$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: iM0nB0MKrS1DoU+N+f6v7mqdKnYm1SIEii58d1Gfy1A= Subject key identifier: 8D:56:9B:6F:06:DF:CB:10:DF:C7:E7:40:C9:77:25:78:E6:63:24:18 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019F90234558FE828869D6936D98EE9DCB99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 19FE Signing time: Thu 23 Jul 2026 18:00:58 +0000 Manifest this update: Thu 23 Jul 2026 18:00:58 +0000 Manifest next update: Fri 24 Jul 2026 18:00:58 +0000 Files and hashes: 1: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (hash: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew=) 2: B3OeokPEIHVspK8KnB4E2xEIauA.roa (hash: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4=) 3: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (hash: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os=) 4: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (hash: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs=) 5: KzdQ6MYBCl2ir-P86lDTtzaCt6M.roa (hash: h0pLqI3V5xBNJ0ejZS7hNIXSpXsgRqsYEzH47nvj1rY=) 6: PMhUU73xUVC7raWhgd5q_EKF038.roa (hash: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ=) 7: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (hash: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY=) 8: VWMQVWn-fMxdyDNhNc6f7Kyy09Y.roa (hash: Z09Yv6W87TB4u/fOV8oJx/K3Cijv1Xqstm0UVafkQZs=) 9: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (hash: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8=) 10: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (hash: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws=) 11: re_1WedxziUW08jNtG4jbnB22Hw.roa (hash: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4=) 12: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (hash: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: FXwpNzcq3IAtFYJn+js9A5GG+EPBnOE1qE31HGAGon4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 18:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:23:45:58:fe:82:88:69:d6:93:6d:98:ee:9d:cb:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jul 23 18:00:58 2026 GMT Not After : Jul 24 18:00:58 2026 GMT Subject: CN=8d569b6f06dfcb10dfc7e740c9772578e6632418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:95:7b:31:18:ce:14:91:6c:f7:13:f0:cb:0f: 54:64:9b:7c:20:72:59:3a:0e:41:a6:31:83:b5:fa: 5d:ef:1b:04:9e:7d:5e:29:b3:ef:e6:e3:27:63:ba: bb:55:5c:b7:50:da:96:b7:d1:06:fa:1a:0e:20:c1: c7:92:e7:4c:1d:ec:26:bb:d6:1e:61:6d:64:dc:e3: 9c:1e:09:4c:d4:b7:75:b9:6c:07:4d:2e:2e:6c:e0: b4:41:01:03:8e:ee:d5:cc:79:59:51:7c:e8:c8:a8: b3:1a:93:bf:d1:8a:93:58:60:fb:a7:94:be:f5:da: 25:12:7e:06:71:1e:31:82:5f:79:7f:66:75:c8:97: 35:c0:d9:8c:bf:a0:44:21:e8:67:e2:5f:6b:19:09: 16:77:22:c9:d2:d2:46:55:4a:1a:68:50:29:8f:45: 24:85:03:ef:69:d3:45:ce:43:87:0e:96:fb:a4:32: 3e:94:61:5a:d5:ec:b6:fa:73:b9:30:8a:41:0f:de: 75:33:a7:da:b9:fe:68:f3:ad:73:2f:c8:23:1f:4b: 0d:d7:e6:f8:db:7e:80:30:f8:b0:95:0f:28:52:a7: 69:9e:5d:9d:c3:f8:3b:42:ca:b9:e1:5e:d1:0e:e2: fa:00:42:06:f6:47:1e:d6:f7:d0:98:d9:e8:a0:cd: 21:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:56:9B:6F:06:DF:CB:10:DF:C7:E7:40:C9:77:25:78:E6:63:24:18 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:49:52:b6:00:4e:ab:d9:44:a0:36:ab:31:37:42:89:88:6a: 0a:ef:81:ed:53:2d:e9:29:d4:1d:71:d9:5f:d4:0a:af:06:58: 63:65:b0:0c:91:5d:6f:7a:50:8f:95:52:20:4a:99:15:4f:a0: 84:75:71:b8:f4:27:7d:b1:85:81:eb:f5:d8:ee:8c:ad:6b:69: 06:6d:2a:bf:05:69:69:0b:84:1b:1b:ae:ca:d8:e4:f4:69:12: b1:48:ab:58:c8:a9:06:c0:d1:a2:99:32:56:e4:40:f1:d3:2f: ab:04:d5:dd:bc:96:de:09:ce:e1:9b:19:57:52:53:2d:ea:36: dd:f4:fe:99:2a:0c:fa:e6:14:ed:cc:ed:83:05:3f:08:e4:52: d5:42:82:71:a1:4e:57:d0:cc:30:3f:1e:40:f7:b2:b0:40:b5: 71:a7:e6:6a:24:49:e7:53:15:69:ae:9e:53:82:a5:77:44:24: b0:79:1c:0b:69:f3:a1:6d:27:56:9f:c5:2c:11:9d:45:1a:17: bf:ea:ec:c1:8a:22:a4:06:0f:33:5f:ad:12:6d:bc:e6:74:9e: b4:64:e4:02:c2:5c:c8:74:60:59:4a:3b:e9:b9:6b:eb:13:21: 15:19:42:8f:6c:9f:ba:26:52:30:26:2c:18:7c:9f:49:e3:51: 2b:9d:ef:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QI0VY/oKIadaTbZjuncuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwNzIzMTgwMDU4WhcNMjYwNzI0MTgwMDU4WjAzMTEwLwYDVQQD Eyg4ZDU2OWI2ZjA2ZGZjYjEwZGZjN2U3NDBjOTc3MjU3OGU2NjMyNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZV7MRjOFJFs9xPwyw9UZJt8IHJZ Og5BpjGDtfpd7xsEnn1eKbPv5uMnY7q7VVy3UNqWt9EG+hoOIMHHkudMHewmu9Ye YW1k3OOcHglM1Ld1uWwHTS4ubOC0QQEDju7VzHlZUXzoyKizGpO/0YqTWGD7p5S+ 9dolEn4GcR4xgl95f2Z1yJc1wNmMv6BEIehn4l9rGQkWdyLJ0tJGVUoaaFApj0Uk hQPvadNFzkOHDpb7pDI+lGFa1ey2+nO5MIpBD951M6fauf5o861zL8gjH0sN1+b4 236AMPiwlQ8oUqdpnl2dw/g7Qsq54V7RDuL6AEIG9kce1vfQmNnooM0hbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1Wm28G38sQ38fnQMl3JXjmYyQYMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUlStgBO q9lEoDarMTdCiYhqCu+B7VMt6SnUHXHZX9QKrwZYY2WwDJFdb3pQj5VSIEqZFU+g hHVxuPQnfbGFgev12O6MrWtpBm0qvwVpaQuEGxuuytjk9GkSsUirWMipBsDRopky VuRA8dMvqwTV3byW3gnO4ZsZV1JTLeo23fT+mSoM+uYU7cztgwU/CORS1UKCcaFO V9DMMD8eQPeysEC1cafmaiRJ51MVaa6eU4Kld0QksHkcC2nzoW0nVp/FLBGdRRoX v+rswYoipAYPM1+tEm285nSetGTkAsJcyHRgWUo76blr6xMhFRlCj2yfuiZSMCYs GHyfSeNRK53vQA== -----END CERTIFICATE-----Generated at Fri Jul 24 03:02:29 2026 by rpki-client