$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: 5huWROl06gvT7ZPCAbsWmFdqC67udymKv+er8ki2NJg= Subject key identifier: B4:B1:6D:98:2E:5A:84:B9:B4:66:8C:EF:70:82:B8:7A:14:4E:ED:AC Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 01A08A1EDA5624FAB05EA580BB1A3DCEBF75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0BBE Signing time: Thu 10 Sep 2026 07:01:12 +0000 Manifest this update: Thu 10 Sep 2026 07:01:12 +0000 Manifest next update: Fri 11 Sep 2026 07:01:12 +0000 Files and hashes: 1: EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa (hash: td45xoqPpbc6Gcv+omp/fWPWBTYjdFq1Rce3dc0yMFE=) 2: GFld6khnEFpi6gQW0hMwMmLlwl0.roa (hash: I//YiN+Se4j9l8lgpKjzKKrJJsrwrv0cFrGyIWJUOJM=) 3: NIlWiQEY3RuqoaUyaoDMEQwOomA.roa (hash: 2SReN7GjSlbbBzqYc2FsbGOus9FoN+9Ni58tpYY9o5I=) 4: Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa (hash: EJSmVb0JmOGritsgWS3ZtbKYPG2hsEELjPpmAJHyJCw=) 5: bGDcrsy1uQ5Mie-xzDZjQZVH5Bc.roa (hash: BiNEWFnYGjmRdfcF3Lt+gPgQZVk5kMfGR526Ub/jeCI=) 6: cUAPfDvh9ctdBxtYWpRtEO8lG-g.roa (hash: b7MFeinCWo8o8FGB9kNt+44ggK2LvY6c1Zj//B8xVDY=) 7: eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa (hash: a793akF/TsnRIOMvjjqGG7ES5VGanrP8pXq6vUrCFVg=) 8: ix3G7JJ__thdkqzxBKhHSgEyUHQ.roa (hash: tqrv+mk7OqdSNSDsJu86ikaVD3U+743I3Wq1BdDs+CY=) 9: j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa (hash: gQFSyERJDH6nAPPc5747gmPm78inz3QBTsIip7aNmlE=) 10: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: UdvzJfqPR50yQZGi232gEr8x6NhBf7dovSuyos+pjQA=) 11: tsos8eFPeooULoppkyeNfVcA8Jk.roa (hash: P1kvV9Q/5XqDoLtfOjAVY+r8AgKwUeqcSTXWYXo6SZk=) 12: ujxhGCIYEFST9j-DRoKisCQQu7c.roa (hash: AnXG8guwVLItbuN1JjYAFkgz+rL1QHqF7D8yDPRN/BY=) 13: wLzBl1TIo7EO7s1obxvC0i1YAfw.roa (hash: e/MgA8dzgW4G4QsjGyKgevc8bH2s9NTc1MsFkFjalAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 07:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:1e:da:56:24:fa:b0:5e:a5:80:bb:1a:3d:ce:bf:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Sep 10 07:01:12 2026 GMT Not After : Sep 11 07:01:12 2026 GMT Subject: CN=b4b16d982e5a84b9b4668cef7082b87a144eedac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:71:8d:c8:89:18:8a:df:13:67:e8:76:45:e8: 61:2a:ae:b4:ec:2f:33:c2:7e:f1:5a:7d:d5:ca:d6: 60:f7:31:7f:90:1e:a1:d9:e2:35:49:ad:cf:bf:be: 51:6b:0b:82:d6:f1:fc:cd:88:8a:b6:70:c4:51:82: 5a:e7:b4:0b:b0:5a:ee:5b:54:92:bc:df:cc:ad:68: f9:86:5f:2c:42:bd:01:b8:1b:ff:29:82:0f:ca:20: 66:7e:d4:1a:f4:86:85:e0:a2:be:ad:2b:af:41:7b: a7:fd:57:5c:4f:3b:29:22:9c:bb:e3:66:03:62:25: a2:08:17:15:20:96:c1:19:03:6a:e9:80:2e:e1:26: 7a:17:af:04:6f:5b:aa:63:d3:59:1d:cd:8d:a2:73: 2f:f9:fe:95:00:3f:b8:1a:e8:5e:8d:5d:7c:36:81: aa:a7:bc:47:87:5e:b8:d7:a6:f6:92:ed:0a:a5:5d: c1:ab:11:e3:b4:06:e4:1d:21:9b:ef:3c:d5:81:ca: 53:43:8b:34:f9:09:0e:72:04:23:1a:72:50:2e:fd: d4:b8:66:fc:2a:c8:9c:1e:dd:a0:89:0e:f2:b9:2e: 06:b3:b5:c9:2b:c0:c4:25:9c:97:cc:8e:56:47:78: 08:ed:e8:c4:01:2d:62:fa:9a:5d:fa:1a:e0:ed:76: e0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B1:6D:98:2E:5A:84:B9:B4:66:8C:EF:70:82:B8:7A:14:4E:ED:AC X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f8:33:95:3d:87:e2:b0:31:bf:7a:01:41:11:06:40:c2:f2: 99:51:10:64:95:ba:91:a9:2b:6d:a7:a8:a3:10:f2:7c:a3:5e: 3a:02:cd:f6:0d:18:0c:52:2f:63:51:11:d5:68:b0:08:b9:5d: 04:85:8e:6d:67:4b:2b:35:ca:f5:57:f6:11:f6:dc:42:f4:bf: 6c:e4:05:9e:4b:5e:97:dd:43:7f:ea:f4:20:5c:25:31:70:98: b7:90:b4:ad:18:07:55:08:2c:7a:44:5a:09:f9:e9:44:04:1b: 77:03:58:93:58:83:cf:83:e4:93:aa:dd:62:ef:0a:04:85:4a: 8e:69:5e:8e:e8:5b:78:99:96:d8:0c:df:74:07:2f:dd:42:3f: ed:cd:59:e8:76:80:2d:6f:20:00:9d:c3:38:8b:ae:34:cd:59: 9c:e5:f1:74:f4:3f:a2:db:6a:40:31:64:f7:13:e2:fe:75:3e: 50:d7:8e:0d:03:ea:77:91:e9:97:52:ea:64:a5:be:a1:3b:b4: 7a:db:4d:a0:80:45:31:c6:2d:1d:9d:82:67:a5:c1:ea:7d:84: cb:d9:14:db:d5:8d:88:ef:1d:f2:3b:2c:77:dd:4d:fc:d9:0f: 58:ed:74:ea:de:b5:9c:0d:e8:09:6c:17:c2:47:de:ee:ca:8f: c3:52:3d:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKHtpWJPqwXqWAuxo9zr91MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwOTEwMDcwMTEyWhcNMjYwOTExMDcwMTEyWjAzMTEwLwYDVQQD EyhiNGIxNmQ5ODJlNWE4NGI5YjQ2NjhjZWY3MDgyYjg3YTE0NGVlZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXGNyIkYit8TZ+h2RehhKq607C8z wn7xWn3VytZg9zF/kB6h2eI1Sa3Pv75RawuC1vH8zYiKtnDEUYJa57QLsFruW1SS vN/MrWj5hl8sQr0BuBv/KYIPyiBmftQa9IaF4KK+rSuvQXun/VdcTzspIpy742YD YiWiCBcVIJbBGQNq6YAu4SZ6F68Eb1uqY9NZHc2NonMv+f6VAD+4GuhejV18NoGq p7xHh16416b2ku0KpV3BqxHjtAbkHSGb7zzVgcpTQ4s0+QkOcgQjGnJQLv3UuGb8 KsicHt2giQ7yuS4Gs7XJK8DEJZyXzI5WR3gI7ejEAS1i+ppd+hrg7XbgjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSxbZguWoS5tGaM73CCuHoUTu2sMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvgzlT2H 4rAxv3oBQREGQMLymVEQZJW6kakrbaeooxDyfKNeOgLN9g0YDFIvY1ER1WiwCLld BIWObWdLKzXK9Vf2EfbcQvS/bOQFnktel91Df+r0IFwlMXCYt5C0rRgHVQgsekRa CfnpRAQbdwNYk1iDz4Pkk6rdYu8KBIVKjmlejuhbeJmW2AzfdAcv3UI/7c1Z6HaA LW8gAJ3DOIuuNM1ZnOXxdPQ/ottqQDFk9xPi/nU+UNeODQPqd5Hpl1LqZKW+oTu0 ettNoIBFMcYtHZ2CZ6XB6n2Ey9kU29WNiO8d8jssd91N/NkPWO106t61nA3oCWwX wkfe7sqPw1I9zg== -----END CERTIFICATE-----Generated at Thu Sep 10 14:49:39 2026 by rpki-client