$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json) Hash identifier: uc3UNrcHUMPmI82O7Q7xhNtNgPWoWJv9cqnekJdKoK8= Subject key identifier: 29:39:79:47:07:0E:35:51:9D:16:11:55:31:A6:99:D2:96:F9:B6:46 Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 019D2583948DDBBEB3ECAE35126AA06FBAC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft Manifest number: 1093 Signing time: Wed 25 Mar 2026 15:01:13 +0000 Manifest this update: Wed 25 Mar 2026 15:01:13 +0000 Manifest next update: Thu 26 Mar 2026 15:01:13 +0000 Files and hashes: 1: 0VXk7KxyGNBKoMzTYJumg3MOTyI.roa (hash: OtU0hvX0Vami3LTspcOPpks558imPCiHhI08tCDppGE=) 2: 8S2f0mMNsD7xxV7Ty48Yj_vXc24.roa (hash: bbt0XT/b4GdymMLqxvA9TWB6kuEszEh++apw2K2jMJo=) 3: 8w-IWf2lrtKPBt5qMeYx4vc1wIo.roa (hash: dmXJGV07k4HSNMpFyTWiKNXuMOxONHC1FWpZG/gmuUw=) 4: JaK5nEHPaQ0eg4QVia6pq3nQtT8.asa (hash: zedp2dasOOuQWUFRKt1kDWC26clgR3XYNTuR7fBJPis=) 5: K91Q4lr9fT2_HRFw2W2qOJCfHfw.asa (hash: S3HIvCfdHY15prwrA39u7TMubC1wO10vPZ16cT0joHY=) 6: P3ksiU6dR-MB5dwO9grj0b7EMXU.roa (hash: bIr8a6sPdRjwwSD8CC5kO5ixUwkkeuD93IkwxtBRKV4=) 7: V2_sT2jDOr8MNnfYkhj5mMdvMaM.asa (hash: wVzZdXFDBv7mOQErQUozopppuOlT1ZjyUfEdZpNO8vQ=) 8: kZOd5Cty9wDNke0SSipQ7xUfjXk.roa (hash: Nh7Xl6+9xgc8FPGMljfSPGluYgLxctUPi58GqbyJNFM=) 9: plt_9sG7wtfK-X5IzTU2wQwMo9k.roa (hash: jDkUUlBe6ISyETczyYHxkJjtY7ZB3oieA1Lcm/dcjlE=) 10: t1mwU24RWx_QtHlt8VAyAaicScc.asa (hash: qul+FoGF3pEOmc/vqfxBeRQ9gtI1SffvAcYIByELYPs=) 11: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: 1ll9csZm+sBfv34kQHGzMCegXlz5+nhJSScgUY8O7eE=) 12: yjSw7EGM3wf6F5BYX5IX39SdB9g.roa (hash: W5I+pZbCjC+Wm9EnLWz0YxI4s3U4AfirO0LVljkjaHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:83:94:8d:db:be:b3:ec:ae:35:12:6a:a0:6f:ba:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Mar 25 15:01:13 2026 GMT Not After : Mar 26 15:01:13 2026 GMT Subject: CN=29397947070e35519d16115531a699d296f9b646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8e:d4:9b:85:78:3f:f3:57:3e:b0:c5:07:40: 21:f4:ec:4b:a6:2d:0f:75:c3:16:88:c8:69:a0:c4: 2b:15:ef:4a:11:47:2e:20:42:c6:ee:7d:fd:ac:d4: c3:61:70:8a:70:fb:8f:ea:66:dc:5d:bf:2b:99:be: 50:4a:51:60:6d:e0:6c:76:61:0a:df:43:5a:0f:30: dd:92:b5:ff:4a:ba:a0:b7:e6:d5:5c:24:59:35:6b: fc:88:d4:4b:6a:64:0b:0c:14:94:f4:4d:67:e5:bb: be:ff:ab:64:41:46:9f:44:b1:ea:58:c3:80:80:5c: a5:66:0a:b5:b5:0d:78:7c:09:1a:c6:e6:87:12:7e: a3:70:29:13:20:c1:ef:06:f5:3e:40:c3:56:68:f0: b6:e0:dc:f5:64:54:52:2a:3b:42:bd:30:1d:33:e8: bb:da:63:56:20:f6:4f:17:d6:a7:84:66:54:bc:0b: 41:d0:04:c3:f1:01:88:d1:57:00:67:a0:28:f9:86: f4:d4:fd:d0:46:07:22:9d:72:9d:4a:9d:33:0f:dd: 96:45:c2:c0:05:b8:d7:e6:45:8c:49:82:c5:10:d8: d7:69:26:d3:af:42:a3:70:a6:b1:4d:7a:a9:de:34: b2:e9:c7:e1:1f:14:a4:8b:7d:d0:5f:8a:b9:a5:03: 57:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:39:79:47:07:0E:35:51:9D:16:11:55:31:A6:99:D2:96:F9:B6:46 X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:53:b3:c2:5b:4f:ea:51:f8:f1:c5:5a:46:74:66:a2:c4:9a: 7f:03:61:14:17:3b:fe:ed:5b:86:7f:fa:8a:46:36:c0:ed:05: b3:33:35:f7:f0:43:fd:4d:2a:24:38:99:96:55:23:33:55:ab: 7c:e0:80:ab:8f:06:50:57:f7:46:f9:a1:25:a9:ef:06:ef:b1: ba:e0:b5:5d:53:d8:56:74:f0:89:bc:5c:15:b3:2d:1e:8a:22: a0:54:c5:cf:e7:bf:0e:a1:6f:a8:23:ae:37:ee:35:60:f7:d5: 2e:8f:31:23:50:ad:53:46:c7:58:70:01:75:2b:1a:ea:58:e6: 3b:ea:10:24:6a:bf:0b:d8:42:a5:ff:3c:3b:e7:c8:d0:64:55: 19:9f:5b:b9:d8:07:d7:7c:a3:12:f5:be:48:6d:8b:d9:02:84: 1a:13:8a:a0:a6:19:2b:0a:9e:5e:bd:22:89:f0:83:13:0e:fe: 84:71:62:e7:fb:e9:20:af:0e:da:7c:ac:a1:e3:5c:87:2b:b8: 6a:31:44:ce:66:da:b9:e6:7d:7c:39:61:36:e1:3e:e4:4f:42: cc:24:09:45:c8:2e:05:7c:06:70:4a:5f:e7:fa:b6:35:8e:67: b5:e2:a4:8e:35:9f:ff:56:4a:56:5f:c5:c5:67:3f:2e:de:35: 35:50:85:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lg5SN276z7K41Emqgb7rEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjYwMzI1MTUwMTEzWhcNMjYwMzI2MTUwMTEzWjAzMTEwLwYDVQQD EygyOTM5Nzk0NzA3MGUzNTUxOWQxNjExNTUzMWE2OTlkMjk2ZjliNjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy47Um4V4P/NXPrDFB0Ah9OxLpi0P dcMWiMhpoMQrFe9KEUcuIELG7n39rNTDYXCKcPuP6mbcXb8rmb5QSlFgbeBsdmEK 30NaDzDdkrX/Srqgt+bVXCRZNWv8iNRLamQLDBSU9E1n5bu+/6tkQUafRLHqWMOA gFylZgq1tQ14fAkaxuaHEn6jcCkTIMHvBvU+QMNWaPC24Nz1ZFRSKjtCvTAdM+i7 2mNWIPZPF9anhGZUvAtB0ATD8QGI0VcAZ6Ao+Yb01P3QRgcinXKdSp0zD92WRcLA BbjX5kWMSYLFENjXaSbTr0KjcKaxTXqp3jSy6cfhHxSki33QX4q5pQNX3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCk5eUcHDjVRnRYRVTGmmdKW+bZGMB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1OzwltP 6lH48cVaRnRmosSafwNhFBc7/u1bhn/6ikY2wO0FszM19/BD/U0qJDiZllUjM1Wr fOCAq48GUFf3RvmhJanvBu+xuuC1XVPYVnTwibxcFbMtHooioFTFz+e/DqFvqCOu N+41YPfVLo8xI1CtU0bHWHABdSsa6ljmO+oQJGq/C9hCpf88O+fI0GRVGZ9budgH 13yjEvW+SG2L2QKEGhOKoKYZKwqeXr0iifCDEw7+hHFi5/vpIK8O2nysoeNchyu4 ajFEzmbaueZ9fDlhNuE+5E9CzCQJRcguBXwGcEpf5/q2NY5nteKkjjWf/1ZKVl/F xWc/Lt41NVCFtA== -----END CERTIFICATE-----Generated at Wed Mar 25 21:26:04 2026 by rpki-client