$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: 67oL013IojCZf2IudtGn+LiUyIGIUr5vtHZeIk0egxM= Subject key identifier: 42:03:EB:18:2E:AA:BD:24:A2:13:E0:16:7C:E7:83:C0:57:4F:EE:22 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 01A173949A53A968DA26F56FAECFA047D7DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0C38 Signing time: Sun 25 Oct 2026 15:01:21 +0000 Manifest this update: Sun 25 Oct 2026 15:01:21 +0000 Manifest next update: Mon 26 Oct 2026 15:01:21 +0000 Files and hashes: 1: 1mxm4aA8mprO3SiuYpHL45SLZ6E.roa (hash: f0DRKc/bZ2uPgiN6SskkmBBO+kuKWGaCsnu4rW9TsJw=) 2: BqWQxCnsQ0Pu5HCfqbDouobgXtE.roa (hash: yjWd6U2FD+P6Yc6f3oXbXkhcwLLIFFwx55f/HEBAHxw=) 3: EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa (hash: td45xoqPpbc6Gcv+omp/fWPWBTYjdFq1Rce3dc0yMFE=) 4: GFld6khnEFpi6gQW0hMwMmLlwl0.roa (hash: I//YiN+Se4j9l8lgpKjzKKrJJsrwrv0cFrGyIWJUOJM=) 5: NIlWiQEY3RuqoaUyaoDMEQwOomA.roa (hash: 2SReN7GjSlbbBzqYc2FsbGOus9FoN+9Ni58tpYY9o5I=) 6: Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa (hash: EJSmVb0JmOGritsgWS3ZtbKYPG2hsEELjPpmAJHyJCw=) 7: bGDcrsy1uQ5Mie-xzDZjQZVH5Bc.roa (hash: BiNEWFnYGjmRdfcF3Lt+gPgQZVk5kMfGR526Ub/jeCI=) 8: cUAPfDvh9ctdBxtYWpRtEO8lG-g.roa (hash: b7MFeinCWo8o8FGB9kNt+44ggK2LvY6c1Zj//B8xVDY=) 9: eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa (hash: a793akF/TsnRIOMvjjqGG7ES5VGanrP8pXq6vUrCFVg=) 10: j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa (hash: gQFSyERJDH6nAPPc5747gmPm78inz3QBTsIip7aNmlE=) 11: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: wC0+bKPNWuxml/N/DhCxoism5l/MjXlOSHCsUFHS74o=) 12: tsos8eFPeooULoppkyeNfVcA8Jk.roa (hash: P1kvV9Q/5XqDoLtfOjAVY+r8AgKwUeqcSTXWYXo6SZk=) 13: ujxhGCIYEFST9j-DRoKisCQQu7c.roa (hash: AnXG8guwVLItbuN1JjYAFkgz+rL1QHqF7D8yDPRN/BY=) 14: wLzBl1TIo7EO7s1obxvC0i1YAfw.roa (hash: e/MgA8dzgW4G4QsjGyKgevc8bH2s9NTc1MsFkFjalAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 15:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:73:94:9a:53:a9:68:da:26:f5:6f:ae:cf:a0:47:d7:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Oct 25 15:01:21 2026 GMT Not After : Oct 26 15:01:21 2026 GMT Subject: CN=4203eb182eaabd24a213e0167ce783c0574fee22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:1b:cb:2d:d9:fe:fc:40:b9:3f:9e:b4:64: cc:22:7f:dd:5c:5b:7a:12:e6:67:59:f0:67:3b:97: 1b:70:4b:d7:88:e6:16:0f:36:ea:de:c2:af:b4:3d: 98:3b:9e:c2:80:8d:4d:7d:20:97:73:2e:2a:ba:18: 34:9f:1d:e3:3c:1f:70:d7:d0:e5:95:82:55:c3:a6: e7:c5:b6:38:93:47:9c:04:2d:02:9e:9e:d5:2c:a9: 51:a0:99:62:bd:64:9f:73:f5:7a:6c:4e:e5:cc:89: 38:9a:61:19:1c:54:e2:6c:45:fc:47:6a:9d:e7:61: 1d:dd:08:b6:15:ce:a7:15:44:dd:79:39:22:60:1a: f3:78:40:b8:d1:b4:b6:29:c9:11:8b:b8:0a:c4:76: 6b:78:ed:fe:bf:44:0a:5c:55:62:d7:a0:84:25:fb: 51:8c:69:82:f2:98:83:28:ac:dd:8f:e5:ab:94:84: c2:9d:70:9a:bb:1f:d2:6d:96:15:d3:36:40:1f:6b: 7c:f3:53:07:a5:31:f9:27:e1:93:37:4e:3f:8f:61: 47:20:4d:bb:f7:35:f1:f3:b9:8a:7f:f4:46:5b:38: bc:08:0b:e9:e6:db:30:fa:bc:89:ba:c2:49:05:d9: e0:b3:51:74:0d:4c:31:02:5b:7b:33:c3:f9:0f:3d: 50:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:03:EB:18:2E:AA:BD:24:A2:13:E0:16:7C:E7:83:C0:57:4F:EE:22 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9c:e8:5a:a2:ad:73:8b:8a:52:3c:4e:cd:a1:da:3e:63:a7: 02:5d:a0:13:4a:01:f7:a5:58:8a:84:ac:d5:5d:04:ee:99:44: 68:86:3a:63:ea:43:ff:43:1b:cf:9f:b9:e2:0a:a8:1e:dc:35: 0c:be:fb:9b:0e:35:ac:2f:42:67:ae:63:cd:46:12:04:69:56: 10:cd:f1:16:e8:39:8b:fa:36:c7:5d:02:ec:78:85:25:9a:fd: 8f:d2:83:84:59:d1:23:ef:3e:4f:23:b6:25:3b:44:35:13:3f: ed:f0:a4:c8:43:7e:0d:b5:25:f0:f6:e0:5e:8b:e3:a8:44:3d: b6:7c:b2:06:9a:4c:d9:c3:27:f8:fc:a4:89:66:b3:cf:33:c2: 00:38:ad:bd:38:af:7c:3f:8a:0a:9c:e7:1a:f0:b8:0e:44:ee: 4b:0f:6a:81:a3:c3:8e:f5:fb:53:8b:56:d2:2f:99:04:47:2a: 45:4d:b5:c7:fc:e8:05:8f:32:27:57:fe:e4:3a:61:34:7a:89: 68:e8:8c:01:da:0b:23:e6:47:00:ba:fb:8c:0a:56:62:f0:3b: 87:42:40:3c:84:c4:2a:30:28:6d:d7:84:8a:59:af:e3:5a:6f: 19:93:86:14:d4:ce:c7:9f:88:17:fb:a8:19:ca:77:cd:66:f1: 92:f7:a0:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFzlJpTqWjaJvVvrs+gR9fdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYxMDI1MTUwMTIxWhcNMjYxMDI2MTUwMTIxWjAzMTEwLwYDVQQD Eyg0MjAzZWIxODJlYWFiZDI0YTIxM2UwMTY3Y2U3ODNjMDU3NGZlZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfkbyy3Z/vxAuT+etGTMIn/dXFt6 EuZnWfBnO5cbcEvXiOYWDzbq3sKvtD2YO57CgI1NfSCXcy4quhg0nx3jPB9w19Dl lYJVw6bnxbY4k0ecBC0Cnp7VLKlRoJlivWSfc/V6bE7lzIk4mmEZHFTibEX8R2qd 52Ed3Qi2Fc6nFUTdeTkiYBrzeEC40bS2KckRi7gKxHZreO3+v0QKXFVi16CEJftR jGmC8piDKKzdj+WrlITCnXCaux/SbZYV0zZAH2t881MHpTH5J+GTN04/j2FHIE27 9zXx87mKf/RGWzi8CAvp5tsw+ryJusJJBdngs1F0DUwxAlt7M8P5Dz1Q5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEID6xguqr0kohPgFnzng8BXT+4iMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpzoWqKt c4uKUjxOzaHaPmOnAl2gE0oB96VYioSs1V0E7plEaIY6Y+pD/0Mbz5+54gqoHtw1 DL77mw41rC9CZ65jzUYSBGlWEM3xFug5i/o2x10C7HiFJZr9j9KDhFnRI+8+TyO2 JTtENRM/7fCkyEN+DbUl8PbgXovjqEQ9tnyyBppM2cMn+PykiWazzzPCADitvTiv fD+KCpznGvC4DkTuSw9qgaPDjvX7U4tW0i+ZBEcqRU21x/zoBY8yJ1f+5DphNHqJ aOiMAdoLI+ZHALr7jApWYvA7h0JAPITEKjAobdeEilmv41pvGZOGFNTOx5+IF/uo Gcp3zWbxkvegAg== -----END CERTIFICATE-----Generated at Sun Oct 25 20:53:03 2026 by rpki-client