$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: ftH6d4ug89VEy6ItFH5e3eli0bq9Egn9OQEYKUFQPis= Subject key identifier: C8:E1:DF:E1:15:E4:9E:4E:05:3D:B1:57:2F:38:CD:40:2C:20:42:4D Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019F935C2F4C6AE22AA64153C4B3A4B85237 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 15AA Signing time: Fri 24 Jul 2026 09:01:59 +0000 Manifest this update: Fri 24 Jul 2026 09:01:59 +0000 Manifest next update: Sat 25 Jul 2026 09:01:59 +0000 Files and hashes: 1: 00oBTfnWdUzIvMRCoDAsBiu6TY0.roa (hash: 2cUMeBAWg056ZrP6AEZcwET0ohxuoFacoijmfCtjIBA=) 2: 4xVdYe0gRxz-uE-uYOx9q-_KZCk.roa (hash: AcFtBAJ8L85K3ER5s0exdifY6WeWVCgPuREiTI5SL1o=) 3: DaIOsBAUTocNWtQ487tz4YWipHI.roa (hash: N5y0DRMQWN6Af00LwwQvS7RkqXX2njRLKRlsnfJp9Do=) 4: RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa (hash: gac1U5GhiAAvsADQW6zIs1K5OYBIIdxw6YN3Rmr6cdo=) 5: Smw8KxULxNV1U3wUVaTgjVcAEN0.roa (hash: xaQVLJNe1R846qUde4wi8d2fl1ASkR/w9PUCNskHzmg=) 6: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 7: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 8: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: zRMyyuo5i83Bvo5FAOkyHgmFaV1CbhstWVzVq3LGf6Y=) 9: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 10: ofUllF-dWXHUPtc7vJnGioqPfCY.roa (hash: DKXn87ibX3uXQNhf8bxZ9LKgNiZi6MqVfnjhDNqP0fA=) 11: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:93:5c:2f:4c:6a:e2:2a:a6:41:53:c4:b3:a4:b8:52:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jul 24 09:01:59 2026 GMT Not After : Jul 25 09:01:59 2026 GMT Subject: CN=c8e1dfe115e49e4e053db1572f38cd402c20424d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ba:dc:cf:a0:f9:33:4f:1e:ad:5d:09:4a:52: 56:2d:49:4c:53:a9:e6:fb:9f:e5:19:d6:dc:64:69: b9:6e:3b:60:4e:cd:f9:e6:a4:c1:63:59:41:2d:1c: 22:8b:78:7f:d7:d4:b5:6f:77:9a:9a:48:ed:e2:ee: c5:7c:8f:5e:ca:3b:27:01:06:b1:19:2e:77:6e:3b: 36:0d:68:2c:2a:3d:f7:c1:40:5e:27:67:7b:21:06: 52:f9:5e:a4:74:de:68:8a:0a:bc:cb:02:2b:70:80: ea:5b:1f:0a:70:72:5e:7b:6c:5a:5e:35:9c:54:6c: 25:55:f0:f1:c3:cc:2a:74:c4:26:c0:11:8d:c7:6a: 99:ce:87:ae:bc:6a:cb:b7:90:6b:59:91:de:1d:0b: f0:1a:e0:a4:a6:96:8f:45:c9:0b:99:41:1b:77:01: ba:62:27:6e:b0:2b:90:7c:9a:78:89:df:58:b2:bf: 81:5b:fd:44:f8:13:90:f0:a4:9b:e5:34:c0:ff:90: 48:7c:2d:ef:1c:62:87:ba:a6:e7:d6:55:95:8d:4d: a4:19:02:4f:74:c8:8f:45:d1:4b:d6:28:9b:17:31: 41:31:30:21:bc:37:79:18:9a:bb:d8:b1:52:80:c9: f2:f8:9f:89:32:d6:46:ac:53:b1:6c:1d:51:9e:83: 37:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E1:DF:E1:15:E4:9E:4E:05:3D:B1:57:2F:38:CD:40:2C:20:42:4D X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a6:d2:a6:ea:61:83:8f:5c:e5:d7:d4:1d:2c:f2:5a:b2:a7: 68:9a:6a:82:9b:58:07:b8:23:c3:6d:cf:ae:f8:e3:17:42:9a: 71:14:e5:92:5a:81:94:80:fc:e1:7e:f0:09:2b:f6:11:a1:16: 16:3a:6a:31:06:1d:89:7d:5c:0f:a8:86:6b:c2:cf:cb:6e:77: bc:14:d1:07:02:bf:83:7f:7d:3e:77:00:d2:3a:a6:29:fa:d4: 93:01:18:c8:57:01:72:c8:6a:d2:84:c0:f9:02:fd:31:5a:0e: c9:49:7c:ef:6c:2b:46:b5:7d:74:ca:1b:8e:e9:bc:5c:c4:18: 2f:45:19:ef:0c:ae:ac:24:e7:aa:98:9a:09:45:57:dc:66:0c: b4:3d:74:06:ea:69:37:32:48:bb:94:75:6d:9e:49:34:2a:9f: 8b:a4:d4:11:b2:3a:49:19:e1:9b:10:01:6e:4b:c0:1d:8e:63: ee:3e:37:0f:94:1d:37:60:40:69:4c:e4:a8:86:1e:6f:2c:ee: 75:f3:f3:3e:c0:80:45:ce:48:16:28:46:97:b6:1f:16:aa:a3: 8c:48:a6:b5:52:86:d7:e2:c4:c2:e1:cb:a1:80:36:35:33:0e: 61:ef:c5:24:e8:19:2e:e4:f5:a4:50:f7:94:83:76:53:39:22: b9:3a:b1:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+TXC9MauIqpkFTxLOkuFI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwNzI0MDkwMTU5WhcNMjYwNzI1MDkwMTU5WjAzMTEwLwYDVQQD EyhjOGUxZGZlMTE1ZTQ5ZTRlMDUzZGIxNTcyZjM4Y2Q0MDJjMjA0MjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7brcz6D5M08erV0JSlJWLUlMU6nm +5/lGdbcZGm5bjtgTs355qTBY1lBLRwii3h/19S1b3eamkjt4u7FfI9eyjsnAQax GS53bjs2DWgsKj33wUBeJ2d7IQZS+V6kdN5oigq8ywIrcIDqWx8KcHJee2xaXjWc VGwlVfDxw8wqdMQmwBGNx2qZzoeuvGrLt5BrWZHeHQvwGuCkppaPRckLmUEbdwG6 YidusCuQfJp4id9Ysr+BW/1E+BOQ8KSb5TTA/5BIfC3vHGKHuqbn1lWVjU2kGQJP dMiPRdFL1iibFzFBMTAhvDd5GJq72LFSgMny+J+JMtZGrFOxbB1RnoM3nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjh3+EV5J5OBT2xVy84zUAsIEJNMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6bSpuph g49c5dfUHSzyWrKnaJpqgptYB7gjw23PrvjjF0KacRTlklqBlID84X7wCSv2EaEW FjpqMQYdiX1cD6iGa8LPy253vBTRBwK/g399PncA0jqmKfrUkwEYyFcBcshq0oTA +QL9MVoOyUl872wrRrV9dMobjum8XMQYL0UZ7wyurCTnqpiaCUVX3GYMtD10Bupp NzJIu5R1bZ5JNCqfi6TUEbI6SRnhmxABbkvAHY5j7j43D5QdN2BAaUzkqIYebyzu dfPzPsCARc5IFihGl7YfFqqjjEimtVKG1+LEwuHLoYA2NTMOYe/FJOgZLuT1pFD3 lIN2UzkiuTqxDQ== -----END CERTIFICATE-----Generated at Fri Jul 24 11:19:24 2026 by rpki-client