$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft File: xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json) Hash identifier: LtfWggWL+g+qjm2D8klTUQiJIhUkWkdwOMc3vm3nKaw= Subject key identifier: D2:A7:F2:DE:FD:94:57:52:EE:60:30:03:7F:66:C0:3F:7B:17:2A:81 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019F90FEE62E969138BEA97196D29B63C2C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft Manifest number: 1A5A Signing time: Thu 23 Jul 2026 22:00:51 +0000 Manifest this update: Thu 23 Jul 2026 22:00:51 +0000 Manifest next update: Fri 24 Jul 2026 22:00:51 +0000 Files and hashes: 1: 1jfZW_D7UOXSu39RlXiUyL_tLjk.roa (hash: Wm52sVxYb4B7EnFd3mHTcBpVOHveBj16ZYTfOT8EX/A=) 2: 2c-E5BZdiwqZ2Q-DnytRU90rLWI.roa (hash: +KiT1wYNU4xT/dbPCwls8LNvm2nJx4GyHtaKqzRjkQI=) 3: 2g3YqagtveoXivlimUOijGK4Sw4.roa (hash: ygC6oN+dOsYHf4Cjh6O/E1qqcFKMCRFPzFyAC5l12yw=) 4: 5B28Ei4KPuBfMPCYz_CdjunmzfA.roa (hash: Fh0fY9vBoWA1h/GgmdDXwKoDcv0YIku/VzyUipmtScY=) 5: 7qbWrERi-ZB_UDqyNvqfTaD1ZSU.roa (hash: goE2128mhw477UYFVBxjZxeafdneEUnERrdg7dgvL9A=) 6: DeLLhmnL8UGopy5KKmx7aJEcegM.roa (hash: MiHnbQkuo0f/Ih4buFqhTcosJDlqA6PQQ++HZPqmd5w=) 7: ElfbXSGIDiSMTPPlbo6V-o0SRuY.roa (hash: lKK5rdzCjZE0+7rICMxRWAfKpw9HWxpCs96nQPbHzso=) 8: F3V6NHBiFLHYH9kCeJ_cphI6VuI.roa (hash: S7WFcWfal2pVRy/GM+kUJ9lEuF9xQr0ct0tz3YBvyhU=) 9: GzFILLIkAaT9aB9CvnWDZTFwbdY.roa (hash: Wm6rCP0d9sgkyPeTHrd7psMD7wjPvGW5jHpasqKACzk=) 10: OtzhGfilSurocGymxRL7eQzidr4.roa (hash: vDQ7y55xoQgeukZduThUGBphIJ09K2D+oY+pxlGs+Pw=) 11: PS9MTZzdBifx0im1Vrq3VgjsS5s.roa (hash: 0ux5UJNrhxWM198AZ/GNCpoKgSg8gWm9eiQUOhAki7I=) 12: TpP8go9gxjsA4n1kC2kuJQbokBE.roa (hash: 7lExTFrNOgtfm66T9jsBGx9Cjl+c6H6zYjBrnH5qrXg=) 13: Vrmk2bULiTNAA5JeOQZ33ec3wXc.roa (hash: l2T4AkC8bheD2TY5DDvz9/5pBIbrm/A780nuw41Lr6Y=) 14: W9AeGn_4EYTr-z8IbzJJXYoLOc0.roa (hash: r/0RiCOSE+WrdRBD5qqcgjI3IcYBeed6dA+B48z6B+E=) 15: dANCF-_ELvUXZe_N9iPSiuIBUYs.roa (hash: L7tV/7qxxRlCHwy6Cmc9dl/HlJ9PPDTVkduSLInAUZ0=) 16: e2AyZ2BEWBS0MDGcIRKGddY_-vA.roa (hash: k3gftfAGEZd+EZsjQ+L0bmvG9iJo2qrBOjPfUiYc9kM=) 17: gMYRXePhXBj5QEchP90fA4n6PTI.roa (hash: n3t3ay/80ZRLXPkmrmKkNg7PYGv+vXmzByKb6p1QvZ8=) 18: hbdbuaRvg2tTLKp10GziAeSgyRU.roa (hash: H+cM7/5ALMd58f/dYxV/Q5+dv/fO2eB8PR2xGdT8ZXc=) 19: iE31HcpgdKKrdPMldO0jIS93Go4.roa (hash: q2vi84j7Hjeqqy/+pd9xsj/QdQIOk9oRPO1utxPcNqU=) 20: jpMS12QCO2gdD3cuexYC2wQ8Qeo.roa (hash: nMFW9BQneK7T1fgc0t6oA8jRIcD7rZtWnJMbSrXrhdQ=) 21: llmpvsJp6iJllq8aPzCHiXy7pDI.roa (hash: DANl4OSIWpehyMk+CpY4YG/h/rDOrMDg4VQVT2cFg7g=) 22: ms0wuT7v6-h1UgnL6n_jgWkOkVU.roa (hash: QBEq8rCcXKzWf4ULJs+y+Nad4kF1AXFNATRKBuEGesA=) 23: nm-KZislIGz6wosxLU6C90OgEBY.roa (hash: eiBhQ/2d82wkJoJ8lwkynR/qT2+hnESyOr9AACLRf+E=) 24: ugtI-QyWNOjJ59RgJ8WbbnFfW4U.roa (hash: aT3mMJhpwKfI0RkCBtFq/BKu85xA6+3aVTdjvSvqPZQ=) 25: vHpNG066C7qb6w3seYRGvSbcLTM.roa (hash: oOMKXuPYcJhhb1ks0FKSqMbqfUNTbYofrvqb7j5sseA=) 26: w6gmNc7f_bvjPNIJjuhS3RSIpZQ.roa (hash: GdBjwBkJ4iGW3k1Xd7AiPym4634yoaPZu5TSA3ZGyx8=) 27: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: fVzRB2FiqUCN5yan6r+zGaVzAULUIoMWbiV5YFVV9tY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:fe:e6:2e:96:91:38:be:a9:71:96:d2:9b:63:c2:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jul 23 22:00:51 2026 GMT Not After : Jul 24 22:00:51 2026 GMT Subject: CN=d2a7f2defd945752ee6030037f66c03f7b172a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0b:82:b8:b1:9b:56:b5:25:5c:14:58:09:46: df:61:ae:9a:4d:5d:3a:7c:38:2d:3e:54:fb:11:11: 08:17:d3:ec:16:8a:9c:ab:77:9e:5b:88:69:28:bc: dd:97:85:57:e7:1a:ee:1d:df:a0:70:00:12:48:0e: 37:de:28:46:2f:79:a3:cb:6a:cb:be:a1:67:4c:21: 61:ae:a3:f9:7f:b1:11:65:b2:b6:44:c6:92:55:b5: bf:7a:99:2e:a0:43:a5:fc:54:32:1a:4b:16:d3:2e: 1c:21:41:5d:6b:99:f4:79:af:de:bb:ea:07:7a:18: fc:4d:8b:3d:ee:8a:a5:1c:95:ba:db:ee:2f:6a:73: 69:c6:09:06:fc:06:e8:7d:57:e7:2b:9a:95:b6:78: 5e:54:a3:7c:f9:b0:98:c6:3f:f0:b5:81:18:17:4f: 27:97:2f:05:6c:a8:45:a2:c2:72:6d:2e:32:45:71: 0d:fd:16:54:77:62:72:3f:35:1a:84:c2:ae:d9:e7: bc:04:6d:08:29:d6:aa:6d:27:42:5d:61:2e:c3:70: d5:ba:c2:0d:79:e1:8d:2a:da:79:4f:9c:c0:f1:37: 30:3e:fb:72:e6:10:24:aa:3b:85:e8:f4:60:ea:2b: 64:a0:18:c2:9f:e7:66:ca:2c:f3:ea:d0:b8:5c:96: a5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A7:F2:DE:FD:94:57:52:EE:60:30:03:7F:66:C0:3F:7B:17:2A:81 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:0c:2a:35:ea:02:6c:26:86:01:af:db:55:fd:c2:70:67:5b: af:a9:0d:48:ec:3f:5f:b9:dc:cf:08:a3:b1:c0:45:ec:d1:4c: 03:98:ff:f5:e7:ca:26:d8:2b:34:34:5b:a2:37:c4:d6:7a:d8: cd:68:6b:be:51:94:75:47:5a:69:f8:cd:8c:5e:73:4f:ba:07: 39:42:0a:43:e8:dd:ed:a9:3f:3d:dd:ba:f8:7f:ca:f0:61:0c: 95:ff:82:c5:77:4f:1a:6e:bf:7e:49:99:81:ad:08:be:88:83: 28:92:fc:76:22:32:99:6d:95:d1:2e:9c:a5:89:51:5e:7e:8e: bd:17:0f:a3:5d:a5:7c:00:79:ea:85:bb:46:b2:19:6b:f5:86: f3:14:85:a5:04:76:5c:98:16:55:e9:41:c6:4e:dc:00:92:56: 20:28:a4:5d:23:c6:d1:7a:91:fb:9f:6a:87:74:d1:f3:2e:65: fe:c2:70:05:e5:22:35:b4:75:89:88:bc:83:3b:fb:72:0a:76: 79:f0:6c:00:99:51:5e:7b:8c:80:c3:43:d1:7e:44:94:46:56: 62:8a:d3:16:52:ae:38:56:35:8b:2d:f6:64:cd:a3:de:49:aa: 54:35:d4:d8:71:3e:9c:c7:5e:f8:10:92:45:03:ad:73:3f:2f: 1f:d0:e4:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Q/uYulpE4vqlxltKbY8LGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwNzIzMjIwMDUxWhcNMjYwNzI0MjIwMDUxWjAzMTEwLwYDVQQD EyhkMmE3ZjJkZWZkOTQ1NzUyZWU2MDMwMDM3ZjY2YzAzZjdiMTcyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAuCuLGbVrUlXBRYCUbfYa6aTV06 fDgtPlT7EREIF9PsFoqcq3eeW4hpKLzdl4VX5xruHd+gcAASSA433ihGL3mjy2rL vqFnTCFhrqP5f7ERZbK2RMaSVbW/epkuoEOl/FQyGksW0y4cIUFda5n0ea/eu+oH ehj8TYs97oqlHJW62+4vanNpxgkG/AbofVfnK5qVtnheVKN8+bCYxj/wtYEYF08n ly8FbKhFosJybS4yRXEN/RZUd2JyPzUahMKu2ee8BG0IKdaqbSdCXWEuw3DVusIN eeGNKtp5T5zA8TcwPvty5hAkqjuF6PRg6itkoBjCn+dmyizz6tC4XJalhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKn8t79lFdS7mAwA39mwD97FyqBMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggwqNeoC bCaGAa/bVf3CcGdbr6kNSOw/X7nczwijscBF7NFMA5j/9efKJtgrNDRbojfE1nrY zWhrvlGUdUdaafjNjF5zT7oHOUIKQ+jd7ak/Pd26+H/K8GEMlf+CxXdPGm6/fkmZ ga0IvoiDKJL8diIymW2V0S6cpYlRXn6OvRcPo12lfAB56oW7RrIZa/WG8xSFpQR2 XJgWVelBxk7cAJJWICikXSPG0XqR+59qh3TR8y5l/sJwBeUiNbR1iYi8gzv7cgp2 efBsAJlRXnuMgMND0X5ElEZWYorTFlKuOFY1iy32ZM2j3kmqVDXU2HE+nMde+BCS RQOtcz8vH9Dkgg== -----END CERTIFICATE-----Generated at Fri Jul 24 04:05:40 2026 by rpki-client