$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: aLOKr4o0YbTF8fxVMM8/A66C6wK244iFS1MbeRHM1Lo= Subject key identifier: 90:D5:F7:74:BA:A3:51:85:C6:14:23:7C:1F:82:A5:9D:93:83:59:6E Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019F927F35630B566B7207286C5E15EFB021 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 1589 Signing time: Fri 24 Jul 2026 05:00:37 +0000 Manifest this update: Fri 24 Jul 2026 05:00:37 +0000 Manifest next update: Sat 25 Jul 2026 05:00:37 +0000 Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=) 2: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=) 3: 7tK-Y_2zDn6v9bsNxgC2WC7pK58.roa (hash: cLZskeRMwGxHkUDQXpA7UBDzbVsdE10cl/owbtiDKLo=) 4: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=) 5: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=) 6: _XQtBPNeW_iuy40orAGtRGhMTSk.roa (hash: LAWDSlOuHdvhK5NcbfNOkabxOshrkg3NCFkUAyd9zsY=) 7: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=) 8: c0DX6GY3TX9xmWCZpKdJEnw99zA.roa (hash: +8IkCXO7va3zumQ/zB3m5nLEyKPvgB/ye9epdlLzV9o=) 9: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=) 10: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: gPvdYYfjtGpah4TnqS6QAOGQkY29nLGZc6XcNuXikY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:7f:35:63:0b:56:6b:72:07:28:6c:5e:15:ef:b0:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Jul 24 05:00:37 2026 GMT Not After : Jul 25 05:00:37 2026 GMT Subject: CN=90d5f774baa35185c614237c1f82a59d9383596e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f7:48:37:5a:e8:d6:fb:57:d4:4c:fe:39:18: db:80:5d:1e:44:20:8e:18:27:8c:68:ca:2a:8e:7d: 4f:ce:7f:8d:99:e1:16:cf:ba:aa:79:1e:b3:b9:bf: 3a:2c:71:e6:a4:3e:3f:ca:a1:1c:d9:52:b4:38:5c: 21:e8:a1:66:49:1c:ea:59:84:ff:b8:17:90:8b:cd: a6:a0:81:90:a3:c1:13:2a:62:4f:13:94:43:57:64: d1:c9:3f:83:b3:cf:47:9e:9f:83:bb:c3:94:df:1c: 60:5f:1e:fe:94:30:c0:fa:df:02:8b:1e:d0:f3:a0: 0d:46:2a:26:88:d4:33:54:e1:d5:0a:a7:ea:95:ac: 0b:d4:b7:5e:03:5c:fa:59:d7:69:8e:97:93:8b:78: b8:20:26:9c:b3:96:14:26:02:ff:9b:12:db:72:26: c0:cd:e4:41:00:ca:fd:45:62:73:2d:5f:2b:75:fd: 5c:78:7b:c4:24:ef:26:67:d0:68:cb:f2:87:51:26: 9e:4e:15:b6:14:1c:88:c4:dd:99:fd:13:62:ed:15: f1:a8:0a:e9:81:f7:77:e8:1b:f4:c6:c7:93:04:7f: 0c:cc:d2:4d:bd:2c:90:d6:4c:7e:7f:95:e1:cd:00: 35:58:1e:f9:65:8f:06:54:14:8a:8b:1f:52:b7:72: 3a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D5:F7:74:BA:A3:51:85:C6:14:23:7C:1F:82:A5:9D:93:83:59:6E X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:fb:92:47:30:4b:63:90:77:96:f2:4d:25:9f:53:63:4a:39: 0a:5e:33:86:7f:f9:95:6a:2e:86:4f:d7:75:ca:a0:f3:ad:94: d7:70:d7:4f:64:81:86:e8:fa:87:b8:88:3a:4a:fd:e4:17:ed: b2:4d:2c:9f:66:67:d5:0b:2d:ab:09:f5:59:b4:29:9f:33:49: a5:21:6d:42:1b:aa:66:6d:d2:6d:7e:1c:ab:cc:56:77:4e:ba: 67:31:7b:e5:6e:62:b8:f4:e2:d1:22:b1:62:dc:3f:2c:6c:89: 0b:da:de:aa:fc:57:0d:cb:54:b9:83:86:f5:8f:9f:e5:40:21: 7d:29:b8:ab:fd:98:c3:34:06:ec:b4:84:9d:4a:7d:a6:c9:22: 13:c4:78:41:ec:15:69:22:7a:63:b6:e3:2b:04:fa:43:2d:41: 45:f0:31:61:98:bc:23:de:03:b2:c0:af:1c:b8:f6:99:1b:6f: 83:81:1d:36:35:71:06:ed:f3:ac:ff:c8:8e:f7:0f:08:7a:6f: 7b:78:7b:86:0e:84:54:a4:5c:c5:03:4d:48:c2:64:0d:bb:ac: 70:a9:51:5f:c5:81:de:91:17:db:f7:17:a2:42:2d:77:45:5f: 05:8c:ab:a2:4a:e2:d2:00:34:28:90:b5:76:fe:2d:a2:6e:ba: b6:af:5a:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SfzVjC1ZrcgcobF4V77AhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwNzI0MDUwMDM3WhcNMjYwNzI1MDUwMDM3WjAzMTEwLwYDVQQD Eyg5MGQ1Zjc3NGJhYTM1MTg1YzYxNDIzN2MxZjgyYTU5ZDkzODM1OTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufdIN1ro1vtX1Ez+ORjbgF0eRCCO GCeMaMoqjn1Pzn+NmeEWz7qqeR6zub86LHHmpD4/yqEc2VK0OFwh6KFmSRzqWYT/ uBeQi82moIGQo8ETKmJPE5RDV2TRyT+Ds89Hnp+Du8OU3xxgXx7+lDDA+t8Cix7Q 86ANRiomiNQzVOHVCqfqlawL1LdeA1z6WddpjpeTi3i4ICacs5YUJgL/mxLbcibA zeRBAMr9RWJzLV8rdf1ceHvEJO8mZ9Boy/KHUSaeThW2FByIxN2Z/RNi7RXxqArp gfd36Bv0xseTBH8MzNJNvSyQ1kx+f5XhzQA1WB75ZY8GVBSKix9St3I6CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDV93S6o1GFxhQjfB+CpZ2Tg1luMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfuSRzBL Y5B3lvJNJZ9TY0o5Cl4zhn/5lWouhk/Xdcqg862U13DXT2SBhuj6h7iIOkr95Bft sk0sn2Zn1Qstqwn1WbQpnzNJpSFtQhuqZm3SbX4cq8xWd066ZzF75W5iuPTi0SKx Ytw/LGyJC9reqvxXDctUuYOG9Y+f5UAhfSm4q/2YwzQG7LSEnUp9pskiE8R4QewV aSJ6Y7bjKwT6Qy1BRfAxYZi8I94DssCvHLj2mRtvg4EdNjVxBu3zrP/IjvcPCHpv e3h7hg6EVKRcxQNNSMJkDbuscKlRX8WB3pEX2/cXokItd0VfBYyrokri0gA0KJC1 dv4tom66tq9azA== -----END CERTIFICATE-----Generated at Fri Jul 24 14:40:17 2026 by rpki-client