$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: 82bHoYhRKRXxtZtLTTufu8d1O61cRr1bnBzXBYrZ8IE= Subject key identifier: 5E:D2:41:94:8E:AD:19:35:10:37:67:FE:B7:FC:26:8F:70:C9:7B:F5 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019F9135C68A096CBDF5A7D36EC882A14526 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 19E4 Signing time: Thu 23 Jul 2026 23:00:48 +0000 Manifest this update: Thu 23 Jul 2026 23:00:48 +0000 Manifest next update: Fri 24 Jul 2026 23:00:48 +0000 Files and hashes: 1: 2VGlQCljw9cFJl5EHzBeMDJwXVo.roa (hash: Do0oxRXzURqrwthzVRT/8OMjdF0dAGArF8nmDv/TCrU=) 2: Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa (hash: gQCxAX0kGUP6fOqE0f4xg6Y7BKr1YkDG2KCm3PY3vks=) 3: ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa (hash: 6ABtGMwyDO/6lM571vE9Iuqd9TQr+m5PP3ymm7KdDMo=) 4: FqgScginFUes_17Ndt6kdOrzAkA.roa (hash: a3G9kD/8P4BMkG64yuvOvu/MjxsZVk5qCgCtyW3lY6c=) 5: Ikkeya1yJgRDS-xhPDlnuPLetJs.roa (hash: glwjFgIZfVLfz8kep2uiVu5O3LaEznaNtCEp/lC03fQ=) 6: T6pXE_xgE4WrCZgfLS6PwaHzerg.roa (hash: G4WSUskcjpTP61QhWQEI/av+RXa/41Ip20fNLeEJAoQ=) 7: VLiSP46DJX8Dog7Og_5_Z19OaAw.roa (hash: 3gWIgE8p9hzKRB2RaJcWZL2QSZhVwmUm6N+ESpdKpAQ=) 8: WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa (hash: XiM6tnhPeoo8/I0UsVcX68fQNBFdvSj5FK8MxmFwo94=) 9: b_n3Z3GxujBB68-zb1vahju6Fp0.roa (hash: fBmej85zCOTwohAZSrZlJvl4CdYQMz+WBefO+9bGgMc=) 10: leefmemMjsnYBH_PRIls4mGDQQg.roa (hash: H8hE7idzBRzXS/SDOwJGlem7diQp5JTlS92HhAhqaHk=) 11: oSUSV9XksEu-hj7frAtIPDI4QUc.roa (hash: Ba7z9fv3oVKNrP/ZNMw28ZH2Y9v/Nbz2kHCWUqIYg+s=) 12: sFANASik-wL_AAsMTGDepkCLru8.roa (hash: hsLxQEI+C24jdO2zBJxR+yNy+Qjt/yzfuOvytd9u6lw=) 13: sVlG1_wshTtHh3K3-dmfU3V-ohU.roa (hash: bMT/BHfnv5hKh+kUsN5whSknK8wJI4XccjCUKzZX56c=) 14: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: /0jGjfbumwm6GNnkBMVxycWp6SgE0y3quXJ7rGlrNww=) 15: y2cm6-exYMkmOGgTU1Cd07TyLP8.roa (hash: VU+nMgrW6E4VxS9BCUWRqC49ToNwPX6PlXdXakhEGJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:35:c6:8a:09:6c:bd:f5:a7:d3:6e:c8:82:a1:45:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Jul 23 23:00:48 2026 GMT Not After : Jul 24 23:00:48 2026 GMT Subject: CN=5ed241948ead1935103767feb7fc268f70c97bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e7:70:1a:25:df:8f:57:65:89:0e:3b:53:d3: b0:e0:3e:78:a0:d9:0c:bc:89:c7:98:37:a4:7e:6c: 0a:b0:da:8e:ee:68:d1:81:fc:c9:25:e1:ce:a9:c2: e9:23:07:14:98:25:e0:ff:5e:18:40:a3:98:d3:ca: 2e:9b:64:e2:f7:f7:e4:2e:7d:27:2d:26:36:4c:8a: 76:59:8c:a0:ec:65:f9:8b:b4:10:f7:e1:0c:c2:4c: 68:f7:af:ec:ac:79:33:9c:b4:54:71:46:bd:ab:ca: f6:ba:b1:f1:e6:94:ec:be:d8:9b:99:52:07:88:0b: 24:2a:28:d3:a3:82:cd:ea:84:c3:9f:49:e5:15:4d: b8:c2:d3:18:9f:79:48:31:c4:c6:aa:11:b6:14:24: 8e:2c:bc:4b:46:1c:89:9b:38:2c:ed:0b:ae:5e:ca: 7b:06:42:4e:0c:e2:59:ad:08:a6:0c:a2:5b:6b:60: d5:0f:82:73:d2:64:fd:b7:8d:99:12:7c:7f:80:7d: ab:6f:90:ae:e2:33:46:a7:75:a7:2c:f0:19:66:5e: 2b:f0:32:d9:f6:a3:24:1b:b4:e3:9c:7a:fe:12:85: db:8a:91:77:9d:c0:72:33:07:b1:0f:b5:fb:11:df: 75:1b:65:b5:b2:cb:32:23:ea:4b:74:72:5e:5a:6b: 5c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D2:41:94:8E:AD:19:35:10:37:67:FE:B7:FC:26:8F:70:C9:7B:F5 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:86:ec:3b:53:36:b1:37:cd:5f:19:c5:dd:ef:2a:9c:17:ce: 85:e8:c6:c4:9e:92:da:e1:ee:c0:a5:c2:78:f5:09:6a:05:d6: 6a:04:41:88:88:63:d2:ef:39:42:1c:af:a6:c6:74:fa:ac:b7: 78:16:ef:e5:f2:96:44:4d:1c:04:c8:1e:80:38:ba:e3:3b:70: 7d:48:5b:cc:a6:48:4f:29:b5:73:de:6b:2b:e1:bf:22:12:a1: 82:68:b1:13:b7:ab:05:d5:ff:b8:ff:de:c8:d8:0e:26:ed:cb: 4e:ac:d1:40:63:ba:4f:ff:b6:47:db:2b:03:0b:97:c5:47:0a: fa:10:6f:cf:bc:2d:85:0c:bf:c8:c9:34:23:6d:e8:fe:8d:48: 79:55:0e:53:67:33:62:ac:0f:ec:1f:c4:c8:df:eb:11:d1:5e: 82:59:9b:e6:b7:2a:c1:fb:73:2b:c7:84:52:25:b7:47:21:b5: 75:05:e7:79:a9:fb:bc:89:0f:84:b0:aa:1c:10:5b:0a:c8:4f: c7:2a:5f:7f:3b:2c:69:92:e5:ef:aa:d9:95:7c:42:8c:11:1f: 24:a2:e3:19:f2:4d:b1:a1:81:4d:4f:9a:a5:6c:28:db:78:77: cb:30:20:af:96:f0:77:90:c2:bc:33:6e:8f:4e:f3:4a:6e:d8: 92:ee:09:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RNcaKCWy99afTbsiCoUUmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwNzIzMjMwMDQ4WhcNMjYwNzI0MjMwMDQ4WjAzMTEwLwYDVQQD Eyg1ZWQyNDE5NDhlYWQxOTM1MTAzNzY3ZmViN2ZjMjY4ZjcwYzk3YmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+dwGiXfj1dliQ47U9Ow4D54oNkM vInHmDekfmwKsNqO7mjRgfzJJeHOqcLpIwcUmCXg/14YQKOY08oum2Ti9/fkLn0n LSY2TIp2WYyg7GX5i7QQ9+EMwkxo96/srHkznLRUcUa9q8r2urHx5pTsvtibmVIH iAskKijTo4LN6oTDn0nlFU24wtMYn3lIMcTGqhG2FCSOLLxLRhyJmzgs7QuuXsp7 BkJODOJZrQimDKJba2DVD4Jz0mT9t42ZEnx/gH2rb5Cu4jNGp3WnLPAZZl4r8DLZ 9qMkG7TjnHr+EoXbipF3ncByMwexD7X7Ed91G2W1sssyI+pLdHJeWmtcJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7SQZSOrRk1EDdn/rf8Jo9wyXv1MB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALobsO1M2 sTfNXxnF3e8qnBfOhejGxJ6S2uHuwKXCePUJagXWagRBiIhj0u85QhyvpsZ0+qy3 eBbv5fKWRE0cBMgegDi64ztwfUhbzKZITym1c95rK+G/IhKhgmixE7erBdX/uP/e yNgOJu3LTqzRQGO6T/+2R9srAwuXxUcK+hBvz7wthQy/yMk0I23o/o1IeVUOU2cz YqwP7B/EyN/rEdFeglmb5rcqwftzK8eEUiW3RyG1dQXnean7vIkPhLCqHBBbCshP xypffzssaZLl76rZlXxCjBEfJKLjGfJNsaGBTU+apWwo23h3yzAgr5bwd5DCvDNu j07zSm7Yku4JEw== -----END CERTIFICATE-----Generated at Fri Jul 24 03:18:38 2026 by rpki-client