$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: VEGRgVUkRol/wPHt15dkOCROFAuEu8NZMJmWQLvj9yU= Subject key identifier: 3F:7F:B8:BD:31:D6:0E:41:8F:9A:A1:69:C7:AA:F9:B5:E4:14:07:B9 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019F8E34E964AE62F564706D096E101F73D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 19E1 Signing time: Thu 23 Jul 2026 09:00:59 +0000 Manifest this update: Thu 23 Jul 2026 09:00:59 +0000 Manifest next update: Fri 24 Jul 2026 09:00:59 +0000 Files and hashes: 1: 1-l4RaLfBJyd2MPQTNrHgHOb738I.asa (hash: 7p+VWBjLWtE4REi9BbdzkPj1Ve0U1PFZBt+RJ3xIr6c=) 2: 56tuRDz3a2YTFgeWS1NrR18OXkg.roa (hash: 1nNgHHZdgSddhmbVFpAOLV/4EiXUghshKvJclDsKVmQ=) 3: 5MrbF5bNGEPF9upXfBtS4A4wDl4.roa (hash: cuTzNTZt0vxLLk58kaLIpL4TUhhDviNmQSTtCDK4SsY=) 4: GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa (hash: qe+WDGTjMvxnPuiz5zKe63b6ayHJKcpH5bKiSm9lucU=) 5: JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa (hash: zytsTfDYZZwrcpQaDSmmhp6xyQ2RMRRVWWyPiD2yWTY=) 6: KCBoMxNAGr3ol6s6RM6pJTYa9E0.roa (hash: FunXZj+wtacs6pD/kFNFcLd6gqmej6YgcTSrFfpXd0I=) 7: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: xI+dB5WCC8bfSf/yV3whh2vfXt+abnapXVUSHXWrf7A=) 8: YbqOfaiEzhYbZf1v7kxnJ5oWDdI.roa (hash: K1/J1u+fYdGovmZqt2ux5U8mWlfYB0TiDE6Xjf+a840=) 9: Yeq657xhQdSGU8ozMoBAHWz1c7o.roa (hash: R/IQB+JYvEApcpK9ekXgPiUzLmKHajFNMuKejVzFsKs=) 10: _5mSAKagSlrWqcFH7TXH0W26og4.roa (hash: 32J2xduAEK4/SsGh6SuDbhyqyhh7XlyF7binO4R80Wc=) 11: _CYFplyxe0M8AGr1RbZtWaBJCec.roa (hash: ySL4S7eZ51S8plbBqZUtXVpCREgkLAcEZfRUYmcl9sw=) 12: pw7UY5cxtDgJd7dLAtwYGNvRcpo.roa (hash: g4uEePdexAW53FzeUPyjdIrDSmjkq/x7/+0BrdOJwdU=) 13: ubBrtzGmGbSO-WUwJl4ceatGG7s.roa (hash: HzJ4FfYId8f62Ds2rGoMX1JffixOL9SOPWiVHisDEAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:34:e9:64:ae:62:f5:64:70:6d:09:6e:10:1f:73:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Jul 23 09:00:59 2026 GMT Not After : Jul 24 09:00:59 2026 GMT Subject: CN=3f7fb8bd31d60e418f9aa169c7aaf9b5e41407b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:93:46:6e:af:56:b5:93:2c:7d:75:95:e9: f9:a1:88:d4:cf:91:a5:22:a5:70:86:37:17:7d:82: fa:32:d4:84:35:45:5a:af:d9:08:0b:4a:70:a5:3c: 6e:83:42:7a:a7:25:72:89:16:be:75:4c:4a:56:d4: 4a:8c:40:c5:7d:df:e2:c3:8a:5d:8f:74:88:5d:0c: ae:bd:dc:9c:ab:d6:f9:6d:b2:c9:8a:c3:4a:2d:07: 76:3e:46:95:fa:69:bc:2c:cb:79:38:51:62:f3:9e: 77:48:63:1d:15:4c:1e:87:3b:1b:92:f9:7a:40:03: f7:56:16:8a:e9:8c:63:ec:ea:15:1c:a9:18:e0:a0: bd:46:88:7e:ee:4c:9d:65:6e:fc:01:4b:13:f1:e8: 6f:89:5a:07:7f:6f:fd:37:24:34:08:84:ee:20:45: ae:50:1a:e4:d4:04:2a:cb:91:2d:09:e5:6f:d4:eb: 94:55:3f:81:4f:29:80:2c:20:07:7b:bc:cb:aa:21: 4a:2d:96:ae:33:0e:d6:92:62:2f:da:ec:ae:cc:ff: 7a:ca:74:81:0d:5c:2c:ac:64:9d:1f:bb:64:e7:f4: e5:98:a7:17:47:04:3e:46:b4:4b:8e:17:59:ab:53: ef:b4:68:fe:65:10:0b:69:cf:45:d3:e0:a3:cd:f3: ff:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7F:B8:BD:31:D6:0E:41:8F:9A:A1:69:C7:AA:F9:B5:E4:14:07:B9 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:87:f0:39:5b:e0:df:d2:d4:5e:64:83:8c:4a:7e:b0:d5:1f: b0:a4:9c:36:d2:c3:4b:d8:e4:b1:17:15:d6:30:ce:dd:20:1e: 1d:2a:07:d2:21:e7:a2:c4:49:4e:d9:68:9c:a7:65:c6:b5:b7: 29:f0:e3:71:5f:8f:63:b2:e2:5e:fd:0c:bf:61:11:df:b7:97: 13:8f:de:7b:56:b8:73:f8:4e:89:8f:58:4d:6c:4c:29:15:c3: f7:29:79:12:7f:53:de:18:99:cc:83:e0:55:5e:6a:51:34:3c: 66:d0:00:70:e5:6b:d4:21:5b:46:83:f0:60:34:d9:18:1c:c3: 8a:57:c7:8b:bf:00:34:37:97:a0:7c:65:a6:03:8f:14:93:77: 0c:2e:f8:0c:42:a3:e3:5b:68:ce:16:5f:31:c6:19:df:63:72: f8:f8:e8:87:70:da:9d:4a:ac:e7:1a:64:1c:e3:4b:29:54:a9: 6e:39:f2:6e:d1:04:01:1d:d3:73:60:31:76:55:61:ff:2e:33: 2c:68:98:f7:95:1a:76:7b:72:fd:62:6b:7d:93:8e:de:89:c0: 55:59:ac:e1:63:97:a3:93:70:33:74:4e:36:eb:90:8c:46:9d: 35:d7:40:42:9c:39:5e:50:30:14:db:5a:11:b7:23:fc:b1:44: cf:99:67:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+ONOlkrmL1ZHBtCW4QH3PSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwNzIzMDkwMDU5WhcNMjYwNzI0MDkwMDU5WjAzMTEwLwYDVQQD EygzZjdmYjhiZDMxZDYwZTQxOGY5YWExNjljN2FhZjliNWU0MTQwN2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze2TRm6vVrWTLH11len5oYjUz5Gl IqVwhjcXfYL6MtSENUVar9kIC0pwpTxug0J6pyVyiRa+dUxKVtRKjEDFfd/iw4pd j3SIXQyuvdycq9b5bbLJisNKLQd2PkaV+mm8LMt5OFFi8553SGMdFUwehzsbkvl6 QAP3VhaK6Yxj7OoVHKkY4KC9Roh+7kydZW78AUsT8ehviVoHf2/9NyQ0CITuIEWu UBrk1AQqy5EtCeVv1OuUVT+BTymALCAHe7zLqiFKLZauMw7WkmIv2uyuzP96ynSB DVwsrGSdH7tk5/TlmKcXRwQ+RrRLjhdZq1PvtGj+ZRALac9F0+CjzfP/IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9/uL0x1g5Bj5qhaceq+bXkFAe5MB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYfwOVvg 39LUXmSDjEp+sNUfsKScNtLDS9jksRcV1jDO3SAeHSoH0iHnosRJTtlonKdlxrW3 KfDjcV+PY7LiXv0Mv2ER37eXE4/ee1a4c/hOiY9YTWxMKRXD9yl5En9T3hiZzIPg VV5qUTQ8ZtAAcOVr1CFbRoPwYDTZGBzDilfHi78ANDeXoHxlpgOPFJN3DC74DEKj 41tozhZfMcYZ32Ny+Pjoh3DanUqs5xpkHONLKVSpbjnybtEEAR3Tc2AxdlVh/y4z LGiY95Uadnty/WJrfZOO3onAVVms4WOXo5NwM3RONuuQjEadNddAQpw5XlAwFNta Ebcj/LFEz5lnbA== -----END CERTIFICATE-----Generated at Thu Jul 23 19:03:40 2026 by rpki-client