$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: UkOdxZj+LLaCr/imUkPXxmCKMuPQ3cCmdm9ud7TJ5mU= Subject key identifier: B5:DD:0C:47:40:00:55:AC:DF:78:41:BD:AB:46:1B:F3:9D:BC:93:41 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 01A186AD245E7297E9236C003791B9258CCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 1387 Signing time: Thu 29 Oct 2026 08:00:56 +0000 Manifest this update: Thu 29 Oct 2026 08:00:56 +0000 Manifest next update: Fri 30 Oct 2026 08:00:56 +0000 Files and hashes: 1: B3LQrbE0D8oQ4aL3oL7prkhZdyg.roa (hash: DlK6M5zssqdBfWBogBRgB1KWMlUPTeM22cLgGd9OR+E=) 2: EblpiwRL9HlLzK24T8oP9IND1vQ.roa (hash: xm23w0o3y4eEG4Z/X+VeKtyIUdl513KI04Rcim87iI8=) 3: H96_Qc9SsITA0naiCSVL6y7VEJM.roa (hash: Rixat+/GKfD+/Qc5Q1rAIKjAt7zVyl2ONWoiw+w/7aY=) 4: KkqMLgVSOl4C9gkiDIZV5IAys_A.roa (hash: yUWuR1LKMlNOOPlPCHzgsf5Jj1BpkzuEJuF1kFFXOiw=) 5: Rb5hHaoWK42HVqMlLmdL2Q_tqs4.roa (hash: pvzrnsOI9tdcc9ULSntzOOVe3GikcQWZKLx+48F0nCc=) 6: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: poDfLJ5Fl52Dhm5zkujqLGU4L78axtFiz0EDCQDVFXM=) 7: _5dPGZCcsdHmpRhCTkOU-sos5GE.roa (hash: /u2/VDIfFnty31Q0Cg5Ee6PvdpGvq/sk0Sz5/j6Z4z4=) 8: _XOkat_tVbZSyUJD4uuRenyP92k.roa (hash: MO61vUIPE4xYG1HoXyKAbuzO/+H56vWiFpAKuIhdAOU=) 9: pUUovyR_3zQtaWqDGAW7Ac9HvB4.roa (hash: Fe3L3094CE69Fi+Zh6n4NgsG3bWV3oT1EQEavw3p2f4=) 10: qXcS6OI26rFTLi_T2I0DI0xKoyk.roa (hash: 7rGGuHEL+nQFILlUsjH4I+jgvUwVxc2dc664sGkuKo4=) 11: tz7F4eng4GbKZrftZOga_11upMA.roa (hash: pkYGrfaCo0zVxHfUdGVs2eZr/bDW6rBfCQtsQyDfE4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Oct 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:86:ad:24:5e:72:97:e9:23:6c:00:37:91:b9:25:8c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Oct 29 08:00:56 2026 GMT Not After : Oct 30 08:00:56 2026 GMT Subject: CN=b5dd0c47400055acdf7841bdab461bf39dbc9341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e6:26:fa:6f:79:55:e8:4e:bc:32:dc:47:63: d1:6a:e1:33:45:61:35:36:1b:3d:53:73:b7:e1:74: be:59:f4:43:bf:11:20:45:89:03:fb:14:57:49:9d: 65:ce:de:f8:46:5e:a4:a4:33:82:a7:c8:06:86:cc: 92:27:ec:1f:7c:39:1b:b3:96:5f:7b:ce:8c:95:4e: c6:48:03:14:cc:72:4e:0c:75:0c:75:29:5a:93:0e: 6d:26:c8:40:46:0e:29:7f:c4:e5:ed:02:76:16:b1: 7a:94:c7:1a:cb:68:53:fd:81:88:c9:44:e1:42:06: 9b:9d:c9:a5:a7:61:16:7f:c4:14:0f:d0:90:b3:c2: b0:38:0b:80:52:64:09:b3:aa:a2:8e:96:e4:2e:33: 27:cf:e8:90:91:9e:84:f6:42:3d:fc:72:f4:9e:bb: e2:d8:15:e7:50:54:c9:e2:c6:64:f3:9e:43:54:9c: 00:b6:1b:9a:bf:ae:f3:49:44:42:1d:24:de:b8:03: 9a:67:3f:2a:c8:17:62:b8:78:d2:81:db:a0:e7:52: ee:0c:b6:1a:ce:11:0e:f3:19:41:1f:4f:bd:8c:73: 97:9c:ac:b5:aa:62:27:72:43:ad:d7:32:db:3d:cc: 5b:15:e2:f1:e5:ae:50:4a:49:de:14:08:05:32:97: 00:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DD:0C:47:40:00:55:AC:DF:78:41:BD:AB:46:1B:F3:9D:BC:93:41 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:56:ff:5a:2c:b6:2e:9f:90:61:82:20:65:42:d7:1b:df:f6: fc:54:52:0c:e5:1b:3a:e9:76:b9:d9:a7:8c:2b:d7:c0:69:65: b9:17:e1:0a:fa:4c:2b:bf:51:b8:74:80:90:97:e3:59:50:37: 31:f5:e7:00:83:64:91:53:52:de:62:74:9b:80:e8:54:36:76: 2f:15:55:8a:a0:07:fe:25:85:a7:a6:0e:67:cb:58:f3:42:0f: 22:1b:35:6b:25:b6:9c:11:23:94:64:f2:ab:65:c8:17:e1:67: 14:5b:74:50:d8:1c:89:19:fa:c1:f5:15:33:4a:08:a5:a3:cb: 31:1f:e8:97:de:2e:88:e0:25:b5:0c:4a:4f:0a:25:53:ee:e6: 52:eb:f5:51:31:54:60:6a:9b:c3:3e:43:e0:8e:2f:46:4b:22: 24:bf:5d:f0:10:4d:c2:96:fb:5e:21:ff:a9:01:29:73:ad:81: 21:87:93:b0:ef:38:59:46:d6:7a:89:66:41:48:39:78:d4:0a: 14:fe:60:bd:a6:4d:02:d6:68:b2:0c:b3:b3:d7:65:37:56:dc: d1:e3:12:ae:a8:01:56:8b:e5:71:d7:5f:e0:c1:e4:07:12:71: 7c:9f:0d:22:6d:3d:f3:06:c7:1b:92:50:a5:6c:eb:d0:82:0a: 62:52:18:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGGrSRecpfpI2wAN5G5JYzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYxMDI5MDgwMDU2WhcNMjYxMDMwMDgwMDU2WjAzMTEwLwYDVQQD EyhiNWRkMGM0NzQwMDA1NWFjZGY3ODQxYmRhYjQ2MWJmMzlkYmM5MzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+Ym+m95VehOvDLcR2PRauEzRWE1 Nhs9U3O34XS+WfRDvxEgRYkD+xRXSZ1lzt74Rl6kpDOCp8gGhsySJ+wffDkbs5Zf e86MlU7GSAMUzHJODHUMdSlakw5tJshARg4pf8Tl7QJ2FrF6lMcay2hT/YGIyUTh Qgabncmlp2EWf8QUD9CQs8KwOAuAUmQJs6qijpbkLjMnz+iQkZ6E9kI9/HL0nrvi 2BXnUFTJ4sZk855DVJwAthuav67zSURCHSTeuAOaZz8qyBdiuHjSgdug51LuDLYa zhEO8xlBH0+9jHOXnKy1qmInckOt1zLbPcxbFeLx5a5QSkneFAgFMpcAOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXdDEdAAFWs33hBvatGG/OdvJNBMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFb/Wiy2 Lp+QYYIgZULXG9/2/FRSDOUbOul2udmnjCvXwGlluRfhCvpMK79RuHSAkJfjWVA3 MfXnAINkkVNS3mJ0m4DoVDZ2LxVViqAH/iWFp6YOZ8tY80IPIhs1ayW2nBEjlGTy q2XIF+FnFFt0UNgciRn6wfUVM0oIpaPLMR/ol94uiOAltQxKTwolU+7mUuv1UTFU YGqbwz5D4I4vRksiJL9d8BBNwpb7XiH/qQEpc62BIYeTsO84WUbWeolmQUg5eNQK FP5gvaZNAtZosgyzs9dlN1bc0eMSrqgBVovlcddf4MHkBxJxfJ8NIm098wbHG5JQ pWzr0IIKYlIY1A== -----END CERTIFICATE-----Generated at Thu Oct 29 16:46:46 2026 by rpki-client