$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: QN1+1cs9oxdPZjFWH9265FeerqRJveR3DBjnxNiGHSc= Subject key identifier: 75:89:61:54:03:6C:7A:63:8F:31:5D:26:05:A1:97:B0:80:09:CB:81 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019EBF910ECE77979844877BA9DA59F58A10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 1992 Signing time: Sat 13 Jun 2026 06:00:15 +0000 Manifest this update: Sat 13 Jun 2026 06:00:15 +0000 Manifest next update: Sun 14 Jun 2026 06:00:15 +0000 Files and hashes: 1: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (hash: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew=) 2: B3OeokPEIHVspK8KnB4E2xEIauA.roa (hash: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4=) 3: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (hash: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os=) 4: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (hash: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs=) 5: KzdQ6MYBCl2ir-P86lDTtzaCt6M.roa (hash: h0pLqI3V5xBNJ0ejZS7hNIXSpXsgRqsYEzH47nvj1rY=) 6: PMhUU73xUVC7raWhgd5q_EKF038.roa (hash: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ=) 7: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (hash: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY=) 8: VWMQVWn-fMxdyDNhNc6f7Kyy09Y.roa (hash: Z09Yv6W87TB4u/fOV8oJx/K3Cijv1Xqstm0UVafkQZs=) 9: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (hash: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8=) 10: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (hash: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws=) 11: re_1WedxziUW08jNtG4jbnB22Hw.roa (hash: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4=) 12: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (hash: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: o2DbyH0xoCMqVmgCXM0E4Jv6zOo+ZDucmWcEwQtgX5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:91:0e:ce:77:97:98:44:87:7b:a9:da:59:f5:8a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jun 13 06:00:15 2026 GMT Not After : Jun 14 06:00:15 2026 GMT Subject: CN=75896154036c7a638f315d2605a197b08009cb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:09:f3:38:c2:cb:07:1b:29:8e:5a:44:03: a2:22:d5:c8:79:b7:de:84:3f:04:da:fe:3b:64:36: d6:da:df:2d:d0:83:e9:8a:6d:56:42:bd:5c:f9:db: 2e:78:52:0c:fc:37:a2:64:c7:6b:cb:11:4a:71:63: 32:f1:52:34:e3:e4:f3:71:d5:77:f7:6d:58:31:1c: bd:0f:bd:05:ad:63:52:4e:a3:6c:a7:fa:9e:b0:b3: f4:ae:dc:8c:1a:fe:ac:f0:60:d1:75:b7:f0:0a:00: c6:ad:d2:12:9e:b9:ba:91:f9:23:d0:f8:e2:4e:50: c0:87:5b:a9:9c:9a:a1:16:1b:1e:ce:4d:a2:82:c7: da:93:e5:75:a2:06:a3:ba:45:a2:0e:58:23:cd:f4: 76:97:ea:cb:d3:58:30:43:ed:ee:6f:d0:b0:ea:43: 3c:2a:c2:bd:2c:c2:07:64:fe:1a:e3:b2:14:3c:f2: e3:4a:02:70:c5:60:a7:fb:21:65:99:26:f7:8b:17: 93:05:d9:fc:66:27:62:d2:cf:67:75:bc:73:82:2c: 44:51:9f:10:28:d7:c2:65:3b:8d:18:8d:85:03:9f: 8e:c9:ed:03:36:01:d8:f3:bc:8e:ab:63:e5:ed:50: 40:33:80:ca:27:81:75:0d:34:c9:ea:07:c3:16:9f: a5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:89:61:54:03:6C:7A:63:8F:31:5D:26:05:A1:97:B0:80:09:CB:81 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b8:a4:a4:c0:54:dd:61:0e:88:98:d1:d0:31:a6:b5:b7:16: f6:06:67:d9:bb:f9:93:1f:30:6c:2c:ba:a9:0c:ae:26:e5:b5: ba:e0:5f:14:a6:07:27:b1:dc:9a:d6:27:c1:24:5f:b2:c4:1c: 3f:a3:bf:1d:d9:64:f2:a4:52:a3:96:91:16:f3:05:fe:28:c3: 22:3c:ce:aa:85:b7:6d:37:ce:7e:03:36:c4:f7:16:7d:00:f2: 8f:19:79:c8:91:30:62:7e:c0:67:40:07:ae:9a:63:2d:77:fd: e9:0a:4e:41:40:4c:76:ca:17:68:9f:0b:b1:43:75:bb:57:8e: d8:dd:df:ab:06:3f:a6:b6:0e:ef:72:12:d2:e5:8c:cd:73:65: ab:52:f3:2f:1e:2c:1f:a5:27:98:0c:8a:91:ef:b6:df:32:79: de:fc:4e:6d:c8:44:f7:28:dc:85:f0:6c:93:77:d7:ec:1b:b1: 0d:4c:cb:c4:a3:c7:7c:4a:f4:cb:33:86:d2:f6:82:25:94:24: 62:51:53:52:91:f3:37:d4:74:91:42:d7:04:07:1c:5c:7d:98: cf:13:37:79:23:c0:bd:6e:8c:5e:1f:3c:bd:88:22:75:ec:8c: 29:2b:37:7f:62:a2:eb:47:e4:e2:fc:0a:df:8b:fb:10:c8:2d: 13:4c:26:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/kQ7Od5eYRId7qdpZ9YoQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwNjEzMDYwMDE1WhcNMjYwNjE0MDYwMDE1WjAzMTEwLwYDVQQD Eyg3NTg5NjE1NDAzNmM3YTYzOGYzMTVkMjYwNWExOTdiMDgwMDljYjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0UJ8zjCywcbKY5aRAOiItXIebfe hD8E2v47ZDbW2t8t0IPpim1WQr1c+dsueFIM/DeiZMdryxFKcWMy8VI04+TzcdV3 921YMRy9D70FrWNSTqNsp/qesLP0rtyMGv6s8GDRdbfwCgDGrdISnrm6kfkj0Pji TlDAh1upnJqhFhsezk2igsfak+V1ogajukWiDlgjzfR2l+rL01gwQ+3ub9Cw6kM8 KsK9LMIHZP4a47IUPPLjSgJwxWCn+yFlmSb3ixeTBdn8Zidi0s9ndbxzgixEUZ8Q KNfCZTuNGI2FA5+Oye0DNgHY87yOq2Pl7VBAM4DKJ4F1DTTJ6gfDFp+lAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWJYVQDbHpjjzFdJgWhl7CACcuBMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7ikpMBU 3WEOiJjR0DGmtbcW9gZn2bv5kx8wbCy6qQyuJuW1uuBfFKYHJ7HcmtYnwSRfssQc P6O/Hdlk8qRSo5aRFvMF/ijDIjzOqoW3bTfOfgM2xPcWfQDyjxl5yJEwYn7AZ0AH rppjLXf96QpOQUBMdsoXaJ8LsUN1u1eO2N3fqwY/prYO73IS0uWMzXNlq1LzLx4s H6UnmAyKke+23zJ53vxObchE9yjchfBsk3fX7BuxDUzLxKPHfEr0yzOG0vaCJZQk YlFTUpHzN9R0kULXBAccXH2YzxM3eSPAvW6MXh88vYgideyMKSs3f2Ki60fk4vwK 34v7EMgtE0wmGA== -----END CERTIFICATE-----Generated at Sat Jun 13 13:18:04 2026 by rpki-client