$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: Ou73Tlp4yLcR1U0Y5hrH6lyKwESl+RYCQ4KROapUVz0= Subject key identifier: E0:97:9C:5F:ED:33:F0:16:6A:B2:64:A7:74:D3:5E:F0:D1:3A:AD:05 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019FA862641281E4AD081FD5E1699E107E03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 19F0 Signing time: Tue 28 Jul 2026 11:00:48 +0000 Manifest this update: Tue 28 Jul 2026 11:00:48 +0000 Manifest next update: Wed 29 Jul 2026 11:00:48 +0000 Files and hashes: 1: 2VGlQCljw9cFJl5EHzBeMDJwXVo.roa (hash: Do0oxRXzURqrwthzVRT/8OMjdF0dAGArF8nmDv/TCrU=) 2: Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa (hash: gQCxAX0kGUP6fOqE0f4xg6Y7BKr1YkDG2KCm3PY3vks=) 3: ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa (hash: 6ABtGMwyDO/6lM571vE9Iuqd9TQr+m5PP3ymm7KdDMo=) 4: FqgScginFUes_17Ndt6kdOrzAkA.roa (hash: a3G9kD/8P4BMkG64yuvOvu/MjxsZVk5qCgCtyW3lY6c=) 5: Ikkeya1yJgRDS-xhPDlnuPLetJs.roa (hash: glwjFgIZfVLfz8kep2uiVu5O3LaEznaNtCEp/lC03fQ=) 6: T6pXE_xgE4WrCZgfLS6PwaHzerg.roa (hash: G4WSUskcjpTP61QhWQEI/av+RXa/41Ip20fNLeEJAoQ=) 7: VLiSP46DJX8Dog7Og_5_Z19OaAw.roa (hash: 3gWIgE8p9hzKRB2RaJcWZL2QSZhVwmUm6N+ESpdKpAQ=) 8: WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa (hash: XiM6tnhPeoo8/I0UsVcX68fQNBFdvSj5FK8MxmFwo94=) 9: b_n3Z3GxujBB68-zb1vahju6Fp0.roa (hash: fBmej85zCOTwohAZSrZlJvl4CdYQMz+WBefO+9bGgMc=) 10: leefmemMjsnYBH_PRIls4mGDQQg.roa (hash: H8hE7idzBRzXS/SDOwJGlem7diQp5JTlS92HhAhqaHk=) 11: oSUSV9XksEu-hj7frAtIPDI4QUc.roa (hash: Ba7z9fv3oVKNrP/ZNMw28ZH2Y9v/Nbz2kHCWUqIYg+s=) 12: sFANASik-wL_AAsMTGDepkCLru8.roa (hash: hsLxQEI+C24jdO2zBJxR+yNy+Qjt/yzfuOvytd9u6lw=) 13: sVlG1_wshTtHh3K3-dmfU3V-ohU.roa (hash: bMT/BHfnv5hKh+kUsN5whSknK8wJI4XccjCUKzZX56c=) 14: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: oe4GjgMeJvDasxGmijnorvRbSzbCSUInvRDXiess5Q8=) 15: y2cm6-exYMkmOGgTU1Cd07TyLP8.roa (hash: VU+nMgrW6E4VxS9BCUWRqC49ToNwPX6PlXdXakhEGJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:62:64:12:81:e4:ad:08:1f:d5:e1:69:9e:10:7e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Jul 28 11:00:48 2026 GMT Not After : Jul 29 11:00:48 2026 GMT Subject: CN=e0979c5fed33f0166ab264a774d35ef0d13aad05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:80:89:8a:f4:bd:4d:a9:43:99:6b:07:30: cb:ba:06:f7:56:b9:53:43:a3:a5:27:74:87:29:34: 6d:44:15:92:9d:9d:ad:cb:95:fd:62:7b:e2:6e:26: a0:33:58:86:a5:35:0a:10:37:f5:56:b3:20:0d:21: b3:d9:3d:f4:47:0f:52:ba:53:89:4e:d1:24:fc:9e: 17:9c:65:0d:d4:ac:39:57:89:dd:0a:2e:98:77:c0: f2:43:e4:9f:df:70:7a:6b:e1:79:4a:d0:c7:6f:06: 51:c0:cf:72:00:11:17:5b:bf:5f:e9:a5:39:ac:32: 22:84:db:42:5c:25:70:4e:ab:04:aa:a3:d4:24:0d: cc:c8:e0:08:23:d3:93:1b:0b:44:30:42:6d:82:d3: cb:98:26:22:46:d7:1d:ba:c2:9f:ed:99:01:6b:41: ff:36:be:0a:f0:1d:52:f6:78:8d:26:a9:04:c6:8b: 3f:e0:ad:d9:2a:61:23:35:ea:5b:7b:3e:25:9a:cc: 81:25:df:04:47:bf:e1:af:96:52:47:18:ed:fe:77: 1d:72:35:47:b9:ad:9a:7b:4d:57:f4:45:5e:46:20: 1d:5c:84:d9:ec:f6:80:13:ac:fe:d6:7e:6e:9c:11: a2:a6:39:10:2f:9e:28:d6:4c:8c:01:02:b8:5e:18: f0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:97:9C:5F:ED:33:F0:16:6A:B2:64:A7:74:D3:5E:F0:D1:3A:AD:05 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ba:71:95:ec:91:a4:cb:43:4c:65:3e:e6:bb:14:4f:15:0e: 42:45:b3:bb:71:eb:8c:a7:10:d1:3f:7e:4e:44:44:1b:74:f4: ec:f6:5e:4c:f1:b4:f5:94:e0:7a:ed:c7:a7:9a:83:98:c8:3d: a9:ab:b3:c6:c5:b4:00:f9:c5:ed:35:f7:0c:b3:05:53:4f:a3: 58:15:c0:e2:ac:37:4d:50:1d:df:a8:6c:69:26:80:00:bc:64: eb:19:ef:c2:94:67:b7:b7:e2:ab:68:ab:25:3c:2f:3f:ce:72: a5:b7:71:70:eb:6e:38:a6:fa:55:17:a6:73:fe:40:4c:81:7d: 6a:c4:3b:34:91:a5:d4:08:95:57:6b:e4:23:8e:52:51:2f:f8: b3:d4:42:80:dc:31:8c:66:1e:d7:05:ef:34:9f:44:3b:5f:4f: a2:bc:60:bd:09:15:65:fd:a3:db:23:b0:a5:97:27:c7:a0:89: 73:58:9c:9e:a7:9c:24:4c:90:6c:4d:a3:d9:76:42:5d:4b:58: 3f:51:6b:57:3e:a4:eb:30:89:1b:83:66:b9:4a:fe:84:e3:24: 14:b5:fc:78:dd:65:68:7c:5e:30:58:f1:4b:63:4c:fc:53:c3: 22:aa:64:d2:de:12:2e:83:d7:5e:a2:60:b9:a1:1a:2f:5d:63: f7:c6:2b:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oYmQSgeStCB/V4WmeEH4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwNzI4MTEwMDQ4WhcNMjYwNzI5MTEwMDQ4WjAzMTEwLwYDVQQD EyhlMDk3OWM1ZmVkMzNmMDE2NmFiMjY0YTc3NGQzNWVmMGQxM2FhZDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHOAiYr0vU2pQ5lrBzDLugb3VrlT Q6OlJ3SHKTRtRBWSnZ2ty5X9YnvibiagM1iGpTUKEDf1VrMgDSGz2T30Rw9SulOJ TtEk/J4XnGUN1Kw5V4ndCi6Yd8DyQ+Sf33B6a+F5StDHbwZRwM9yABEXW79f6aU5 rDIihNtCXCVwTqsEqqPUJA3MyOAII9OTGwtEMEJtgtPLmCYiRtcdusKf7ZkBa0H/ Nr4K8B1S9niNJqkExos/4K3ZKmEjNepbez4lmsyBJd8ER7/hr5ZSRxjt/ncdcjVH ua2ae01X9EVeRiAdXITZ7PaAE6z+1n5unBGipjkQL54o1kyMAQK4XhjwHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCXnF/tM/AWarJkp3TTXvDROq0FMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLpxleyR pMtDTGU+5rsUTxUOQkWzu3HrjKcQ0T9+TkREG3T07PZeTPG09ZTgeu3Hp5qDmMg9 qauzxsW0APnF7TX3DLMFU0+jWBXA4qw3TVAd36hsaSaAALxk6xnvwpRnt7fiq2ir JTwvP85ypbdxcOtuOKb6VRemc/5ATIF9asQ7NJGl1AiVV2vkI45SUS/4s9RCgNwx jGYe1wXvNJ9EO19PorxgvQkVZf2j2yOwpZcnx6CJc1icnqecJEyQbE2j2XZCXUtY P1FrVz6k6zCJG4NmuUr+hOMkFLX8eN1laHxeMFjxS2NM/FPDIqpk0t4SLoPXXqJg uaEaL11j98Yr+g== -----END CERTIFICATE-----Generated at Tue Jul 28 19:36:41 2026 by rpki-client