$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json) Hash identifier: 3+Jput+gyvmvluM4pxijthgy6UWy+EQT46JKRSkVDgg= Subject key identifier: 23:F7:E6:A1:14:2A:1A:9F:FB:EF:16:4C:CE:B5:13:7D:71:23:46:C4 Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 019CA7FCA8E67AA621DA478A9492199C721C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft Manifest number: 104B Signing time: Sun 01 Mar 2026 06:01:19 +0000 Manifest this update: Sun 01 Mar 2026 06:01:19 +0000 Manifest next update: Mon 02 Mar 2026 06:01:19 +0000 Files and hashes: 1: 0VXk7KxyGNBKoMzTYJumg3MOTyI.roa (hash: OtU0hvX0Vami3LTspcOPpks558imPCiHhI08tCDppGE=) 2: 8S2f0mMNsD7xxV7Ty48Yj_vXc24.roa (hash: bbt0XT/b4GdymMLqxvA9TWB6kuEszEh++apw2K2jMJo=) 3: 8w-IWf2lrtKPBt5qMeYx4vc1wIo.roa (hash: dmXJGV07k4HSNMpFyTWiKNXuMOxONHC1FWpZG/gmuUw=) 4: JaK5nEHPaQ0eg4QVia6pq3nQtT8.asa (hash: zedp2dasOOuQWUFRKt1kDWC26clgR3XYNTuR7fBJPis=) 5: K91Q4lr9fT2_HRFw2W2qOJCfHfw.asa (hash: S3HIvCfdHY15prwrA39u7TMubC1wO10vPZ16cT0joHY=) 6: P3ksiU6dR-MB5dwO9grj0b7EMXU.roa (hash: bIr8a6sPdRjwwSD8CC5kO5ixUwkkeuD93IkwxtBRKV4=) 7: V2_sT2jDOr8MNnfYkhj5mMdvMaM.asa (hash: wVzZdXFDBv7mOQErQUozopppuOlT1ZjyUfEdZpNO8vQ=) 8: kZOd5Cty9wDNke0SSipQ7xUfjXk.roa (hash: Nh7Xl6+9xgc8FPGMljfSPGluYgLxctUPi58GqbyJNFM=) 9: plt_9sG7wtfK-X5IzTU2wQwMo9k.roa (hash: jDkUUlBe6ISyETczyYHxkJjtY7ZB3oieA1Lcm/dcjlE=) 10: t1mwU24RWx_QtHlt8VAyAaicScc.asa (hash: qul+FoGF3pEOmc/vqfxBeRQ9gtI1SffvAcYIByELYPs=) 11: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: L+yXWtMVvQ+uUi1ODCot6jVjSD8ylJn91IcLtTpiLU0=) 12: yjSw7EGM3wf6F5BYX5IX39SdB9g.roa (hash: W5I+pZbCjC+Wm9EnLWz0YxI4s3U4AfirO0LVljkjaHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a7:fc:a8:e6:7a:a6:21:da:47:8a:94:92:19:9c:72:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Mar 1 06:01:19 2026 GMT Not After : Mar 2 06:01:19 2026 GMT Subject: CN=23f7e6a1142a1a9ffbef164cceb5137d712346c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:38:c6:88:26:db:c9:6c:58:87:d7:16:5e:c0: ac:8a:d3:22:41:71:f5:a6:1f:86:41:b0:84:3d:43: 2f:9e:b5:b8:38:df:bb:89:9d:6f:cd:17:38:02:fc: c4:0e:6e:a7:9b:1a:40:c6:f8:00:85:e8:04:8d:23: 61:86:f5:58:97:4e:53:13:36:06:04:2d:c0:13:a1: 3b:d9:f5:7d:ca:cf:86:cd:5b:f5:03:2c:6c:3a:0a: db:16:fb:dc:4e:9f:d3:93:57:3e:f4:8c:b2:19:f3: ef:fd:06:a2:5d:77:7d:dc:ec:fc:0b:8d:9b:08:06: c9:19:8a:cf:0d:d0:df:3c:43:12:90:d3:4a:69:04: d4:65:31:69:21:64:cc:bc:62:2d:4e:ab:ce:03:88: 49:eb:58:a4:86:74:63:18:d9:3a:af:f1:5e:75:1a: 4b:80:d9:78:46:64:57:dc:85:61:28:49:76:8c:5c: 60:d4:7e:be:eb:44:29:3f:c5:a9:1d:5b:af:1d:09: 62:3c:16:c7:0f:2f:6c:fe:a5:20:2e:9a:a8:d0:65: d7:c7:eb:64:f3:25:4d:8d:4a:c8:9a:f5:6e:d5:17: d2:52:fe:c7:f4:e3:42:ac:6e:32:fb:e9:e1:f9:51: 40:88:13:d0:86:c4:55:09:ae:5d:a6:2c:d6:87:9a: a6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F7:E6:A1:14:2A:1A:9F:FB:EF:16:4C:CE:B5:13:7D:71:23:46:C4 X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e1:2b:1b:eb:cf:61:08:d1:7b:ac:56:71:84:e5:06:0d:12: e5:c8:10:6f:64:b4:77:7f:a9:9e:4c:7f:c5:e2:32:a9:e1:72: 63:49:c5:c8:77:c8:cb:4c:09:92:59:16:7f:ad:0f:da:ec:48: bc:89:fa:9f:67:e1:89:89:98:b2:a3:7b:30:c3:2a:72:e6:64: 93:b3:09:bf:1b:db:86:cf:80:71:ac:58:62:71:3e:b0:e8:1d: 14:a8:aa:87:e6:7b:00:1a:d4:be:50:e5:51:ea:cd:4b:11:c1: e5:75:eb:59:81:85:d3:76:74:24:dd:77:5a:c6:3b:17:cf:01: 32:30:b2:8c:e1:19:a9:16:9d:d7:f7:f0:9d:fb:27:83:ee:34: 36:7f:a0:ad:4e:b4:6b:7e:e4:c5:7c:9d:88:d8:bd:fa:cf:f8: c7:be:98:78:6c:30:fb:90:99:b0:c7:3d:2d:80:03:96:4e:e5: 53:76:61:e8:6f:6b:62:54:6e:17:f7:51:92:a5:81:07:be:3b: 0d:78:76:2b:b4:e2:c5:df:78:18:13:7e:1c:96:5b:7f:0e:4e: c1:97:2c:bf:aa:18:0f:1e:70:7b:88:fc:eb:6c:a2:e2:a5:a3: b7:9a:ec:07:25:23:60:8d:d2:3e:5e:c8:fe:09:14:1a:18:74: 17:2b:12:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyn/KjmeqYh2keKlJIZnHIcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjYwMzAxMDYwMTE5WhcNMjYwMzAyMDYwMTE5WjAzMTEwLwYDVQQD EygyM2Y3ZTZhMTE0MmExYTlmZmJlZjE2NGNjZWI1MTM3ZDcxMjM0NmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzjGiCbbyWxYh9cWXsCsitMiQXH1 ph+GQbCEPUMvnrW4ON+7iZ1vzRc4AvzEDm6nmxpAxvgAhegEjSNhhvVYl05TEzYG BC3AE6E72fV9ys+GzVv1AyxsOgrbFvvcTp/Tk1c+9IyyGfPv/QaiXXd93Oz8C42b CAbJGYrPDdDfPEMSkNNKaQTUZTFpIWTMvGItTqvOA4hJ61ikhnRjGNk6r/FedRpL gNl4RmRX3IVhKEl2jFxg1H6+60QpP8WpHVuvHQliPBbHDy9s/qUgLpqo0GXXx+tk 8yVNjUrImvVu1RfSUv7H9ONCrG4y++nh+VFAiBPQhsRVCa5dpizWh5qmVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCP35qEUKhqf++8WTM61E31xI0bEMB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuErG+vP YQjRe6xWcYTlBg0S5cgQb2S0d3+pnkx/xeIyqeFyY0nFyHfIy0wJklkWf60P2uxI vIn6n2fhiYmYsqN7MMMqcuZkk7MJvxvbhs+AcaxYYnE+sOgdFKiqh+Z7ABrUvlDl UerNSxHB5XXrWYGF03Z0JN13WsY7F88BMjCyjOEZqRad1/fwnfsng+40Nn+grU60 a37kxXydiNi9+s/4x76YeGww+5CZsMc9LYADlk7lU3Zh6G9rYlRuF/dRkqWBB747 DXh2K7Tixd94GBN+HJZbfw5OwZcsv6oYDx5we4j862yi4qWjt5rsByUjYI3SPl7I /gkUGhh0FysSUQ== -----END CERTIFICATE-----Generated at Sun Mar 1 16:32:06 2026 by rpki-client