$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: 7i44WuFaJqmk39yXLmMG7rjDWKtbAAhZlCv72PDNfpo= Subject key identifier: EC:2F:39:7C:A9:4B:58:1C:D4:E3:CE:D6:72:DF:EB:FF:C1:27:C4:DB Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019FA8993D24D8FDFB897ABDF9879A4E5422 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 15B5 Signing time: Tue 28 Jul 2026 12:00:42 +0000 Manifest this update: Tue 28 Jul 2026 12:00:42 +0000 Manifest next update: Wed 29 Jul 2026 12:00:42 +0000 Files and hashes: 1: 00oBTfnWdUzIvMRCoDAsBiu6TY0.roa (hash: 2cUMeBAWg056ZrP6AEZcwET0ohxuoFacoijmfCtjIBA=) 2: 4xVdYe0gRxz-uE-uYOx9q-_KZCk.roa (hash: AcFtBAJ8L85K3ER5s0exdifY6WeWVCgPuREiTI5SL1o=) 3: DaIOsBAUTocNWtQ487tz4YWipHI.roa (hash: N5y0DRMQWN6Af00LwwQvS7RkqXX2njRLKRlsnfJp9Do=) 4: RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa (hash: gac1U5GhiAAvsADQW6zIs1K5OYBIIdxw6YN3Rmr6cdo=) 5: Smw8KxULxNV1U3wUVaTgjVcAEN0.roa (hash: xaQVLJNe1R846qUde4wi8d2fl1ASkR/w9PUCNskHzmg=) 6: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 7: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 8: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: 3LqVpqhGKeK0m9c9cJdYhxjkEn6g73MRaiAJl2Ys+jY=) 9: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 10: ofUllF-dWXHUPtc7vJnGioqPfCY.roa (hash: DKXn87ibX3uXQNhf8bxZ9LKgNiZi6MqVfnjhDNqP0fA=) 11: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:99:3d:24:d8:fd:fb:89:7a:bd:f9:87:9a:4e:54:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jul 28 12:00:42 2026 GMT Not After : Jul 29 12:00:42 2026 GMT Subject: CN=ec2f397ca94b581cd4e3ced672dfebffc127c4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:c7:0b:93:af:a3:35:3d:1b:18:29:61:6b: 39:04:20:ab:20:28:3c:d9:a7:ac:36:ae:33:68:f5: d3:7b:ca:c2:77:f7:34:de:54:c6:a7:dc:1a:02:58: 9d:f1:35:61:a7:28:47:07:6d:3e:f7:0a:da:ab:80: 6b:b8:d7:d8:60:d0:50:66:ee:94:74:a3:88:47:1e: 12:fb:8e:13:d0:1a:27:46:90:3e:83:8c:89:35:a1: 77:7f:7b:9e:4c:0f:f8:6e:20:1d:29:58:c0:d8:6a: 7c:26:7f:44:40:36:1b:93:41:75:cb:3e:6e:72:bd: 4d:23:c4:dc:c5:22:f2:0d:86:8c:c3:4e:98:72:83: a3:e8:f6:31:18:39:c7:58:75:e2:16:40:b2:5d:e1: 11:3f:71:13:1b:a2:35:e2:de:7d:e5:80:43:ec:a2: a8:46:89:c4:2f:f6:47:14:20:a8:dd:1e:41:d9:b8: c3:f5:2e:06:c0:38:6a:d9:06:08:fc:4c:15:ea:f6: 29:b8:61:d4:00:d3:76:59:2c:7f:a2:7d:bb:c7:c6: 3a:a9:73:c0:7f:a6:63:9c:51:b2:a9:d5:10:7d:c1: 5d:92:33:ff:64:4e:93:11:da:93:32:c6:30:63:fb: 50:ef:d4:74:a6:8c:5e:d3:ed:7d:de:df:0f:7a:9f: 9c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2F:39:7C:A9:4B:58:1C:D4:E3:CE:D6:72:DF:EB:FF:C1:27:C4:DB X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f3:0d:86:f8:d0:a5:6f:2e:df:98:a1:d2:e7:39:9b:4e:9d: 1c:55:b9:bc:c6:cb:3a:12:c6:d5:d1:3b:f2:34:1e:7c:78:bf: 40:1f:45:69:44:97:16:0d:c1:47:6b:4b:d3:5a:54:1b:44:00: d4:78:76:ee:b3:45:50:c4:5a:5b:49:69:c0:52:1f:be:a5:2c: 22:31:48:ad:4a:fc:2c:31:15:dd:83:48:fe:f8:45:7f:06:e8: d2:c0:98:c6:32:3e:d5:8c:ad:36:38:3d:55:d1:58:70:a8:7c: ee:90:33:86:e4:ae:2c:10:28:ee:6d:37:92:0a:c3:dd:f3:b3: 83:3b:8b:89:f0:05:4d:12:1e:89:ab:60:82:ab:c1:02:a6:c3: 62:b9:b0:3c:ff:90:34:f7:66:11:4e:c5:b4:f5:0e:c6:58:ca: c9:74:bf:70:c9:eb:58:4e:9d:9a:b6:14:52:69:6c:c0:ce:84: 12:df:d1:7b:45:da:a0:2d:04:2d:8c:11:32:e1:9e:84:5c:ba: 3d:7a:e5:ce:1a:3e:02:93:11:af:0b:75:d0:ef:e8:07:d0:d6: a1:d2:e3:b0:ea:d4:3a:e8:43:f8:42:44:4c:cb:67:d5:02:1c: b9:3f:79:58:e4:45:cf:a4:19:2c:99:4f:15:ff:1b:d2:8b:48: eb:84:3a:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+omT0k2P37iXq9+YeaTlQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwNzI4MTIwMDQyWhcNMjYwNzI5MTIwMDQyWjAzMTEwLwYDVQQD EyhlYzJmMzk3Y2E5NGI1ODFjZDRlM2NlZDY3MmRmZWJmZmMxMjdjNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjDHC5OvozU9GxgpYWs5BCCrICg8 2aesNq4zaPXTe8rCd/c03lTGp9waAlid8TVhpyhHB20+9wraq4BruNfYYNBQZu6U dKOIRx4S+44T0BonRpA+g4yJNaF3f3ueTA/4biAdKVjA2Gp8Jn9EQDYbk0F1yz5u cr1NI8TcxSLyDYaMw06YcoOj6PYxGDnHWHXiFkCyXeERP3ETG6I14t595YBD7KKo RonEL/ZHFCCo3R5B2bjD9S4GwDhq2QYI/EwV6vYpuGHUANN2WSx/on27x8Y6qXPA f6ZjnFGyqdUQfcFdkjP/ZE6TEdqTMsYwY/tQ79R0poxe0+193t8Pep+cywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwvOXypS1gc1OPO1nLf6//BJ8TbMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/MNhvjQ pW8u35ih0uc5m06dHFW5vMbLOhLG1dE78jQefHi/QB9FaUSXFg3BR2tL01pUG0QA 1Hh27rNFUMRaW0lpwFIfvqUsIjFIrUr8LDEV3YNI/vhFfwbo0sCYxjI+1YytNjg9 VdFYcKh87pAzhuSuLBAo7m03kgrD3fOzgzuLifAFTRIeiatggqvBAqbDYrmwPP+Q NPdmEU7FtPUOxljKyXS/cMnrWE6dmrYUUmlswM6EEt/Re0XaoC0ELYwRMuGehFy6 PXrlzho+ApMRrwt10O/oB9DWodLjsOrUOuhD+EJETMtn1QIcuT95WORFz6QZLJlP Ff8b0otI64Q6kw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:33:15 2026 by rpki-client