$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: Niiy6wI4u9bIakCUWzx7yxky2DiPOiryhi+V7+RmF44= Subject key identifier: 69:38:B5:36:C5:53:C2:54:40:C6:23:8C:1C:EB:74:AE:FE:A4:2B:CF Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 01A0CAEB64C00378D3F4F0CB9FFCA7F1BDF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 1AA1 Signing time: Tue 22 Sep 2026 21:00:19 +0000 Manifest this update: Tue 22 Sep 2026 21:00:19 +0000 Manifest next update: Wed 23 Sep 2026 21:00:19 +0000 Files and hashes: 1: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (hash: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew=) 2: B3OeokPEIHVspK8KnB4E2xEIauA.roa (hash: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4=) 3: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (hash: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os=) 4: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (hash: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs=) 5: KzdQ6MYBCl2ir-P86lDTtzaCt6M.roa (hash: h0pLqI3V5xBNJ0ejZS7hNIXSpXsgRqsYEzH47nvj1rY=) 6: PMhUU73xUVC7raWhgd5q_EKF038.roa (hash: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ=) 7: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (hash: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY=) 8: VWMQVWn-fMxdyDNhNc6f7Kyy09Y.roa (hash: Z09Yv6W87TB4u/fOV8oJx/K3Cijv1Xqstm0UVafkQZs=) 9: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (hash: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8=) 10: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (hash: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws=) 11: re_1WedxziUW08jNtG4jbnB22Hw.roa (hash: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4=) 12: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (hash: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: RQAxuVP5sIhw/Np9+4to9JRdCrkNUsvZgQWMrtYceTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ca:eb:64:c0:03:78:d3:f4:f0:cb:9f:fc:a7:f1:bd:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Sep 22 21:00:19 2026 GMT Not After : Sep 23 21:00:19 2026 GMT Subject: CN=6938b536c553c25440c6238c1ceb74aefea42bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:45:f3:34:72:d0:b2:6a:74:98:79:be:6b:dc: 8b:51:90:d8:08:db:b0:f0:04:31:64:91:34:23:63: 86:5f:39:c1:a9:42:bb:53:0c:b7:79:2a:e0:f1:72: 63:48:77:5b:d9:3f:a2:aa:4c:4f:0d:68:26:b7:0b: d3:34:d3:00:38:c5:c9:11:57:fd:95:68:6a:ef:8d: cd:45:3a:79:16:ce:ac:d4:26:f5:e6:08:51:cf:61: a5:cf:fe:87:18:1e:e8:ea:82:2d:75:ae:04:d7:8b: 2a:7e:96:2b:38:02:21:10:e1:5c:a4:0e:d5:1e:18: e7:4a:11:16:36:e8:8f:44:33:d5:20:48:a4:70:41: af:5a:de:f7:f1:6d:bd:63:9b:c3:f1:e8:42:df:00: 77:82:90:bd:95:0e:94:32:7f:8f:e3:fe:12:db:7d: 4c:92:72:ec:3f:19:7a:22:de:7a:e3:92:bb:b5:30: d4:a6:ec:95:98:fd:31:c5:f5:39:db:22:f9:b9:fb: 31:2e:41:57:7b:db:0e:7e:1b:8b:1d:32:5d:dd:21: dd:8f:a7:93:5d:93:b5:09:f6:6b:ad:15:24:a5:0e: 6f:65:17:81:ad:a6:24:9a:b3:70:14:07:d6:e3:b7: 35:4e:2f:94:9b:b3:14:7c:70:51:3c:6d:84:95:e0: 0d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:38:B5:36:C5:53:C2:54:40:C6:23:8C:1C:EB:74:AE:FE:A4:2B:CF X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a5:58:3c:b7:97:cb:24:87:ce:1e:84:ae:db:11:c7:73:b3: 49:46:15:0d:e3:6c:2a:19:c2:55:b1:33:04:36:3f:4d:8e:c4: 59:d6:b0:6b:69:a9:75:51:c4:69:f4:35:1b:39:ef:d3:85:ba: 96:6f:0d:80:87:34:23:61:f4:45:d5:35:73:8f:f0:b7:e3:81: 05:e3:68:da:b3:c0:c3:9a:5c:b2:34:16:69:86:99:7c:4f:83: 95:72:dc:39:dd:30:44:91:d1:1b:de:ea:a6:eb:81:fd:c8:ed: 9c:de:50:6c:0b:23:53:30:c2:bd:f6:e0:c6:0b:30:fd:31:36: d8:67:98:d5:fe:57:a0:41:3a:bb:53:d3:71:2d:d9:89:9d:59: 0c:03:49:6a:6a:24:43:4b:77:c0:6e:fd:36:21:6c:66:ee:50: 91:7c:e3:d0:a5:de:49:e3:ea:83:45:20:1f:ad:9f:b2:54:15: 57:33:3d:53:77:4e:75:0e:d1:77:2d:3e:50:09:8e:2f:3b:3b: e8:ea:82:fe:37:8b:61:b2:be:53:2d:07:3f:7c:73:72:c0:c5: 06:53:02:74:b3:62:88:ac:4f:69:f0:16:50:2a:83:bb:30:16: a8:d3:54:fc:2b:46:1a:e0:f8:0c:fa:73:00:ef:3b:36:5b:30: 0c:ef:b1:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDK62TAA3jT9PDLn/yn8b3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwOTIyMjEwMDE5WhcNMjYwOTIzMjEwMDE5WjAzMTEwLwYDVQQD Eyg2OTM4YjUzNmM1NTNjMjU0NDBjNjIzOGMxY2ViNzRhZWZlYTQyYmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00XzNHLQsmp0mHm+a9yLUZDYCNuw 8AQxZJE0I2OGXznBqUK7Uwy3eSrg8XJjSHdb2T+iqkxPDWgmtwvTNNMAOMXJEVf9 lWhq743NRTp5Fs6s1Cb15ghRz2Glz/6HGB7o6oItda4E14sqfpYrOAIhEOFcpA7V HhjnShEWNuiPRDPVIEikcEGvWt738W29Y5vD8ehC3wB3gpC9lQ6UMn+P4/4S231M knLsPxl6It5645K7tTDUpuyVmP0xxfU52yL5ufsxLkFXe9sOfhuLHTJd3SHdj6eT XZO1CfZrrRUkpQ5vZReBraYkmrNwFAfW47c1Ti+Um7MUfHBRPG2EleANVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGk4tTbFU8JUQMYjjBzrdK7+pCvPMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqVYPLeX yySHzh6ErtsRx3OzSUYVDeNsKhnCVbEzBDY/TY7EWdawa2mpdVHEafQ1Gznv04W6 lm8NgIc0I2H0RdU1c4/wt+OBBeNo2rPAw5pcsjQWaYaZfE+DlXLcOd0wRJHRG97q puuB/cjtnN5QbAsjUzDCvfbgxgsw/TE22GeY1f5XoEE6u1PTcS3ZiZ1ZDANJamok Q0t3wG79NiFsZu5QkXzj0KXeSePqg0UgH62fslQVVzM9U3dOdQ7Rdy0+UAmOLzs7 6OqC/jeLYbK+Uy0HP3xzcsDFBlMCdLNiiKxPafAWUCqDuzAWqNNU/CtGGuD4DPpz AO87NlswDO+xuQ== -----END CERTIFICATE-----Generated at Wed Sep 23 05:57:40 2026 by rpki-client