$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft File: xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json) Hash identifier: 5nweakRbQp2y53/oTQsF0q7liNJBGnCs/2yRa0sWisU= Subject key identifier: 50:A6:11:A2:A6:B6:93:F6:75:95:D9:CF:F8:75:67:0C:7D:B1:EA:AE Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019FAA1A34B487A8DAA9A7449BB43FD14690 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft Manifest number: 1A67 Signing time: Tue 28 Jul 2026 19:01:11 +0000 Manifest this update: Tue 28 Jul 2026 19:01:11 +0000 Manifest next update: Wed 29 Jul 2026 19:01:11 +0000 Files and hashes: 1: 1jfZW_D7UOXSu39RlXiUyL_tLjk.roa (hash: Wm52sVxYb4B7EnFd3mHTcBpVOHveBj16ZYTfOT8EX/A=) 2: 2c-E5BZdiwqZ2Q-DnytRU90rLWI.roa (hash: +KiT1wYNU4xT/dbPCwls8LNvm2nJx4GyHtaKqzRjkQI=) 3: 2g3YqagtveoXivlimUOijGK4Sw4.roa (hash: ygC6oN+dOsYHf4Cjh6O/E1qqcFKMCRFPzFyAC5l12yw=) 4: 5B28Ei4KPuBfMPCYz_CdjunmzfA.roa (hash: Fh0fY9vBoWA1h/GgmdDXwKoDcv0YIku/VzyUipmtScY=) 5: 7qbWrERi-ZB_UDqyNvqfTaD1ZSU.roa (hash: goE2128mhw477UYFVBxjZxeafdneEUnERrdg7dgvL9A=) 6: DeLLhmnL8UGopy5KKmx7aJEcegM.roa (hash: MiHnbQkuo0f/Ih4buFqhTcosJDlqA6PQQ++HZPqmd5w=) 7: ElfbXSGIDiSMTPPlbo6V-o0SRuY.roa (hash: lKK5rdzCjZE0+7rICMxRWAfKpw9HWxpCs96nQPbHzso=) 8: F3V6NHBiFLHYH9kCeJ_cphI6VuI.roa (hash: S7WFcWfal2pVRy/GM+kUJ9lEuF9xQr0ct0tz3YBvyhU=) 9: GzFILLIkAaT9aB9CvnWDZTFwbdY.roa (hash: Wm6rCP0d9sgkyPeTHrd7psMD7wjPvGW5jHpasqKACzk=) 10: OtzhGfilSurocGymxRL7eQzidr4.roa (hash: vDQ7y55xoQgeukZduThUGBphIJ09K2D+oY+pxlGs+Pw=) 11: PS9MTZzdBifx0im1Vrq3VgjsS5s.roa (hash: 0ux5UJNrhxWM198AZ/GNCpoKgSg8gWm9eiQUOhAki7I=) 12: TpP8go9gxjsA4n1kC2kuJQbokBE.roa (hash: 7lExTFrNOgtfm66T9jsBGx9Cjl+c6H6zYjBrnH5qrXg=) 13: Vrmk2bULiTNAA5JeOQZ33ec3wXc.roa (hash: l2T4AkC8bheD2TY5DDvz9/5pBIbrm/A780nuw41Lr6Y=) 14: W9AeGn_4EYTr-z8IbzJJXYoLOc0.roa (hash: r/0RiCOSE+WrdRBD5qqcgjI3IcYBeed6dA+B48z6B+E=) 15: dANCF-_ELvUXZe_N9iPSiuIBUYs.roa (hash: L7tV/7qxxRlCHwy6Cmc9dl/HlJ9PPDTVkduSLInAUZ0=) 16: e2AyZ2BEWBS0MDGcIRKGddY_-vA.roa (hash: k3gftfAGEZd+EZsjQ+L0bmvG9iJo2qrBOjPfUiYc9kM=) 17: gMYRXePhXBj5QEchP90fA4n6PTI.roa (hash: n3t3ay/80ZRLXPkmrmKkNg7PYGv+vXmzByKb6p1QvZ8=) 18: hbdbuaRvg2tTLKp10GziAeSgyRU.roa (hash: H+cM7/5ALMd58f/dYxV/Q5+dv/fO2eB8PR2xGdT8ZXc=) 19: iE31HcpgdKKrdPMldO0jIS93Go4.roa (hash: q2vi84j7Hjeqqy/+pd9xsj/QdQIOk9oRPO1utxPcNqU=) 20: jpMS12QCO2gdD3cuexYC2wQ8Qeo.roa (hash: nMFW9BQneK7T1fgc0t6oA8jRIcD7rZtWnJMbSrXrhdQ=) 21: llmpvsJp6iJllq8aPzCHiXy7pDI.roa (hash: DANl4OSIWpehyMk+CpY4YG/h/rDOrMDg4VQVT2cFg7g=) 22: ms0wuT7v6-h1UgnL6n_jgWkOkVU.roa (hash: QBEq8rCcXKzWf4ULJs+y+Nad4kF1AXFNATRKBuEGesA=) 23: nm-KZislIGz6wosxLU6C90OgEBY.roa (hash: eiBhQ/2d82wkJoJ8lwkynR/qT2+hnESyOr9AACLRf+E=) 24: ugtI-QyWNOjJ59RgJ8WbbnFfW4U.roa (hash: aT3mMJhpwKfI0RkCBtFq/BKu85xA6+3aVTdjvSvqPZQ=) 25: vHpNG066C7qb6w3seYRGvSbcLTM.roa (hash: oOMKXuPYcJhhb1ks0FKSqMbqfUNTbYofrvqb7j5sseA=) 26: w6gmNc7f_bvjPNIJjuhS3RSIpZQ.roa (hash: GdBjwBkJ4iGW3k1Xd7AiPym4634yoaPZu5TSA3ZGyx8=) 27: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: IDgHa3R+erZfZUBdhPFA8zXMHd/UsgvrQ/YSUKmjpnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:1a:34:b4:87:a8:da:a9:a7:44:9b:b4:3f:d1:46:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jul 28 19:01:11 2026 GMT Not After : Jul 29 19:01:11 2026 GMT Subject: CN=50a611a2a6b693f67595d9cff875670c7db1eaae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:75:4d:71:77:19:9e:7c:f3:5e:ac:a8:75:37: 84:de:95:31:9c:5e:11:77:28:b2:99:cd:c7:06:4c: 71:94:77:af:b9:58:c3:35:d3:de:f4:7d:e5:69:44: dd:26:bd:9a:43:39:d0:06:59:9d:84:22:00:7e:d3: a1:53:b2:c4:f7:ae:b8:e5:d0:83:19:d3:06:bd:b4: 50:c4:4a:b5:ad:ca:0e:31:e8:32:b2:c6:84:72:f2: 8d:76:f4:2a:65:ce:70:37:bb:1d:a4:f8:19:8f:f5: 9d:b9:f7:27:40:ed:0e:52:e8:62:82:ac:a0:5f:3d: 28:d0:85:61:2c:d4:51:4e:67:24:ef:54:87:18:59: 91:89:4a:0d:d1:3a:83:8e:5c:5d:09:ef:e2:6b:9f: 47:96:8a:c5:a4:61:b8:20:18:43:e1:7e:b8:40:23: 23:7d:b8:1b:60:04:ff:50:0b:8b:eb:d5:89:72:72: 2f:0c:93:6e:07:87:28:b4:f7:f5:68:b6:72:ce:2c: e6:d9:ab:70:f5:54:22:3a:c0:f5:a9:63:ec:c1:b2: 6c:5c:99:03:a7:29:9b:a4:e6:fb:26:78:93:e4:9c: 73:73:f0:32:22:84:a1:0e:ee:ca:ba:a0:c0:67:6d: 60:52:c1:6b:85:a4:a3:87:f6:e2:dd:4a:5b:fe:56: 41:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A6:11:A2:A6:B6:93:F6:75:95:D9:CF:F8:75:67:0C:7D:B1:EA:AE X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:1a:a0:5d:f0:10:11:44:6f:87:55:fd:a1:f7:c6:76:02:73: fb:1b:5e:30:f8:99:5c:8d:db:f7:c5:07:ec:a4:ff:a2:56:ed: 01:33:5c:42:2e:95:c1:94:5c:c4:11:86:40:29:02:e1:7c:d4: 96:50:68:08:01:2d:82:a1:84:3e:39:fc:cb:c3:8a:f2:01:b0: 15:43:66:c1:a8:a3:85:cc:fd:cf:db:5c:71:8b:b5:27:b0:fc: ed:88:dd:93:ba:2f:ea:fa:07:f8:25:77:50:ca:f9:5e:bf:65: 6e:49:b9:b3:85:49:d2:81:db:7b:83:83:d3:4a:99:a5:77:d8: 1d:7f:a3:9b:a8:cc:72:68:f1:66:bc:26:71:c0:65:8f:6e:e8: 58:65:a2:58:9d:88:b7:aa:97:f4:00:b6:be:f0:7f:e6:e2:57: 4b:06:49:57:54:e0:e5:9b:f3:df:50:75:9e:d0:94:d8:7b:bf: 99:17:09:5c:69:d9:6a:16:34:94:ca:88:11:98:f9:f8:45:7f: 73:52:d4:e8:9d:dc:b8:7c:b3:03:d1:17:08:f4:f5:a2:c0:c4: c5:ee:d9:2a:ef:66:83:80:f9:84:f8:e5:e4:95:4f:39:13:de: 19:3a:df:81:88:93:6b:41:ce:0b:7d:e3:58:c6:8f:86:f0:83: 9d:35:50:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qGjS0h6jaqadEm7Q/0UaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwNzI4MTkwMTExWhcNMjYwNzI5MTkwMTExWjAzMTEwLwYDVQQD Eyg1MGE2MTFhMmE2YjY5M2Y2NzU5NWQ5Y2ZmODc1NjcwYzdkYjFlYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnVNcXcZnnzzXqyodTeE3pUxnF4R dyiymc3HBkxxlHevuVjDNdPe9H3laUTdJr2aQznQBlmdhCIAftOhU7LE96645dCD GdMGvbRQxEq1rcoOMegyssaEcvKNdvQqZc5wN7sdpPgZj/WdufcnQO0OUuhigqyg Xz0o0IVhLNRRTmck71SHGFmRiUoN0TqDjlxdCe/ia59HlorFpGG4IBhD4X64QCMj fbgbYAT/UAuL69WJcnIvDJNuB4cotPf1aLZyzizm2atw9VQiOsD1qWPswbJsXJkD pymbpOb7JniT5Jxzc/AyIoShDu7KuqDAZ21gUsFrhaSjh/bi3Upb/lZBGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCmEaKmtpP2dZXZz/h1Zwx9sequMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRqgXfAQ EURvh1X9offGdgJz+xteMPiZXI3b98UH7KT/olbtATNcQi6VwZRcxBGGQCkC4XzU llBoCAEtgqGEPjn8y8OK8gGwFUNmwaijhcz9z9tccYu1J7D87Yjdk7ov6voH+CV3 UMr5Xr9lbkm5s4VJ0oHbe4OD00qZpXfYHX+jm6jMcmjxZrwmccBlj27oWGWiWJ2I t6qX9AC2vvB/5uJXSwZJV1Tg5Zvz31B1ntCU2Hu/mRcJXGnZahY0lMqIEZj5+EV/ c1LU6J3cuHyzA9EXCPT1osDExe7ZKu9mg4D5hPjl5JVPORPeGTrfgYiTa0HOC33j WMaPhvCDnTVQSw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:44:23 2026 by rpki-client