$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: N+ZIdF9M250MXTNl0DnzNPYFODXf1Sy+qnt8+LWygeI= Subject key identifier: F3:3C:82:5F:C6:01:A3:48:FE:1A:3D:E8:3B:85:33:53:1E:69:D2:0B Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019DCCE1F8C53C92E3C4D31BB016682259A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0A52 Signing time: Mon 27 Apr 2026 03:00:54 +0000 Manifest this update: Mon 27 Apr 2026 03:00:54 +0000 Manifest next update: Tue 28 Apr 2026 03:00:54 +0000 Files and hashes: 1: 1Xx5yOqEiQ7w5oHl6pnI_Y99OJs.roa (hash: Qx3nCAa4Beyb+QGxZu/J+rc4mQgVdLQcLRYPOorkMM4=) 2: EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa (hash: td45xoqPpbc6Gcv+omp/fWPWBTYjdFq1Rce3dc0yMFE=) 3: GFld6khnEFpi6gQW0hMwMmLlwl0.roa (hash: I//YiN+Se4j9l8lgpKjzKKrJJsrwrv0cFrGyIWJUOJM=) 4: Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa (hash: EJSmVb0JmOGritsgWS3ZtbKYPG2hsEELjPpmAJHyJCw=) 5: bGDcrsy1uQ5Mie-xzDZjQZVH5Bc.roa (hash: BiNEWFnYGjmRdfcF3Lt+gPgQZVk5kMfGR526Ub/jeCI=) 6: cUAPfDvh9ctdBxtYWpRtEO8lG-g.roa (hash: b7MFeinCWo8o8FGB9kNt+44ggK2LvY6c1Zj//B8xVDY=) 7: eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa (hash: a793akF/TsnRIOMvjjqGG7ES5VGanrP8pXq6vUrCFVg=) 8: ix3G7JJ__thdkqzxBKhHSgEyUHQ.roa (hash: tqrv+mk7OqdSNSDsJu86ikaVD3U+743I3Wq1BdDs+CY=) 9: j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa (hash: gQFSyERJDH6nAPPc5747gmPm78inz3QBTsIip7aNmlE=) 10: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: UGElFGIw+3YUWE3j7xHsubqq9Nbq4CE7WgGLKXCzyzY=) 11: tsos8eFPeooULoppkyeNfVcA8Jk.roa (hash: P1kvV9Q/5XqDoLtfOjAVY+r8AgKwUeqcSTXWYXo6SZk=) 12: ujxhGCIYEFST9j-DRoKisCQQu7c.roa (hash: AnXG8guwVLItbuN1JjYAFkgz+rL1QHqF7D8yDPRN/BY=) 13: wLzBl1TIo7EO7s1obxvC0i1YAfw.roa (hash: e/MgA8dzgW4G4QsjGyKgevc8bH2s9NTc1MsFkFjalAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:e1:f8:c5:3c:92:e3:c4:d3:1b:b0:16:68:22:59:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Apr 27 03:00:54 2026 GMT Not After : Apr 28 03:00:54 2026 GMT Subject: CN=f33c825fc601a348fe1a3de83b8533531e69d20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ea:69:a0:2a:fd:02:b8:58:49:0c:23:a9:49: 6a:1d:e0:84:20:c3:e9:de:04:c5:b3:23:00:47:0f: fb:07:e7:ab:62:dd:2f:79:94:58:a9:f1:cb:18:60: 31:01:08:de:15:44:47:32:fc:e0:b0:95:01:48:41: a5:50:4a:e0:d0:51:8e:49:b8:97:aa:8f:fc:8d:9a: bd:21:a9:45:bc:d4:ce:5c:ab:da:f7:5e:89:f7:71: 53:1a:c2:72:5e:77:40:ba:17:ba:4c:ef:46:d2:ad: bf:45:f4:2f:c9:32:6d:b9:8f:a5:3b:74:9b:09:1c: 53:38:43:41:23:50:44:4d:71:64:2b:dc:c5:d8:12: 8e:db:f5:10:99:b9:62:aa:06:e3:1a:e1:c6:d8:c5: 80:94:64:8f:ec:bd:b4:8e:7f:2b:95:48:c4:3e:40: 65:e5:77:a2:ca:33:91:83:9c:94:ea:2a:e4:4c:3c: 6e:6a:93:89:a4:8d:ba:ad:bb:30:0c:66:50:92:63: ed:21:02:a5:ac:a6:29:ea:cb:6e:f4:1f:95:a8:cb: 1e:21:d8:12:50:80:88:4e:65:47:68:71:3b:7b:a0: dd:e0:b3:46:47:21:4b:cf:44:ef:b3:75:d4:86:9d: 69:64:9b:39:11:8c:34:10:d1:a5:65:f7:82:1b:75: d4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3C:82:5F:C6:01:A3:48:FE:1A:3D:E8:3B:85:33:53:1E:69:D2:0B X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2a:fd:c2:87:02:2c:28:fc:73:1c:90:c0:44:8d:6e:84:d4: 1e:e0:f2:90:63:40:92:8d:02:59:bf:7c:b1:cd:6f:22:c0:71: 40:81:62:7b:c8:b8:95:b2:09:a6:db:9a:9f:da:79:55:fc:34: 25:c5:68:7e:be:74:dd:c9:37:c1:66:77:54:d8:d6:1d:04:86: 39:fc:0b:7d:a5:a7:13:86:90:b4:2a:1c:e2:96:93:52:71:48: 90:69:4a:40:cd:b2:0e:7f:65:4f:ab:3f:9d:d9:ad:ba:52:09: 00:5a:b8:74:21:2e:ba:b0:bf:91:27:2a:2f:57:87:41:fd:84: 97:64:d3:81:87:40:62:d0:55:15:13:18:67:66:05:c1:f1:fe: 81:b0:e9:5f:ca:c7:ea:6e:73:a8:ab:c3:d7:58:e5:cb:e2:27: 7a:eb:c1:c2:07:71:73:08:6b:b9:35:ac:4b:a1:16:5b:f1:6f: 6c:d3:36:82:ae:b2:74:cc:bc:50:81:d7:16:2e:57:ee:31:40: 39:6a:c7:12:e9:ed:ee:98:37:ae:6f:1d:1c:6b:d3:21:da:6d: f3:f4:f4:fa:bb:6b:80:c8:e4:3a:30:b6:7f:f9:00:60:42:af: a1:89:ab:cc:ae:49:25:21:1e:69:4f:bb:e8:48:c7:e0:2a:ce: e4:c7:9d:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3M4fjFPJLjxNMbsBZoIlmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwNDI3MDMwMDU0WhcNMjYwNDI4MDMwMDU0WjAzMTEwLwYDVQQD EyhmMzNjODI1ZmM2MDFhMzQ4ZmUxYTNkZTgzYjg1MzM1MzFlNjlkMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+ppoCr9ArhYSQwjqUlqHeCEIMPp 3gTFsyMARw/7B+erYt0veZRYqfHLGGAxAQjeFURHMvzgsJUBSEGlUErg0FGOSbiX qo/8jZq9IalFvNTOXKva916J93FTGsJyXndAuhe6TO9G0q2/RfQvyTJtuY+lO3Sb CRxTOENBI1BETXFkK9zF2BKO2/UQmbliqgbjGuHG2MWAlGSP7L20jn8rlUjEPkBl 5XeiyjORg5yU6irkTDxuapOJpI26rbswDGZQkmPtIQKlrKYp6stu9B+VqMseIdgS UICITmVHaHE7e6Dd4LNGRyFLz0Tvs3XUhp1pZJs5EYw0ENGlZfeCG3XUxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPM8gl/GAaNI/ho96DuFM1MeadILMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAair9wocC LCj8cxyQwESNboTUHuDykGNAko0CWb98sc1vIsBxQIFie8i4lbIJptuan9p5Vfw0 JcVofr503ck3wWZ3VNjWHQSGOfwLfaWnE4aQtCoc4paTUnFIkGlKQM2yDn9lT6s/ ndmtulIJAFq4dCEuurC/kScqL1eHQf2El2TTgYdAYtBVFRMYZ2YFwfH+gbDpX8rH 6m5zqKvD11jly+IneuvBwgdxcwhruTWsS6EWW/FvbNM2gq6ydMy8UIHXFi5X7jFA OWrHEunt7pg3rm8dHGvTIdpt8/T0+rtrgMjkOjC2f/kAYEKvoYmrzK5JJSEeaU+7 6EjH4CrO5Med5g== -----END CERTIFICATE-----Generated at Mon Apr 27 07:15:17 2026 by rpki-client