$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: P624gkEuPh/8/WrPlNp5V8wPA2AXvjpBLDTATVcPzEI= Subject key identifier: 65:28:2D:B7:5F:F2:43:8E:6B:B1:FB:E0:D4:7B:6C:BB:B8:52:B2:98 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019FA14DFA0589980AA47FF8C0D468D4D3FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0B45 Signing time: Mon 27 Jul 2026 02:01:09 +0000 Manifest this update: Mon 27 Jul 2026 02:01:09 +0000 Manifest next update: Tue 28 Jul 2026 02:01:09 +0000 Files and hashes: 1: EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa (hash: td45xoqPpbc6Gcv+omp/fWPWBTYjdFq1Rce3dc0yMFE=) 2: GFld6khnEFpi6gQW0hMwMmLlwl0.roa (hash: I//YiN+Se4j9l8lgpKjzKKrJJsrwrv0cFrGyIWJUOJM=) 3: Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa (hash: EJSmVb0JmOGritsgWS3ZtbKYPG2hsEELjPpmAJHyJCw=) 4: bGDcrsy1uQ5Mie-xzDZjQZVH5Bc.roa (hash: BiNEWFnYGjmRdfcF3Lt+gPgQZVk5kMfGR526Ub/jeCI=) 5: cUAPfDvh9ctdBxtYWpRtEO8lG-g.roa (hash: b7MFeinCWo8o8FGB9kNt+44ggK2LvY6c1Zj//B8xVDY=) 6: eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa (hash: a793akF/TsnRIOMvjjqGG7ES5VGanrP8pXq6vUrCFVg=) 7: ix3G7JJ__thdkqzxBKhHSgEyUHQ.roa (hash: tqrv+mk7OqdSNSDsJu86ikaVD3U+743I3Wq1BdDs+CY=) 8: j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa (hash: gQFSyERJDH6nAPPc5747gmPm78inz3QBTsIip7aNmlE=) 9: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: Oi8hGPqSfJhIyAGD/h+BbAWmmKS+kuHxvU7ZiC7HuS8=) 10: tsos8eFPeooULoppkyeNfVcA8Jk.roa (hash: P1kvV9Q/5XqDoLtfOjAVY+r8AgKwUeqcSTXWYXo6SZk=) 11: ujxhGCIYEFST9j-DRoKisCQQu7c.roa (hash: AnXG8guwVLItbuN1JjYAFkgz+rL1QHqF7D8yDPRN/BY=) 12: wLzBl1TIo7EO7s1obxvC0i1YAfw.roa (hash: e/MgA8dzgW4G4QsjGyKgevc8bH2s9NTc1MsFkFjalAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:4d:fa:05:89:98:0a:a4:7f:f8:c0:d4:68:d4:d3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jul 27 02:01:09 2026 GMT Not After : Jul 28 02:01:09 2026 GMT Subject: CN=65282db75ff2438e6bb1fbe0d47b6cbbb852b298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0d:ed:25:0c:8d:98:e3:8e:82:e2:89:f4:74: a0:55:95:5c:d4:40:27:e5:90:f0:dc:cf:fa:20:f0: a7:0c:8a:61:59:9e:66:be:70:36:a9:e7:f7:7e:2f: 9f:fb:9f:09:0b:77:bb:9f:f8:52:df:44:b8:27:50: a1:4c:d9:20:c8:73:02:83:15:06:e9:4e:9a:6e:e7: d0:1f:48:c7:93:23:da:a0:6f:fc:e1:f4:5f:e8:e8: 13:c6:f8:98:7f:d8:a7:75:f2:a5:8f:22:78:ab:f0: 9b:f3:18:8e:38:c3:fa:ba:ae:8f:12:e8:3e:ee:1f: 4b:7b:28:96:00:04:b7:61:93:f9:0d:b2:6d:01:91: 9a:5e:4e:1e:b5:4a:45:73:c1:c3:00:b0:c5:2d:d1: da:43:8d:e6:12:40:c2:9d:fe:6b:6c:40:d0:dd:dc: 12:30:75:b4:59:a5:c4:32:5d:92:fc:ba:61:5f:0c: 66:b5:87:22:67:b8:1e:f0:8d:a9:69:89:db:eb:14: 5b:2f:8f:d5:31:03:d7:ed:dd:8e:ab:06:58:af:3f: 20:26:19:39:ab:ea:d3:1b:81:a5:77:71:33:52:27: d6:bc:9d:91:84:90:9e:0c:7c:7a:10:4a:6b:ea:a0: e3:00:6d:bd:c6:de:ea:ff:f0:ea:f9:56:e3:37:0a: d1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:28:2D:B7:5F:F2:43:8E:6B:B1:FB:E0:D4:7B:6C:BB:B8:52:B2:98 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:8e:33:c7:ef:10:fb:39:ff:d8:89:af:0e:d9:4e:d5:5c:f0: 43:b6:c9:16:1d:8d:ad:e9:89:61:d6:94:94:1e:0d:ca:51:55: 2f:c3:bd:8b:ce:f4:90:51:f3:6b:b3:bb:df:bd:9d:88:5e:87: 0e:23:b1:ec:21:50:d2:c4:ed:46:39:33:62:ad:59:2c:7e:0f: 88:50:fe:63:0d:2e:81:be:a2:e9:9d:c1:fb:16:32:38:56:95: 14:53:85:07:e2:e9:12:1f:85:bd:97:f3:cd:90:db:da:9c:bf: df:0e:8c:1b:9e:ae:42:46:44:0e:98:37:7c:4c:12:fe:6d:b3: 42:cc:38:f9:9d:56:bd:4e:94:f0:3a:55:5e:4f:0c:00:8d:33: fa:b5:70:d4:01:5c:7c:79:42:53:8b:39:40:30:57:ed:dd:3c: 4c:c4:87:f2:21:92:6d:1c:f9:85:72:81:fa:14:87:8e:d0:37: f5:44:5e:f3:b6:04:79:12:d8:55:fe:87:0b:26:7d:5b:82:08: 4b:ec:b8:98:be:5a:86:ac:4b:cd:c6:1a:34:32:30:a9:bd:2d: 2f:35:7a:75:b9:bd:dc:51:09:ba:52:5d:3b:c3:9b:80:2c:03: ce:a8:33:2e:67:16:c1:01:58:b3:34:da:a7:6f:a3:9a:1f:5c: 47:22:7b:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+hTfoFiZgKpH/4wNRo1NP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwNzI3MDIwMTA5WhcNMjYwNzI4MDIwMTA5WjAzMTEwLwYDVQQD Eyg2NTI4MmRiNzVmZjI0MzhlNmJiMWZiZTBkNDdiNmNiYmI4NTJiMjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3w3tJQyNmOOOguKJ9HSgVZVc1EAn 5ZDw3M/6IPCnDIphWZ5mvnA2qef3fi+f+58JC3e7n/hS30S4J1ChTNkgyHMCgxUG 6U6abufQH0jHkyPaoG/84fRf6OgTxviYf9indfKljyJ4q/Cb8xiOOMP6uq6PEug+ 7h9LeyiWAAS3YZP5DbJtAZGaXk4etUpFc8HDALDFLdHaQ43mEkDCnf5rbEDQ3dwS MHW0WaXEMl2S/LphXwxmtYciZ7ge8I2paYnb6xRbL4/VMQPX7d2OqwZYrz8gJhk5 q+rTG4Gld3EzUifWvJ2RhJCeDHx6EEpr6qDjAG29xt7q//Dq+VbjNwrRLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUoLbdf8kOOa7H74NR7bLu4UrKYMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIo4zx+8Q +zn/2ImvDtlO1VzwQ7bJFh2NremJYdaUlB4NylFVL8O9i870kFHza7O7372diF6H DiOx7CFQ0sTtRjkzYq1ZLH4PiFD+Yw0ugb6i6Z3B+xYyOFaVFFOFB+LpEh+FvZfz zZDb2py/3w6MG56uQkZEDpg3fEwS/m2zQsw4+Z1WvU6U8DpVXk8MAI0z+rVw1AFc fHlCU4s5QDBX7d08TMSH8iGSbRz5hXKB+hSHjtA39URe87YEeRLYVf6HCyZ9W4II S+y4mL5ahqxLzcYaNDIwqb0tLzV6dbm93FEJulJdO8ObgCwDzqgzLmcWwQFYszTa p2+jmh9cRyJ7rQ== -----END CERTIFICATE-----Generated at Mon Jul 27 05:40:36 2026 by rpki-client