$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: ReKoVsyrbvPF3xFriUs1vGpCTq8bKoNI6FCT+EC9Tko= Subject key identifier: 54:BA:5D:33:66:07:D1:80:D0:5B:2A:E7:2B:90:00:CD:B0:BA:17:A2 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019D270416B6B7BBE2FDCAFE7700C7A45D91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 18A2 Signing time: Wed 25 Mar 2026 22:01:12 +0000 Manifest this update: Wed 25 Mar 2026 22:01:12 +0000 Manifest next update: Thu 26 Mar 2026 22:01:12 +0000 Files and hashes: 1: 2VGlQCljw9cFJl5EHzBeMDJwXVo.roa (hash: Do0oxRXzURqrwthzVRT/8OMjdF0dAGArF8nmDv/TCrU=) 2: Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa (hash: gQCxAX0kGUP6fOqE0f4xg6Y7BKr1YkDG2KCm3PY3vks=) 3: ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa (hash: 6ABtGMwyDO/6lM571vE9Iuqd9TQr+m5PP3ymm7KdDMo=) 4: FqgScginFUes_17Ndt6kdOrzAkA.roa (hash: a3G9kD/8P4BMkG64yuvOvu/MjxsZVk5qCgCtyW3lY6c=) 5: IsrXRGLVffEPsnHVbl_BeBHARaA.roa (hash: 2bYUOyrmy0HgRWN9bHIQfD3C31xnJN8Zzbysmp0r1Aw=) 6: T6pXE_xgE4WrCZgfLS6PwaHzerg.roa (hash: G4WSUskcjpTP61QhWQEI/av+RXa/41Ip20fNLeEJAoQ=) 7: VLiSP46DJX8Dog7Og_5_Z19OaAw.roa (hash: 3gWIgE8p9hzKRB2RaJcWZL2QSZhVwmUm6N+ESpdKpAQ=) 8: WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa (hash: XiM6tnhPeoo8/I0UsVcX68fQNBFdvSj5FK8MxmFwo94=) 9: b_n3Z3GxujBB68-zb1vahju6Fp0.roa (hash: fBmej85zCOTwohAZSrZlJvl4CdYQMz+WBefO+9bGgMc=) 10: leefmemMjsnYBH_PRIls4mGDQQg.roa (hash: H8hE7idzBRzXS/SDOwJGlem7diQp5JTlS92HhAhqaHk=) 11: oSUSV9XksEu-hj7frAtIPDI4QUc.roa (hash: Ba7z9fv3oVKNrP/ZNMw28ZH2Y9v/Nbz2kHCWUqIYg+s=) 12: sVlG1_wshTtHh3K3-dmfU3V-ohU.roa (hash: bMT/BHfnv5hKh+kUsN5whSknK8wJI4XccjCUKzZX56c=) 13: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: wWgMaDWr6A0hRT3IVPX0PbSPZZlqvjl7u5ZWu8WKri8=) 14: zGuXwu3v-M9bXZipAlRCLhWgY9Y.roa (hash: q3HTdT+bmIS7eJfWEweBp4+RgfhLQ35j5qT2Y42OjrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:04:16:b6:b7:bb:e2:fd:ca:fe:77:00:c7:a4:5d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Mar 25 22:01:12 2026 GMT Not After : Mar 26 22:01:12 2026 GMT Subject: CN=54ba5d336607d180d05b2ae72b9000cdb0ba17a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:90:af:32:56:5a:3f:4b:7b:b4:bc:4f:be:4a: c8:63:5b:25:09:fe:5e:08:28:b3:47:5f:4f:ab:0c: 45:07:d3:23:e5:73:85:7b:39:03:5e:5b:a0:a9:1c: a7:ec:b8:a0:f7:80:8f:44:f9:20:67:ef:5d:c9:85: 69:6d:6f:e3:db:bc:ab:2c:9e:0f:bf:0a:19:01:8a: 99:c6:cb:e3:49:3c:10:06:2d:f5:a5:92:a5:07:a3: 79:46:28:a2:b1:11:a5:8e:92:e2:ac:c8:e4:2f:8e: d3:26:ff:1d:fb:f6:37:94:62:fc:a0:2c:5c:b6:8c: 06:6f:fe:b2:ad:f5:28:12:ab:65:b3:e9:0b:79:e6: 30:bb:5f:e6:29:96:89:fc:3c:c7:4a:0a:4b:c2:0a: 12:2c:cd:78:12:80:b8:26:4f:44:c2:77:43:b3:7f: d7:ae:9a:85:43:72:63:2c:cb:63:e2:3a:fc:12:c7: dc:09:d0:3f:0c:78:43:2d:28:bd:0c:19:27:7c:56: 55:bd:3b:be:fd:c5:51:30:06:91:77:0e:53:7b:88: 7c:f1:40:d1:b0:33:91:f3:b8:e0:cb:13:da:21:b5: ff:92:6e:d1:a8:f2:dc:0d:a5:d3:91:65:4d:d0:a2: d4:cb:96:14:ea:bc:e5:cd:d9:5e:75:c1:79:b6:2f: 0e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BA:5D:33:66:07:D1:80:D0:5B:2A:E7:2B:90:00:CD:B0:BA:17:A2 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:8c:8d:43:ca:a8:73:c1:fb:d4:82:ee:3b:4c:72:81:5d:99: ee:fc:13:14:a5:8f:ca:a6:20:7c:93:9d:37:30:bc:da:6f:28: 95:a5:4f:e3:51:f7:96:90:5d:33:2e:88:11:a0:cd:bb:1f:c5: aa:2e:73:87:e9:b6:77:b7:b3:06:d3:88:4f:21:9c:34:fe:d7: 57:ec:f0:64:50:0b:d2:78:0f:e2:65:9a:9e:61:4f:c8:09:be: 65:09:f0:90:93:de:28:d6:77:1a:51:38:cb:63:5d:53:c5:13: 93:8f:5d:2d:ae:c3:a0:9f:08:d4:04:d4:62:04:c3:48:ce:2f: 2a:b7:b3:23:ee:2d:f8:02:cc:f8:60:49:02:cd:e1:94:0a:76: 9c:50:d4:06:b8:8b:e9:f8:d8:e6:be:3c:3f:93:02:1f:98:e5: 87:e8:c4:2d:1d:6b:63:6d:5b:8f:ee:15:1d:b1:a9:8a:c8:07: bb:ca:e5:96:c0:5c:c4:83:7a:ed:91:bb:0f:e9:ec:18:ed:b1: fe:e5:c4:52:d7:18:8d:a7:e0:8e:d3:7a:d4:60:b4:f8:c8:e9: 2e:29:e1:1e:15:6e:9d:ee:4a:ba:17:46:6b:15:96:08:08:83: 7d:ab:39:7f:ad:4d:73:76:47:98:62:a2:b6:22:2f:75:41:e8: 01:ff:3c:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nBBa2t7vi/cr+dwDHpF2RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwMzI1MjIwMTEyWhcNMjYwMzI2MjIwMTEyWjAzMTEwLwYDVQQD Eyg1NGJhNWQzMzY2MDdkMTgwZDA1YjJhZTcyYjkwMDBjZGIwYmExN2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZCvMlZaP0t7tLxPvkrIY1slCf5e CCizR19PqwxFB9Mj5XOFezkDXlugqRyn7Lig94CPRPkgZ+9dyYVpbW/j27yrLJ4P vwoZAYqZxsvjSTwQBi31pZKlB6N5RiiisRGljpLirMjkL47TJv8d+/Y3lGL8oCxc towGb/6yrfUoEqtls+kLeeYwu1/mKZaJ/DzHSgpLwgoSLM14EoC4Jk9EwndDs3/X rpqFQ3JjLMtj4jr8EsfcCdA/DHhDLSi9DBknfFZVvTu+/cVRMAaRdw5Te4h88UDR sDOR87jgyxPaIbX/km7RqPLcDaXTkWVN0KLUy5YU6rzlzdledcF5ti8OdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFS6XTNmB9GA0Fsq5yuQAM2wuheiMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuoyNQ8qo c8H71ILuO0xygV2Z7vwTFKWPyqYgfJOdNzC82m8olaVP41H3lpBdMy6IEaDNux/F qi5zh+m2d7ezBtOITyGcNP7XV+zwZFAL0ngP4mWanmFPyAm+ZQnwkJPeKNZ3GlE4 y2NdU8UTk49dLa7DoJ8I1ATUYgTDSM4vKrezI+4t+ALM+GBJAs3hlAp2nFDUBriL 6fjY5r48P5MCH5jlh+jELR1rY21bj+4VHbGpisgHu8rllsBcxIN67ZG7D+nsGO2x /uXEUtcYjafgjtN61GC0+MjpLinhHhVune5KuhdGaxWWCAiDfas5f61Nc3ZHmGKi tiIvdUHoAf88aA== -----END CERTIFICATE-----Generated at Thu Mar 26 05:18:32 2026 by rpki-client