$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: MrjfKGuiOWAjK09jzfIOpW3ZxPjxtZr1ExNxMxEun/w= Subject key identifier: D9:6E:14:5F:09:F1:45:AA:2D:3E:25:C4:FA:F7:F9:F7:64:64:62:88 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019FAB9A2F5BED49CA6FB784D6E1C1B97623 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 1291 Signing time: Wed 29 Jul 2026 02:00:36 +0000 Manifest this update: Wed 29 Jul 2026 02:00:36 +0000 Manifest next update: Thu 30 Jul 2026 02:00:36 +0000 Files and hashes: 1: B3LQrbE0D8oQ4aL3oL7prkhZdyg.roa (hash: DlK6M5zssqdBfWBogBRgB1KWMlUPTeM22cLgGd9OR+E=) 2: EblpiwRL9HlLzK24T8oP9IND1vQ.roa (hash: xm23w0o3y4eEG4Z/X+VeKtyIUdl513KI04Rcim87iI8=) 3: H96_Qc9SsITA0naiCSVL6y7VEJM.roa (hash: Rixat+/GKfD+/Qc5Q1rAIKjAt7zVyl2ONWoiw+w/7aY=) 4: KkqMLgVSOl4C9gkiDIZV5IAys_A.roa (hash: yUWuR1LKMlNOOPlPCHzgsf5Jj1BpkzuEJuF1kFFXOiw=) 5: Rb5hHaoWK42HVqMlLmdL2Q_tqs4.roa (hash: pvzrnsOI9tdcc9ULSntzOOVe3GikcQWZKLx+48F0nCc=) 6: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: eb+Z30Lzt+iEKpDs6w11SjweT50DflNzAYy81IxEqYY=) 7: _5dPGZCcsdHmpRhCTkOU-sos5GE.roa (hash: /u2/VDIfFnty31Q0Cg5Ee6PvdpGvq/sk0Sz5/j6Z4z4=) 8: _XOkat_tVbZSyUJD4uuRenyP92k.roa (hash: MO61vUIPE4xYG1HoXyKAbuzO/+H56vWiFpAKuIhdAOU=) 9: pUUovyR_3zQtaWqDGAW7Ac9HvB4.roa (hash: Fe3L3094CE69Fi+Zh6n4NgsG3bWV3oT1EQEavw3p2f4=) 10: qXcS6OI26rFTLi_T2I0DI0xKoyk.roa (hash: 7rGGuHEL+nQFILlUsjH4I+jgvUwVxc2dc664sGkuKo4=) 11: tz7F4eng4GbKZrftZOga_11upMA.roa (hash: pkYGrfaCo0zVxHfUdGVs2eZr/bDW6rBfCQtsQyDfE4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:9a:2f:5b:ed:49:ca:6f:b7:84:d6:e1:c1:b9:76:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Jul 29 02:00:36 2026 GMT Not After : Jul 30 02:00:36 2026 GMT Subject: CN=d96e145f09f145aa2d3e25c4faf7f9f764646288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:16:ea:7f:72:a3:f2:07:2d:8c:0d:b4:b8:9d: f7:60:5d:89:ac:91:35:e4:d2:74:4a:0b:04:be:13: 9c:88:55:d3:94:af:99:8a:a3:e3:c1:55:9f:c9:c5: 22:39:e6:cf:d9:5d:b2:fa:c4:ec:91:f2:3e:1a:bc: ab:b7:13:7a:f0:67:54:9b:16:b3:6f:18:fd:c9:6a: a0:4d:da:57:80:9d:24:56:8b:6a:d4:0b:3d:75:5d: f9:92:ef:3b:3d:53:38:16:2a:fd:69:a5:1a:a1:aa: 48:9a:87:06:5b:ab:19:49:3b:07:f2:31:92:a2:01: 63:7c:9f:2c:0d:8d:31:7b:b4:98:64:2d:9d:d7:09: 98:f5:65:d2:47:ae:cd:0a:69:84:9b:a2:31:8f:53: aa:4d:79:af:3c:de:d7:26:af:52:41:58:15:0b:d4: a9:b3:ac:c8:b1:b4:61:70:a8:02:3f:ad:b2:0f:ae: 48:41:43:92:84:ed:47:b6:fa:a6:06:8f:f2:d3:bb: ce:8c:b6:65:ea:ac:49:17:ae:20:28:97:81:7c:07: c1:8f:e1:9a:5f:68:6c:b6:27:a2:f5:11:ff:6d:0e: 79:fc:39:93:cf:67:50:f0:d6:c8:5a:53:8b:2a:3b: 75:d2:d9:58:7c:8e:c4:89:ce:73:d8:43:9f:d3:d7: 5f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6E:14:5F:09:F1:45:AA:2D:3E:25:C4:FA:F7:F9:F7:64:64:62:88 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:85:d3:73:2e:11:8c:b6:09:39:42:47:a5:78:49:cc:67:9d: 0a:89:c9:b2:9c:76:aa:71:23:03:5b:30:22:3d:2a:38:66:21: 3d:87:fb:8a:66:a8:d5:9d:d7:d8:fa:7d:4c:d3:dc:1b:84:11: b5:2b:4e:50:38:12:10:01:22:a6:9c:ff:fb:ce:97:c6:d1:8f: 82:f7:f6:16:a6:df:cd:62:81:ff:92:c0:93:0a:d5:2e:5c:ac: 7f:01:f1:85:14:33:ec:d0:81:da:39:b3:a5:c3:2e:13:35:ee: fe:05:58:b4:93:63:c3:e1:8f:84:e4:03:3e:78:ca:9b:92:28: 5b:44:c9:9e:bd:2d:22:8b:f0:42:dc:7f:76:47:91:5d:a0:de: 4e:31:d5:f6:37:42:85:ae:31:92:d7:00:f7:be:26:b8:28:9d: f8:19:de:10:0c:91:9c:23:44:00:db:0b:cf:ca:8f:f9:7a:12: f6:5f:ff:0d:ad:7e:da:b1:a6:12:3a:c5:61:92:1b:2b:4f:72: f1:6b:a7:42:1d:ae:8d:3a:4d:0e:9d:96:5f:42:2a:8c:59:49: 93:87:83:e3:a4:7e:7d:e5:6b:f2:de:66:3e:c8:68:fe:9d:63: b7:88:be:5f:ae:34:46:f3:5a:e6:14:72:7d:97:b6:44:e3:1e: b2:15:9a:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rmi9b7UnKb7eE1uHBuXYjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwNzI5MDIwMDM2WhcNMjYwNzMwMDIwMDM2WjAzMTEwLwYDVQQD EyhkOTZlMTQ1ZjA5ZjE0NWFhMmQzZTI1YzRmYWY3ZjlmNzY0NjQ2Mjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rbqf3Kj8gctjA20uJ33YF2JrJE1 5NJ0SgsEvhOciFXTlK+ZiqPjwVWfycUiOebP2V2y+sTskfI+GryrtxN68GdUmxaz bxj9yWqgTdpXgJ0kVotq1As9dV35ku87PVM4Fir9aaUaoapImocGW6sZSTsH8jGS ogFjfJ8sDY0xe7SYZC2d1wmY9WXSR67NCmmEm6Ixj1OqTXmvPN7XJq9SQVgVC9Sp s6zIsbRhcKgCP62yD65IQUOShO1HtvqmBo/y07vOjLZl6qxJF64gKJeBfAfBj+Ga X2hstiei9RH/bQ55/DmTz2dQ8NbIWlOLKjt10tlYfI7Eic5z2EOf09dfhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNluFF8J8UWqLT4lxPr3+fdkZGKIMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIXTcy4R jLYJOUJHpXhJzGedConJspx2qnEjA1swIj0qOGYhPYf7imao1Z3X2Pp9TNPcG4QR tStOUDgSEAEippz/+86XxtGPgvf2FqbfzWKB/5LAkwrVLlysfwHxhRQz7NCB2jmz pcMuEzXu/gVYtJNjw+GPhOQDPnjKm5IoW0TJnr0tIovwQtx/dkeRXaDeTjHV9jdC ha4xktcA974muCid+BneEAyRnCNEANsLz8qP+XoS9l//Da1+2rGmEjrFYZIbK09y 8WunQh2ujTpNDp2WX0IqjFlJk4eD46R+feVr8t5mPsho/p1jt4i+X640RvNa5hRy fZe2ROMeshWauA== -----END CERTIFICATE-----Generated at Wed Jul 29 04:11:21 2026 by rpki-client