$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft File: XPMa_DbLaVUAf-l-1KXjGF0icbo.mft (raw, json) Hash identifier: diuVSP3UX7uN6NZpwF/2iw01cNdkSwPv0H0mQbHfkyc= Subject key identifier: 6F:55:FE:10:63:8E:61:61:1F:64:66:19:4D:52:4B:92:3F:DB:F3:C1 Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 019F91DA71622191E29C24BFABF6BA03D261 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft Manifest number: 19DF Signing time: Fri 24 Jul 2026 02:00:39 +0000 Manifest this update: Fri 24 Jul 2026 02:00:39 +0000 Manifest next update: Sat 25 Jul 2026 02:00:39 +0000 Files and hashes: 1: 1-dAYLfzEcuSnLWMiLXXSdIwT4rU.roa (hash: WhA4jtvtbE79AQa3IJODloRRuW4QHZIWAX/A32JL7m4=) 2: GOmV_75Dv1jwn9wiVioc2BSPZTo.roa (hash: pRTwblvRoqzlcA6ZsWJlwN1cr9uhPXOkl31rFqoTMf8=) 3: NklSIVNcNIWeMyDnmkM31BBhz1c.roa (hash: UKSW2BDTyMNTJDzhPRFU+Wzj1R5uLkgmHOPWx5CWEqQ=) 4: W4UHRrBQAt50eiIa0aXkDS2q-jI.roa (hash: wJtHrvfPjqzoQaYOzEJ/TBfUCsO/TaG3P+SEUHqq3Ig=) 5: XPMa_DbLaVUAf-l-1KXjGF0icbo.crl (hash: +RZHI8g91GWfbZphsdldz5LLM5L+a168EMs00XdYx9s=) 6: _5CTbNuX6fLN7jDqdj1oQp0kARc.roa (hash: Ha0LgykvjQP+9qGPn28IFIuJ0yQRLEpHe1bDMbGiuiE=) 7: _YOXL7ZxwGLyAFtXgmbGoGmsxw0.roa (hash: oYcEDHMjBaLjLdS2+cnHZQVD1ORy9f2L160BSTCgJ4c=) 8: itgrIp1NxpdNbAgMEeQKpbEmf5o.roa (hash: Js4lM2igXS9YqpQe0RjS4UXqcJs8/ISJx7M/fH+77eg=) 9: lxIA5T6ig6P82Z6FpI76sa5r9Hk.roa (hash: 3LHUUi612Oq28/k9MVav0SeJK2Lmj7BOxrV2xdjlDis=) 10: szXceV_8JO0f_7ooL6S8iduW9xI.roa (hash: xeJBYCAXDOSNVRxdgWGAZ1ipDc3y7H3KXIsJs1D2FK4=) 11: xnSiVa_Qi8Hl5xGaTydyCAcB4Q4.roa (hash: SWwZIzY753Ls9csZNqAI1seyxm1jJEeEibvAi3lb+6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:da:71:62:21:91:e2:9c:24:bf:ab:f6:ba:03:d2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: Jul 24 02:00:39 2026 GMT Not After : Jul 25 02:00:39 2026 GMT Subject: CN=6f55fe10638e61611f6466194d524b923fdbf3c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:44:0e:6a:c9:6c:88:c6:11:26:b2:61:fd: bb:63:13:fc:36:57:f9:70:4c:0e:32:72:80:e5:dc: 80:3c:ec:56:3f:60:5a:fe:dd:c3:16:13:4a:98:b2: cf:89:77:89:64:10:4f:b1:78:d8:d1:48:c8:c8:ce: ac:26:62:af:d9:af:74:e9:7a:eb:c7:90:9a:b8:9b: 55:73:5c:0a:b2:eb:8a:59:87:9a:81:1d:e6:a9:8c: 49:0b:6e:f0:15:63:71:87:59:7f:d7:38:8d:30:0a: a2:24:1a:0b:dd:9d:4a:b1:3e:7a:2c:4c:4e:2e:cd: 7a:6c:75:6f:18:59:58:96:92:f2:8f:3d:2d:cd:a3: 87:6c:5c:13:2b:28:50:3f:54:39:04:50:83:62:1b: 61:17:e7:75:4a:04:98:61:59:f5:cf:bd:0f:b5:43: 8a:f4:c7:e8:f8:82:2f:bb:bc:0c:24:04:e3:3d:9a: 37:69:1d:c0:84:a1:91:88:3f:bb:39:bc:4d:7c:74: 3f:94:f5:2e:55:c0:84:35:b0:3a:af:81:6f:49:3e: b4:b0:08:bb:ca:17:08:81:2d:65:e4:65:2d:b2:f1: c1:df:fd:76:ee:13:ef:4c:d5:c8:2b:9f:0a:46:a7: 76:0b:5d:1c:96:21:de:55:57:80:7b:4b:6c:c1:06: 79:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:55:FE:10:63:8E:61:61:1F:64:66:19:4D:52:4B:92:3F:DB:F3:C1 X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:6a:35:72:8f:c1:bf:08:ac:5e:9d:69:ec:48:75:22:55:8b: d1:36:6d:eb:f5:d3:0f:33:48:fc:44:3f:ee:32:df:a9:21:30: ee:64:da:8f:98:2f:d1:41:24:53:50:5f:77:06:2c:98:3d:ee: ef:76:52:4e:db:fc:9d:b6:2a:a3:58:73:91:d3:3c:7f:0c:9f: c6:09:20:20:aa:dc:3b:d0:9e:d9:e9:52:49:da:52:01:35:54: 4a:19:29:f0:67:3d:68:9b:c8:0e:2e:da:f9:84:f0:f9:73:80: d4:6d:c7:68:5b:ea:4f:46:e3:e2:d5:cf:63:1a:1d:30:20:3b: a4:7a:e1:75:aa:29:db:8d:e8:be:0d:b6:15:21:26:cf:07:9f: 1c:8d:1a:db:76:c6:9c:a1:0f:48:83:18:c5:bd:7e:e6:69:2d: 15:2b:4a:1a:04:c9:c1:7d:6c:6c:a0:df:02:de:f5:82:91:67: d5:51:58:7b:ea:cd:46:fb:5d:5a:75:fc:a3:ec:61:6a:46:ac: 57:42:a7:06:aa:b7:e8:86:5f:c6:b1:4a:44:00:db:7b:f9:13: 37:af:91:d8:15:ed:6e:ab:11:7f:be:46:6d:19:fd:a8:ed:e1: 80:02:6d:8f:0f:0d:bd:ee:47:19:d3:05:f9:ad:21:16:14:3e: a2:31:ce:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+R2nFiIZHinCS/q/a6A9JhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjYwNzI0MDIwMDM5WhcNMjYwNzI1MDIwMDM5WjAzMTEwLwYDVQQD Eyg2ZjU1ZmUxMDYzOGU2MTYxMWY2NDY2MTk0ZDUyNGI5MjNmZGJmM2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm1EDmrJbIjGESayYf27YxP8Nlf5 cEwOMnKA5dyAPOxWP2Ba/t3DFhNKmLLPiXeJZBBPsXjY0UjIyM6sJmKv2a906Xrr x5CauJtVc1wKsuuKWYeagR3mqYxJC27wFWNxh1l/1ziNMAqiJBoL3Z1KsT56LExO Ls16bHVvGFlYlpLyjz0tzaOHbFwTKyhQP1Q5BFCDYhthF+d1SgSYYVn1z70PtUOK 9Mfo+IIvu7wMJATjPZo3aR3AhKGRiD+7ObxNfHQ/lPUuVcCENbA6r4FvST60sAi7 yhcIgS1l5GUtsvHB3/127hPvTNXIK58KRqd2C10cliHeVVeAe0tswQZ57QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9V/hBjjmFhH2RmGU1SS5I/2/PBMB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQtNzM2ZDEyODg4Y2E4 LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmo1co/B vwisXp1p7Eh1IlWL0TZt6/XTDzNI/EQ/7jLfqSEw7mTaj5gv0UEkU1BfdwYsmD3u 73ZSTtv8nbYqo1hzkdM8fwyfxgkgIKrcO9Ce2elSSdpSATVUShkp8Gc9aJvIDi7a +YTw+XOA1G3HaFvqT0bj4tXPYxodMCA7pHrhdaop243ovg22FSEmzwefHI0a23bG nKEPSIMYxb1+5mktFStKGgTJwX1sbKDfAt71gpFn1VFYe+rNRvtdWnX8o+xhakas V0KnBqq36IZfxrFKRADbe/kTN6+R2BXtbqsRf75GbRn9qO3hgAJtjw8Nve5HGdMF +a0hFhQ+ojHOeg== -----END CERTIFICATE-----Generated at Fri Jul 24 05:35:14 2026 by rpki-client