$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft File: XGsMABqZq2KW4kIXO_fn_c8DwBk.mft (raw, json) Hash identifier: 7BOg6wj5sUvUpupmV9kc7qy+jBG4LZpshcpLAo4lEQA= Subject key identifier: 71:05:15:05:00:C8:C3:D4:A7:AE:52:B2:52:55:CB:30:F5:88:AD:2F Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Certificate serial: 019E1DFE9FDFD7004A450F2156D2321C8CDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft Manifest number: 1198 Signing time: Tue 12 May 2026 21:01:26 +0000 Manifest this update: Tue 12 May 2026 21:01:26 +0000 Manifest next update: Wed 13 May 2026 21:01:26 +0000 Files and hashes: 1: 4_6jU2h65naygP3NnyjMqJJnZx0.roa (hash: s82jep9t/zYfm07E1BciJjoxkGYTNgdmOJWV+bXV2Qs=) 2: 695CEvCWtd68HcEQ1to_g8bmma8.roa (hash: R7zsyfBzCTHymA5dn78KZaAHJABwh3m1BT2rT0cZOio=) 3: DZ0MP-yB-k0XdclRi6GSHev-8UI.roa (hash: OLquFioTpRnSbUlRpW26tAjmfT6pteRRo9SnbJKQNlA=) 4: K92PqBwvgEkNne5-6mAr80PsJAQ.roa (hash: 0FAqW4Pbg00noP1bhEV9Gx0WPZ0MqX9JAlOtTUXuyJw=) 5: QdihrKmCE1Rh70UAqVYhEifd0TQ.roa (hash: GFJCZGicC3djRWfTbGFC1Be0jS8YAjHvnwA28XAg/XU=) 6: RKY7lmdtb6IZif0ZQO2zEp317ek.roa (hash: MiEE6D3s9DZHsWmRS4CwT7MDH9wPZNxbpSI8mSRJ1pI=) 7: VllzRPRKTVqoKCv6C6XbpsT1mlw.roa (hash: AwMpFygRvq1JwWMWPLbmaZCSHpec1V7IeWXb7LTJvto=) 8: WVnu4rOAM4bAGwLH54E_u1zyp8g.roa (hash: 3TOzV7uynC12YqD5CfAhfDyAScX2wgYqrWrhBjCdAAQ=) 9: XGsMABqZq2KW4kIXO_fn_c8DwBk.crl (hash: aJNYBchfbmreTiCfd+sMF2uGj7HuQojeG/kC4deLovg=) 10: XhmgK9k0SOsCS_OFfFf7ZMsuph4.roa (hash: NnQ4qNdBxaVb0sjnoqmY0qHl2F+ZeA8EdWA8FUpAnMU=) 11: aBRByi6HtqSTkTwS-fInKVGreVM.roa (hash: L+8L7FrVL2l9rPUgEQqLrjnJQ1XfFBQi0mPOySPHZwc=) 12: ak_zpBeCzF7k-sZZ4UqlvJ4hCyQ.roa (hash: B78IwndzlBG3qE9BrzBg3u/j7NoujFELRCBgQIuL/JU=) 13: d4Bwb6dLFku_UkOvAMMS7FUSUEQ.roa (hash: eeFJoaeGLxOiQz6cXzT6CRHE4Aq6RhN+PQxHj+Phf10=) 14: hzP1qnHmPnnJOM7e8mwB2JQgWlw.roa (hash: P7S5XXCI5WhORMniLgG3Xqv8lUXzGtRjkmzYHiVxmxw=) 15: jSTmw6QNVRai_EuoNhY73OP3VjE.roa (hash: AYD6OFv8HTxuycJJf0ziwoDHoVKLGuICS6c+LYT5M5c=) 16: mCy7hS8qB_vm_oJsB9qaLGKlYEs.roa (hash: Ul861aCSvme8oLj/mvAnopiu+aRS2VSuHznhSML8kVk=) 17: rN4NLaMID6DZ_1Tf-dsWVDuA2X4.roa (hash: 7gf462IZs1uEZ6uPb1SMqjZ8MS74g0QNcTk84kmywms=) 18: rjJfP-cMk7Eo1gcf4GJv-6fZ8wA.roa (hash: X60K0VdLBIECsdh4cUymksKwrOGj9pXkUyJRydUZqtU=) 19: sBXE0h-nfhY0aVSr0UrybyFD5aw.roa (hash: tM7b2uWuTencQIn+E0ctaZfEIO5WQmmj9VY8B6PPOxo=) 20: wTiLBx3d6nArSMvvuGONeX8tzoU.roa (hash: wWQ4VBFuaNpyEOuyC6Zr3NF5Y4tz4sd8I+MyslECmcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 21:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:9f:df:d7:00:4a:45:0f:21:56:d2:32:1c:8c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Validity Not Before: May 12 21:01:26 2026 GMT Not After : May 13 21:01:26 2026 GMT Subject: CN=7105150500c8c3d4a7ae52b25255cb30f588ad2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:db:b0:e2:fa:e1:8c:55:11:ff:e9:d1:e5:3c: 19:22:be:e9:bc:3e:fa:ce:73:99:11:49:d0:46:12: 98:81:e8:be:0b:11:80:cf:7e:b4:1b:7e:a8:2d:1d: 78:9a:ac:6c:65:0f:c0:9e:e5:91:bd:91:b9:26:33: 18:b1:d4:7d:b2:33:a5:94:a3:fd:cf:21:83:16:db: 02:b5:c5:e1:98:d9:ec:e0:82:56:78:15:f4:57:17: 24:04:6f:85:49:62:1d:bf:d3:b1:be:b0:9c:a9:12: 0b:90:53:29:0f:ab:81:dc:4c:22:af:1a:73:ee:ae: c8:17:6c:64:6e:65:1b:66:f4:29:61:e0:c3:81:26: 0c:1d:fe:97:d8:a9:8b:d3:29:13:0a:d0:9a:a3:0c: c7:d1:78:83:6c:96:cb:16:08:67:d9:3f:c4:08:77: 9a:c4:ae:67:09:b8:b6:da:be:f3:3e:1d:12:a4:9d: 08:32:08:ed:7c:23:0c:91:7a:61:89:4a:c3:89:0b: 0b:a9:0b:5b:b1:91:de:97:3c:61:26:88:bc:82:7e: 72:80:3a:9b:6c:19:aa:46:a5:9e:f1:f9:b6:6a:e8: 0e:be:0c:0c:c7:12:b5:ba:4f:fb:87:62:bc:92:ec: 52:81:32:0f:e9:00:a9:ff:f5:d5:bf:77:14:d3:8c: 6e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:05:15:05:00:C8:C3:D4:A7:AE:52:B2:52:55:CB:30:F5:88:AD:2F X509v3 Authority Key Identifier: keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:79:be:d2:c5:c3:eb:14:97:47:9f:0c:95:cb:55:d1:da:77: bc:e3:17:42:48:4f:28:28:04:4a:0e:8b:c3:e8:85:5c:7f:b3: 4e:bb:4a:e2:d9:a0:fe:8b:c3:9e:fb:d9:c4:82:eb:18:50:a6: fd:e3:51:77:29:3d:0a:b4:94:46:86:5d:92:38:fa:7a:f1:4e: d4:ca:06:80:6f:98:c8:f6:5a:0f:5a:85:3c:63:c1:09:34:50: ff:4f:20:1e:4c:38:1b:0e:bb:6d:5c:51:35:22:4c:b2:bf:e3: 0d:4d:f9:c0:d8:46:0c:94:52:69:e1:51:04:fa:26:20:a4:b1: 0b:c3:81:95:fd:de:02:61:63:fe:59:31:fc:19:bf:8e:dc:58: 97:cb:5a:d6:9e:0f:c9:2e:12:85:bd:3d:4c:b7:8d:7b:f9:09: 7c:f6:92:41:fb:9b:33:ef:9f:67:ac:ab:b7:be:78:87:cf:82: 59:a3:70:e6:fd:aa:31:53:31:d6:9e:e5:22:1f:ac:37:65:05: 3f:3b:27:65:e3:e0:b9:43:d2:89:6b:b5:ca:7d:b9:eb:ac:85: 8f:05:27:ee:5f:58:02:db:c8:f3:3d:c4:5e:58:83:59:8b:00: 22:23:24:41:23:11:db:62:5e:0e:2d:01:8a:86:c5:a1:ee:26: 55:e5:bd:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/p/f1wBKRQ8hVtIyHIzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw M2MwMTkwHhcNMjYwNTEyMjEwMTI2WhcNMjYwNTEzMjEwMTI2WjAzMTEwLwYDVQQD Eyg3MTA1MTUwNTAwYzhjM2Q0YTdhZTUyYjI1MjU1Y2IzMGY1ODhhZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjduw4vrhjFUR/+nR5TwZIr7pvD76 znOZEUnQRhKYgei+CxGAz360G36oLR14mqxsZQ/AnuWRvZG5JjMYsdR9sjOllKP9 zyGDFtsCtcXhmNns4IJWeBX0VxckBG+FSWIdv9OxvrCcqRILkFMpD6uB3Ewirxpz 7q7IF2xkbmUbZvQpYeDDgSYMHf6X2KmL0ykTCtCaowzH0XiDbJbLFghn2T/ECHea xK5nCbi22r7zPh0SpJ0IMgjtfCMMkXphiUrDiQsLqQtbsZHelzxhJoi8gn5ygDqb bBmqRqWe8fm2augOvgwMxxK1uk/7h2K8kuxSgTIP6QCp//XVv3cU04xukwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEFFQUAyMPUp65SslJVyzD1iK0vMB8GA1UdIwQY MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt YzE4ZTNjY2M3NDJiLzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3m+0sXD 6xSXR58MlctV0dp3vOMXQkhPKCgESg6Lw+iFXH+zTrtK4tmg/ovDnvvZxILrGFCm /eNRdyk9CrSURoZdkjj6evFO1MoGgG+YyPZaD1qFPGPBCTRQ/08gHkw4Gw67bVxR NSJMsr/jDU35wNhGDJRSaeFRBPomIKSxC8OBlf3eAmFj/lkx/Bm/jtxYl8ta1p4P yS4Shb09TLeNe/kJfPaSQfubM++fZ6yrt754h8+CWaNw5v2qMVMx1p7lIh+sN2UF PzsnZePguUPSiWu1yn2566yFjwUn7l9YAtvI8z3EXliDWYsAIiMkQSMR22JeDi0B iobFoe4mVeW9cw== -----END CERTIFICATE-----Generated at Wed May 13 04:52:30 2026 by rpki-client