$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft File: XPMa_DbLaVUAf-l-1KXjGF0icbo.mft (raw, json) Hash identifier: gzvp2CERtVCx374AYTuTCcuteklBAvilw3y3rbxRx4g= Subject key identifier: EF:DE:B3:12:AA:86:0B:83:81:27:91:6B:43:16:5F:EE:DC:74:91:17 Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 019FAAF56719000D24A8725AFFC4E14D9201 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft Manifest number: 19EC Signing time: Tue 28 Jul 2026 23:00:37 +0000 Manifest this update: Tue 28 Jul 2026 23:00:37 +0000 Manifest next update: Wed 29 Jul 2026 23:00:37 +0000 Files and hashes: 1: 1-dAYLfzEcuSnLWMiLXXSdIwT4rU.roa (hash: WhA4jtvtbE79AQa3IJODloRRuW4QHZIWAX/A32JL7m4=) 2: GOmV_75Dv1jwn9wiVioc2BSPZTo.roa (hash: pRTwblvRoqzlcA6ZsWJlwN1cr9uhPXOkl31rFqoTMf8=) 3: NklSIVNcNIWeMyDnmkM31BBhz1c.roa (hash: UKSW2BDTyMNTJDzhPRFU+Wzj1R5uLkgmHOPWx5CWEqQ=) 4: W4UHRrBQAt50eiIa0aXkDS2q-jI.roa (hash: wJtHrvfPjqzoQaYOzEJ/TBfUCsO/TaG3P+SEUHqq3Ig=) 5: XPMa_DbLaVUAf-l-1KXjGF0icbo.crl (hash: e09QgooRLHgmigwonanLnOxANRzle8wZx9Zubvn7qWc=) 6: _5CTbNuX6fLN7jDqdj1oQp0kARc.roa (hash: Ha0LgykvjQP+9qGPn28IFIuJ0yQRLEpHe1bDMbGiuiE=) 7: _YOXL7ZxwGLyAFtXgmbGoGmsxw0.roa (hash: oYcEDHMjBaLjLdS2+cnHZQVD1ORy9f2L160BSTCgJ4c=) 8: itgrIp1NxpdNbAgMEeQKpbEmf5o.roa (hash: Js4lM2igXS9YqpQe0RjS4UXqcJs8/ISJx7M/fH+77eg=) 9: lxIA5T6ig6P82Z6FpI76sa5r9Hk.roa (hash: 3LHUUi612Oq28/k9MVav0SeJK2Lmj7BOxrV2xdjlDis=) 10: szXceV_8JO0f_7ooL6S8iduW9xI.roa (hash: xeJBYCAXDOSNVRxdgWGAZ1ipDc3y7H3KXIsJs1D2FK4=) 11: xnSiVa_Qi8Hl5xGaTydyCAcB4Q4.roa (hash: SWwZIzY753Ls9csZNqAI1seyxm1jJEeEibvAi3lb+6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 22:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:f5:67:19:00:0d:24:a8:72:5a:ff:c4:e1:4d:92:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: Jul 28 23:00:37 2026 GMT Not After : Jul 29 23:00:37 2026 GMT Subject: CN=efdeb312aa860b838127916b43165feedc749117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:c8:bc:3d:f1:01:b2:4d:17:29:de:d1:a4: 06:1a:dc:0f:95:90:da:16:0d:4e:cd:97:96:6f:14: 5c:21:05:c6:71:34:c5:f9:44:51:5e:ed:1e:86:f4: 5d:aa:c2:25:b2:06:49:e4:d6:44:34:10:95:a6:50: dc:70:ec:2f:88:17:ad:32:e6:49:d8:98:5c:ef:83: 94:09:a0:a4:70:91:a3:6b:ea:d6:ec:e8:a2:61:4b: 7b:6b:3e:77:60:f0:08:92:e9:b1:74:49:25:5c:01: 7c:80:ad:e3:e4:90:cd:3e:74:d5:e1:af:16:82:82: ed:d5:c9:4f:ab:21:31:f2:89:3d:52:03:08:4a:d0: e1:bd:7b:e6:b9:3e:49:9f:f0:9b:1c:74:c4:ba:ac: c9:b5:a0:55:d9:88:0b:ac:2e:9f:45:3a:fe:e7:09: ab:c2:41:57:82:65:3d:00:40:85:ff:69:f9:1b:7d: 71:d0:58:83:3b:76:ac:e4:93:34:5d:6c:15:e6:7d: b8:0a:42:d3:0f:0c:5b:11:9c:5a:d0:a1:3d:9e:0e: 7e:25:c5:15:cb:e6:5e:1b:4c:da:ac:5e:97:5c:38: b3:1e:d7:77:4a:ee:28:3f:d4:f1:ed:1b:91:d8:ae: 0d:a2:75:5e:15:e2:7d:ca:2e:de:23:4c:91:d6:04: 7a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DE:B3:12:AA:86:0B:83:81:27:91:6B:43:16:5F:EE:DC:74:91:17 X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:1f:66:a4:5a:2c:7e:0d:f3:e0:cf:1c:e9:88:95:d1:a7:1f: ca:4d:74:c2:b4:c9:28:72:b5:fb:65:2c:a8:ed:65:2d:13:3e: 5b:a5:d5:c6:76:d6:ff:db:5c:b3:c2:f9:d7:3c:42:bd:fc:f5: 47:7c:5d:65:e0:5a:9a:ba:24:43:47:e3:e9:01:1e:b3:84:89: be:6c:b1:c7:4a:58:6e:11:8a:74:98:ca:f6:18:66:fd:6d:73: e0:e6:48:48:9b:c2:e4:65:80:0b:85:71:aa:40:f3:58:71:fb: df:2a:f4:c5:4e:83:c4:95:45:35:56:b8:98:66:d1:d2:4f:a6: a4:b2:1f:f1:af:f1:a2:56:59:86:19:1f:d0:68:ce:92:7d:f7: e0:64:3d:9a:c4:f9:9e:0c:de:85:d1:79:99:04:bd:00:60:e2: 62:f3:e0:5b:d6:ae:9e:cb:31:e7:4a:16:bb:61:78:8d:af:48: c9:0f:37:68:09:ff:68:e5:ce:6c:a9:32:62:d9:3a:47:43:2a: 36:ea:7d:2b:d9:58:96:ec:88:0b:2b:ea:53:c3:e3:b2:dc:46: d4:1f:03:9c:07:45:9e:9e:a4:cd:27:6b:06:5b:95:dd:17:29: b3:53:00:14:d9:09:8c:a3:fd:26:96:fa:e2:a0:36:c1:65:fd: 04:ec:d4:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+q9WcZAA0kqHJa/8ThTZIBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjYwNzI4MjMwMDM3WhcNMjYwNzI5MjMwMDM3WjAzMTEwLwYDVQQD EyhlZmRlYjMxMmFhODYwYjgzODEyNzkxNmI0MzE2NWZlZWRjNzQ5MTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdzIvD3xAbJNFyne0aQGGtwPlZDa Fg1OzZeWbxRcIQXGcTTF+URRXu0ehvRdqsIlsgZJ5NZENBCVplDccOwviBetMuZJ 2Jhc74OUCaCkcJGja+rW7OiiYUt7az53YPAIkumxdEklXAF8gK3j5JDNPnTV4a8W goLt1clPqyEx8ok9UgMIStDhvXvmuT5Jn/CbHHTEuqzJtaBV2YgLrC6fRTr+5wmr wkFXgmU9AECF/2n5G31x0FiDO3as5JM0XWwV5n24CkLTDwxbEZxa0KE9ng5+JcUV y+ZeG0zarF6XXDizHtd3Su4oP9Tx7RuR2K4NonVeFeJ9yi7eI0yR1gR6swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/esxKqhguDgSeRa0MWX+7cdJEXMB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQtNzM2ZDEyODg4Y2E4 LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMB9mpFos fg3z4M8c6YiV0acfyk10wrTJKHK1+2UsqO1lLRM+W6XVxnbW/9tcs8L51zxCvfz1 R3xdZeBamrokQ0fj6QEes4SJvmyxx0pYbhGKdJjK9hhm/W1z4OZISJvC5GWAC4Vx qkDzWHH73yr0xU6DxJVFNVa4mGbR0k+mpLIf8a/xolZZhhkf0GjOkn334GQ9msT5 ngzehdF5mQS9AGDiYvPgW9aunssx50oWu2F4ja9IyQ83aAn/aOXObKkyYtk6R0Mq Nup9K9lYluyICyvqU8PjstxG1B8DnAdFnp6kzSdrBluV3Rcps1MAFNkJjKP9Jpb6 4qA2wWX9BOzUKA== -----END CERTIFICATE-----Generated at Wed Jul 29 00:26:16 2026 by rpki-client