$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: 9s1ETTX6osv+NANT5tV0pUPcFCBbD9nwuakwnW81Emw= Subject key identifier: F7:20:31:5F:12:30:F7:2B:DD:B0:A3:5D:31:3A:B4:97:96:78:25:74 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019FAA87E8B1ACA668D6A93EE95E62399AC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 19F3 Signing time: Tue 28 Jul 2026 21:01:01 +0000 Manifest this update: Tue 28 Jul 2026 21:01:01 +0000 Manifest next update: Wed 29 Jul 2026 21:01:01 +0000 Files and hashes: 1: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (hash: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q=) 2: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (hash: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ=) 3: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (hash: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo=) 4: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (hash: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI=) 5: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (hash: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE=) 6: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (hash: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc=) 7: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (hash: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8=) 8: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (hash: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM=) 9: Mdbc7JKGBe-JSvKB28h6Q_ApLiU.roa (hash: ixbEaYXOURIbpbdcksYTq3QhDvoC08h0/HFaZkHONBA=) 10: N7ElhbVyCmGSjUSh1AxjT63WzYw.roa (hash: W3FJJT1fp/7XCFXKVQfC6wjn61A9LFjVkKvFsdNlvHw=) 11: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (hash: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0=) 12: PoFBrEh2SMRPYVmU_szomrEefgE.roa (hash: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc=) 13: V1PdVFoshW1ar5HpIYyNCl-wxZg.roa (hash: 8JNuhL/a0qXG5i850tam3mN3diEt2c5ox0iX3jf8huA=) 14: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (hash: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8=) 15: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (hash: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8=) 16: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (hash: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o=) 17: _X1aB1grD4SEnY0N9BS0XD2icYQ.roa (hash: 8ohwVFQyC0+8LBOZ3vBnB2ZQPF3XbCAWhyBCtY+3UwE=) 18: bNLCkSinXiYwmDqOGOa8s-V6Q3Q.roa (hash: haFcBNVZwKKJJG8if5wj//WNo7O84ixbtXTuzJ5h90o=) 19: c7r0L2ENZSmqzGht-gN0WK2wO-w.roa (hash: qscdcuXNHP5xr9NKr0pzszSsGawZRBL4L0aRxzbki3I=) 20: da2QfG6A8HePFVhHUZPAybEpN68.roa (hash: TKp47i1BUIPNcl+xrP72HbJ0DwhwhsJyAX+gufSHOcQ=) 21: efwlLLHqb-bdy8PqwUcM4smevIk.roa (hash: dziFMotDF0gnY460BoEIQb6O67mGB4C/hN9W6acAk18=) 22: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (hash: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc=) 23: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (hash: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg=) 24: i39T_sxoePa7FkwXjI2KlpcV9nQ.roa (hash: xjv51Wh2+JZgrJ+iRtvSyXOWKDVobdGo9gsPb02h2X4=) 25: iPKJwckHS7fTX2BYHqvx9q3JA4g.roa (hash: 2bHm3BwYJ52KpSHXTQlcz+x91m3fEq3PirchX6IlyGw=) 26: iqnR0QT5Gp1ysbpIbYG1Jx1Dr-A.roa (hash: uT81Q71i5BXjU2YhhS0n8jdqFaplDdaFrFqRykt33OM=) 27: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (hash: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo=) 28: lcn7Wtg6ulEkp1Lc7XKZFro-mds.roa (hash: QCmVx87F8wdoRkStlUnKFmP4R7y7QH8VIpoG6J8hkG4=) 29: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (hash: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw=) 30: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (hash: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ=) 31: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (hash: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM=) 32: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (hash: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg=) 33: x3ERDAaeO48LeOr6lKQKB6Ey2mM.roa (hash: Y+nAlXRY4txRKWouCnodtOhRL0mCZVwY0SjTTDgCeMQ=) 34: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: JzSxLySKDzxiIF9XTSlnu7XpjNfLnw3tEMWyA+/vdeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:87:e8:b1:ac:a6:68:d6:a9:3e:e9:5e:62:39:9a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jul 28 21:01:01 2026 GMT Not After : Jul 29 21:01:01 2026 GMT Subject: CN=f720315f1230f72bddb0a35d313ab49796782574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:9c:db:d8:cb:7c:60:f2:2e:50:b3:6b:e3: 4b:ba:90:34:05:8b:01:41:b4:ce:24:e9:9b:60:a1: 56:90:e5:0a:aa:35:8f:94:98:a4:51:7c:e6:05:65: 13:c3:ec:cf:31:c4:da:97:b6:b9:f8:5d:a3:b7:e6: 50:25:7c:77:cf:c5:7a:35:f8:89:e3:df:d2:f6:26: 5f:7e:31:1b:11:c8:5a:64:eb:4e:d1:6c:d9:df:fa: 7b:77:8d:d5:84:cd:cd:33:1d:17:1e:d5:75:38:bc: 5b:4b:df:c7:ca:7f:4f:ae:ee:16:ef:1b:bd:2b:d0: b5:d3:d5:cd:2f:6b:45:cf:a3:e3:4c:ce:58:81:0c: 47:65:93:f9:e1:42:47:71:68:a7:e9:ce:07:47:f2: 9f:4b:39:e5:e1:0a:aa:15:08:89:5d:5d:47:65:da: a8:4f:03:5a:64:c5:4b:b1:96:13:6a:13:ec:51:3d: 7a:2c:e7:9c:26:fd:83:96:2e:ae:0a:c3:70:0a:9c: 01:59:0e:a3:4e:7c:9e:3f:c8:89:94:3d:15:d9:04: d8:d5:e4:70:42:52:66:05:87:d0:85:83:26:76:46: dd:d5:e4:ce:20:f0:92:ce:ad:9a:8b:2c:8c:2b:e7: cc:15:6c:cb:65:be:a5:eb:2f:ec:fb:fb:62:c4:45: 42:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:20:31:5F:12:30:F7:2B:DD:B0:A3:5D:31:3A:B4:97:96:78:25:74 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:73:5e:55:e8:6c:22:f3:84:53:2d:cb:d6:f9:ff:25:ff:fb: 62:84:66:89:6e:56:b9:ae:78:e0:b5:35:25:d5:6c:0b:b2:7f: 96:57:91:7b:a8:71:61:23:5b:c4:28:8d:0c:fe:9c:a2:da:c8: 0c:dd:b7:b4:57:3e:23:17:e1:14:b4:5f:68:72:84:5d:65:6f: 73:92:02:6e:bc:5b:7e:62:dd:5e:cf:f2:79:5c:41:8b:54:81: e3:57:c4:29:d0:35:8d:d6:ca:5b:bb:a9:f9:07:e5:c9:b1:43: 5c:60:3f:61:df:e0:3b:e8:dd:74:d7:85:2d:30:f2:a0:a0:27: 72:5a:2f:6b:92:1f:6f:2e:42:76:8e:fc:ac:8a:b8:56:a9:d9: f0:35:f5:8c:eb:8f:9f:14:9f:03:6e:4e:7d:c7:90:5f:e4:19: 28:31:40:2e:4f:04:4f:bc:1c:a7:bf:46:03:fe:b6:4c:c9:cb: 96:73:41:88:d2:a6:5f:12:e3:9a:e3:c2:76:ad:af:5c:79:3c: 51:96:37:c0:22:17:1e:12:d2:b1:6f:cc:84:ed:74:3c:ef:13: 95:80:e1:51:42:e1:48:c0:c1:2f:73:32:0e:ab:10:9a:4a:7b: 97:bd:f9:02:22:13:f5:9b:6c:8f:af:34:c2:ea:f5:f4:74:09: 50:6e:31:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qh+ixrKZo1qk+6V5iOZrFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwNzI4MjEwMTAxWhcNMjYwNzI5MjEwMTAxWjAzMTEwLwYDVQQD EyhmNzIwMzE1ZjEyMzBmNzJiZGRiMGEzNWQzMTNhYjQ5Nzk2NzgyNTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSGc29jLfGDyLlCza+NLupA0BYsB QbTOJOmbYKFWkOUKqjWPlJikUXzmBWUTw+zPMcTal7a5+F2jt+ZQJXx3z8V6NfiJ 49/S9iZffjEbEchaZOtO0WzZ3/p7d43VhM3NMx0XHtV1OLxbS9/Hyn9Pru4W7xu9 K9C109XNL2tFz6PjTM5YgQxHZZP54UJHcWin6c4HR/KfSznl4QqqFQiJXV1HZdqo TwNaZMVLsZYTahPsUT16LOecJv2Dli6uCsNwCpwBWQ6jTnyeP8iJlD0V2QTY1eRw QlJmBYfQhYMmdkbd1eTOIPCSzq2aiyyMK+fMFWzLZb6l6y/s+/tixEVC2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcgMV8SMPcr3bCjXTE6tJeWeCV0MB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3NeVehs IvOEUy3L1vn/Jf/7YoRmiW5Wua544LU1JdVsC7J/lleRe6hxYSNbxCiNDP6cotrI DN23tFc+IxfhFLRfaHKEXWVvc5ICbrxbfmLdXs/yeVxBi1SB41fEKdA1jdbKW7up +QflybFDXGA/Yd/gO+jddNeFLTDyoKAnclova5Ifby5Cdo78rIq4VqnZ8DX1jOuP nxSfA25OfceQX+QZKDFALk8ET7wcp79GA/62TMnLlnNBiNKmXxLjmuPCdq2vXHk8 UZY3wCIXHhLSsW/MhO10PO8TlYDhUULhSMDBL3MyDqsQmkp7l735AiIT9Ztsj680 wur19HQJUG4xow== -----END CERTIFICATE-----Generated at Tue Jul 28 23:20:48 2026 by rpki-client