$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: UUKJmwb0bNSI8Bf1n/eT+5bDQcL748ZtISrw/frJZXU= Subject key identifier: 1D:65:74:9A:45:09:1A:91:1C:68:27:50:3D:F8:53:DE:40:14:CE:34 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019F916CB51E771A6A9FEDBAD7B4EA264D1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 15A9 Signing time: Fri 24 Jul 2026 00:00:48 +0000 Manifest this update: Fri 24 Jul 2026 00:00:48 +0000 Manifest next update: Sat 25 Jul 2026 00:00:48 +0000 Files and hashes: 1: 00oBTfnWdUzIvMRCoDAsBiu6TY0.roa (hash: 2cUMeBAWg056ZrP6AEZcwET0ohxuoFacoijmfCtjIBA=) 2: 4xVdYe0gRxz-uE-uYOx9q-_KZCk.roa (hash: AcFtBAJ8L85K3ER5s0exdifY6WeWVCgPuREiTI5SL1o=) 3: DaIOsBAUTocNWtQ487tz4YWipHI.roa (hash: N5y0DRMQWN6Af00LwwQvS7RkqXX2njRLKRlsnfJp9Do=) 4: RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa (hash: gac1U5GhiAAvsADQW6zIs1K5OYBIIdxw6YN3Rmr6cdo=) 5: Smw8KxULxNV1U3wUVaTgjVcAEN0.roa (hash: xaQVLJNe1R846qUde4wi8d2fl1ASkR/w9PUCNskHzmg=) 6: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 7: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 8: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: zRhT/fC2jhhYIflTW88BFB9iFUA7i/TsfBtPZ5zPBx0=) 9: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 10: ofUllF-dWXHUPtc7vJnGioqPfCY.roa (hash: DKXn87ibX3uXQNhf8bxZ9LKgNiZi6MqVfnjhDNqP0fA=) 11: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:6c:b5:1e:77:1a:6a:9f:ed:ba:d7:b4:ea:26:4d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jul 24 00:00:48 2026 GMT Not After : Jul 25 00:00:48 2026 GMT Subject: CN=1d65749a45091a911c6827503df853de4014ce34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f9:02:a2:b7:ca:46:de:1e:13:37:21:77:2e: 21:ff:27:30:87:98:1a:c5:9a:f4:d3:49:42:d0:8f: f0:1d:a1:f0:9a:64:18:00:95:25:48:0d:89:82:1c: b1:7e:3f:bd:0e:43:08:96:af:80:87:3d:cf:a3:6a: 2e:5a:ea:d1:67:bd:4f:02:90:d1:d6:c9:f9:7e:f6: ea:7f:17:e0:29:e2:23:08:5f:2c:6d:0d:3c:f4:5a: a6:56:0e:fe:8d:6a:79:c3:db:db:84:1f:37:65:bc: fe:16:79:a1:e4:9e:89:69:37:0a:62:09:c5:4e:d1: 60:c2:1a:74:9c:ad:26:8f:00:79:24:39:41:7d:5f: a0:62:7f:06:68:40:1c:41:16:7e:a2:6e:b0:10:d2: de:e2:f4:93:c4:1f:8e:cb:57:e2:c1:dd:1d:76:94: 54:25:e1:0d:34:42:88:03:b9:04:b2:bc:4f:93:c0: c8:cb:4e:ab:a4:f8:e0:b3:a3:2b:aa:93:48:c6:83: 62:5a:2a:8d:c3:55:3f:b6:8a:0d:13:77:a6:b1:59: 48:5a:04:f4:3e:2b:8a:51:18:c0:33:63:8b:03:77: c2:48:47:d0:04:74:aa:99:72:ca:cc:27:de:7d:39: 53:2a:ac:2a:6b:0c:c0:b8:9b:1a:ef:cd:9c:a9:3c: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:65:74:9A:45:09:1A:91:1C:68:27:50:3D:F8:53:DE:40:14:CE:34 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:13:55:87:17:eb:ad:14:90:45:64:04:c1:2e:ea:ea:8e:f1: d7:f2:55:13:eb:47:df:77:bc:3b:bc:d0:37:f6:f7:64:54:8d: 4b:73:82:6d:30:cd:b7:e8:57:eb:c2:67:ce:c0:0f:9d:d8:22: 1b:20:b0:42:fd:1c:da:36:bd:72:61:43:88:24:ab:de:eb:cd: 86:b6:e2:b9:92:05:1f:c3:41:0b:b8:82:42:bc:49:0c:14:a5: e0:d7:9d:5b:40:a1:ec:bc:d3:b0:74:6e:b1:ca:76:d8:7e:28: 40:6c:07:dc:fe:1b:d7:9c:cd:fb:f7:95:b2:b7:dc:98:89:07: 01:9d:20:80:4b:92:01:b3:70:df:9d:ba:27:d5:54:13:12:67: 2c:1a:05:b9:36:d3:ed:8c:d2:b3:84:f8:c3:0a:49:8e:9e:ab: f8:f8:fb:00:7e:98:85:14:62:db:52:34:7c:14:78:e1:c2:f7: 07:77:d3:95:a8:8e:f1:fc:02:1c:e3:40:7a:af:d6:ea:94:13: 72:e7:4f:1d:1d:88:2c:0d:0f:58:38:26:72:cb:ac:12:70:7c: 18:00:ef:96:0d:01:d5:a5:81:ac:4f:18:ea:23:03:5e:16:49: 68:ef:a4:57:50:19:16:78:c3:2d:bb:a9:8e:e2:05:fe:82:93: e3:f0:03:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RbLUedxpqn+2617TqJk0cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwNzI0MDAwMDQ4WhcNMjYwNzI1MDAwMDQ4WjAzMTEwLwYDVQQD EygxZDY1NzQ5YTQ1MDkxYTkxMWM2ODI3NTAzZGY4NTNkZTQwMTRjZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PkCorfKRt4eEzchdy4h/ycwh5ga xZr000lC0I/wHaHwmmQYAJUlSA2Jghyxfj+9DkMIlq+Ahz3Po2ouWurRZ71PApDR 1sn5fvbqfxfgKeIjCF8sbQ089FqmVg7+jWp5w9vbhB83Zbz+Fnmh5J6JaTcKYgnF TtFgwhp0nK0mjwB5JDlBfV+gYn8GaEAcQRZ+om6wENLe4vSTxB+Oy1fiwd0ddpRU JeENNEKIA7kEsrxPk8DIy06rpPjgs6MrqpNIxoNiWiqNw1U/tooNE3emsVlIWgT0 PiuKURjAM2OLA3fCSEfQBHSqmXLKzCfefTlTKqwqawzAuJsa782cqTzt9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1ldJpFCRqRHGgnUD34U95AFM40MB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRNVhxfr rRSQRWQEwS7q6o7x1/JVE+tH33e8O7zQN/b3ZFSNS3OCbTDNt+hX68JnzsAPndgi GyCwQv0c2ja9cmFDiCSr3uvNhrbiuZIFH8NBC7iCQrxJDBSl4NedW0Ch7LzTsHRu scp22H4oQGwH3P4b15zN+/eVsrfcmIkHAZ0ggEuSAbNw3526J9VUExJnLBoFuTbT 7YzSs4T4wwpJjp6r+Pj7AH6YhRRi21I0fBR44cL3B3fTlaiO8fwCHONAeq/W6pQT cudPHR2ILA0PWDgmcsusEnB8GADvlg0B1aWBrE8Y6iMDXhZJaO+kV1AZFnjDLbup juIF/oKT4/ADhg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:49:35 2026 by rpki-client