$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: OAG5IP7+oibQF8NCtHlQE50riOk5HUGMyKYu8xcDrmg= Subject key identifier: A4:03:AE:36:BF:93:BC:5D:7F:20:11:51:24:BB:B2:8A:2D:CF:68:C3 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019D382E856486C1E3906A86E5EFF4FAFA4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 18A8 Signing time: Sun 29 Mar 2026 06:01:05 +0000 Manifest this update: Sun 29 Mar 2026 06:01:05 +0000 Manifest next update: Mon 30 Mar 2026 06:01:05 +0000 Files and hashes: 1: 56tuRDz3a2YTFgeWS1NrR18OXkg.roa (hash: 1nNgHHZdgSddhmbVFpAOLV/4EiXUghshKvJclDsKVmQ=) 2: 6dKud0rBgn68px5_CQ8NbiAhK5I.roa (hash: c4iMueJ7H9gjm+Sm3ki0CfZIxEQXW4+lG2MfIuaVr6U=) 3: 93F83tT2Wunj2ibLPRWbOwsrgjw.roa (hash: JbaoQPD70k3GYUMe5PmYVrd4g7l0SgbWLphprt9qBGY=) 4: GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa (hash: qe+WDGTjMvxnPuiz5zKe63b6ayHJKcpH5bKiSm9lucU=) 5: JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa (hash: zytsTfDYZZwrcpQaDSmmhp6xyQ2RMRRVWWyPiD2yWTY=) 6: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: jm3Ga2sQszx/+ipTxNtDbFfijZ6sz6xRcbDku1mfEVU=) 7: YbqOfaiEzhYbZf1v7kxnJ5oWDdI.roa (hash: K1/J1u+fYdGovmZqt2ux5U8mWlfYB0TiDE6Xjf+a840=) 8: _5mSAKagSlrWqcFH7TXH0W26og4.roa (hash: 32J2xduAEK4/SsGh6SuDbhyqyhh7XlyF7binO4R80Wc=) 9: _CYFplyxe0M8AGr1RbZtWaBJCec.roa (hash: ySL4S7eZ51S8plbBqZUtXVpCREgkLAcEZfRUYmcl9sw=) 10: hB5dwzE-8jl9eMnVeqctFOx2T7M.roa (hash: aOmUGLttRikI04KddCkVaiXTdQZBZHrIgCYCo3rRy5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:38:2e:85:64:86:c1:e3:90:6a:86:e5:ef:f4:fa:fa:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Mar 29 06:01:05 2026 GMT Not After : Mar 30 06:01:05 2026 GMT Subject: CN=a403ae36bf93bc5d7f20115124bbb28a2dcf68c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:0b:75:2f:ca:c4:40:fc:de:71:e1:00:8d: 44:7a:6a:a5:f1:24:be:04:a9:19:6c:d1:97:1b:4d: ad:2e:4d:01:78:ef:8a:20:17:66:09:75:ac:35:7c: 04:54:b3:89:33:c7:44:e1:3d:89:5f:56:b6:fc:5f: 40:2a:44:1a:0a:bc:53:f3:d3:b1:91:dd:e5:f6:b1: 9c:3b:f8:65:60:6d:c8:cf:65:55:e3:d5:7e:7c:08: 9e:fc:32:c0:2e:98:1b:d1:ce:f2:9b:0b:f1:b6:89: 32:53:35:d6:2c:1b:d7:a1:63:fc:b5:67:00:9a:11: 6f:09:0d:e9:c7:13:cf:a1:9f:df:3e:8f:06:cd:e0: bc:37:35:b9:34:1f:cc:6c:6e:f8:a4:06:69:2b:a8: 24:44:73:c4:20:bb:a6:57:6b:6f:1c:ad:91:a4:4c: 03:d2:9c:b5:60:e1:6e:b6:fd:cf:4f:32:50:9d:94: ea:71:49:82:13:d9:4b:ee:2a:db:5f:91:41:87:8e: 56:cb:f1:1f:41:78:4e:ab:fc:1e:fc:26:ec:f0:19: 38:4c:40:aa:28:11:ce:f5:5b:ba:38:d3:ae:41:e9: 1c:89:0d:6b:ce:e5:b9:20:2e:2a:7b:8d:a1:35:d9: 80:86:88:d9:f2:4c:96:92:6e:1a:fb:53:15:9d:ae: 34:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:03:AE:36:BF:93:BC:5D:7F:20:11:51:24:BB:B2:8A:2D:CF:68:C3 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:fa:01:ff:cc:2d:4c:15:ce:04:f1:66:94:80:24:bd:df:b4: b5:9c:4f:34:a8:f6:22:21:62:10:84:be:49:19:61:b4:00:f3: 38:f8:4e:74:58:b5:18:46:42:2e:d0:b5:6f:32:38:6c:d5:c3: c7:1f:6f:ca:73:a2:99:f1:ad:7d:48:9b:80:fc:4c:45:5d:a0: ca:7b:9c:ff:2e:2e:c4:1c:98:39:da:36:cc:74:22:a9:a6:32: be:c2:37:c8:b4:97:4e:91:f3:ec:38:67:e7:17:f4:22:1c:cc: 7e:d7:f8:ec:59:27:81:8f:71:b3:f9:43:23:58:5b:7d:12:15: 90:1e:b5:98:a2:16:4a:19:39:a3:54:d0:c7:cd:13:25:7e:59: 4d:1f:fb:f1:f3:f2:bb:ba:16:3d:2c:68:f0:39:26:e3:11:b0: b6:a7:39:44:70:d4:eb:e5:68:b8:fd:ff:8c:38:39:7f:fc:9b: 35:9c:c0:ad:08:e4:90:3e:f7:19:0f:63:b5:8c:b5:5d:d6:25: b3:e2:60:b8:1e:3d:36:82:c7:03:dd:c3:49:a4:af:6a:d3:d4: 2f:99:45:b9:ba:54:3a:a4:d9:85:b3:96:0b:c9:8e:3d:14:37: 7c:8e:5e:1a:73:35:c4:69:b9:9b:4d:32:31:e8:f5:76:7d:cf: c3:16:77:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ04LoVkhsHjkGqG5e/0+vpKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwMzI5MDYwMTA1WhcNMjYwMzMwMDYwMTA1WjAzMTEwLwYDVQQD EyhhNDAzYWUzNmJmOTNiYzVkN2YyMDExNTEyNGJiYjI4YTJkY2Y2OGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF0LdS/KxED83nHhAI1Eemql8SS+ BKkZbNGXG02tLk0BeO+KIBdmCXWsNXwEVLOJM8dE4T2JX1a2/F9AKkQaCrxT89Ox kd3l9rGcO/hlYG3Iz2VV49V+fAie/DLALpgb0c7ymwvxtokyUzXWLBvXoWP8tWcA mhFvCQ3pxxPPoZ/fPo8GzeC8NzW5NB/MbG74pAZpK6gkRHPEILumV2tvHK2RpEwD 0py1YOFutv3PTzJQnZTqcUmCE9lL7irbX5FBh45Wy/EfQXhOq/we/Cbs8Bk4TECq KBHO9Vu6ONOuQekciQ1rzuW5IC4qe42hNdmAhojZ8kyWkm4a+1MVna40ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQDrja/k7xdfyARUSS7sootz2jDMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfoB/8wt TBXOBPFmlIAkvd+0tZxPNKj2IiFiEIS+SRlhtADzOPhOdFi1GEZCLtC1bzI4bNXD xx9vynOimfGtfUibgPxMRV2gynuc/y4uxByYOdo2zHQiqaYyvsI3yLSXTpHz7Dhn 5xf0IhzMftf47FkngY9xs/lDI1hbfRIVkB61mKIWShk5o1TQx80TJX5ZTR/78fPy u7oWPSxo8Dkm4xGwtqc5RHDU6+VouP3/jDg5f/ybNZzArQjkkD73GQ9jtYy1XdYl s+JguB49NoLHA93DSaSvatPUL5lFubpUOqTZhbOWC8mOPRQ3fI5eGnM1xGm5m00y Mej1dn3PwxZ3DQ== -----END CERTIFICATE-----Generated at Sun Mar 29 14:55:57 2026 by rpki-client