$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json) Hash identifier: JTi/50aYDiq5SJ3z2R0IlXoohJz4fbOTL51lI9cED84= Subject key identifier: 7C:19:37:8B:18:17:7F:6D:B7:03:F2:BB:B1:18:9A:C5:31:C6:FF:FA Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019EC0DAE15519E1CB2B47B9D380F57964A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft Manifest number: 196D Signing time: Sat 13 Jun 2026 12:00:30 +0000 Manifest this update: Sat 13 Jun 2026 12:00:30 +0000 Manifest next update: Sun 14 Jun 2026 12:00:30 +0000 Files and hashes: 1: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (hash: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk=) 2: Bl_BjhvxqT0Mif6aMxcEFNXISZM.roa (hash: kEZA3HWXo+axDXRIJx2Qo5x0RmJdyCm6aj/hJrouWz4=) 3: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (hash: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=) 4: GdbR_idqMFPPvTnMDLo84FSRLLE.roa (hash: 9wA72fFqTL25Susq0KJt1IgIugCWrwoBtcIiJv1WM5U=) 5: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: GM5pCds50ydfEFBVHzUocYNsEAOpJYKj53R4mnPcMrM=) 6: LDWe2SngnhCT8P4q-miYjt99pqY.roa (hash: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI=) 7: PK-bzrtIQoBqm48y8NO258iLnos.roa (hash: aA8j5N6Zlr7QdjHAkUvyPHOUE/w+nJNmGzUvN0yq064=) 8: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (hash: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s=) 9: SxCmwkP6Nm4OCkq0cafIGZz0UzE.roa (hash: xnBBhj7JCuhXFRvrPefaRqPCoJ+R9TXOqzjYihjmxgg=) 10: iw99MEfgWCk8jzXEVkDUVL7mRVE.roa (hash: sLeHG7bJoAQLwEnzTf++99j3zH2x5tEIEtEUj3mnDCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:da:e1:55:19:e1:cb:2b:47:b9:d3:80:f5:79:64:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Jun 13 12:00:30 2026 GMT Not After : Jun 14 12:00:30 2026 GMT Subject: CN=7c19378b18177f6db703f2bbb1189ac531c6fffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:7f:6d:8b:19:c5:65:0c:b0:85:05:ab:b0: eb:6a:32:10:39:15:ca:2e:48:62:e4:a9:b8:c9:f1: ea:1c:ea:85:ce:c3:ef:5c:6f:94:75:7b:0d:20:a7: 4d:56:1f:e9:25:3e:60:57:18:ed:8c:da:26:f5:c1: 93:2a:f0:cd:f4:cd:57:46:c1:da:54:4a:6d:fe:39: 96:53:59:28:2e:ce:50:d5:99:47:3d:ee:07:d8:1f: 4c:61:9f:8c:62:99:ac:a9:14:72:d4:60:78:32:5e: 22:e9:2a:7e:16:4a:79:b6:12:2c:4e:bf:10:62:33: 49:62:e5:44:d4:a6:46:2f:8a:79:6c:c6:7c:12:2b: 61:ce:7b:00:29:b6:3d:26:32:f2:17:5e:ec:2f:af: d9:49:bc:a5:23:62:ac:5c:e1:fd:a0:38:5d:f1:60: 2e:04:a7:c2:82:95:21:2d:f1:b8:95:fa:44:73:31: 4d:91:66:85:e1:1e:19:76:a0:1f:80:64:c6:69:af: 35:9d:cf:d0:cf:7d:06:05:a9:e7:bd:91:9e:ad:85: dc:40:da:d9:a5:da:14:00:81:f1:7e:52:02:8c:06: 4c:84:01:06:b6:47:02:ea:5b:3a:b2:2d:3c:06:bf: 1e:ad:4a:3a:27:79:cb:4c:12:6d:2e:46:ef:11:80: a0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:19:37:8B:18:17:7F:6D:B7:03:F2:BB:B1:18:9A:C5:31:C6:FF:FA X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:30:c0:81:f7:cb:07:44:b9:cf:78:9c:2c:1a:2c:2c:e3:53: 45:b3:03:72:d9:cc:38:49:cb:d6:16:e2:d2:0c:78:c3:b7:fa: 97:51:fc:6e:56:4e:3c:d8:21:52:b6:18:61:57:9e:d5:5f:26: 82:60:a1:48:3a:fc:96:ff:30:a2:50:2e:52:fc:f2:ee:2d:a0: b1:e3:42:b0:7f:12:db:cd:55:bd:72:20:96:2f:1d:f2:59:be: 51:e0:77:de:4b:47:c5:0f:66:2c:38:ee:a0:e3:90:20:83:2c: 26:8a:35:2e:2d:6f:f1:b2:6b:25:5f:f8:3f:ac:e1:d2:72:46: 7f:fc:2f:f5:ae:46:82:93:e2:52:7d:28:87:a5:82:ab:58:67: 84:aa:ad:53:98:1d:31:c4:ed:57:8f:9f:fc:6c:4c:9f:83:d3: 8d:1b:a4:55:4d:af:92:bf:d8:f9:3f:bf:1d:33:f7:26:49:a0: d0:6e:af:db:cc:37:c7:49:31:00:4e:01:06:87:ca:5d:0a:b1: 59:e3:cf:07:b1:65:99:9c:21:ae:86:24:74:f5:23:da:ac:f7: 96:f8:19:88:0f:e8:94:16:d3:ca:02:72:7e:16:38:e2:47:08: 47:cb:ee:50:3b:77:28:2e:9d:5c:0a:49:95:51:2e:2c:a6:49: 27:5d:11:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7A2uFVGeHLK0e504D1eWSjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwNjEzMTIwMDMwWhcNMjYwNjE0MTIwMDMwWjAzMTEwLwYDVQQD Eyg3YzE5Mzc4YjE4MTc3ZjZkYjcwM2YyYmJiMTE4OWFjNTMxYzZmZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWd/bYsZxWUMsIUFq7DrajIQORXK Lkhi5Km4yfHqHOqFzsPvXG+UdXsNIKdNVh/pJT5gVxjtjNom9cGTKvDN9M1XRsHa VEpt/jmWU1koLs5Q1ZlHPe4H2B9MYZ+MYpmsqRRy1GB4Ml4i6Sp+Fkp5thIsTr8Q YjNJYuVE1KZGL4p5bMZ8EithznsAKbY9JjLyF17sL6/ZSbylI2KsXOH9oDhd8WAu BKfCgpUhLfG4lfpEczFNkWaF4R4ZdqAfgGTGaa81nc/Qz30GBannvZGerYXcQNrZ pdoUAIHxflICjAZMhAEGtkcC6ls6si08Br8erUo6J3nLTBJtLkbvEYCg7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwZN4sYF39ttwPyu7EYmsUxxv/6MB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvDDAgffL B0S5z3icLBosLONTRbMDctnMOEnL1hbi0gx4w7f6l1H8blZOPNghUrYYYVee1V8m gmChSDr8lv8wolAuUvzy7i2gseNCsH8S281VvXIgli8d8lm+UeB33ktHxQ9mLDju oOOQIIMsJoo1Li1v8bJrJV/4P6zh0nJGf/wv9a5GgpPiUn0oh6WCq1hnhKqtU5gd McTtV4+f/GxMn4PTjRukVU2vkr/Y+T+/HTP3Jkmg0G6v28w3x0kxAE4BBofKXQqx WePPB7FlmZwhroYkdPUj2qz3lvgZiA/olBbTygJyfhY44kcIR8vuUDt3KC6dXApJ lVEuLKZJJ10RGA== -----END CERTIFICATE-----Generated at Sat Jun 13 16:17:21 2026 by rpki-client