$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft File: xCzMCbGKriXcamxXk_m5IMj2oZA.mft (raw, json) Hash identifier: fz/UwQI92D68VZAT043IiTi5XZx+Iuxu4XQZD3UR9+c= Subject key identifier: A3:51:6F:C0:04:3B:FD:D3:DE:55:DC:02:26:E3:43:28:9D:EF:77:05 Authority key identifier: C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90 Certificate issuer: /CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190 Certificate serial: 019FA89A4D58B60FEDF06673554330D3C39A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft Manifest number: 4C Signing time: Tue 28 Jul 2026 12:01:52 +0000 Manifest this update: Tue 28 Jul 2026 12:01:52 +0000 Manifest next update: Wed 29 Jul 2026 12:01:52 +0000 Files and hashes: 1: 0EqH53VKbjCBwptRrMrgE491HhQ.roa (hash: hlOlUUZZiEuddmv9KYC5nE6Vh5F6OtggwbOcesZb7ew=) 2: 5o0i3iMYhKiDSsjJw2IO_CJCyRI.roa (hash: cLWDRlb5at0aBAH980evnabI9atanrKNEOAJh0qjBjM=) 3: 9_lEI-YO-xsNbdJzpz_Zj20rYco.roa (hash: oMnrwxFfNZp1LGwhuhUfXcc2UVGqfAbo9ZJKmysRQV0=) 4: E8IDfbPJ-ASUqOO7Y_PebCnfcG8.roa (hash: Y97cV5mLD6OdoMRNkkIiqZ3KZIjQpuOlelMU9OFPxmA=) 5: H9L6_6x2hId55TmALa95rri1bEE.roa (hash: 9r2y4hipyP45iIbJJm1kWRG0SgwtjIdEoYjDvubCc0w=) 6: YpPmYf6zgICwfjz8NuAopnzNieM.roa (hash: Wfroa7HPPkCm63Ywbw+5nQxutBW2wjmxATyJS+4COgo=) 7: Z5KCSZVXGCrp9dNdx67dsrIqMQs.roa (hash: OByLdhjOZ0YIarl8arWqnOnJBvbgrJT1GS2f+GSHfp4=) 8: c4_Bhf2_gp-Hy5KN9JDfGFYxZ78.roa (hash: 1JGwg63mXrikqzD+c6YLgxnjzd6dRLDZcHOVSYL/I9U=) 9: f2uUPGNXC_pxdPQmPP-DpsHFtOQ.roa (hash: mFFk7nFev+G1oGZg2IbBid7J61ARFJ8OWPLRJsrECIA=) 10: w9Z_kQBpH-mdA7iwzKTWMENR2To.roa (hash: rlA3z5HMnFFWQ/5n7/7EQ6au3c+5eK2aDkiGB8PIifk=) 11: xCzMCbGKriXcamxXk_m5IMj2oZA.crl (hash: dkxLzgkflzHvi23Q3leiR4WWwY9SG0vQBLXSSdcvFYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 12:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:9a:4d:58:b6:0f:ed:f0:66:73:55:43:30:d3:c3:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190 Validity Not Before: Jul 28 12:01:52 2026 GMT Not After : Jul 29 12:01:52 2026 GMT Subject: CN=a3516fc0043bfdd3de55dc0226e343289def7705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1b:80:bc:90:4e:b7:b9:d0:02:b1:b9:66:73: e9:51:76:10:b5:83:cc:f3:27:f4:2d:a6:ac:b1:62: c0:62:f1:48:e6:47:86:84:21:2a:38:01:18:56:aa: 87:c3:54:40:9f:39:f7:43:2e:76:6c:f4:34:2b:4e: e2:10:e7:76:17:8d:51:fa:7d:40:65:67:ad:84:82: f7:40:e2:78:3f:fa:45:21:d9:54:99:57:8f:5c:bc: 16:e0:21:7b:f6:a5:8d:0e:46:f1:bf:2f:c7:cf:4f: 26:1e:59:41:37:89:01:7c:21:9b:99:c9:38:53:6d: f7:fc:39:36:f6:f1:fc:29:26:81:fb:5c:01:fe:54: ab:f7:ad:25:26:f0:ab:32:75:e2:3d:09:3e:55:69: d4:ff:34:66:3d:6e:1b:b5:b7:28:6e:79:43:97:a3: 7c:ec:bd:87:ce:b0:b0:bf:d0:4d:0d:99:7d:d3:95: 25:df:4d:2d:cf:0c:5c:15:10:1c:99:17:9d:36:d4: 1c:b8:e2:9d:94:54:a5:cc:d9:f3:e8:57:60:ea:10: 4a:3e:02:27:96:81:cb:79:d5:b5:de:70:7a:3b:17: b5:22:3f:a0:f8:1f:0a:6a:49:a8:b1:c1:0d:81:37: cf:b9:95:9c:d5:8f:c2:f5:5f:20:66:16:55:ad:a1: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:51:6F:C0:04:3B:FD:D3:DE:55:DC:02:26:E3:43:28:9D:EF:77:05 X509v3 Authority Key Identifier: keyid:C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:a4:90:6c:a9:4c:3d:82:98:83:97:77:82:9e:04:6b:00:85: c7:8b:5a:58:48:6a:1e:16:98:ed:f4:97:1b:cf:74:66:b3:1d: 50:8a:fb:c0:15:b4:e3:85:5c:69:29:c3:b2:49:c7:17:64:05: aa:69:63:d7:cb:33:cb:cb:b6:02:95:7a:66:c1:2b:53:e0:d9: 24:df:a7:f1:00:2d:df:89:9b:bf:86:9c:9d:01:49:74:74:b6: 42:52:9d:6c:02:88:4f:f9:34:2f:a9:df:be:c9:ae:58:d2:db: 19:de:b9:a9:d6:9e:8c:11:96:ad:f0:c5:ed:d4:a9:3e:04:08: 95:f6:6d:8a:73:66:6d:86:be:42:78:e2:31:48:e0:54:55:60: f9:83:e0:c2:15:31:d9:19:11:34:72:75:87:2d:2c:99:29:55: 99:5b:19:49:39:be:96:72:d7:a7:b4:a2:67:cf:f6:54:2f:67: 52:41:a2:dd:aa:39:14:de:96:ea:cc:dd:4f:00:28:5b:b2:9b: c2:0d:31:38:30:37:26:94:ed:d9:1e:ec:74:21:e0:fc:d5:12: 0d:60:f1:69:95:20:f9:65:ab:f0:95:5d:61:38:28:c2:1a:75: d3:b6:4b:9d:94:7c:e8:6b:a7:ed:87:7e:9c:ab:cf:55:9e:ba: 04:14:97:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+omk1Ytg/t8GZzVUMw08OaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MmNjYzA5YjE4YWFlMjVkYzZhNmM1NzkzZjliOTIwYzhm NmExOTAwHhcNMjYwNzI4MTIwMTUyWhcNMjYwNzI5MTIwMTUyWjAzMTEwLwYDVQQD EyhhMzUxNmZjMDA0M2JmZGQzZGU1NWRjMDIyNmUzNDMyODlkZWY3NzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BuAvJBOt7nQArG5ZnPpUXYQtYPM 8yf0LaassWLAYvFI5keGhCEqOAEYVqqHw1RAnzn3Qy52bPQ0K07iEOd2F41R+n1A ZWethIL3QOJ4P/pFIdlUmVePXLwW4CF79qWNDkbxvy/Hz08mHllBN4kBfCGbmck4 U233/Dk29vH8KSaB+1wB/lSr960lJvCrMnXiPQk+VWnU/zRmPW4btbcobnlDl6N8 7L2HzrCwv9BNDZl905Ul300tzwxcFRAcmRedNtQcuOKdlFSlzNnz6Fdg6hBKPgIn loHLedW13nB6Oxe1Ij+g+B8KakmoscENgTfPuZWc1Y/C9V8gZhZVraFXgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNRb8AEO/3T3lXcAibjQyid73cFMB8GA1UdIwQY MBaAFMQszAmxiq4l3GpsV5P5uSDI9qGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKSQbKlM PYKYg5d3gp4EawCFx4taWEhqHhaY7fSXG890ZrMdUIr7wBW044VcaSnDsknHF2QF qmlj18szy8u2ApV6ZsErU+DZJN+n8QAt34mbv4acnQFJdHS2QlKdbAKIT/k0L6nf vsmuWNLbGd65qdaejBGWrfDF7dSpPgQIlfZtinNmbYa+QnjiMUjgVFVg+YPgwhUx 2RkRNHJ1hy0smSlVmVsZSTm+lnLXp7SiZ8/2VC9nUkGi3ao5FN6W6szdTwAoW7Kb wg0xODA3JpTt2R7sdCHg/NUSDWDxaZUg+WWr8JVdYTgowhp107ZLnZR86Gun7Yd+ nKvPVZ66BBSXvQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:15:28 2026 by rpki-client