$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: zpX3lXBgIrp/f/LLcVECQiAar9nTedMu+QnDXluVdY8= Subject key identifier: 03:04:D9:17:06:73:49:8C:41:42:FB:19:1F:50:DE:D1:86:7B:D3:11 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 01A00213BDEF9764C23B04795891F6BDD72B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 1A1D Signing time: Fri 14 Aug 2026 21:00:43 +0000 Manifest this update: Fri 14 Aug 2026 21:00:43 +0000 Manifest next update: Sat 15 Aug 2026 21:00:43 +0000 Files and hashes: 1: 1-l4RaLfBJyd2MPQTNrHgHOb738I.asa (hash: 7p+VWBjLWtE4REi9BbdzkPj1Ve0U1PFZBt+RJ3xIr6c=) 2: 56tuRDz3a2YTFgeWS1NrR18OXkg.roa (hash: 1nNgHHZdgSddhmbVFpAOLV/4EiXUghshKvJclDsKVmQ=) 3: 5MrbF5bNGEPF9upXfBtS4A4wDl4.roa (hash: cuTzNTZt0vxLLk58kaLIpL4TUhhDviNmQSTtCDK4SsY=) 4: GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa (hash: qe+WDGTjMvxnPuiz5zKe63b6ayHJKcpH5bKiSm9lucU=) 5: JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa (hash: zytsTfDYZZwrcpQaDSmmhp6xyQ2RMRRVWWyPiD2yWTY=) 6: KCBoMxNAGr3ol6s6RM6pJTYa9E0.roa (hash: FunXZj+wtacs6pD/kFNFcLd6gqmej6YgcTSrFfpXd0I=) 7: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: Z0J/DyqoyKq8Qtp2nxAGNBcZS/h5Ik7n1c4On1W7hYI=) 8: YbqOfaiEzhYbZf1v7kxnJ5oWDdI.roa (hash: K1/J1u+fYdGovmZqt2ux5U8mWlfYB0TiDE6Xjf+a840=) 9: Yeq657xhQdSGU8ozMoBAHWz1c7o.roa (hash: R/IQB+JYvEApcpK9ekXgPiUzLmKHajFNMuKejVzFsKs=) 10: _5mSAKagSlrWqcFH7TXH0W26og4.roa (hash: 32J2xduAEK4/SsGh6SuDbhyqyhh7XlyF7binO4R80Wc=) 11: _CYFplyxe0M8AGr1RbZtWaBJCec.roa (hash: ySL4S7eZ51S8plbBqZUtXVpCREgkLAcEZfRUYmcl9sw=) 12: pw7UY5cxtDgJd7dLAtwYGNvRcpo.roa (hash: g4uEePdexAW53FzeUPyjdIrDSmjkq/x7/+0BrdOJwdU=) 13: ubBrtzGmGbSO-WUwJl4ceatGG7s.roa (hash: HzJ4FfYId8f62Ds2rGoMX1JffixOL9SOPWiVHisDEAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 18:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:02:13:bd:ef:97:64:c2:3b:04:79:58:91:f6:bd:d7:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Aug 14 21:00:43 2026 GMT Not After : Aug 15 21:00:43 2026 GMT Subject: CN=0304d9170673498c4142fb191f50ded1867bd311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:17:35:25:6d:ce:3c:9e:1b:5c:18:6f:a6:6e: d1:f0:b4:cb:01:f2:7a:32:89:6a:7d:1c:29:b7:0b: 83:c5:bc:47:10:04:61:24:ca:55:7f:e5:33:8c:36: be:80:9f:f8:c9:59:25:b7:d3:60:fc:b2:f0:11:b5: a8:b2:13:bd:d1:91:b7:72:b3:aa:37:ac:4d:d3:61: b0:00:44:c7:08:52:59:a4:89:5e:52:7a:b7:a0:bc: a0:b3:a1:50:a3:79:b6:5c:59:2e:f6:49:0d:af:85: 99:f3:87:1d:71:b2:d9:c4:c1:25:0b:7d:d3:2d:92: 51:44:86:6f:e3:5f:76:90:39:09:29:aa:ad:08:46: cd:7f:bf:f5:36:e1:e7:13:5c:cb:1c:ef:f5:b5:9e: 17:22:57:ec:bf:79:b9:14:69:a8:46:34:06:e8:75: 1e:5f:13:8f:33:d1:5b:f2:f9:f3:c8:f7:93:cb:f1: 7e:5b:bb:4d:a7:42:b5:45:d2:bb:fd:57:15:f6:7e: e5:c9:99:96:ce:33:c3:9e:7f:9c:c4:1d:39:d4:c6: 13:5e:fd:1d:c1:6c:89:1f:66:89:cd:04:b9:0f:7c: 56:66:61:e1:da:89:cc:96:f9:71:f4:53:bc:ef:a6: e9:4a:4c:30:88:c9:95:f2:38:22:a1:85:2a:33:fd: 8d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:04:D9:17:06:73:49:8C:41:42:FB:19:1F:50:DE:D1:86:7B:D3:11 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:80:16:19:a0:dd:fc:66:1b:a3:c5:b3:57:ed:5f:93:f6:dc: b5:c4:8e:35:07:30:b3:57:b6:79:93:0e:95:ad:2a:00:06:7d: d6:57:6d:30:9c:f2:a1:bb:8b:84:45:75:58:4d:67:3f:21:1a: 4d:11:72:dc:da:97:f6:70:c5:b7:b5:d9:f6:02:ff:06:c3:ce: 51:1b:65:2c:af:de:9a:6f:8a:4b:06:6e:6b:5b:05:f7:b4:45: 0c:13:8a:7f:f8:97:1f:3f:1f:54:fe:28:50:c5:11:d0:4b:3c: 0d:02:8b:d9:ce:88:43:6e:2e:50:43:46:c5:e7:56:f5:92:0c: 04:c0:e0:d2:34:19:d9:bc:40:78:55:ed:f0:27:8a:13:36:b5: 4b:9d:e8:0b:c1:88:3b:82:69:7a:fd:60:d6:8c:6b:c3:a0:1c: 1f:45:e5:ed:91:2f:ad:d3:2e:ea:7d:5b:b9:03:10:84:bc:b1: 58:e7:9f:96:96:f7:f2:4c:2a:22:db:43:23:09:ee:be:2c:22: 6f:51:d6:e1:f8:ac:d2:ed:f1:3f:7c:9a:25:1a:0c:19:8c:c1: 52:bb:b6:32:3c:b0:f3:29:4f:c1:9d:1b:87:33:0f:91:2c:7c: 17:94:59:22:df:6f:ff:a0:0e:85:c3:da:9b:54:b6:ba:07:75: d6:83:c6:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaACE73vl2TCOwR5WJH2vdcrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwODE0MjEwMDQzWhcNMjYwODE1MjEwMDQzWjAzMTEwLwYDVQQD EygwMzA0ZDkxNzA2NzM0OThjNDE0MmZiMTkxZjUwZGVkMTg2N2JkMzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBc1JW3OPJ4bXBhvpm7R8LTLAfJ6 MolqfRwptwuDxbxHEARhJMpVf+UzjDa+gJ/4yVklt9Ng/LLwEbWoshO90ZG3crOq N6xN02GwAETHCFJZpIleUnq3oLygs6FQo3m2XFku9kkNr4WZ84cdcbLZxMElC33T LZJRRIZv4192kDkJKaqtCEbNf7/1NuHnE1zLHO/1tZ4XIlfsv3m5FGmoRjQG6HUe XxOPM9Fb8vnzyPeTy/F+W7tNp0K1RdK7/VcV9n7lyZmWzjPDnn+cxB051MYTXv0d wWyJH2aJzQS5D3xWZmHh2onMlvlx9FO876bpSkwwiMmV8jgioYUqM/2NZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAME2RcGc0mMQUL7GR9Q3tGGe9MRMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoAWGaDd /GYbo8WzV+1fk/bctcSONQcws1e2eZMOla0qAAZ91ldtMJzyobuLhEV1WE1nPyEa TRFy3NqX9nDFt7XZ9gL/BsPOURtlLK/emm+KSwZua1sF97RFDBOKf/iXHz8fVP4o UMUR0Es8DQKL2c6IQ24uUENGxedW9ZIMBMDg0jQZ2bxAeFXt8CeKEza1S53oC8GI O4Jpev1g1oxrw6AcH0Xl7ZEvrdMu6n1buQMQhLyxWOeflpb38kwqIttDIwnuviwi b1HW4fis0u3xP3yaJRoMGYzBUru2Mjyw8ylPwZ0bhzMPkSx8F5RZIt9v/6AOhcPa m1S2ugd11oPGpg== -----END CERTIFICATE-----Generated at Sat Aug 15 03:15:03 2026 by rpki-client