$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: OvT0GHWk7y7zUa5pNj8MpVj3QSj/58jagtGI3dSMTsc= Subject key identifier: B0:4D:64:96:CF:99:7D:A5:D2:DC:D8:3E:11:FB:6D:29:16:1A:3E:33 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019FAB2C97E54DED52AC860E8B67A2DC0B41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 19F0 Signing time: Wed 29 Jul 2026 00:00:54 +0000 Manifest this update: Wed 29 Jul 2026 00:00:54 +0000 Manifest next update: Thu 30 Jul 2026 00:00:54 +0000 Files and hashes: 1: 1-l4RaLfBJyd2MPQTNrHgHOb738I.asa (hash: 7p+VWBjLWtE4REi9BbdzkPj1Ve0U1PFZBt+RJ3xIr6c=) 2: 56tuRDz3a2YTFgeWS1NrR18OXkg.roa (hash: 1nNgHHZdgSddhmbVFpAOLV/4EiXUghshKvJclDsKVmQ=) 3: 5MrbF5bNGEPF9upXfBtS4A4wDl4.roa (hash: cuTzNTZt0vxLLk58kaLIpL4TUhhDviNmQSTtCDK4SsY=) 4: GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa (hash: qe+WDGTjMvxnPuiz5zKe63b6ayHJKcpH5bKiSm9lucU=) 5: JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa (hash: zytsTfDYZZwrcpQaDSmmhp6xyQ2RMRRVWWyPiD2yWTY=) 6: KCBoMxNAGr3ol6s6RM6pJTYa9E0.roa (hash: FunXZj+wtacs6pD/kFNFcLd6gqmej6YgcTSrFfpXd0I=) 7: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: 40jEu8PVy5V6FAvxq4BURgw522wNYTb/nX2Klkx0kyk=) 8: YbqOfaiEzhYbZf1v7kxnJ5oWDdI.roa (hash: K1/J1u+fYdGovmZqt2ux5U8mWlfYB0TiDE6Xjf+a840=) 9: Yeq657xhQdSGU8ozMoBAHWz1c7o.roa (hash: R/IQB+JYvEApcpK9ekXgPiUzLmKHajFNMuKejVzFsKs=) 10: _5mSAKagSlrWqcFH7TXH0W26og4.roa (hash: 32J2xduAEK4/SsGh6SuDbhyqyhh7XlyF7binO4R80Wc=) 11: _CYFplyxe0M8AGr1RbZtWaBJCec.roa (hash: ySL4S7eZ51S8plbBqZUtXVpCREgkLAcEZfRUYmcl9sw=) 12: pw7UY5cxtDgJd7dLAtwYGNvRcpo.roa (hash: g4uEePdexAW53FzeUPyjdIrDSmjkq/x7/+0BrdOJwdU=) 13: ubBrtzGmGbSO-WUwJl4ceatGG7s.roa (hash: HzJ4FfYId8f62Ds2rGoMX1JffixOL9SOPWiVHisDEAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:2c:97:e5:4d:ed:52:ac:86:0e:8b:67:a2:dc:0b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Jul 29 00:00:54 2026 GMT Not After : Jul 30 00:00:54 2026 GMT Subject: CN=b04d6496cf997da5d2dcd83e11fb6d29161a3e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2f:ff:02:b2:64:36:b9:14:fc:2d:ad:49:bf: 98:1c:82:05:3b:bf:d9:c6:56:41:83:07:28:e0:f4: 3a:8d:9b:d6:fe:ae:03:37:34:54:d5:a0:b4:47:43: 44:80:bb:a6:30:29:e4:23:cd:72:02:ff:72:4e:7a: 35:3d:3d:8e:0f:c6:13:f6:71:22:a7:48:1e:06:51: a2:0a:ae:90:3c:5b:7e:82:ce:b1:34:bb:e3:62:29: d7:6c:8b:97:a6:fb:bc:f3:32:a0:63:66:88:a8:f0: 0f:a6:99:5f:33:e0:16:26:9b:e6:cc:8e:58:84:cc: 15:66:04:b1:f9:7a:b7:80:44:97:38:52:1c:e0:fc: ff:4e:e1:6b:4d:22:06:d6:1f:db:63:01:91:5a:4b: 60:b1:93:a7:4e:c2:f7:a5:8d:fe:5e:85:47:d6:4b: bd:bb:46:d5:ab:01:74:67:ea:38:bf:cd:1a:14:dd: 15:84:e7:b0:fa:49:5b:bd:63:d0:2b:4a:1c:62:2e: ed:8a:36:49:e8:68:fc:d1:52:2a:dc:de:aa:61:e8: da:72:70:fc:35:1f:20:16:cc:99:df:14:5f:af:b4: 8f:00:ac:c2:ed:eb:64:df:a4:d2:91:f5:e0:2c:5b: c8:5d:96:04:56:d4:4c:9a:de:8c:c0:fa:c4:65:fd: c8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4D:64:96:CF:99:7D:A5:D2:DC:D8:3E:11:FB:6D:29:16:1A:3E:33 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:8c:5f:a1:2b:41:24:8b:ec:36:3a:1d:15:0a:24:e3:0b:5e: 0f:83:5b:a5:3f:85:33:f3:d5:4c:93:86:a7:2b:ef:ca:f0:83: 63:e0:9b:be:e6:46:6d:c7:91:93:e6:1b:a9:43:0e:dd:c0:96: 43:42:e7:fd:95:e6:86:fc:77:44:4f:b3:23:0c:02:00:bc:88: c1:83:6d:bd:9c:ed:59:b9:83:2b:11:cc:89:c5:d4:f8:56:ef: 16:7c:bf:10:2d:07:b3:e0:36:c8:26:c9:27:c8:bb:c0:d6:bd: a3:7b:a3:57:00:41:21:87:73:f7:c2:c4:78:e9:8b:cb:a2:74: be:6f:2e:5d:9d:37:b5:23:85:e2:5a:43:d9:0f:61:f9:0c:39: ae:68:a6:33:66:c3:3c:03:e6:93:4d:b5:ea:e0:f2:c0:45:b2: 8b:4f:22:d1:84:71:70:5e:6b:7c:33:a9:b3:4c:1f:b7:5c:1d: e7:10:7b:3d:f0:49:16:0f:e9:cc:47:5b:7d:b9:ff:0b:94:5b: 8c:ca:92:19:34:86:4f:3b:cc:05:7f:12:88:90:bd:69:87:09: b3:0a:68:ea:85:5d:8c:ea:1f:5f:64:ad:3e:9d:a7:98:c2:e6: 7f:a6:fb:ef:7f:a8:29:ad:49:d4:ae:bf:e8:61:fe:18:f7:32: e4:b2:a0:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rLJflTe1SrIYOi2ei3AtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwNzI5MDAwMDU0WhcNMjYwNzMwMDAwMDU0WjAzMTEwLwYDVQQD EyhiMDRkNjQ5NmNmOTk3ZGE1ZDJkY2Q4M2UxMWZiNmQyOTE2MWEzZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C//ArJkNrkU/C2tSb+YHIIFO7/Z xlZBgwco4PQ6jZvW/q4DNzRU1aC0R0NEgLumMCnkI81yAv9yTno1PT2OD8YT9nEi p0geBlGiCq6QPFt+gs6xNLvjYinXbIuXpvu88zKgY2aIqPAPpplfM+AWJpvmzI5Y hMwVZgSx+Xq3gESXOFIc4Pz/TuFrTSIG1h/bYwGRWktgsZOnTsL3pY3+XoVH1ku9 u0bVqwF0Z+o4v80aFN0VhOew+klbvWPQK0ocYi7tijZJ6Gj80VIq3N6qYejacnD8 NR8gFsyZ3xRfr7SPAKzC7etk36TSkfXgLFvIXZYEVtRMmt6MwPrEZf3I1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBNZJbPmX2l0tzYPhH7bSkWGj4zMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIxfoStB JIvsNjodFQok4wteD4NbpT+FM/PVTJOGpyvvyvCDY+CbvuZGbceRk+YbqUMO3cCW Q0Ln/ZXmhvx3RE+zIwwCALyIwYNtvZztWbmDKxHMicXU+FbvFny/EC0Hs+A2yCbJ J8i7wNa9o3ujVwBBIYdz98LEeOmLy6J0vm8uXZ03tSOF4lpD2Q9h+Qw5rmimM2bD PAPmk0216uDywEWyi08i0YRxcF5rfDOps0wft1wd5xB7PfBJFg/pzEdbfbn/C5Rb jMqSGTSGTzvMBX8SiJC9aYcJswpo6oVdjOofX2StPp2nmMLmf6b773+oKa1J1K6/ 6GH+GPcy5LKgjQ== -----END CERTIFICATE-----Generated at Wed Jul 29 05:36:25 2026 by rpki-client