$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft File: XGsMABqZq2KW4kIXO_fn_c8DwBk.mft (raw, json) Hash identifier: RkhfYxROdoU0TbXFAF9iL9qb8fwigS9BJYeGKqZb4Ys= Subject key identifier: 27:72:3A:A0:35:58:05:86:96:BE:2C:93:76:98:32:BB:98:3C:4D:00 Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Certificate serial: 019F8FEC46D2562FFC9352D5ED1C6DB5C838 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft Manifest number: 1265 Signing time: Thu 23 Jul 2026 17:00:54 +0000 Manifest this update: Thu 23 Jul 2026 17:00:54 +0000 Manifest next update: Fri 24 Jul 2026 17:00:54 +0000 Files and hashes: 1: 5ZCQHsgMK-jwvY3N_5znCxjD7ro.roa (hash: zOm6SpbKXPghZKa2K4Fg7RefMg5gXoX3D53Fi/1oNFA=) 2: DZ0MP-yB-k0XdclRi6GSHev-8UI.roa (hash: OLquFioTpRnSbUlRpW26tAjmfT6pteRRo9SnbJKQNlA=) 3: K92PqBwvgEkNne5-6mAr80PsJAQ.roa (hash: 0FAqW4Pbg00noP1bhEV9Gx0WPZ0MqX9JAlOtTUXuyJw=) 4: RKY7lmdtb6IZif0ZQO2zEp317ek.roa (hash: MiEE6D3s9DZHsWmRS4CwT7MDH9wPZNxbpSI8mSRJ1pI=) 5: VhdKFflL6wzVMXCQhX8bkLBALKo.roa (hash: GmQzzs1E/5GYPLQuRjYECvhEeGtOhpZPCBL21n8gXMM=) 6: VllzRPRKTVqoKCv6C6XbpsT1mlw.roa (hash: AwMpFygRvq1JwWMWPLbmaZCSHpec1V7IeWXb7LTJvto=) 7: XGsMABqZq2KW4kIXO_fn_c8DwBk.crl (hash: Om3Vb0s+fWWcwRlDh01E6mXGSDwPZjIghyc/FBBok+4=) 8: Ypr_IU6FhhK3lFvKQ-FjgPmS2jQ.roa (hash: DdSfe0amfsrQOV/JKPLiRl30tPO1LJ5nGi0Hibv6yU8=) 9: _7XaiiyBAJ5Eqd5vKuAqx4PW0hM.roa (hash: iqPKLFA+g5deNUkHvdEQM9uLDsaW9rYQtZs9LzN5kwg=) 10: aBRByi6HtqSTkTwS-fInKVGreVM.roa (hash: L+8L7FrVL2l9rPUgEQqLrjnJQ1XfFBQi0mPOySPHZwc=) 11: ak_zpBeCzF7k-sZZ4UqlvJ4hCyQ.roa (hash: B78IwndzlBG3qE9BrzBg3u/j7NoujFELRCBgQIuL/JU=) 12: d4Bwb6dLFku_UkOvAMMS7FUSUEQ.roa (hash: eeFJoaeGLxOiQz6cXzT6CRHE4Aq6RhN+PQxHj+Phf10=) 13: hzP1qnHmPnnJOM7e8mwB2JQgWlw.roa (hash: P7S5XXCI5WhORMniLgG3Xqv8lUXzGtRjkmzYHiVxmxw=) 14: jSTmw6QNVRai_EuoNhY73OP3VjE.roa (hash: AYD6OFv8HTxuycJJf0ziwoDHoVKLGuICS6c+LYT5M5c=) 15: mCy7hS8qB_vm_oJsB9qaLGKlYEs.roa (hash: Ul861aCSvme8oLj/mvAnopiu+aRS2VSuHznhSML8kVk=) 16: qHgbTLKhQlwyDn4W47Nn2XhrvEQ.roa (hash: e4vTmIa36MwpM5S5DLu7QHR1O71kqBkmpQlt4QzUxjA=) 17: rN4NLaMID6DZ_1Tf-dsWVDuA2X4.roa (hash: 7gf462IZs1uEZ6uPb1SMqjZ8MS74g0QNcTk84kmywms=) 18: rjJfP-cMk7Eo1gcf4GJv-6fZ8wA.roa (hash: X60K0VdLBIECsdh4cUymksKwrOGj9pXkUyJRydUZqtU=) 19: wTiLBx3d6nArSMvvuGONeX8tzoU.roa (hash: wWQ4VBFuaNpyEOuyC6Zr3NF5Y4tz4sd8I+MyslECmcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:ec:46:d2:56:2f:fc:93:52:d5:ed:1c:6d:b5:c8:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Validity Not Before: Jul 23 17:00:54 2026 GMT Not After : Jul 24 17:00:54 2026 GMT Subject: CN=27723aa03558058696be2c93769832bb983c4d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:88:0d:1c:82:99:a7:e7:b4:cc:4b:b0:2f:71: 05:88:0c:12:60:66:06:03:fa:d2:52:b6:78:1c:c6: d9:7c:96:f8:f3:ad:64:c7:e1:24:3a:54:1a:10:d8: 5d:01:5a:dd:00:e7:88:20:ca:f5:22:1e:a0:4a:d8: 7a:b5:6d:5a:43:03:44:c8:8d:29:ea:8f:33:d7:28: d8:ef:ac:aa:2b:3d:c7:b5:47:f2:24:ae:5b:83:c9: 2d:43:70:96:90:da:07:ef:8b:a2:22:ff:56:6f:67: 02:93:e1:df:a1:86:bf:f9:5c:c4:0f:30:2c:e2:8f: b5:33:b7:24:45:33:59:88:4c:99:88:00:4c:c1:25: 7b:6d:a7:33:73:ad:cd:10:fa:70:2a:2b:df:d1:80: 7f:4f:35:28:a2:07:55:c4:f6:17:59:2d:ee:fb:1e: 16:ca:85:57:66:fd:f9:62:5e:e3:2b:84:f3:18:08: 7c:ff:05:37:d5:26:29:3b:b5:1c:59:3f:fa:c7:25: 73:d9:08:12:b6:87:10:76:ec:8d:c1:50:1d:da:c5: 0f:6e:75:06:6e:79:cf:b2:14:10:eb:73:27:9e:38: f8:8b:9d:c3:c2:f6:11:4a:05:a2:0b:06:5e:e6:32: 13:45:ac:41:ed:71:8c:33:38:8a:f8:84:84:f0:fb: 86:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:72:3A:A0:35:58:05:86:96:BE:2C:93:76:98:32:BB:98:3C:4D:00 X509v3 Authority Key Identifier: keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:69:f9:ce:a5:a0:19:e6:1b:1e:7a:4a:a4:9d:c3:a3:e5:62: 7e:62:76:bc:14:61:fa:8b:17:f5:18:dd:a3:13:2e:7e:88:10: 1b:89:cd:b0:52:2b:9e:0f:af:56:ca:3c:4b:e5:8d:81:82:22: 05:30:4b:8d:6f:53:f2:d3:0d:6d:c6:be:c7:7e:b2:3f:92:46: 4f:42:48:d1:81:a5:94:ce:23:d0:19:74:cd:6c:e7:f3:b1:64: 66:30:2b:79:c3:94:36:1a:21:36:d4:cb:1a:f4:7d:b3:00:1d: 1b:12:2a:d6:5e:c4:19:69:9f:5c:5c:42:fd:5d:57:d1:d0:00: 8a:5e:ae:99:45:2b:d1:28:0e:16:25:d1:47:61:3c:74:43:9a: b5:99:f6:a9:28:7b:b8:d9:66:dc:cf:8d:fd:0a:51:b0:9e:76: 0f:97:a6:f7:69:f4:ee:2d:0c:b1:cc:4b:23:61:8a:2a:f7:cf: 28:4c:37:9d:ce:e6:b6:9c:d6:9c:cf:36:64:23:6d:19:f9:d2: b5:4d:ec:f8:1d:d7:19:57:50:a2:5c:9f:ea:af:3f:c6:31:33: eb:88:84:d0:50:1f:ed:fa:c4:2b:61:a8:73:17:88:9d:da:7f: 28:24:35:f3:ec:b3:55:db:6a:54:b7:2e:b7:28:38:19:bd:0c: 12:3f:b5:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+P7EbSVi/8k1LV7Rxttcg4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw M2MwMTkwHhcNMjYwNzIzMTcwMDU0WhcNMjYwNzI0MTcwMDU0WjAzMTEwLwYDVQQD EygyNzcyM2FhMDM1NTgwNTg2OTZiZTJjOTM3Njk4MzJiYjk4M2M0ZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ogNHIKZp+e0zEuwL3EFiAwSYGYG A/rSUrZ4HMbZfJb4861kx+EkOlQaENhdAVrdAOeIIMr1Ih6gSth6tW1aQwNEyI0p 6o8z1yjY76yqKz3HtUfyJK5bg8ktQ3CWkNoH74uiIv9Wb2cCk+HfoYa/+VzEDzAs 4o+1M7ckRTNZiEyZiABMwSV7baczc63NEPpwKivf0YB/TzUoogdVxPYXWS3u+x4W yoVXZv35Yl7jK4TzGAh8/wU31SYpO7UcWT/6xyVz2QgStocQduyNwVAd2sUPbnUG bnnPshQQ63Mnnjj4i53DwvYRSgWiCwZe5jITRaxB7XGMMziK+ISE8PuGDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdyOqA1WAWGlr4sk3aYMruYPE0AMB8GA1UdIwQY MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt YzE4ZTNjY2M3NDJiLzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmn5zqWg GeYbHnpKpJ3Do+VifmJ2vBRh+osX9RjdoxMufogQG4nNsFIrng+vVso8S+WNgYIi BTBLjW9T8tMNbca+x36yP5JGT0JI0YGllM4j0Bl0zWzn87FkZjArecOUNhohNtTL GvR9swAdGxIq1l7EGWmfXFxC/V1X0dAAil6umUUr0SgOFiXRR2E8dEOatZn2qSh7 uNlm3M+N/QpRsJ52D5em92n07i0MscxLI2GKKvfPKEw3nc7mtpzWnM82ZCNtGfnS tU3s+B3XGVdQolyf6q8/xjEz64iE0FAf7frEK2GocxeIndp/KCQ18+yzVdtqVLcu tyg4Gb0MEj+1hA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:42:41 2026 by rpki-client