$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: srwbyUyr1qmKhG5+OvI2StrbCbVBGKfEE2Z6MmjeVGM= Subject key identifier: A0:B7:87:C4:E9:24:E5:02:75:A0:2C:55:AA:32:F3:16:BD:DC:A8:1A Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019F18EB0794E28B7ECE82A69FC3C5B3F74D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 19A2 Signing time: Tue 30 Jun 2026 14:24:43 +0000 Manifest this update: Tue 30 Jun 2026 14:24:43 +0000 Manifest next update: Wed 01 Jul 2026 14:24:43 +0000 Files and hashes: 1: 56tuRDz3a2YTFgeWS1NrR18OXkg.roa (hash: 1nNgHHZdgSddhmbVFpAOLV/4EiXUghshKvJclDsKVmQ=) 2: 5MrbF5bNGEPF9upXfBtS4A4wDl4.roa (hash: cuTzNTZt0vxLLk58kaLIpL4TUhhDviNmQSTtCDK4SsY=) 3: 6dKud0rBgn68px5_CQ8NbiAhK5I.roa (hash: c4iMueJ7H9gjm+Sm3ki0CfZIxEQXW4+lG2MfIuaVr6U=) 4: 93F83tT2Wunj2ibLPRWbOwsrgjw.roa (hash: JbaoQPD70k3GYUMe5PmYVrd4g7l0SgbWLphprt9qBGY=) 5: GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa (hash: qe+WDGTjMvxnPuiz5zKe63b6ayHJKcpH5bKiSm9lucU=) 6: JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa (hash: zytsTfDYZZwrcpQaDSmmhp6xyQ2RMRRVWWyPiD2yWTY=) 7: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: GtU1XiCEO1ma18+74b4lUI9qpFztPFPfkx/wKYv4d1E=) 8: YbqOfaiEzhYbZf1v7kxnJ5oWDdI.roa (hash: K1/J1u+fYdGovmZqt2ux5U8mWlfYB0TiDE6Xjf+a840=) 9: _5mSAKagSlrWqcFH7TXH0W26og4.roa (hash: 32J2xduAEK4/SsGh6SuDbhyqyhh7XlyF7binO4R80Wc=) 10: _CYFplyxe0M8AGr1RbZtWaBJCec.roa (hash: ySL4S7eZ51S8plbBqZUtXVpCREgkLAcEZfRUYmcl9sw=) 11: hB5dwzE-8jl9eMnVeqctFOx2T7M.roa (hash: aOmUGLttRikI04KddCkVaiXTdQZBZHrIgCYCo3rRy5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Jul 2026 14:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:18:eb:07:94:e2:8b:7e:ce:82:a6:9f:c3:c5:b3:f7:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Jun 30 14:24:43 2026 GMT Not After : Jul 1 14:24:43 2026 GMT Subject: CN=a0b787c4e924e50275a02c55aa32f316bddca81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:5f:53:b5:30:f1:d5:a2:a3:81:18:98:02: 85:c3:ad:13:41:a3:0b:cf:41:c4:b5:bd:d5:e2:a5: fe:ce:5b:bd:0b:c0:02:24:33:dc:a2:df:4c:a8:f8: 85:38:12:f5:f5:93:f2:af:55:bc:0e:60:6c:2a:8d: 9b:45:30:6a:7f:12:64:bd:23:2a:58:7f:fe:be:ba: f0:f1:90:c9:88:c4:60:41:f5:f3:92:f9:4e:4b:78: 5f:32:78:56:53:e5:37:ec:ae:f2:4f:0d:f5:d7:b5: 63:a7:0f:57:6b:51:7c:d9:53:3e:a7:dc:67:c8:1b: b4:ec:69:70:35:3f:d6:34:53:3f:d0:28:44:77:f4: 95:a9:43:7d:cc:bf:71:06:66:46:7b:aa:06:34:27: 20:a1:9a:a2:12:df:5a:33:93:18:97:21:8e:3b:5d: b7:44:22:82:0e:78:b9:22:99:88:7b:91:80:d3:6a: ff:a9:b9:70:06:a8:43:02:46:13:bd:ed:a5:d1:7f: e6:d4:d8:40:8e:84:8c:9f:d8:c9:72:f0:d1:a9:e9: 05:73:7f:5c:b9:f8:67:d5:73:ee:87:4c:7b:7a:34: 3e:18:2b:6c:ca:15:e8:c0:c2:59:37:c7:75:31:f5: 65:53:fa:4d:30:99:1c:7f:5c:41:dd:2f:ce:17:c2: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B7:87:C4:E9:24:E5:02:75:A0:2C:55:AA:32:F3:16:BD:DC:A8:1A X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:98:11:6a:4f:eb:b2:18:95:49:99:3a:3f:3a:39:ba:be:cc: da:59:b5:79:87:24:9c:6a:d1:de:f5:41:27:42:a1:74:51:df: 3b:5f:03:39:e4:2a:ed:ad:8b:64:1c:72:66:0f:31:6d:0e:e3: ca:d2:1c:ea:3f:12:96:7a:6e:d8:09:0c:76:b9:98:19:43:a9: f7:dd:6d:61:42:2b:41:4b:a7:75:9c:82:97:a1:35:e2:6f:f7: 27:71:92:e8:c7:52:03:1f:ce:66:f4:14:50:8b:30:3f:0f:ee: 4f:2d:e8:8a:c9:02:6f:2c:f4:7d:81:96:4a:51:5f:b1:d7:5e: fe:31:33:80:04:26:2f:61:6d:9a:50:d2:c7:ce:12:6d:53:07: a5:da:71:60:a7:36:c3:05:3d:3d:50:93:d3:1d:63:e0:32:cf: f4:b3:79:f3:4c:ff:7f:0e:09:33:48:a9:34:86:09:8a:62:a2: 42:67:8d:cd:cf:56:e1:20:0d:45:e5:90:4b:92:c4:c0:4b:b7: 7b:2c:de:87:36:b5:26:5d:c8:a8:b1:67:1b:fe:e0:a4:12:a3: 1e:98:79:a6:31:8c:38:21:9d:6c:9f:49:3c:ee:76:b0:5e:a2: f5:e9:bb:e6:8d:70:74:7d:d0:09:13:73:3f:6f:20:36:9b:a0: 8c:57:13:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8Y6weU4ot+zoKmn8PFs/dNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwNjMwMTQyNDQzWhcNMjYwNzAxMTQyNDQzWjAzMTEwLwYDVQQD EyhhMGI3ODdjNGU5MjRlNTAyNzVhMDJjNTVhYTMyZjMxNmJkZGNhODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJNfU7Uw8dWio4EYmAKFw60TQaML z0HEtb3V4qX+zlu9C8ACJDPcot9MqPiFOBL19ZPyr1W8DmBsKo2bRTBqfxJkvSMq WH/+vrrw8ZDJiMRgQfXzkvlOS3hfMnhWU+U37K7yTw3117Vjpw9Xa1F82VM+p9xn yBu07GlwNT/WNFM/0ChEd/SVqUN9zL9xBmZGe6oGNCcgoZqiEt9aM5MYlyGOO123 RCKCDni5IpmIe5GA02r/qblwBqhDAkYTve2l0X/m1NhAjoSMn9jJcvDRqekFc39c ufhn1XPuh0x7ejQ+GCtsyhXowMJZN8d1MfVlU/pNMJkcf1xB3S/OF8JsbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKC3h8TpJOUCdaAsVaoy8xa93KgaMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpgRak/r shiVSZk6Pzo5ur7M2lm1eYcknGrR3vVBJ0KhdFHfO18DOeQq7a2LZBxyZg8xbQ7j ytIc6j8Slnpu2AkMdrmYGUOp991tYUIrQUundZyCl6E14m/3J3GS6MdSAx/OZvQU UIswPw/uTy3oiskCbyz0fYGWSlFfsdde/jEzgAQmL2FtmlDSx84SbVMHpdpxYKc2 wwU9PVCT0x1j4DLP9LN580z/fw4JM0ipNIYJimKiQmeNzc9W4SANReWQS5LEwEu3 eyzehza1Jl3IqLFnG/7gpBKjHph5pjGMOCGdbJ9JPO52sF6i9em75o1wdH3QCRNz P28gNpugjFcT/A== -----END CERTIFICATE-----Generated at Tue Jun 30 22:41:24 2026 by rpki-client