$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: u/KReIA8LHAhYn4gIZTePie+wuU3loolqf61QnpEC88= Subject key identifier: 13:95:2A:ED:71:39:EC:58:59:7C:FC:84:6F:19:F2:66:B8:AB:33:8B Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 01A08942E9D01692C46A2C536A79FF56EC75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 1A0A Signing time: Thu 10 Sep 2026 03:00:58 +0000 Manifest this update: Thu 10 Sep 2026 03:00:58 +0000 Manifest next update: Fri 11 Sep 2026 03:00:58 +0000 Files and hashes: 1: 1RXLSMCQxm6vHzpOwWgDUAInFdg.roa (hash: tiFDxiab3e0Tsjr6KVenyf0JU8F/yU/38yIyF4rjX4k=) 2: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (hash: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw=) 3: 3k_DXo4ofAXcZYPDcNLzBletpVk.roa (hash: ziaq+fvQdyZn6u+jlF4Bvlh3Rp/2kXUfv41qFJFnMKU=) 4: 7v4FlDgaUhB0KwYLuf0DrtJYiZE.roa (hash: 1Wu7rdYg7HSjG0fNpexA7LGI5X9w1Yvqs/8X7UlrRkY=) 5: 97YhHHaKFWN5cfJI4mjYZVezzyU.roa (hash: 08BBW4X87ePQH4+YJNSK8t+aTyoXsosoSNXbcmwllmg=) 6: 9oGj_OTZDt4Ll_vKPrwMI0SluuI.roa (hash: hS1b+rTpG8UQvxoJJzInCTvb9ZH6f7lRK1QCbd2J6Rw=) 7: Cy393HmMTcAn60r5mHO2k2Dg17k.roa (hash: r8l9XvoJeBvAXNolGJ2W46Taz9bFIMoIIMpX642FPsI=) 8: IiedQhQUbjfguRMW01vvJYLO-io.roa (hash: d0y2ndYIZdQ7xKIVfUIhIzImuGYNPqtaBreHwwcKt5k=) 9: JHXRcwdGLV-x0tFgIpk_GdvVv9E.roa (hash: 3yZYckxEFNC5HpjyWQ7bKTfulKrPrYVmR0yC4V1+t6Q=) 10: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: n155T4KBkLgZahB/uBrMFVVH6/Q5shlT3nCyIoE2bb0=) 11: MzS0a-if8StAwGvSc_KLQZwctYA.roa (hash: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE=) 12: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (hash: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs=) 13: TjyKjzgVxClAneVTofUpEpODO4c.roa (hash: P6CkJUB0bWvv80EbY764u+5wuiSaj13NOmKLygDqt9w=) 14: Tq4nexBl7Bhl88T7x0Q2h2tatk4.roa (hash: pFK6MA84kt09PJZi3gnwpQ1THUutVL/OXU5GSC2uBmo=) 15: _eVFxPtKebMIokqnWwy-Wg13IlI.roa (hash: ds3XPCGNp67Ng7shhUA2Q/Zeww6kk3TR8TFzatChP+A=) 16: bTw73Cy10J_6LgZYTPru5SEyPF8.roa (hash: HYcwIpGNuXC7w7izH8bBIK//e+X4zE8iy7yULlEbeCY=) 17: c7t6wQUV-ONFA6vcvfwHnvEUxNk.roa (hash: 716daOJ6FBCxynQboT89eYOdyvqH+pTwI+F2BmxRbnA=) 18: ifM73hFNDS-HrpzAXJZiRxf-Neo.roa (hash: k9cUGDKroPZ+BsMFJtunA+HgnGfK8aKvAASRzcpd1hE=) 19: lAUTh060UnG4SYUzw748rs6F-AU.roa (hash: rqx44g42iFnxW7L4EozICe/qV2vcSLbN9ZwaWDSqR4Y=) 20: m9gc2-3kvu1ECXe8zpu0Ico1Ebo.roa (hash: 1h9SEvwGU1RX/xwx1Rkt4nh0FAFsqK4wE3FVRKxswsI=) 21: p9Ga5zssyIhFHrJi5MZ47Pyznvo.roa (hash: Ott2sOPVA987hz4zVP2oRFvzjlidIeKw8Px9ILdJfjs=) 22: r-29DfcBFqtrQoxy43Ck9AGvEJA.roa (hash: Vf08Uzf29by4OovXTt6InS//E1CSQstRVYxDVQ9TYww=) 23: sl6RNpdKaUgQk86cZi1xg4X0kuw.roa (hash: lMTJynIie/zFhijKcdAHFnsMwZEarJofXfcOdlV9yEU=) 24: xsyFP3WB5Usaew7SGQRO9fW_v3w.roa (hash: LxeGCJgt6lWaEJ/RMO1YX/wb1GOfng/XVidChMvRHe0=) 25: yzKmZsge7trUv4Txs2kYPlL6-RE.roa (hash: wcxVH/6cau217WxdwHGYfj7PaYBWv7RknCW4wcCZPgM=) 26: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (hash: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:89:42:e9:d0:16:92:c4:6a:2c:53:6a:79:ff:56:ec:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Sep 10 03:00:58 2026 GMT Not After : Sep 11 03:00:58 2026 GMT Subject: CN=13952aed7139ec58597cfc846f19f266b8ab338b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:12:a8:20:68:b5:70:86:d4:e4:63:13:3e:e6: 27:5d:b0:09:a0:8c:cd:80:fb:97:b4:05:ca:72:6d: d2:dc:d7:55:26:fe:f9:79:f1:82:64:21:59:29:81: 51:a7:a0:13:63:88:36:2c:cd:11:e3:51:f8:4f:e0: 5d:75:89:83:3e:57:0d:ab:d1:91:1f:a0:99:4c:56: 5b:ef:10:9f:77:50:f1:78:32:c2:dc:b5:ad:ad:be: fd:c5:49:3c:9f:34:a5:7a:d7:7e:c0:78:00:dc:1a: 1e:40:ec:a2:c9:b2:b5:69:ab:b1:3e:23:92:1c:4b: bf:8d:73:c1:a9:3d:0b:e4:89:69:3c:50:cf:77:06: 7d:d8:34:f3:1c:88:66:10:cb:56:41:da:83:6a:58: 97:90:fb:98:8a:fa:d3:96:d3:1f:cc:38:73:0e:cc: a0:57:e3:74:fe:cb:71:75:a4:1c:01:e0:d2:74:0e: 9a:48:d0:50:d2:c2:93:a1:b3:2b:d7:04:06:39:c6: 2a:dd:6c:67:e9:fc:06:ae:5c:d4:bc:38:11:38:8d: 89:c0:08:66:3a:34:cf:4a:b0:14:a3:58:b2:02:c6: f5:16:6f:69:de:b6:1a:f8:89:59:a7:40:28:da:c8: 82:7f:12:c6:c7:a0:5b:34:0d:0e:f1:dc:7c:d9:0d: 2f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:95:2A:ED:71:39:EC:58:59:7C:FC:84:6F:19:F2:66:B8:AB:33:8B X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7f:c6:f6:17:d2:83:59:72:94:b9:a9:c6:ab:ce:99:71:d4: 37:2d:f7:09:e7:6f:dc:67:de:ca:5b:6c:aa:ba:84:76:fd:66: de:be:3d:a5:a7:d9:32:5f:0d:45:03:a1:8c:d4:23:99:1c:2f: 22:34:81:1d:4f:d8:22:16:8e:89:7f:f4:02:2b:95:46:fd:e2: 32:b2:0e:3e:b7:8b:b5:71:01:16:df:70:02:b4:09:e4:13:33: d5:2a:c9:a7:dd:78:29:f5:dd:d0:3a:bb:aa:2d:cc:de:e1:3e: 18:1c:14:63:d2:07:07:8e:86:cd:e4:87:e9:8d:f4:35:ea:4e: aa:42:1c:47:89:df:80:ba:29:a5:48:86:9a:45:65:e2:52:f5: df:89:94:9a:f3:da:bf:e9:ed:69:68:20:6b:b2:de:04:07:32: c1:20:2d:dd:2b:4d:4e:4a:1c:ef:fb:d8:1d:d0:f2:13:cb:0a: f1:be:69:51:47:bf:31:7c:7e:7e:1f:78:2e:7c:2d:c3:63:09: dd:d3:26:26:7c:72:8e:2d:85:de:e9:c3:11:60:4f:b0:61:f3: bc:85:6e:04:4e:99:97:3c:a6:b4:02:de:e8:b0:05:d8:c0:24: 38:4b:85:27:33:31:92:65:0a:43:74:5b:a6:85:d9:91:c1:68: ce:53:95:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCJQunQFpLEaixTann/Vux1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjYwOTEwMDMwMDU4WhcNMjYwOTExMDMwMDU4WjAzMTEwLwYDVQQD EygxMzk1MmFlZDcxMzllYzU4NTk3Y2ZjODQ2ZjE5ZjI2NmI4YWIzMzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xKoIGi1cIbU5GMTPuYnXbAJoIzN gPuXtAXKcm3S3NdVJv75efGCZCFZKYFRp6ATY4g2LM0R41H4T+BddYmDPlcNq9GR H6CZTFZb7xCfd1DxeDLC3LWtrb79xUk8nzSletd+wHgA3BoeQOyiybK1aauxPiOS HEu/jXPBqT0L5IlpPFDPdwZ92DTzHIhmEMtWQdqDaliXkPuYivrTltMfzDhzDsyg V+N0/stxdaQcAeDSdA6aSNBQ0sKTobMr1wQGOcYq3Wxn6fwGrlzUvDgROI2JwAhm OjTPSrAUo1iyAsb1Fm9p3rYa+IlZp0Ao2siCfxLGx6BbNA0O8dx82Q0vGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOVKu1xOexYWXz8hG8Z8ma4qzOLMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAin/G9hfS g1lylLmpxqvOmXHUNy33Cedv3GfeyltsqrqEdv1m3r49pafZMl8NRQOhjNQjmRwv IjSBHU/YIhaOiX/0AiuVRv3iMrIOPreLtXEBFt9wArQJ5BMz1SrJp914KfXd0Dq7 qi3M3uE+GBwUY9IHB46GzeSH6Y30NepOqkIcR4nfgLoppUiGmkVl4lL134mUmvPa v+ntaWgga7LeBAcywSAt3StNTkoc7/vYHdDyE8sK8b5pUUe/MXx+fh94Lnwtw2MJ 3dMmJnxyji2F3unDEWBPsGHzvIVuBE6ZlzymtALe6LAF2MAkOEuFJzMxkmUKQ3Rb poXZkcFozlOVhw== -----END CERTIFICATE-----Generated at Thu Sep 10 09:37:37 2026 by rpki-client