$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: HmYGhkrXOwzJwuo8+22lK+o84+GDgxHPt+ttL/yAw+c= Subject key identifier: 69:13:A0:A5:E8:50:B8:32:35:93:87:07:84:19:F8:50:01:5D:B6:BA Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 01A0C0681C2D32A8689AD78DBAC3ADF38AEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 1A81 Signing time: Sun 20 Sep 2026 20:00:43 +0000 Manifest this update: Sun 20 Sep 2026 20:00:43 +0000 Manifest next update: Mon 21 Sep 2026 20:00:43 +0000 Files and hashes: 1: 2VGlQCljw9cFJl5EHzBeMDJwXVo.roa (hash: Do0oxRXzURqrwthzVRT/8OMjdF0dAGArF8nmDv/TCrU=) 2: Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa (hash: gQCxAX0kGUP6fOqE0f4xg6Y7BKr1YkDG2KCm3PY3vks=) 3: ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa (hash: 6ABtGMwyDO/6lM571vE9Iuqd9TQr+m5PP3ymm7KdDMo=) 4: FqgScginFUes_17Ndt6kdOrzAkA.roa (hash: a3G9kD/8P4BMkG64yuvOvu/MjxsZVk5qCgCtyW3lY6c=) 5: Ikkeya1yJgRDS-xhPDlnuPLetJs.roa (hash: glwjFgIZfVLfz8kep2uiVu5O3LaEznaNtCEp/lC03fQ=) 6: T6pXE_xgE4WrCZgfLS6PwaHzerg.roa (hash: G4WSUskcjpTP61QhWQEI/av+RXa/41Ip20fNLeEJAoQ=) 7: VLiSP46DJX8Dog7Og_5_Z19OaAw.roa (hash: 3gWIgE8p9hzKRB2RaJcWZL2QSZhVwmUm6N+ESpdKpAQ=) 8: WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa (hash: XiM6tnhPeoo8/I0UsVcX68fQNBFdvSj5FK8MxmFwo94=) 9: b_n3Z3GxujBB68-zb1vahju6Fp0.roa (hash: fBmej85zCOTwohAZSrZlJvl4CdYQMz+WBefO+9bGgMc=) 10: leefmemMjsnYBH_PRIls4mGDQQg.roa (hash: H8hE7idzBRzXS/SDOwJGlem7diQp5JTlS92HhAhqaHk=) 11: oSUSV9XksEu-hj7frAtIPDI4QUc.roa (hash: Ba7z9fv3oVKNrP/ZNMw28ZH2Y9v/Nbz2kHCWUqIYg+s=) 12: sFANASik-wL_AAsMTGDepkCLru8.roa (hash: hsLxQEI+C24jdO2zBJxR+yNy+Qjt/yzfuOvytd9u6lw=) 13: sVlG1_wshTtHh3K3-dmfU3V-ohU.roa (hash: bMT/BHfnv5hKh+kUsN5whSknK8wJI4XccjCUKzZX56c=) 14: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: dwnXpve+Gh2PSFHxxvT61zRnOgCObWQNgf0xvxD6mcs=) 15: y2cm6-exYMkmOGgTU1Cd07TyLP8.roa (hash: VU+nMgrW6E4VxS9BCUWRqC49ToNwPX6PlXdXakhEGJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c0:68:1c:2d:32:a8:68:9a:d7:8d:ba:c3:ad:f3:8a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Sep 20 20:00:43 2026 GMT Not After : Sep 21 20:00:43 2026 GMT Subject: CN=6913a0a5e850b832359387078419f850015db6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:09:49:72:04:fd:2b:57:e0:9b:4d:be:8f: ff:a0:74:ce:6d:e3:b2:92:cb:02:3a:62:e0:7d:74: 60:83:0e:03:41:d8:d1:95:2d:4b:2f:61:6f:61:c5: 9a:c7:ac:e5:4a:57:9a:9d:af:6b:94:a1:2f:61:e0: 6a:10:8c:e5:81:bd:94:3b:3f:91:b6:61:18:ed:52: 78:84:d6:9e:95:11:a4:82:d4:4e:fd:88:b4:9a:7a: ed:7c:0b:b3:eb:7c:9d:05:8a:7f:a7:8f:55:93:ae: 14:e3:3a:ea:2e:5f:4e:b2:b4:e1:5a:f4:c6:51:b5: 4f:d7:86:36:27:82:da:ab:fd:8d:32:e9:ba:62:97: 03:08:27:1d:b7:eb:85:33:ed:bb:55:a8:a3:f2:83: 2f:21:f0:f1:39:c7:c7:64:43:e1:2a:e9:4f:3e:da: 61:0d:a2:62:6b:cc:06:b7:d4:52:c0:a3:ba:93:f1: 2e:11:06:32:b1:99:06:14:92:16:5b:3b:b4:66:91: 06:69:e7:da:8f:87:f0:a3:71:c9:09:3e:f9:46:d6: c0:02:50:38:93:3b:ae:37:bd:c7:aa:88:0f:c6:37: da:9f:c2:0f:30:ab:50:ad:44:e3:f1:ee:38:f5:bb: a1:21:3b:48:73:b6:5e:90:62:cf:33:18:f7:99:3e: f4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:13:A0:A5:E8:50:B8:32:35:93:87:07:84:19:F8:50:01:5D:B6:BA X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:91:a7:04:a0:88:68:fb:33:b7:07:d2:3f:4a:7f:18:2f:ea: 61:3a:50:7c:92:ea:5f:a1:b6:f8:25:c6:48:2b:99:cb:89:f9: 23:c2:72:ac:10:96:26:4d:42:cb:37:4f:5a:a8:6e:1c:44:65: a7:18:86:bc:d0:49:91:a3:8b:ec:ef:ca:5e:dc:86:4e:8d:0f: cf:c4:f2:55:bb:fb:3c:25:4e:7e:2c:e7:cd:38:22:32:81:02: f6:b8:d1:1d:fe:f4:9c:3b:4d:c8:a5:15:38:43:45:b6:65:d1: 74:45:f4:6f:77:cf:12:a4:40:b1:51:d3:64:6a:b6:ac:1d:3c: ad:08:ac:a7:68:73:29:e3:33:5f:7b:ec:47:32:85:1f:69:a4: 37:de:82:94:d6:44:53:4c:ea:e8:44:32:ae:f1:9c:de:6c:7c: b3:88:58:f4:8d:ff:18:2e:dc:64:6d:6a:83:c7:c1:65:42:fb: c9:5b:f0:0e:98:7b:a9:0b:3e:9c:3f:c9:14:33:92:3b:05:91: 01:54:9a:c3:51:f4:0a:bc:b5:e2:15:56:be:1c:5e:65:ce:50: b6:bb:fa:a2:f5:e3:e2:0d:7f:d4:8b:28:57:a5:fb:a8:67:47: a2:7d:1f:1a:d6:c9:9c:66:d2:28:d5:21:19:fd:97:08:90:b3: 2e:86:8d:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDAaBwtMqhomteNusOt84rsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwOTIwMjAwMDQzWhcNMjYwOTIxMjAwMDQzWjAzMTEwLwYDVQQD Eyg2OTEzYTBhNWU4NTBiODMyMzU5Mzg3MDc4NDE5Zjg1MDAxNWRiNmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG8JSXIE/StX4JtNvo//oHTObeOy kssCOmLgfXRggw4DQdjRlS1LL2FvYcWax6zlSleana9rlKEvYeBqEIzlgb2UOz+R tmEY7VJ4hNaelRGkgtRO/Yi0mnrtfAuz63ydBYp/p49Vk64U4zrqLl9OsrThWvTG UbVP14Y2J4Laq/2NMum6YpcDCCcdt+uFM+27Vaij8oMvIfDxOcfHZEPhKulPPtph DaJia8wGt9RSwKO6k/EuEQYysZkGFJIWWzu0ZpEGaefaj4fwo3HJCT75RtbAAlA4 kzuuN73HqogPxjfan8IPMKtQrUTj8e449buhITtIc7ZekGLPMxj3mT70OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkToKXoULgyNZOHB4QZ+FABXba6MB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJGnBKCI aPsztwfSP0p/GC/qYTpQfJLqX6G2+CXGSCuZy4n5I8JyrBCWJk1CyzdPWqhuHERl pxiGvNBJkaOL7O/KXtyGTo0Pz8TyVbv7PCVOfiznzTgiMoEC9rjRHf70nDtNyKUV OENFtmXRdEX0b3fPEqRAsVHTZGq2rB08rQisp2hzKeMzX3vsRzKFH2mkN96ClNZE U0zq6EQyrvGc3mx8s4hY9I3/GC7cZG1qg8fBZUL7yVvwDph7qQs+nD/JFDOSOwWR AVSaw1H0Cry14hVWvhxeZc5Qtrv6ovXj4g1/1IsoV6X7qGdHon0fGtbJnGbSKNUh Gf2XCJCzLoaN5Q== -----END CERTIFICATE-----Generated at Sun Sep 20 23:39:57 2026 by rpki-client