$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: 2PgwujIjhAhTWrhiynQijrdyrVBfeGhh1gVU/28Pwx8= Subject key identifier: 5A:EA:26:60:AE:BB:34:7D:6C:27:C2:9F:38:13:66:EC:4C:12:76:46 Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019F946D8BFB667F9B8682836377B2CA1D6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 158A Signing time: Fri 24 Jul 2026 14:00:34 +0000 Manifest this update: Fri 24 Jul 2026 14:00:34 +0000 Manifest next update: Sat 25 Jul 2026 14:00:34 +0000 Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=) 2: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=) 3: 7tK-Y_2zDn6v9bsNxgC2WC7pK58.roa (hash: cLZskeRMwGxHkUDQXpA7UBDzbVsdE10cl/owbtiDKLo=) 4: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=) 5: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=) 6: _XQtBPNeW_iuy40orAGtRGhMTSk.roa (hash: LAWDSlOuHdvhK5NcbfNOkabxOshrkg3NCFkUAyd9zsY=) 7: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=) 8: c0DX6GY3TX9xmWCZpKdJEnw99zA.roa (hash: +8IkCXO7va3zumQ/zB3m5nLEyKPvgB/ye9epdlLzV9o=) 9: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=) 10: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: cRMOSlHhBNiqXASYITnOv+PKjBTZZ3l9eI7KVFJ+8x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:94:6d:8b:fb:66:7f:9b:86:82:83:63:77:b2:ca:1d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Jul 24 14:00:34 2026 GMT Not After : Jul 25 14:00:34 2026 GMT Subject: CN=5aea2660aebb347d6c27c29f381366ec4c127646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:21:f6:7b:de:69:18:91:65:83:d3:c2:e6: 87:48:4b:d0:7d:36:d6:64:ba:eb:a5:a5:ff:d5:d2: da:87:6a:ed:e4:b3:89:64:46:33:63:d6:28:d8:7a: 57:9a:6e:df:99:54:cc:4e:bf:93:1e:2b:0b:6d:d6: ae:84:09:bb:3d:8d:1e:4c:d8:fd:c5:0e:1b:5a:31: 9b:08:82:c5:93:0d:1b:ec:6c:f7:f7:65:b6:91:df: 36:ac:94:65:a0:f2:d0:ba:c5:c3:cc:67:3c:69:98: 8b:63:a1:93:ee:23:9f:de:4e:6a:6d:81:08:e8:d1: 58:d1:a2:32:84:45:ef:5d:9e:d3:70:f8:27:05:3f: f1:56:18:72:ca:18:09:63:37:70:dc:53:e4:5e:62: 68:12:bd:f3:5b:8d:3d:5c:b1:88:2e:11:e8:ed:bc: 30:7c:b5:24:9d:6c:29:91:8a:9a:d1:28:28:74:69: 96:ed:0e:7b:44:e0:3b:a0:78:5f:bb:4b:2f:f9:da: 46:3d:80:b4:8e:16:0b:33:63:a9:d8:f8:7f:71:6b: e3:7e:2a:fb:2a:d6:e9:b2:94:aa:f6:72:ef:f6:e8: b7:da:55:fd:af:08:7b:a1:77:79:b7:7e:cd:ff:b7: eb:d0:db:12:27:45:2d:09:46:24:06:31:99:9f:79: 01:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EA:26:60:AE:BB:34:7D:6C:27:C2:9F:38:13:66:EC:4C:12:76:46 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:30:ab:f6:88:f6:ce:ef:41:e1:8e:a7:36:8f:2f:69:f4:c7: 7e:8c:cc:32:34:32:91:e9:f8:e9:91:9b:44:da:03:47:60:ef: c2:a9:3f:75:dc:65:bd:ba:37:fd:2a:1e:bf:48:d6:2c:48:df: a7:02:7a:4f:12:36:5d:38:3a:40:56:2a:15:6e:7a:76:fc:34: f9:4e:9e:9b:3c:0a:15:bf:61:69:af:02:c0:41:57:b9:d5:71: 55:82:7d:78:32:0c:1e:13:0d:cc:eb:cc:0c:bd:01:5b:c5:3c: e9:7e:73:a2:e7:14:9d:f0:b4:a4:05:e8:30:ce:19:89:c3:44: 0f:b4:38:39:1c:e4:34:91:b3:0d:3e:54:4e:ce:95:ef:a5:97: 50:d2:95:0e:de:cf:32:60:8e:98:d6:14:5c:e3:8e:74:01:9d: d7:3f:08:d9:1b:b5:54:84:08:0e:65:fa:57:12:3a:8a:29:61: 9d:3e:eb:76:8d:f4:c8:4c:a6:59:85:b9:9f:aa:04:9b:64:ee: 81:80:f9:19:a7:59:3a:b8:a5:73:34:8b:20:4f:e5:b2:54:ba: 75:e6:29:6f:c9:3f:dc:bc:b4:7b:47:e4:0b:7d:11:e3:aa:58: e4:51:72:bf:c8:bc:d0:05:43:a9:1f:c9:44:e2:ad:87:38:c9: 70:95:88:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+UbYv7Zn+bhoKDY3eyyh1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwNzI0MTQwMDM0WhcNMjYwNzI1MTQwMDM0WjAzMTEwLwYDVQQD Eyg1YWVhMjY2MGFlYmIzNDdkNmMyN2MyOWYzODEzNjZlYzRjMTI3NjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpQh9nveaRiRZYPTwuaHSEvQfTbW ZLrrpaX/1dLah2rt5LOJZEYzY9Yo2HpXmm7fmVTMTr+THisLbdauhAm7PY0eTNj9 xQ4bWjGbCILFkw0b7Gz392W2kd82rJRloPLQusXDzGc8aZiLY6GT7iOf3k5qbYEI 6NFY0aIyhEXvXZ7TcPgnBT/xVhhyyhgJYzdw3FPkXmJoEr3zW409XLGILhHo7bww fLUknWwpkYqa0SgodGmW7Q57ROA7oHhfu0sv+dpGPYC0jhYLM2Op2Ph/cWvjfir7 KtbpspSq9nLv9ui32lX9rwh7oXd5t37N/7fr0NsSJ0UtCUYkBjGZn3kBMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrqJmCuuzR9bCfCnzgTZuxMEnZGMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjCr9oj2 zu9B4Y6nNo8vafTHfozMMjQyken46ZGbRNoDR2Dvwqk/ddxlvbo3/Soev0jWLEjf pwJ6TxI2XTg6QFYqFW56dvw0+U6emzwKFb9haa8CwEFXudVxVYJ9eDIMHhMNzOvM DL0BW8U86X5zoucUnfC0pAXoMM4ZicNED7Q4ORzkNJGzDT5UTs6V76WXUNKVDt7P MmCOmNYUXOOOdAGd1z8I2Ru1VIQIDmX6VxI6iilhnT7rdo30yEymWYW5n6oEm2Tu gYD5GadZOrilczSLIE/lslS6deYpb8k/3Ly0e0fkC30R46pY5FFyv8i80AVDqR/J ROKthzjJcJWIgA== -----END CERTIFICATE-----Generated at Fri Jul 24 16:19:51 2026 by rpki-client