$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: YBgxHKIf7SS9hBb+u2k/IKnVITjRyGCvBxXq4p1T0Fo= Subject key identifier: A8:AD:D3:D9:C8:4E:9E:C0:2E:37:DC:7F:50:6F:0B:C9:21:74:FC:9B Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019FAB2C1BDD8A5D5420AB732D1BAF24D12C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 1A0C Signing time: Wed 29 Jul 2026 00:00:22 +0000 Manifest this update: Wed 29 Jul 2026 00:00:22 +0000 Manifest next update: Thu 30 Jul 2026 00:00:22 +0000 Files and hashes: 1: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (hash: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew=) 2: B3OeokPEIHVspK8KnB4E2xEIauA.roa (hash: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4=) 3: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (hash: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os=) 4: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (hash: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs=) 5: KzdQ6MYBCl2ir-P86lDTtzaCt6M.roa (hash: h0pLqI3V5xBNJ0ejZS7hNIXSpXsgRqsYEzH47nvj1rY=) 6: PMhUU73xUVC7raWhgd5q_EKF038.roa (hash: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ=) 7: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (hash: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY=) 8: VWMQVWn-fMxdyDNhNc6f7Kyy09Y.roa (hash: Z09Yv6W87TB4u/fOV8oJx/K3Cijv1Xqstm0UVafkQZs=) 9: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (hash: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8=) 10: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (hash: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws=) 11: re_1WedxziUW08jNtG4jbnB22Hw.roa (hash: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4=) 12: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (hash: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: 6pfWYNUocN3tzV+qe3b+K1jDPKk/dRwUxO1he0z+M8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:2c:1b:dd:8a:5d:54:20:ab:73:2d:1b:af:24:d1:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jul 29 00:00:22 2026 GMT Not After : Jul 30 00:00:22 2026 GMT Subject: CN=a8add3d9c84e9ec02e37dc7f506f0bc92174fc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8e:fa:ef:e2:00:dc:c5:d9:7b:97:45:d9:d4: 97:d5:ba:ca:4e:43:76:13:ac:47:0a:6f:7b:30:91: 82:77:29:3c:fa:1a:51:55:27:26:eb:ba:06:52:b4: 69:07:5f:ae:c3:9d:32:dd:64:e5:20:b9:1e:f3:e8: 99:88:68:a7:10:a5:c6:43:f2:9b:1c:6a:90:e2:39: 83:a1:39:14:72:19:22:c4:c5:c0:26:1c:fe:05:70: 4f:19:55:3f:91:01:bd:b4:41:f4:8e:13:38:37:d1: b7:d4:2d:76:f1:f7:cd:c8:9f:37:e8:14:0b:26:65: e2:1a:03:32:cb:83:53:4c:25:e8:1a:eb:cf:b5:76: 50:53:85:62:8c:ca:cc:e8:c1:d1:e9:39:cd:37:0b: b2:04:3e:bf:b8:0d:f9:15:4b:e4:f2:e7:ac:03:01: 53:3d:d7:6a:69:8b:ec:57:57:76:10:72:92:37:da: 06:f1:84:80:74:26:fb:fb:34:62:97:6f:35:c5:04: 18:ff:bb:d8:43:be:d8:f6:2b:bd:63:96:cb:49:98: 48:13:d2:09:ba:13:70:3f:6a:44:a2:1f:00:40:84: d9:fe:12:25:1e:ff:12:79:b4:57:e5:f8:d0:ef:95: c5:35:5f:93:c9:a5:7a:2c:56:5c:b6:96:bd:fd:14: d8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AD:D3:D9:C8:4E:9E:C0:2E:37:DC:7F:50:6F:0B:C9:21:74:FC:9B X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:eb:37:7d:4a:81:0b:44:e1:18:e8:9b:a7:5d:85:76:63:ed: 4d:83:b5:f7:53:20:28:d1:fe:5c:28:69:a8:86:91:5f:d1:8d: cd:80:e9:d8:9e:11:4c:1e:86:cf:c5:07:86:ca:f3:06:ab:7e: b2:52:20:35:66:a9:d3:48:1d:81:53:02:72:e7:01:47:bc:07: bf:fd:25:4f:d7:e6:46:ee:c1:fa:c3:0e:86:83:bf:70:58:52: 8e:b7:1e:4f:78:ed:db:25:9b:be:44:30:3d:03:60:0b:71:5a: cf:a4:6c:f7:fb:16:59:6e:c0:f3:d8:ca:04:0e:5c:52:14:e0: 9e:c4:cf:6f:80:82:9e:0d:34:1d:86:0e:9f:b1:24:6c:be:39: 0c:66:6b:2f:f9:76:40:5c:42:86:da:29:04:9b:27:6d:6a:fb: 70:c9:53:4d:33:ef:15:9e:90:a9:cc:9d:a3:bc:bb:56:12:ef: 38:d7:a5:82:b9:13:a1:11:d3:02:ca:28:7f:89:32:67:be:b2: 74:b4:82:5d:1a:d9:a5:ab:5a:0a:53:6a:ff:16:b6:7e:b2:5a: 4e:37:75:24:84:0a:fd:06:d5:76:0d:3e:95:53:35:62:ea:97: dc:6c:aa:c2:36:97:3f:4d:c8:b6:5f:be:b5:71:64:f2:27:5e: 5f:44:92:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rLBvdil1UIKtzLRuvJNEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwNzI5MDAwMDIyWhcNMjYwNzMwMDAwMDIyWjAzMTEwLwYDVQQD EyhhOGFkZDNkOWM4NGU5ZWMwMmUzN2RjN2Y1MDZmMGJjOTIxNzRmYzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI767+IA3MXZe5dF2dSX1brKTkN2 E6xHCm97MJGCdyk8+hpRVScm67oGUrRpB1+uw50y3WTlILke8+iZiGinEKXGQ/Kb HGqQ4jmDoTkUchkixMXAJhz+BXBPGVU/kQG9tEH0jhM4N9G31C128ffNyJ836BQL JmXiGgMyy4NTTCXoGuvPtXZQU4VijMrM6MHR6TnNNwuyBD6/uA35FUvk8uesAwFT PddqaYvsV1d2EHKSN9oG8YSAdCb7+zRil281xQQY/7vYQ77Y9iu9Y5bLSZhIE9IJ uhNwP2pEoh8AQITZ/hIlHv8SebRX5fjQ75XFNV+TyaV6LFZctpa9/RTYrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKit09nITp7ALjfcf1BvC8khdPybMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOes3fUqB C0ThGOibp12FdmPtTYO191MgKNH+XChpqIaRX9GNzYDp2J4RTB6Gz8UHhsrzBqt+ slIgNWap00gdgVMCcucBR7wHv/0lT9fmRu7B+sMOhoO/cFhSjrceT3jt2yWbvkQw PQNgC3Faz6Rs9/sWWW7A89jKBA5cUhTgnsTPb4CCng00HYYOn7EkbL45DGZrL/l2 QFxChtopBJsnbWr7cMlTTTPvFZ6Qqcydo7y7VhLvONelgrkToRHTAsoof4kyZ76y dLSCXRrZpataClNq/xa2frJaTjd1JIQK/QbVdg0+lVM1YuqX3GyqwjaXP03Itl++ tXFk8ideX0SSiQ== -----END CERTIFICATE-----Generated at Wed Jul 29 02:03:50 2026 by rpki-client