5HpjyWQ7bKTfulKrPrYVmR0yC4V1+t6Q=) 10: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: 8ux2gqSYmA7W0ZovvKXSTnT8pUeTFtCCYkiuovr6b9s=) 11: MzS0a-if8StAwGvSc_KLQZwctYA.roa (hash: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE=) 12: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (hash: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs=) 13: TjyKjzgVxClAneVTofUpEpODO4c.roa (hash: P6CkJUB0bWvv80EbY764u+5wuiSaj13NOmKLygDqt9w=) 14: Tq4nexBl7Bhl88T7x0Q2h2tatk4.roa (hash: pFK6MA84kt09PJZi3gnwpQ1THUutVL/OXU5GSC2uBmo=) 15: X6w9majvI_DCoEpE7YSlgjrwWBk.roa (hash: nSq/rO7rO1FgXnozv7cLPZZonavuQIUu1J8PyL3NQ+k=) 16: ZqWDhVxM8qdYaFH9Yk2xJ1tXsJg.roa (hash: eToQMhEgpJMDvrJen7hHcwd5VqrAu1zN/ruTDDmmCyc=) 17: bTw73Cy10J_6LgZYTPru5SEyPF8.roa (hash: HYcwIpGNuXC7w7izH8bBIK//e+X4zE8iy7yULlEbeCY=) 18: c7t6wQUV-ONFA6vcvfwHnvEUxNk.roa (hash: 716daOJ6FBCxynQboT89eYOdyvqH+pTwI+F2BmxRbnA=) 19: ifM73hFNDS-HrpzAXJZiRxf-Neo.roa (hash: k9cUGDKroPZ+BsMFJtunA+HgnGfK8aKvAASRzcpd1hE=) 20: m9gc2-3kvu1ECXe8zpu0Ico1Ebo.roa (hash: 1h9SEvwGU1RX/xwx1Rkt4nh0FAFsqK4wE3FVRKxswsI=) 21: p9Ga5zssyIhFHrJi5MZ47Pyznvo.roa (hash: Ott2sOPVA987hz4zVP2oRFvzjlidIeKw8Px9ILdJfjs=) 22: r-29DfcBFqtrQoxy43Ck9AGvEJA.roa (hash: Vf08Uzf29by4OovXTt6InS//E1CSQstRVYxDVQ9TYww=) 23: sl6RNpdKaUgQk86cZi1xg4X0kuw.roa (hash: lMTJynIie/zFhijKcdAHFnsMwZEarJofXfcOdlV9yEU=) 24: xsyFP3WB5Usaew7SGQRO9fW_v3w.roa (hash: LxeGCJgt6lWaEJ/RMO1YX/wb1GOfng/XVidChMvRHe0=) 25: yzKmZsge7trUv4Txs2kYPlL6-RE.roa (hash: wcxVH/6cau217WxdwHGYfj7PaYBWv7RknCW4wcCZPgM=) 26: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (hash: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:77:de:c1:47:04:7b:19:9e:5c:a2:0b:c0:99:89:b1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Oct 26 11:00:49 2026 GMT Not After : Oct 27 11:00:49 2026 GMT Subject: CN=b6daaae39ceb239e3a9f318b94ed3fdea29687c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ab:d1:d1:db:05:b1:4d:7e:bf:7a:dd:d5:6d: 03:8f:7f:ba:ea:d1:b6:78:b9:45:c0:a3:01:06:6c: e1:a4:6a:5f:0b:2b:c2:4e:2c:c8:1e:0b:fa:57:ef: 0b:98:32:19:d9:5c:fc:e5:2b:ed:e9:bd:fe:9a:16: c3:7e:cf:2a:73:0d:59:e6:a9:34:8c:92:69:5f:fb: 4f:77:85:af:9c:08:cc:a7:59:0d:b0:65:2b:95:65: 9e:e4:52:04:72:f7:40:3c:53:c7:5a:fe:c6:50:fc: 36:de:27:35:6f:a1:0a:b9:5b:e1:2a:0c:f4:00:34: bf:c8:65:4c:94:69:e4:e5:24:32:69:67:98:3c:28: be:15:02:3e:0e:97:8c:f0:89:5f:e8:bf:f9:6b:04: 28:ba:41:28:8d:f2:de:b5:b7:96:2f:fb:de:66:96: be:29:5e:6c:14:9c:69:a1:79:cd:db:21:af:91:6e: b7:af:40:41:8f:05:df:67:fa:f9:82:35:b1:b1:cf: bf:e6:2c:33:2e:ef:29:a6:1c:2a:8f:6d:a9:27:bb: bc:07:be:28:6d:90:5b:23:23:9b:8d:f9:a3:98:f3: b4:e1:44:1d:dd:8b:d7:00:1d:79:bc:31:13:0d:c7: 2c:1c:ce:26:50:40:38:02:62:dc:e6:02:c2:8d:c2: 9e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DA:AA:E3:9C:EB:23:9E:3A:9F:31:8B:94:ED:3F:DE:A2:96:87:C4 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c5:20:c7:87:1f:91:b2:e7:60:6e:b7:24:17:43:44:c3:46: c5:3a:e1:32:1c:4b:47:a4:8c:a7:b2:71:71:a3:02:99:ea:07: e9:ae:da:50:bf:8c:7c:83:c4:6c:a0:51:e1:e7:fb:77:98:77: 7a:49:ee:a9:2a:ca:b0:0d:0d:fa:71:9b:35:f2:5d:3f:27:f8: 7a:a7:30:d1:88:41:c5:c5:b0:bd:9d:f0:36:16:e1:fe:e8:8b: bc:19:a7:5c:34:16:55:0c:01:a7:6d:9c:0c:ee:85:be:7a:36: 6f:45:c7:b9:58:7e:2a:c0:b4:cc:3b:31:d7:77:79:3f:2b:b0: c8:06:5f:db:12:b7:25:ee:70:ca:03:94:b6:5e:21:0d:d1:d3: 6b:6b:f9:38:3f:59:9d:24:c9:76:15:41:c5:8a:b1:19:c7:3c: 83:1f:3b:de:71:af:7a:79:d0:71:9d:3b:5e:64:38:3b:1b:57: c1:9a:d7:76:46:86:ec:0d:35:78:cc:41:78:f2:ef:70:13:1e: 1b:34:33:69:ea:7e:c0:38:c9:40:d1:26:df:37:e5:27:a9:0c: 59:5a:fa:cf:d4:d7:56:02:45:77:a0:97:d3:86:29:f5:ea:28: 30:30:d4:8b:63:c7:98:8a:e0:53:60:62:62:f5:6c:8f:8b:29: 88:15:38:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF33sFHBHsZnlyiC8CZibFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjYxMDI2MTEwMDQ5WhcNMjYxMDI3MTEwMDQ5WjAzMTEwLwYDVQQD EyhiNmRhYWFlMzljZWIyMzllM2E5ZjMxOGI5NGVkM2ZkZWEyOTY4N2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqvR0dsFsU1+v3rd1W0Dj3+66tG2 eLlFwKMBBmzhpGpfCyvCTizIHgv6V+8LmDIZ2Vz85Svt6b3+mhbDfs8qcw1Z5qk0 jJJpX/tPd4WvnAjMp1kNsGUrlWWe5FIEcvdAPFPHWv7GUPw23ic1b6EKuVvhKgz0 ADS/yGVMlGnk5SQyaWeYPCi+FQI+DpeM8Ilf6L/5awQoukEojfLetbeWL/veZpa+ KV5sFJxpoXnN2yGvkW63r0BBjwXfZ/r5gjWxsc+/5iwzLu8pphwqj22pJ7u8B74o bZBbIyObjfmjmPO04UQd3YvXAB15vDETDccsHM4mUEA4AmLc5gLCjcKe5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbaquOc6yOeOp8xi5TtP96ilofEMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8Ugx4cf kbLnYG63JBdDRMNGxTrhMhxLR6SMp7JxcaMCmeoH6a7aUL+MfIPEbKBR4ef7d5h3 eknuqSrKsA0N+nGbNfJdPyf4eqcw0YhBxcWwvZ3wNhbh/uiLvBmnXDQWVQwBp22c DO6Fvno2b0XHuVh+KsC0zDsx13d5PyuwyAZf2xK3Je5wygOUtl4hDdHTa2v5OD9Z nSTJdhVBxYqxGcc8gx873nGvennQcZ07XmQ4OxtXwZrXdkaG7A01eMxBePLvcBMe GzQzaep+wDjJQNEm3zflJ6kMWVr6z9TXVgJFd6CX04Yp9eooMDDUi2PHmIrgU2Bi YvVsj4spiBU4UA== -----END CERTIFICATE-----Generated at Mon Oct 26 20:39:40 2026 by rpki-client