$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: G1ZH9WgqueTKEBR5H7TyH1jwYhcFk/ktya8AmSai7Do= Subject key identifier: 96:B2:CD:09:59:44:A4:8B:67:96:4E:4E:96:F3:00:97:9D:B9:CA:5F Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019F921110B37853960C64DD137483D8DE3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 19FF Signing time: Fri 24 Jul 2026 03:00:19 +0000 Manifest this update: Fri 24 Jul 2026 03:00:19 +0000 Manifest next update: Sat 25 Jul 2026 03:00:19 +0000 Files and hashes: 1: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (hash: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew=) 2: B3OeokPEIHVspK8KnB4E2xEIauA.roa (hash: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4=) 3: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (hash: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os=) 4: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (hash: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs=) 5: KzdQ6MYBCl2ir-P86lDTtzaCt6M.roa (hash: h0pLqI3V5xBNJ0ejZS7hNIXSpXsgRqsYEzH47nvj1rY=) 6: PMhUU73xUVC7raWhgd5q_EKF038.roa (hash: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ=) 7: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (hash: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY=) 8: VWMQVWn-fMxdyDNhNc6f7Kyy09Y.roa (hash: Z09Yv6W87TB4u/fOV8oJx/K3Cijv1Xqstm0UVafkQZs=) 9: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (hash: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8=) 10: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (hash: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws=) 11: re_1WedxziUW08jNtG4jbnB22Hw.roa (hash: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4=) 12: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (hash: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: dil117PcsVH+ER5tnH93ycSSRYusX6kG3tYCRiGJYTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:11:10:b3:78:53:96:0c:64:dd:13:74:83:d8:de:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jul 24 03:00:19 2026 GMT Not After : Jul 25 03:00:19 2026 GMT Subject: CN=96b2cd095944a48b67964e4e96f300979db9ca5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:31:d5:e5:3b:46:81:ac:e8:47:a1:2e:2a:d7: bb:e7:cb:97:ee:b4:75:b4:dc:f6:38:1a:85:16:75: 0d:0a:ee:e1:56:26:7b:66:8f:5f:f1:2b:c3:56:2e: 3b:83:e9:7b:04:8f:53:0b:a2:f8:62:8f:9f:8b:62: 07:b7:23:2c:b7:36:25:14:97:58:24:3f:bf:c5:f1: 5b:50:db:ae:fa:a4:2a:b3:6e:d7:b3:a6:df:48:48: 74:71:39:48:cf:55:14:b0:57:81:71:f1:9a:54:21: 98:53:e9:55:c5:28:40:3d:30:93:d0:55:e8:fa:e0: 28:c6:e0:24:92:90:d1:46:6c:a9:ce:79:74:dc:f0: 66:93:9f:99:63:32:71:84:96:66:c2:0d:23:44:97: 5d:24:d9:7d:57:51:2c:0d:4e:65:d0:1c:a2:62:3b: 7b:54:76:2f:4e:3e:da:0c:eb:f5:db:a7:30:39:64: ac:7d:97:8a:23:ce:78:fb:aa:38:49:89:b7:dd:60: e5:5c:69:1a:a7:b9:e4:05:09:ef:51:52:f1:99:1f: 13:78:a3:cd:d2:65:c6:7f:a2:7a:74:e7:94:15:c5: 65:59:70:fe:a8:55:98:7c:57:11:4e:68:e3:63:5a: c5:b6:f1:a2:ed:92:0f:7b:cd:dd:a4:87:e8:cf:0d: 6b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B2:CD:09:59:44:A4:8B:67:96:4E:4E:96:F3:00:97:9D:B9:CA:5F X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:be:95:37:1c:93:d1:94:71:52:63:16:79:25:f5:52:e8:1d: d9:42:23:8d:e4:55:2f:c4:9c:77:5f:c1:d0:74:54:3b:aa:30: d4:f5:58:bb:d6:b9:bc:e0:49:7b:94:4c:a5:d3:e1:b3:26:80: 37:30:fa:ce:9e:d1:5f:9b:9c:0c:09:8e:a0:c6:c9:d3:e6:02: 8b:0b:aa:86:3c:c0:3b:07:f7:f1:3b:b4:b6:13:a3:e4:e0:7a: a0:6c:08:89:57:08:83:9c:b7:ee:3a:98:16:80:3d:f6:65:d3: 92:0a:cd:07:9a:06:14:31:37:bc:de:af:92:bc:93:e8:6c:a4: 26:6a:60:81:21:ec:ea:a0:20:63:6a:71:01:3b:97:3f:90:b3: 04:7a:a3:87:09:02:48:44:27:83:f3:3a:c7:a9:52:73:19:f2: 3f:6c:d6:9e:d8:c2:88:b8:90:e5:11:4c:28:8a:fa:d0:ae:22: 83:13:9f:42:b6:50:29:f5:95:17:25:5f:26:94:c7:a4:fd:8f: 6d:6b:a3:09:0c:2e:0a:18:ec:b3:40:2d:a8:64:23:b0:37:1b: 3c:3e:8a:73:a2:8d:b4:8c:8c:87:0d:e8:05:04:8c:52:16:fd: db:e9:64:ed:47:7d:f0:ae:d4:6f:aa:26:e8:c6:6f:21:d2:6a: 34:9f:9c:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SERCzeFOWDGTdE3SD2N48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwNzI0MDMwMDE5WhcNMjYwNzI1MDMwMDE5WjAzMTEwLwYDVQQD Eyg5NmIyY2QwOTU5NDRhNDhiNjc5NjRlNGU5NmYzMDA5NzlkYjljYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTHV5TtGgazoR6EuKte758uX7rR1 tNz2OBqFFnUNCu7hViZ7Zo9f8SvDVi47g+l7BI9TC6L4Yo+fi2IHtyMstzYlFJdY JD+/xfFbUNuu+qQqs27Xs6bfSEh0cTlIz1UUsFeBcfGaVCGYU+lVxShAPTCT0FXo +uAoxuAkkpDRRmypznl03PBmk5+ZYzJxhJZmwg0jRJddJNl9V1EsDU5l0ByiYjt7 VHYvTj7aDOv126cwOWSsfZeKI854+6o4SYm33WDlXGkap7nkBQnvUVLxmR8TeKPN 0mXGf6J6dOeUFcVlWXD+qFWYfFcRTmjjY1rFtvGi7ZIPe83dpIfozw1rpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJayzQlZRKSLZ5ZOTpbzAJeducpfMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH76VNxyT 0ZRxUmMWeSX1Uugd2UIjjeRVL8Scd1/B0HRUO6ow1PVYu9a5vOBJe5RMpdPhsyaA NzD6zp7RX5ucDAmOoMbJ0+YCiwuqhjzAOwf38Tu0thOj5OB6oGwIiVcIg5y37jqY FoA99mXTkgrNB5oGFDE3vN6vkryT6GykJmpggSHs6qAgY2pxATuXP5CzBHqjhwkC SEQng/M6x6lScxnyP2zWntjCiLiQ5RFMKIr60K4igxOfQrZQKfWVFyVfJpTHpP2P bWujCQwuChjss0AtqGQjsDcbPD6Kc6KNtIyMhw3oBQSMUhb92+lk7Ud98K7Ub6om 6MZvIdJqNJ+cUQ== -----END CERTIFICATE-----Generated at Fri Jul 24 05:37:28 2026 by rpki-client