$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: l3i+dCEC3dsRUz8v8QdmYUYv7gGI9tR4zaFJH3oExiI= Subject key identifier: 2B:E7:02:FF:66:C2:95:AE:A5:0D:F3:D1:92:58:A4:C7:33:9B:4C:69 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019FAA50C6AC1FA185FF00BB20D7048AC6B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 19F1 Signing time: Tue 28 Jul 2026 20:00:48 +0000 Manifest this update: Tue 28 Jul 2026 20:00:48 +0000 Manifest next update: Wed 29 Jul 2026 20:00:48 +0000 Files and hashes: 1: 2VGlQCljw9cFJl5EHzBeMDJwXVo.roa (hash: Do0oxRXzURqrwthzVRT/8OMjdF0dAGArF8nmDv/TCrU=) 2: Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa (hash: gQCxAX0kGUP6fOqE0f4xg6Y7BKr1YkDG2KCm3PY3vks=) 3: ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa (hash: 6ABtGMwyDO/6lM571vE9Iuqd9TQr+m5PP3ymm7KdDMo=) 4: FqgScginFUes_17Ndt6kdOrzAkA.roa (hash: a3G9kD/8P4BMkG64yuvOvu/MjxsZVk5qCgCtyW3lY6c=) 5: Ikkeya1yJgRDS-xhPDlnuPLetJs.roa (hash: glwjFgIZfVLfz8kep2uiVu5O3LaEznaNtCEp/lC03fQ=) 6: T6pXE_xgE4WrCZgfLS6PwaHzerg.roa (hash: G4WSUskcjpTP61QhWQEI/av+RXa/41Ip20fNLeEJAoQ=) 7: VLiSP46DJX8Dog7Og_5_Z19OaAw.roa (hash: 3gWIgE8p9hzKRB2RaJcWZL2QSZhVwmUm6N+ESpdKpAQ=) 8: WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa (hash: XiM6tnhPeoo8/I0UsVcX68fQNBFdvSj5FK8MxmFwo94=) 9: b_n3Z3GxujBB68-zb1vahju6Fp0.roa (hash: fBmej85zCOTwohAZSrZlJvl4CdYQMz+WBefO+9bGgMc=) 10: leefmemMjsnYBH_PRIls4mGDQQg.roa (hash: H8hE7idzBRzXS/SDOwJGlem7diQp5JTlS92HhAhqaHk=) 11: oSUSV9XksEu-hj7frAtIPDI4QUc.roa (hash: Ba7z9fv3oVKNrP/ZNMw28ZH2Y9v/Nbz2kHCWUqIYg+s=) 12: sFANASik-wL_AAsMTGDepkCLru8.roa (hash: hsLxQEI+C24jdO2zBJxR+yNy+Qjt/yzfuOvytd9u6lw=) 13: sVlG1_wshTtHh3K3-dmfU3V-ohU.roa (hash: bMT/BHfnv5hKh+kUsN5whSknK8wJI4XccjCUKzZX56c=) 14: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: XUwiN3Ppmwc0Odz1gDgmUh+ioezyBCwc7C1Y11d2U4s=) 15: y2cm6-exYMkmOGgTU1Cd07TyLP8.roa (hash: VU+nMgrW6E4VxS9BCUWRqC49ToNwPX6PlXdXakhEGJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:50:c6:ac:1f:a1:85:ff:00:bb:20:d7:04:8a:c6:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Jul 28 20:00:48 2026 GMT Not After : Jul 29 20:00:48 2026 GMT Subject: CN=2be702ff66c295aea50df3d19258a4c7339b4c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:b1:c0:92:4c:22:a8:b5:13:97:af:4c:a8: da:30:21:d4:d9:64:4a:7f:a9:27:cd:3f:64:a2:c2: 2d:8b:19:f0:84:4a:8f:aa:f7:b2:3e:26:9c:f3:94: 7c:8f:78:2b:94:04:0a:cb:26:43:98:a1:e6:07:98: 2c:28:e3:a0:82:b4:65:19:f1:0f:65:5c:89:d1:dc: dd:5d:98:1b:44:a3:f8:88:6f:7f:e7:83:38:e0:4b: f3:07:70:9b:ed:a8:ab:36:e1:32:50:b6:22:9c:8a: 0b:e5:fd:a5:24:89:d6:27:2a:d2:ee:5a:70:3c:e8: 15:17:e3:7b:7f:32:0f:06:08:40:06:fa:9e:aa:b0: ee:68:66:85:24:f5:b2:2c:a1:e5:49:8d:a2:68:2f: 72:e4:cf:35:28:b7:67:0f:6d:d3:a9:6d:14:e4:68: b4:0a:3a:6c:dc:69:39:84:16:5a:39:1a:d5:9f:77: 8f:b9:0f:02:6f:66:05:26:23:fb:70:5f:16:ef:9a: 12:1c:3c:3a:68:6d:f8:d3:5b:26:05:74:29:39:b4: cf:8b:37:81:6b:63:09:78:a3:91:63:87:ca:0f:4f: a7:98:93:eb:21:11:34:29:2c:4b:c4:ed:76:c5:81: d0:97:7c:ce:74:a7:32:a2:c1:df:51:6a:a6:bf:bb: 05:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E7:02:FF:66:C2:95:AE:A5:0D:F3:D1:92:58:A4:C7:33:9B:4C:69 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:f9:1d:a0:f3:89:4a:66:06:e8:c6:54:f0:ca:11:41:8b:98: 0c:aa:d7:ea:cb:b3:b3:74:2a:e1:0b:09:bd:6a:74:78:8d:3a: 7b:fd:24:d8:4b:96:21:1a:71:d0:01:03:8b:a1:03:f5:ab:d0: c9:c2:58:e4:6e:4b:2b:f7:ad:ea:24:e7:eb:a6:f1:b1:ac:37: c1:0c:e2:3d:24:87:7a:ed:94:7a:a5:ed:95:41:89:03:21:14: 26:36:19:42:7e:45:ec:04:74:8c:fa:8c:2d:3d:64:86:ac:ea: 6f:99:5f:84:b0:b4:77:f5:8c:d5:16:5f:57:63:9d:27:24:2c: b0:a0:6c:a0:04:d4:4c:50:3a:f6:a7:25:e1:bb:a1:7b:a8:84: c1:b0:6d:cd:6c:57:47:d1:5a:f8:01:70:69:0f:b0:bd:58:91: 5c:f4:1d:d8:be:02:b5:08:df:b0:57:ae:67:b6:e1:36:97:12: f1:c3:2d:7d:3b:a8:14:e9:c3:36:62:44:ab:5f:2c:bc:01:dc: a7:a4:f3:8f:a2:c9:cb:45:76:63:38:95:8f:61:90:f3:1f:a5: 14:8e:2f:a0:16:a6:c0:3a:2f:62:b3:c6:41:84:5e:f1:30:bc: 98:dd:85:d3:cf:3c:0e:9a:c9:1f:7d:d2:ef:3e:b4:ad:5c:43: bb:3a:ed:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qUMasH6GF/wC7INcEisa0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwNzI4MjAwMDQ4WhcNMjYwNzI5MjAwMDQ4WjAzMTEwLwYDVQQD EygyYmU3MDJmZjY2YzI5NWFlYTUwZGYzZDE5MjU4YTRjNzMzOWI0YzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6axwJJMIqi1E5evTKjaMCHU2WRK f6knzT9kosItixnwhEqPqveyPiac85R8j3grlAQKyyZDmKHmB5gsKOOggrRlGfEP ZVyJ0dzdXZgbRKP4iG9/54M44EvzB3Cb7airNuEyULYinIoL5f2lJInWJyrS7lpw POgVF+N7fzIPBghABvqeqrDuaGaFJPWyLKHlSY2iaC9y5M81KLdnD23TqW0U5Gi0 Cjps3Gk5hBZaORrVn3ePuQ8Cb2YFJiP7cF8W75oSHDw6aG3401smBXQpObTPizeB a2MJeKORY4fKD0+nmJPrIRE0KSxLxO12xYHQl3zOdKcyosHfUWqmv7sF/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvnAv9mwpWupQ3z0ZJYpMczm0xpMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0vkdoPOJ SmYG6MZU8MoRQYuYDKrX6suzs3Qq4QsJvWp0eI06e/0k2EuWIRpx0AEDi6ED9avQ ycJY5G5LK/et6iTn66bxsaw3wQziPSSHeu2UeqXtlUGJAyEUJjYZQn5F7AR0jPqM LT1khqzqb5lfhLC0d/WM1RZfV2OdJyQssKBsoATUTFA69qcl4buhe6iEwbBtzWxX R9Fa+AFwaQ+wvViRXPQd2L4CtQjfsFeuZ7bhNpcS8cMtfTuoFOnDNmJEq18svAHc p6Tzj6LJy0V2YziVj2GQ8x+lFI4voBamwDovYrPGQYRe8TC8mN2F0888DprJH33S 7z60rVxDuzrtBw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:39:39 2026 by rpki-client