$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: qownBs7aduuZfXYQCZZp0wzMklUW13LTqjcv4HPVau0= Subject key identifier: F3:C7:39:92:42:19:EB:08:FC:43:58:EE:8E:68:E7:ED:54:BB:DE:74 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 01A0C70F067434F38B003436844C6E59F069 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 1A83 Signing time: Tue 22 Sep 2026 03:00:45 +0000 Manifest this update: Tue 22 Sep 2026 03:00:45 +0000 Manifest next update: Wed 23 Sep 2026 03:00:45 +0000 Files and hashes: 1: 1-l4RaLfBJyd2MPQTNrHgHOb738I.asa (hash: 7p+VWBjLWtE4REi9BbdzkPj1Ve0U1PFZBt+RJ3xIr6c=) 2: 56tuRDz3a2YTFgeWS1NrR18OXkg.roa (hash: 1nNgHHZdgSddhmbVFpAOLV/4EiXUghshKvJclDsKVmQ=) 3: 5MrbF5bNGEPF9upXfBtS4A4wDl4.roa (hash: cuTzNTZt0vxLLk58kaLIpL4TUhhDviNmQSTtCDK4SsY=) 4: GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa (hash: qe+WDGTjMvxnPuiz5zKe63b6ayHJKcpH5bKiSm9lucU=) 5: JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa (hash: zytsTfDYZZwrcpQaDSmmhp6xyQ2RMRRVWWyPiD2yWTY=) 6: KCBoMxNAGr3ol6s6RM6pJTYa9E0.roa (hash: FunXZj+wtacs6pD/kFNFcLd6gqmej6YgcTSrFfpXd0I=) 7: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: VAhaexzl2rc7IH+T2LUXl0K8+ATYknDu6SuAxr52XgI=) 8: YbqOfaiEzhYbZf1v7kxnJ5oWDdI.roa (hash: K1/J1u+fYdGovmZqt2ux5U8mWlfYB0TiDE6Xjf+a840=) 9: Yeq657xhQdSGU8ozMoBAHWz1c7o.roa (hash: R/IQB+JYvEApcpK9ekXgPiUzLmKHajFNMuKejVzFsKs=) 10: _5mSAKagSlrWqcFH7TXH0W26og4.roa (hash: 32J2xduAEK4/SsGh6SuDbhyqyhh7XlyF7binO4R80Wc=) 11: _CYFplyxe0M8AGr1RbZtWaBJCec.roa (hash: ySL4S7eZ51S8plbBqZUtXVpCREgkLAcEZfRUYmcl9sw=) 12: pw7UY5cxtDgJd7dLAtwYGNvRcpo.roa (hash: g4uEePdexAW53FzeUPyjdIrDSmjkq/x7/+0BrdOJwdU=) 13: ubBrtzGmGbSO-WUwJl4ceatGG7s.roa (hash: HzJ4FfYId8f62Ds2rGoMX1JffixOL9SOPWiVHisDEAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c7:0f:06:74:34:f3:8b:00:34:36:84:4c:6e:59:f0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Sep 22 03:00:45 2026 GMT Not After : Sep 23 03:00:45 2026 GMT Subject: CN=f3c739924219eb08fc4358ee8e68e7ed54bbde74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:72:a3:84:0c:56:fe:cc:3c:8a:7c:ac:45:7e: d9:49:f8:cd:49:87:c3:e0:f3:c6:52:f0:4f:15:ac: c9:f9:a9:ad:a0:cc:c4:22:39:20:99:25:b2:71:f8: cd:ef:9e:26:40:e3:7b:aa:a0:09:1e:1e:75:9a:76: 4d:fb:28:f3:bb:e4:4b:89:e8:b2:c9:05:26:c0:de: c2:99:95:f5:b8:0f:81:ae:e0:80:2a:ff:30:8f:36: 04:53:a9:82:06:0a:a9:d4:91:e8:5f:79:bc:48:bd: a3:e8:98:65:8c:df:fe:bc:c7:75:c4:04:cf:d9:b7: 6f:71:74:36:ca:0c:24:97:d3:90:66:d3:91:c6:65: 79:fa:0d:86:41:62:87:92:ae:53:36:8d:a2:ed:be: a8:89:74:6d:00:0a:08:96:f3:dc:96:ca:3e:c0:d2: 98:95:91:f5:98:fd:a7:27:c5:51:a5:4b:0b:c4:eb: b6:d9:d9:76:3c:60:16:54:49:e7:f2:c4:f1:f5:3a: 07:f7:7a:cc:e9:6c:81:c3:61:1b:e4:8d:99:1b:8a: dd:e4:e0:07:74:55:bf:08:99:73:dd:e7:50:3a:62: a2:68:5c:11:be:dd:53:91:27:13:ca:73:75:67:52: 51:71:76:ca:a1:f8:5e:61:9c:7b:0c:23:0a:84:f1: 89:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C7:39:92:42:19:EB:08:FC:43:58:EE:8E:68:E7:ED:54:BB:DE:74 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:bc:03:bc:e4:d5:df:64:55:57:18:eb:87:46:c4:b7:77:a6: c7:d0:69:59:cd:a2:64:65:4a:da:c2:eb:ec:83:54:64:ff:4d: 32:f2:9a:30:22:dc:b9:6c:22:da:5e:1c:45:eb:cf:21:23:11: f7:be:4b:18:42:fb:16:b5:03:de:c0:26:2b:b1:fd:52:9e:84: c8:e4:db:73:fb:a6:68:38:d6:cf:c4:c3:75:3f:ea:48:ec:59: 02:8c:50:fa:04:bd:51:2e:f0:bc:21:2f:56:8e:63:8d:44:a8: e6:98:db:cd:07:0c:88:f4:ea:30:80:3c:e5:0c:cc:9b:3c:cd: 73:be:17:92:35:6f:3d:1e:41:ef:0b:f9:be:87:9f:1b:08:ed: 0c:60:92:1c:91:06:3e:bb:a9:36:90:31:57:76:41:ca:a2:52: 63:89:b0:f1:3e:d6:8d:ac:91:9d:1d:51:e1:51:31:82:18:5b: 19:2a:3c:50:4e:cd:40:74:7c:d9:ea:f9:66:ac:22:40:ec:ae: e0:6e:aa:27:cd:3a:a0:37:bc:33:2d:ba:f9:73:84:7a:65:09: 17:2a:bf:07:ed:ec:bc:f2:88:2c:8e:94:41:09:7c:be:b5:b8: b0:fe:4b:23:03:28:22:b5:23:be:6e:53:83:27:66:9f:87:f4: 47:93:fc:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDHDwZ0NPOLADQ2hExuWfBpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwOTIyMDMwMDQ1WhcNMjYwOTIzMDMwMDQ1WjAzMTEwLwYDVQQD EyhmM2M3Mzk5MjQyMTllYjA4ZmM0MzU4ZWU4ZTY4ZTdlZDU0YmJkZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXKjhAxW/sw8inysRX7ZSfjNSYfD 4PPGUvBPFazJ+amtoMzEIjkgmSWycfjN754mQON7qqAJHh51mnZN+yjzu+RLieiy yQUmwN7CmZX1uA+BruCAKv8wjzYEU6mCBgqp1JHoX3m8SL2j6JhljN/+vMd1xATP 2bdvcXQ2ygwkl9OQZtORxmV5+g2GQWKHkq5TNo2i7b6oiXRtAAoIlvPclso+wNKY lZH1mP2nJ8VRpUsLxOu22dl2PGAWVEnn8sTx9ToH93rM6WyBw2Eb5I2ZG4rd5OAH dFW/CJlz3edQOmKiaFwRvt1TkScTynN1Z1JRcXbKofheYZx7DCMKhPGJXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPHOZJCGesI/ENY7o5o5+1Uu950MB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrwDvOTV 32RVVxjrh0bEt3emx9BpWc2iZGVK2sLr7INUZP9NMvKaMCLcuWwi2l4cRevPISMR 975LGEL7FrUD3sAmK7H9Up6EyOTbc/umaDjWz8TDdT/qSOxZAoxQ+gS9US7wvCEv Vo5jjUSo5pjbzQcMiPTqMIA85QzMmzzNc74XkjVvPR5B7wv5voefGwjtDGCSHJEG PrupNpAxV3ZByqJSY4mw8T7WjayRnR1R4VExghhbGSo8UE7NQHR82er5ZqwiQOyu 4G6qJ806oDe8My26+XOEemUJFyq/B+3svPKILI6UQQl8vrW4sP5LIwMoIrUjvm5T gydmn4f0R5P81w== -----END CERTIFICATE-----Generated at Tue Sep 22 12:50:47 2026 by rpki-client