$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: i/P+rWUBFRy//snYslz+V8qUds28CPkGe4yXBjHu3kQ= Subject key identifier: D9:08:99:E5:EE:30:CD:08:98:E4:60:92:B8:A2:7F:25:42:7D:48:09 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019E314EBE1758B0760C68792A89E43A2E57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 1929 Signing time: Sat 16 May 2026 15:01:44 +0000 Manifest this update: Sat 16 May 2026 15:01:44 +0000 Manifest next update: Sun 17 May 2026 15:01:44 +0000 Files and hashes: 1: 56tuRDz3a2YTFgeWS1NrR18OXkg.roa (hash: 1nNgHHZdgSddhmbVFpAOLV/4EiXUghshKvJclDsKVmQ=) 2: 6dKud0rBgn68px5_CQ8NbiAhK5I.roa (hash: c4iMueJ7H9gjm+Sm3ki0CfZIxEQXW4+lG2MfIuaVr6U=) 3: 93F83tT2Wunj2ibLPRWbOwsrgjw.roa (hash: JbaoQPD70k3GYUMe5PmYVrd4g7l0SgbWLphprt9qBGY=) 4: GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa (hash: qe+WDGTjMvxnPuiz5zKe63b6ayHJKcpH5bKiSm9lucU=) 5: JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa (hash: zytsTfDYZZwrcpQaDSmmhp6xyQ2RMRRVWWyPiD2yWTY=) 6: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: f3/OMBDuFMPWmHONODGNxGuXlPwHV5KMem7lGmg2R4o=) 7: YbqOfaiEzhYbZf1v7kxnJ5oWDdI.roa (hash: K1/J1u+fYdGovmZqt2ux5U8mWlfYB0TiDE6Xjf+a840=) 8: _5mSAKagSlrWqcFH7TXH0W26og4.roa (hash: 32J2xduAEK4/SsGh6SuDbhyqyhh7XlyF7binO4R80Wc=) 9: _CYFplyxe0M8AGr1RbZtWaBJCec.roa (hash: ySL4S7eZ51S8plbBqZUtXVpCREgkLAcEZfRUYmcl9sw=) 10: hB5dwzE-8jl9eMnVeqctFOx2T7M.roa (hash: aOmUGLttRikI04KddCkVaiXTdQZBZHrIgCYCo3rRy5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 17 May 2026 12:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:31:4e:be:17:58:b0:76:0c:68:79:2a:89:e4:3a:2e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: May 16 15:01:44 2026 GMT Not After : May 17 15:01:44 2026 GMT Subject: CN=d90899e5ee30cd0898e46092b8a27f25427d4809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fe:0a:f4:c8:73:e1:f9:38:fc:2d:e3:d5:5a: 94:bb:22:17:9c:8b:9e:c1:99:f3:82:a4:a0:a8:97: 8a:bb:df:82:03:59:8c:64:15:86:a9:b1:2b:d8:90: 07:2d:79:6b:b9:54:83:69:03:bd:25:0b:e4:5b:2a: 12:b2:b3:26:b7:7f:76:75:6c:9f:ca:7c:06:47:74: b7:d1:b6:9a:7e:68:8f:15:7c:e5:05:a4:7b:b3:d2: b8:cd:0c:59:d8:fc:0b:cf:24:48:f0:f7:4b:63:9f: 80:5b:28:10:a3:c9:1b:05:18:d8:3a:ae:9a:77:9d: 96:a5:91:e3:be:76:cb:b9:d7:f2:f9:d3:7f:6b:2f: 2e:85:11:60:61:4c:fd:c2:6a:15:99:30:a0:ac:7a: 64:18:86:b4:1a:54:57:3a:16:e4:86:ec:35:78:dc: a3:13:b4:c9:51:b1:29:6a:e2:0e:ab:d5:9d:cd:62: 3a:c8:31:cf:02:7c:3d:07:6f:e6:b5:d8:e2:d0:e2: cb:a4:d8:d4:19:3b:f0:48:4e:43:a3:bb:cf:8c:a0: 9a:37:59:4e:f2:d2:d2:e2:d4:89:ad:ad:ab:15:1b: a5:75:0a:b6:b7:b0:b0:8f:b6:e0:d8:ff:e5:a0:61: 39:e7:35:7b:35:09:a9:e6:90:1f:96:7b:d2:56:bb: 56:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:08:99:E5:EE:30:CD:08:98:E4:60:92:B8:A2:7F:25:42:7D:48:09 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ef:89:01:6c:03:b9:77:bc:93:f3:b5:38:b1:4d:6d:d4:84: e5:41:69:10:0a:e9:19:ea:b3:9c:8a:a8:1e:90:e0:c6:b4:4e: e8:e9:4f:34:ef:c6:2a:bb:d2:3d:75:b2:9f:3e:1e:ac:64:83: 28:1b:16:f4:fc:6b:94:6e:3f:9f:2a:be:b2:fa:3d:8b:d5:b4: 77:31:93:a4:b1:44:44:b5:41:cf:be:20:23:e9:32:50:c1:a5: 0e:f0:46:5f:95:ea:80:3e:77:18:69:e0:58:6f:4d:31:f7:0d: e9:fc:69:76:fc:3a:dc:24:14:01:03:46:62:31:9a:5e:91:10: 82:a3:cd:3d:76:76:81:c6:48:67:58:04:e8:59:a1:ce:f6:78: 04:2d:d9:fd:ec:a6:95:b2:ee:d1:aa:64:74:37:2e:4e:09:21: c5:0d:14:68:2a:62:fe:81:14:22:88:d8:d1:fb:fd:c3:14:72: a9:77:13:5e:ff:5f:3f:6c:5e:7d:d0:26:e2:39:35:45:01:5d: 1c:77:94:64:33:47:3a:ae:27:e6:71:be:98:03:bf:c8:68:2a: 0f:85:18:35:8b:96:b2:b5:01:e3:9d:9c:05:33:f3:a9:db:58: b5:f4:04:d0:28:9f:2b:af:e0:7d:ff:7e:e1:46:f7:70:d8:06: 61:d3:00:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4xTr4XWLB2DGh5KonkOi5XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwNTE2MTUwMTQ0WhcNMjYwNTE3MTUwMTQ0WjAzMTEwLwYDVQQD EyhkOTA4OTllNWVlMzBjZDA4OThlNDYwOTJiOGEyN2YyNTQyN2Q0ODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv4K9Mhz4fk4/C3j1VqUuyIXnIue wZnzgqSgqJeKu9+CA1mMZBWGqbEr2JAHLXlruVSDaQO9JQvkWyoSsrMmt392dWyf ynwGR3S30baafmiPFXzlBaR7s9K4zQxZ2PwLzyRI8PdLY5+AWygQo8kbBRjYOq6a d52WpZHjvnbLudfy+dN/ay8uhRFgYUz9wmoVmTCgrHpkGIa0GlRXOhbkhuw1eNyj E7TJUbEpauIOq9WdzWI6yDHPAnw9B2/mtdji0OLLpNjUGTvwSE5Do7vPjKCaN1lO 8tLS4tSJra2rFRuldQq2t7Cwj7bg2P/loGE55zV7NQmp5pAflnvSVrtWPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkImeXuMM0ImORgkriifyVCfUgJMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFO+JAWwD uXe8k/O1OLFNbdSE5UFpEArpGeqznIqoHpDgxrRO6OlPNO/GKrvSPXWynz4erGSD KBsW9PxrlG4/nyq+svo9i9W0dzGTpLFERLVBz74gI+kyUMGlDvBGX5XqgD53GGng WG9NMfcN6fxpdvw63CQUAQNGYjGaXpEQgqPNPXZ2gcZIZ1gE6FmhzvZ4BC3Z/eym lbLu0apkdDcuTgkhxQ0UaCpi/oEUIojY0fv9wxRyqXcTXv9fP2xefdAm4jk1RQFd HHeUZDNHOq4n5nG+mAO/yGgqD4UYNYuWsrUB452cBTPzqdtYtfQE0CifK6/gff9+ 4Ub3cNgGYdMA4A== -----END CERTIFICATE-----Generated at Sat May 16 21:13:12 2026 by rpki-client