$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: JvomhtenUBAolivjlWkDc/WAOZ0PCIeRWNJSr5iOhX4= Subject key identifier: BF:44:C9:BB:C5:2E:AC:51:1C:D8:5A:64:62:84:BB:30:F7:8A:60:2D Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019F905A11BF404BFFD173CBBB73CF0BB16A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 19E4 Signing time: Thu 23 Jul 2026 19:00:49 +0000 Manifest this update: Thu 23 Jul 2026 19:00:49 +0000 Manifest next update: Fri 24 Jul 2026 19:00:49 +0000 Files and hashes: 1: 0kNz9-JWERt3abzlaJOUE4NTJO4.roa (hash: 67hyPCPSnaEobnQIj1pQT7pIpy62/SUOtS+52kq/tjI=) 2: 4TKo4hpIgeOaUC4msoLXj79brZw.roa (hash: nEKkT5nayoB6X5C9mnM1stExdpwEue5SpN4elNaZnJg=) 3: HIrm6sRoTksRGtSnmk5VERHaRBI.roa (hash: 5kYVCcz0PvuIcAwPfpXwqKs3H5+iF2EWwV43kAN9Zh8=) 4: Lc1GuVjjApGSdMl5cDRvuL9C63E.roa (hash: j2ZLFcBgyK8+6PD7sIFfqmq1q2LME6wfEuotMkEwgLw=) 5: TBbb52loGUfoyqY4IjSCSNt13F8.roa (hash: 7gXhXE88Dz/LUX1AsHHfFQZ/lUsqoBgQIbupC+dBqCA=) 6: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: RCNQoE4rep8EXqXSDXbl7uFe947ECGtE8ffoaUVCa6U=) 7: bwp5bXEghgHr7EYl0KNAFE7mc20.roa (hash: 7u7Zj5oFaGyCqot4J3MzTBt5vDDbem5Ae4vFNHbppfk=) 8: jKcEmRIDilRbegMXDvNfe4imvAk.roa (hash: Z/j4k2QApdwbYRv/hX0sWoy2nITxJs8LZ19RK808A/E=) 9: kAV42zy5ItGrvvbv1krId_7HV5A.roa (hash: yhIVNCh19TC+CSc7taPbV70ViFKCn6sP5Y0H3vfQEDc=) 10: nntHTPnh88EzY_e3kkkRQsK5w7M.roa (hash: aZV+AItfqgNQSbmNx8IbkbUfKGk65poULNn0lqPwxbM=) 11: sZoONX-atX44GreUxrMqc6C9sFQ.roa (hash: OXwYQmgqP66zyYHOv7k9Apd3i8xq7uri5BBqPLyj09A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:5a:11:bf:40:4b:ff:d1:73:cb:bb:73:cf:0b:b1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Jul 23 19:00:49 2026 GMT Not After : Jul 24 19:00:49 2026 GMT Subject: CN=bf44c9bbc52eac511cd85a646284bb30f78a602d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:16:c5:48:a8:e9:0f:89:19:18:5a:0f:de: 62:8a:3a:c2:96:ad:77:81:7e:7b:00:2b:af:c9:a0: d3:59:3f:44:7d:aa:4a:55:e2:90:9f:d7:36:dc:5e: b1:7e:a5:44:77:3a:c2:5b:1a:0b:ee:9d:8f:15:12: 8f:c4:1f:e2:8f:42:08:c6:29:d2:f9:de:64:e3:65: 4e:d7:59:2e:69:5c:ff:7a:04:5f:e4:c4:4f:e0:2a: de:01:55:8b:32:26:ba:d6:73:f3:52:6c:97:b3:3a: b1:dd:d5:48:32:9b:91:1a:92:a3:2d:15:7b:be:d9: 7c:b1:89:35:87:e6:46:06:f4:c4:a5:93:f6:1c:25: a9:02:ad:66:09:5d:9c:a3:e8:f5:7f:5a:eb:42:13: 17:89:da:a7:02:0d:eb:e2:78:d0:57:d9:d5:fa:89: 82:7e:84:09:2d:67:e1:1d:78:63:83:d3:54:65:e1: 5a:8e:89:3a:9a:6f:0c:a8:14:cf:54:eb:25:f8:a9: ae:2b:46:a9:21:39:58:78:39:65:1f:fb:ad:dd:ca: df:24:8e:cd:ec:4f:eb:4a:6d:0c:51:a7:80:14:96: d7:9d:90:81:9e:69:20:bf:6b:7d:ee:c7:fa:9f:43: c3:7d:52:ed:33:fc:5f:52:52:70:07:49:02:79:9c: 77:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:44:C9:BB:C5:2E:AC:51:1C:D8:5A:64:62:84:BB:30:F7:8A:60:2D X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d1:ea:b2:df:45:38:d5:b2:37:7d:16:ac:ae:4f:eb:96:23: f8:6f:37:dc:07:05:fc:fb:a0:db:ad:38:2a:07:f8:07:c8:e0: 3a:5b:66:bb:be:bc:b7:3d:db:68:31:96:67:16:1c:58:e7:19: 65:a3:81:62:96:7c:38:fb:23:10:02:1c:c3:2e:b4:35:b4:a0: d4:46:01:59:fb:d2:8f:b0:6c:36:75:cf:30:d3:56:17:74:e7: 7b:67:ab:e8:a8:58:02:d9:ce:c2:25:08:b3:4d:66:eb:5a:96: 38:4c:92:12:42:19:5f:f1:58:2a:f9:ab:ae:0b:50:ae:57:41: 68:81:4a:0f:46:df:fc:b1:6c:6b:34:d8:89:9e:70:d7:83:8b: 2b:79:9b:5e:74:95:b9:5d:97:1d:3c:4a:53:fb:dc:e8:aa:df: 66:91:79:3e:e2:f6:78:ae:c2:39:07:4f:d0:7f:fc:3b:4e:95: aa:91:cd:1c:8c:ca:83:e7:6f:f5:70:cd:d5:8c:98:4a:74:f1: 7b:a4:cb:3b:21:cf:e5:c8:65:0c:59:08:d4:3e:2c:c7:ca:46: 36:68:2c:d5:2c:31:a7:7a:12:8e:5c:1b:55:58:be:60:ba:65: 63:4e:3e:18:ae:ca:43:73:be:70:0c:f7:08:a8:f6:1c:77:ad: e7:53:49:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QWhG/QEv/0XPLu3PPC7FqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjYwNzIzMTkwMDQ5WhcNMjYwNzI0MTkwMDQ5WjAzMTEwLwYDVQQD EyhiZjQ0YzliYmM1MmVhYzUxMWNkODVhNjQ2Mjg0YmIzMGY3OGE2MDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrkWxUio6Q+JGRhaD95iijrClq13 gX57ACuvyaDTWT9EfapKVeKQn9c23F6xfqVEdzrCWxoL7p2PFRKPxB/ij0IIxinS +d5k42VO11kuaVz/egRf5MRP4CreAVWLMia61nPzUmyXszqx3dVIMpuRGpKjLRV7 vtl8sYk1h+ZGBvTEpZP2HCWpAq1mCV2co+j1f1rrQhMXidqnAg3r4njQV9nV+omC foQJLWfhHXhjg9NUZeFajok6mm8MqBTPVOsl+KmuK0apITlYeDllH/ut3crfJI7N 7E/rSm0MUaeAFJbXnZCBnmkgv2t97sf6n0PDfVLtM/xfUlJwB0kCeZx3+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9EybvFLqxRHNhaZGKEuzD3imAtMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtHqst9F ONWyN30WrK5P65Yj+G833AcF/Pug2604Kgf4B8jgOltmu768tz3baDGWZxYcWOcZ ZaOBYpZ8OPsjEAIcwy60NbSg1EYBWfvSj7BsNnXPMNNWF3Tne2er6KhYAtnOwiUI s01m61qWOEySEkIZX/FYKvmrrgtQrldBaIFKD0bf/LFsazTYiZ5w14OLK3mbXnSV uV2XHTxKU/vc6KrfZpF5PuL2eK7COQdP0H/8O06VqpHNHIzKg+dv9XDN1YyYSnTx e6TLOyHP5chlDFkI1D4sx8pGNmgs1Swxp3oSjlwbVVi+YLplY04+GK7KQ3O+cAz3 CKj2HHet51NJbw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:53:31 2026 by rpki-client