$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: Gsidq5MJTRNRkA1KVtTDkS6RcbMslqi6I+WXtXltuRo= Subject key identifier: 2D:2A:36:11:C2:A6:9B:90:FE:80:D4:D9:15:4C:BC:40:32:10:C9:79 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019E1E34D1248A2F9A819AB3783FACA45A83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 1922 Signing time: Tue 12 May 2026 22:00:38 +0000 Manifest this update: Tue 12 May 2026 22:00:38 +0000 Manifest next update: Wed 13 May 2026 22:00:38 +0000 Files and hashes: 1: 2VGlQCljw9cFJl5EHzBeMDJwXVo.roa (hash: Do0oxRXzURqrwthzVRT/8OMjdF0dAGArF8nmDv/TCrU=) 2: Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa (hash: gQCxAX0kGUP6fOqE0f4xg6Y7BKr1YkDG2KCm3PY3vks=) 3: ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa (hash: 6ABtGMwyDO/6lM571vE9Iuqd9TQr+m5PP3ymm7KdDMo=) 4: FqgScginFUes_17Ndt6kdOrzAkA.roa (hash: a3G9kD/8P4BMkG64yuvOvu/MjxsZVk5qCgCtyW3lY6c=) 5: IsrXRGLVffEPsnHVbl_BeBHARaA.roa (hash: 2bYUOyrmy0HgRWN9bHIQfD3C31xnJN8Zzbysmp0r1Aw=) 6: T6pXE_xgE4WrCZgfLS6PwaHzerg.roa (hash: G4WSUskcjpTP61QhWQEI/av+RXa/41Ip20fNLeEJAoQ=) 7: VLiSP46DJX8Dog7Og_5_Z19OaAw.roa (hash: 3gWIgE8p9hzKRB2RaJcWZL2QSZhVwmUm6N+ESpdKpAQ=) 8: WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa (hash: XiM6tnhPeoo8/I0UsVcX68fQNBFdvSj5FK8MxmFwo94=) 9: b_n3Z3GxujBB68-zb1vahju6Fp0.roa (hash: fBmej85zCOTwohAZSrZlJvl4CdYQMz+WBefO+9bGgMc=) 10: leefmemMjsnYBH_PRIls4mGDQQg.roa (hash: H8hE7idzBRzXS/SDOwJGlem7diQp5JTlS92HhAhqaHk=) 11: oSUSV9XksEu-hj7frAtIPDI4QUc.roa (hash: Ba7z9fv3oVKNrP/ZNMw28ZH2Y9v/Nbz2kHCWUqIYg+s=) 12: sVlG1_wshTtHh3K3-dmfU3V-ohU.roa (hash: bMT/BHfnv5hKh+kUsN5whSknK8wJI4XccjCUKzZX56c=) 13: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: h71vKXuirrgPWsFaJt0RbVD6d5qdhLu8QkwWvhzqOxs=) 14: zGuXwu3v-M9bXZipAlRCLhWgY9Y.roa (hash: q3HTdT+bmIS7eJfWEweBp4+RgfhLQ35j5qT2Y42OjrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 22:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:34:d1:24:8a:2f:9a:81:9a:b3:78:3f:ac:a4:5a:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: May 12 22:00:38 2026 GMT Not After : May 13 22:00:38 2026 GMT Subject: CN=2d2a3611c2a69b90fe80d4d9154cbc403210c979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:b1:52:66:dc:05:51:f2:28:b5:22:3a:7a: 6e:46:47:1e:4d:b7:dd:af:46:52:ba:c6:ec:67:4b: ee:76:a8:98:fc:62:9e:c2:07:9f:db:6d:a1:94:50: 69:93:1c:8c:65:dd:e2:7a:9b:83:bf:0b:43:c3:d6: fe:e5:8c:62:25:a1:91:9c:95:7e:c1:af:fa:57:4c: 82:2c:ab:0b:e2:f2:81:20:95:85:fd:4d:9f:71:3c: e8:29:dc:ad:5d:02:93:3e:b8:1a:45:b6:e3:25:a4: b1:5c:96:42:6d:a8:37:1b:5a:64:c3:eb:2a:0b:c8: fb:d2:95:54:20:b5:8a:da:7e:d5:9c:3f:4f:d9:4b: 95:13:20:3a:e3:3c:d1:63:9d:2a:cd:35:32:66:76: b9:5a:dc:45:2a:c5:6b:8a:e0:45:71:fd:be:11:66: 47:aa:a8:eb:15:8e:c5:e7:4e:b1:00:a8:8d:a5:c6: 89:e3:30:b4:be:3a:58:00:c5:ef:b2:95:20:be:e8: ff:49:5b:62:ac:38:91:3e:6a:b4:2a:d6:e4:5b:61: c7:dc:af:5b:63:fb:b8:e4:95:3f:04:28:67:fe:a6: dd:0e:ee:60:9d:c0:91:31:e4:29:27:fb:21:51:4a: 57:73:b1:5c:8c:99:8b:26:0a:30:c9:5a:1b:69:b7: e3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2A:36:11:C2:A6:9B:90:FE:80:D4:D9:15:4C:BC:40:32:10:C9:79 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:42:7a:ae:c1:8e:36:4d:9f:1e:6c:ba:99:e7:70:e2:be:88: 98:f0:07:c6:95:e8:e1:07:a9:7d:9c:b1:a2:d0:e9:04:72:a5: 5c:0b:df:4b:7e:3d:a9:f9:f6:7f:97:d2:9c:f2:fb:ca:ac:0c: 72:14:6c:86:b0:46:5b:56:d4:51:71:28:c1:a4:a6:09:85:8e: 49:d5:cc:b5:a4:0a:8b:c0:80:29:64:f5:d9:97:94:05:b7:4d: 61:52:3f:c6:34:74:1f:91:79:95:40:f1:fc:5c:ed:5a:b5:74: 41:59:78:ff:a0:fd:b7:ae:29:2a:fc:24:a9:1a:76:d6:1c:30: 47:4c:b8:a8:f0:88:69:38:bc:f9:c0:28:7c:12:84:65:30:22: 27:05:ea:fe:f9:60:d5:00:4d:92:b3:90:9f:66:36:bc:79:f9: 6e:30:81:a5:55:d7:48:e3:dd:f9:08:d2:03:88:da:dc:89:57: bc:8d:39:8b:35:0c:1b:39:37:74:e2:6f:05:06:f9:d0:cd:49: 2a:59:5d:08:1d:e0:9b:38:1a:38:bd:a4:5c:78:07:88:c0:5a: 39:79:c0:20:e2:ea:98:63:bc:62:20:ee:b5:48:f3:bd:31:13: a4:dd:f1:49:9b:15:68:7b:85:ae:83:e3:53:11:24:f9:2d:00: 0e:d0:6a:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eNNEkii+agZqzeD+spFqDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwNTEyMjIwMDM4WhcNMjYwNTEzMjIwMDM4WjAzMTEwLwYDVQQD EygyZDJhMzYxMWMyYTY5YjkwZmU4MGQ0ZDkxNTRjYmM0MDMyMTBjOTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZOxUmbcBVHyKLUiOnpuRkceTbfd r0ZSusbsZ0vudqiY/GKewgef222hlFBpkxyMZd3iepuDvwtDw9b+5YxiJaGRnJV+ wa/6V0yCLKsL4vKBIJWF/U2fcTzoKdytXQKTPrgaRbbjJaSxXJZCbag3G1pkw+sq C8j70pVUILWK2n7VnD9P2UuVEyA64zzRY50qzTUyZna5WtxFKsVriuBFcf2+EWZH qqjrFY7F506xAKiNpcaJ4zC0vjpYAMXvspUgvuj/SVtirDiRPmq0KtbkW2HH3K9b Y/u45JU/BChn/qbdDu5gncCRMeQpJ/shUUpXc7FcjJmLJgowyVobabfjMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0qNhHCppuQ/oDU2RVMvEAyEMl5MB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUJ6rsGO Nk2fHmy6medw4r6ImPAHxpXo4QepfZyxotDpBHKlXAvfS349qfn2f5fSnPL7yqwM chRshrBGW1bUUXEowaSmCYWOSdXMtaQKi8CAKWT12ZeUBbdNYVI/xjR0H5F5lUDx /FztWrV0QVl4/6D9t64pKvwkqRp21hwwR0y4qPCIaTi8+cAofBKEZTAiJwXq/vlg 1QBNkrOQn2Y2vHn5bjCBpVXXSOPd+QjSA4ja3IlXvI05izUMGzk3dOJvBQb50M1J KlldCB3gmzgaOL2kXHgHiMBaOXnAIOLqmGO8YiDutUjzvTETpN3xSZsVaHuFroPj UxEk+S0ADtBqxg== -----END CERTIFICATE-----Generated at Wed May 13 06:14:17 2026 by rpki-client