$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: IYXrFubOQ5CdPmR1HrD+8w6LdvZCj4D1Uu+Z6Ddi8rg= Subject key identifier: B1:45:15:9E:B0:63:BF:C7:B2:34:7A:EE:22:47:63:64:61:16:8B:A2 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019CAB6B6AA254A8C1E35D08A3DC31A54E13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 1862 Signing time: Sun 01 Mar 2026 22:01:09 +0000 Manifest this update: Sun 01 Mar 2026 22:01:09 +0000 Manifest next update: Mon 02 Mar 2026 22:01:09 +0000 Files and hashes: 1: 2VGlQCljw9cFJl5EHzBeMDJwXVo.roa (hash: Do0oxRXzURqrwthzVRT/8OMjdF0dAGArF8nmDv/TCrU=) 2: Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa (hash: gQCxAX0kGUP6fOqE0f4xg6Y7BKr1YkDG2KCm3PY3vks=) 3: ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa (hash: 6ABtGMwyDO/6lM571vE9Iuqd9TQr+m5PP3ymm7KdDMo=) 4: FqgScginFUes_17Ndt6kdOrzAkA.roa (hash: a3G9kD/8P4BMkG64yuvOvu/MjxsZVk5qCgCtyW3lY6c=) 5: IsrXRGLVffEPsnHVbl_BeBHARaA.roa (hash: 2bYUOyrmy0HgRWN9bHIQfD3C31xnJN8Zzbysmp0r1Aw=) 6: T6pXE_xgE4WrCZgfLS6PwaHzerg.roa (hash: G4WSUskcjpTP61QhWQEI/av+RXa/41Ip20fNLeEJAoQ=) 7: VLiSP46DJX8Dog7Og_5_Z19OaAw.roa (hash: 3gWIgE8p9hzKRB2RaJcWZL2QSZhVwmUm6N+ESpdKpAQ=) 8: WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa (hash: XiM6tnhPeoo8/I0UsVcX68fQNBFdvSj5FK8MxmFwo94=) 9: b_n3Z3GxujBB68-zb1vahju6Fp0.roa (hash: fBmej85zCOTwohAZSrZlJvl4CdYQMz+WBefO+9bGgMc=) 10: leefmemMjsnYBH_PRIls4mGDQQg.roa (hash: H8hE7idzBRzXS/SDOwJGlem7diQp5JTlS92HhAhqaHk=) 11: oSUSV9XksEu-hj7frAtIPDI4QUc.roa (hash: Ba7z9fv3oVKNrP/ZNMw28ZH2Y9v/Nbz2kHCWUqIYg+s=) 12: sVlG1_wshTtHh3K3-dmfU3V-ohU.roa (hash: bMT/BHfnv5hKh+kUsN5whSknK8wJI4XccjCUKzZX56c=) 13: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: 98EhebL1vsQ8BHvmQ/C6ItSz5z5v2vZ6tqlK3RwsaTM=) 14: zGuXwu3v-M9bXZipAlRCLhWgY9Y.roa (hash: q3HTdT+bmIS7eJfWEweBp4+RgfhLQ35j5qT2Y42OjrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:6b:6a:a2:54:a8:c1:e3:5d:08:a3:dc:31:a5:4e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Mar 1 22:01:09 2026 GMT Not After : Mar 2 22:01:09 2026 GMT Subject: CN=b145159eb063bfc7b2347aee2247636461168ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e0:27:67:0d:9c:77:78:a1:7a:a0:49:fb:5c: 56:e1:9e:9a:e0:6c:f5:26:3e:25:52:91:b7:ee:e6: 1b:18:a0:1c:3d:23:c2:fe:45:a0:22:79:f6:6f:93: 7d:f3:dc:88:df:58:01:94:2c:8c:e3:d4:15:0d:b3: 3c:cd:98:2f:ec:6d:b8:48:fb:ba:51:f4:bc:e7:f9: e7:79:cc:de:69:a1:8d:00:8b:b7:05:b8:82:0a:58: 9c:e4:1b:e8:7b:02:b1:f9:c1:ff:a3:4a:da:50:78: 2e:96:89:79:69:05:10:6f:12:ad:86:61:a7:02:79: 08:5d:a7:f1:49:c8:c0:6c:3e:39:01:50:74:72:57: 6c:5a:7d:84:7e:78:5f:1a:31:99:04:d9:d0:84:55: 08:a3:6e:cf:01:e4:74:cb:9e:a8:37:c3:ff:e0:91: bb:af:d3:fc:76:fa:f4:a6:70:9e:f0:e2:1d:a8:bb: b6:f1:34:da:e6:f0:d5:86:e9:ba:2b:0d:6e:c8:a8: 74:da:02:db:c6:c7:d3:b5:c2:73:52:16:7d:87:28: b1:49:ae:c8:33:be:d2:20:9b:22:34:52:8c:70:be: 4c:92:2c:17:eb:77:10:f1:6c:67:c6:09:5e:57:05: ee:c7:b0:08:f7:06:a8:78:33:a7:d4:33:28:bc:67: 43:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:45:15:9E:B0:63:BF:C7:B2:34:7A:EE:22:47:63:64:61:16:8B:A2 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:f0:01:35:36:e5:67:bc:e8:8c:76:05:ff:85:73:34:95:18: 80:9f:4d:0c:0d:39:93:8a:0e:bc:2f:85:a8:df:83:23:4d:db: cb:df:ef:68:49:d2:1f:8c:86:ee:1c:30:80:c7:83:7d:a1:f1: ca:9f:c4:39:47:03:d9:aa:d1:4d:62:a7:0b:55:7d:99:51:7e: 06:b4:cd:15:92:b3:2e:81:1f:1f:13:08:b3:da:35:cd:3c:73: 2a:d1:59:1e:dd:5e:00:a7:a3:12:cd:8a:7b:c8:25:2c:b4:96: 52:bc:90:6a:be:16:69:4e:e1:73:f2:68:d0:db:ec:a0:39:03: 43:bf:83:c4:20:62:44:9d:2f:91:3e:62:e5:d4:fb:2c:36:62: 83:d2:b4:44:e8:1e:d4:78:c0:d0:65:3a:cb:26:5e:23:ea:4c: 95:0e:e2:cf:73:77:56:63:b3:f5:b1:16:ce:43:6a:48:e5:74: 97:88:f4:a7:9e:aa:ce:19:de:ad:d8:e3:af:f4:52:dc:40:8a: 25:a1:e5:5b:db:c4:b3:e2:90:19:80:40:db:4b:80:5e:8e:c6: 73:61:41:4d:23:cc:d6:4f:26:54:9e:c4:63:f8:f4:28:a8:2e: f9:d9:44:ac:70:c3:61:75:98:63:3a:6c:46:dc:be:cb:d2:94: 4d:e6:18:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyra2qiVKjB410Io9wxpU4TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwMzAxMjIwMTA5WhcNMjYwMzAyMjIwMTA5WjAzMTEwLwYDVQQD EyhiMTQ1MTU5ZWIwNjNiZmM3YjIzNDdhZWUyMjQ3NjM2NDYxMTY4YmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOAnZw2cd3iheqBJ+1xW4Z6a4Gz1 Jj4lUpG37uYbGKAcPSPC/kWgInn2b5N989yI31gBlCyM49QVDbM8zZgv7G24SPu6 UfS85/nneczeaaGNAIu3BbiCClic5BvoewKx+cH/o0raUHgulol5aQUQbxKthmGn AnkIXafxScjAbD45AVB0cldsWn2EfnhfGjGZBNnQhFUIo27PAeR0y56oN8P/4JG7 r9P8dvr0pnCe8OIdqLu28TTa5vDVhum6Kw1uyKh02gLbxsfTtcJzUhZ9hyixSa7I M77SIJsiNFKMcL5MkiwX63cQ8WxnxgleVwXux7AI9waoeDOn1DMovGdD8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFFFZ6wY7/HsjR67iJHY2RhFouiMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0vABNTbl Z7zojHYF/4VzNJUYgJ9NDA05k4oOvC+FqN+DI03by9/vaEnSH4yG7hwwgMeDfaHx yp/EOUcD2arRTWKnC1V9mVF+BrTNFZKzLoEfHxMIs9o1zTxzKtFZHt1eAKejEs2K e8glLLSWUryQar4WaU7hc/Jo0NvsoDkDQ7+DxCBiRJ0vkT5i5dT7LDZig9K0ROge 1HjA0GU6yyZeI+pMlQ7iz3N3VmOz9bEWzkNqSOV0l4j0p56qzhnerdjjr/RS3ECK JaHlW9vEs+KQGYBA20uAXo7Gc2FBTSPM1k8mVJ7EY/j0KKgu+dlErHDDYXWYYzps Rty+y9KUTeYYGg== -----END CERTIFICATE-----Generated at Mon Mar 2 02:39:42 2026 by rpki-client