$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json) Hash identifier: bwZ7GEIUmuUy+v29O0O6ZoJ4ZfV5WqPwyJbHucwKSyg= Subject key identifier: 16:C8:3B:F4:F2:90:02:CF:B3:05:61:FC:E8:C5:1B:10:73:4F:69:5B Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 019F8EA2D62294F7C48DA582F2FA7C22DEDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft Manifest number: 11D4 Signing time: Thu 23 Jul 2026 11:01:04 +0000 Manifest this update: Thu 23 Jul 2026 11:01:04 +0000 Manifest next update: Fri 24 Jul 2026 11:01:04 +0000 Files and hashes: 1: 0VXk7KxyGNBKoMzTYJumg3MOTyI.roa (hash: OtU0hvX0Vami3LTspcOPpks558imPCiHhI08tCDppGE=) 2: 8S2f0mMNsD7xxV7Ty48Yj_vXc24.roa (hash: bbt0XT/b4GdymMLqxvA9TWB6kuEszEh++apw2K2jMJo=) 3: 8w-IWf2lrtKPBt5qMeYx4vc1wIo.roa (hash: dmXJGV07k4HSNMpFyTWiKNXuMOxONHC1FWpZG/gmuUw=) 4: G4h8rFJLVLZr97fu8lrVsL3JcmU.asa (hash: BltfdMylTTyk8Lzr4zzCWmyb/LgExmTrLFGKeG9MrTA=) 5: IhYNTZJgx4so4FpKD-81FjTRwo4.asa (hash: vZua4msDl0h1MxiF8H+5zAJBnwaqTE2G0oh9vNDYJ9w=) 6: K91Q4lr9fT2_HRFw2W2qOJCfHfw.asa (hash: S3HIvCfdHY15prwrA39u7TMubC1wO10vPZ16cT0joHY=) 7: f3O6sqLkjbn5wGkjt-zZ9pH5ulA.asa (hash: ZE0HojT1vgLYkczZHItGqZlhhnH3kwJ0jcJgds7PX48=) 8: oY3gdIV4n1fET7NwlgUgM7E2A58.roa (hash: 2nAz8MBR7//dDF2SyuP46QueU8MfTaGR1aKMQkQHzBo=) 9: plt_9sG7wtfK-X5IzTU2wQwMo9k.roa (hash: jDkUUlBe6ISyETczyYHxkJjtY7ZB3oieA1Lcm/dcjlE=) 10: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: Nnhm5IiyTiF9QUgozS/3sUBiu6sZ0Fbftpv/HShfwXk=) 11: yjSw7EGM3wf6F5BYX5IX39SdB9g.roa (hash: W5I+pZbCjC+Wm9EnLWz0YxI4s3U4AfirO0LVljkjaHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:a2:d6:22:94:f7:c4:8d:a5:82:f2:fa:7c:22:de:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Jul 23 11:01:04 2026 GMT Not After : Jul 24 11:01:04 2026 GMT Subject: CN=16c83bf4f29002cfb30561fce8c51b10734f695b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:da:e5:cd:6a:99:15:fb:55:ef:23:2a:14:80: 45:a5:ef:7a:5b:41:20:c8:c3:a0:13:ce:93:73:07: 0c:1e:ee:d5:27:4c:4f:16:d9:9a:e3:d1:a6:80:6a: c2:a3:cb:40:d1:b1:57:c3:73:d3:e8:ff:17:53:17: ce:19:4d:1e:3d:f1:c7:a7:fe:3f:91:c9:c9:ec:ef: eb:1d:17:e9:a0:3e:11:06:5c:c1:1e:38:7d:aa:23: 34:9c:2a:f7:a2:d3:2f:67:25:f9:e8:ea:75:e4:c7: 0f:22:b0:c7:42:63:1e:69:a0:0e:ee:3a:f2:7f:99: 5c:8e:d7:15:b6:f1:a7:37:7c:c5:1b:5c:cd:eb:04: a6:c7:22:b7:30:2d:db:77:46:de:28:e7:b4:4f:09: 34:24:11:40:cd:aa:5f:d3:d9:e1:33:b1:1d:c5:95: 51:17:b8:fb:3b:ad:97:d2:b4:ac:90:68:7e:fd:34: a8:f3:97:70:07:0e:94:d3:16:a2:d4:37:93:b1:ef: 3b:27:d8:4c:6c:d1:99:57:2b:55:85:49:e2:c6:4b: af:0e:a5:e1:85:1d:40:2d:a7:8f:67:03:93:c5:c4: 1b:71:ec:59:24:e4:99:2a:7a:07:0b:5b:2c:a8:63: 15:77:c5:fe:92:25:5d:de:cb:c4:17:7b:ca:fb:0e: f0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C8:3B:F4:F2:90:02:CF:B3:05:61:FC:E8:C5:1B:10:73:4F:69:5B X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:24:fd:c2:fa:0c:ba:74:05:f1:ae:3f:62:52:c6:b7:db:ce: f0:be:72:54:13:3f:d8:ca:ed:09:14:a8:b6:69:c6:27:c5:e5: cc:29:0d:92:93:9e:2a:49:57:28:c2:39:4c:0f:43:b1:2e:b6: 79:37:cc:71:0e:ac:1e:83:b3:db:7e:d2:29:f9:b7:cf:0e:e8: fa:e9:de:80:cc:94:71:0f:89:23:87:f2:9b:fa:f7:fe:05:fa: df:51:e7:93:7f:fa:7e:51:6e:7a:ae:1b:ee:a1:5d:9e:6b:ea: 71:47:05:ed:e7:00:00:99:42:fc:39:cb:ab:3f:c8:fd:48:a1: 78:5d:d6:93:2a:65:9e:0c:c4:d7:88:82:0b:5e:ff:92:0a:d9: 4f:2d:d4:0b:b4:49:a8:1e:fc:48:ab:80:e9:c4:6b:45:ff:97: 7b:31:f0:24:68:24:9a:45:70:fd:61:35:37:6f:66:bb:fc:f0: d6:03:0e:af:f5:6b:52:06:76:3e:55:39:e2:12:92:b5:c8:9f: 86:31:cb:2c:78:47:1b:2f:61:29:d8:07:41:8b:dd:72:36:7a: 2c:bc:27:9a:8c:ab:49:29:9e:e9:fe:6b:c3:3a:27:34:dc:3a: a1:c4:de:17:72:cd:42:a0:61:ae:d5:6c:f2:c1:61:2a:37:db: ed:ae:4f:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+OotYilPfEjaWC8vp8It7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjYwNzIzMTEwMTA0WhcNMjYwNzI0MTEwMTA0WjAzMTEwLwYDVQQD EygxNmM4M2JmNGYyOTAwMmNmYjMwNTYxZmNlOGM1MWIxMDczNGY2OTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9rlzWqZFftV7yMqFIBFpe96W0Eg yMOgE86TcwcMHu7VJ0xPFtma49GmgGrCo8tA0bFXw3PT6P8XUxfOGU0ePfHHp/4/ kcnJ7O/rHRfpoD4RBlzBHjh9qiM0nCr3otMvZyX56Op15McPIrDHQmMeaaAO7jry f5lcjtcVtvGnN3zFG1zN6wSmxyK3MC3bd0beKOe0Twk0JBFAzapf09nhM7EdxZVR F7j7O62X0rSskGh+/TSo85dwBw6U0xai1DeTse87J9hMbNGZVytVhUnixkuvDqXh hR1ALaePZwOTxcQbcexZJOSZKnoHC1ssqGMVd8X+kiVd3svEF3vK+w7wlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbIO/TykALPswVh/OjFGxBzT2lbMB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyT9wvoM unQF8a4/YlLGt9vO8L5yVBM/2MrtCRSotmnGJ8XlzCkNkpOeKklXKMI5TA9DsS62 eTfMcQ6sHoOz237SKfm3zw7o+unegMyUcQ+JI4fym/r3/gX631Hnk3/6flFueq4b 7qFdnmvqcUcF7ecAAJlC/DnLqz/I/UiheF3WkyplngzE14iCC17/kgrZTy3UC7RJ qB78SKuA6cRrRf+XezHwJGgkmkVw/WE1N29mu/zw1gMOr/VrUgZ2PlU54hKStcif hjHLLHhHGy9hKdgHQYvdcjZ6LLwnmoyrSSme6f5rwzonNNw6ocTeF3LNQqBhrtVs 8sFhKjfb7a5P7A== -----END CERTIFICATE-----Generated at Thu Jul 23 19:04:28 2026 by rpki-client