$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: uvcGPWlSiN8Iyz7OpBucI+iak2tAlNaBCZwJoX2E47A= Subject key identifier: 44:30:7E:ED:B1:3A:15:38:E5:83:82:90:B7:85:90:3F:FC:B3:0E:7C Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019FCFDE79DC6853A84DCE257BD98107D644 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 124C Signing time: Wed 05 Aug 2026 03:01:31 +0000 Manifest this update: Wed 05 Aug 2026 03:01:31 +0000 Manifest next update: Thu 06 Aug 2026 03:01:31 +0000 Files and hashes: 1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=) 2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=) 3: 8mCRXCtonebQyWHGJmlph-emqDk.roa (hash: 4h/4zlSVQ3uClic9xPZW/eCYpC+NvSaS6+RDz79In4U=) 4: LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa (hash: Ar/LKRozDT6A+/9HgHGJRKF1bqwqINiTlNo97b3clYU=) 5: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=) 6: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=) 7: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=) 8: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: lSKdSWxlu9ogalZIASLuiSj+6cjqlgPkXRZ7MDi74A4=) 9: _dx2CJojBdg1dQ90hMAD_lCOwHQ.roa (hash: 0ULsxNCLOF7Mmtn3rqBfqWSvtKN6lj6291u6ShH3qyo=) 10: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=) 11: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=) 12: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=) 13: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=) 14: ryuLKef_IroC7PFQdKy3-YDqSJA.roa (hash: RsW64+NIzEg1i7l38AMRGxCtDbntws+JXmRcjIu9krk=) 15: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=) 16: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=) 17: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=) 18: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=) 19: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=) 20: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Aug 2026 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:cf:de:79:dc:68:53:a8:4d:ce:25:7b:d9:81:07:d6:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Aug 5 03:01:31 2026 GMT Not After : Aug 6 03:01:31 2026 GMT Subject: CN=44307eedb13a1538e5838290b785903ffcb30e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:30:ec:b4:be:25:6f:1a:4e:57:40:9c:1c: 58:eb:11:8e:5b:bd:e9:3e:63:7c:61:75:d6:37:72: c8:4a:ac:75:34:6e:d4:99:50:f0:88:c5:45:ad:ac: a4:56:ab:7b:1a:22:23:c0:26:3a:5b:6d:3a:d7:4f: 0d:ba:42:b1:b1:5a:d9:a1:1f:8f:59:9d:dd:f7:fe: b5:17:e0:27:a1:c4:71:78:b2:ed:31:3d:be:5d:55: 66:c0:29:e2:54:17:60:f6:82:e5:df:48:3a:ca:63: 2f:ba:fb:3b:e2:c9:8e:32:95:bf:70:53:f4:e7:61: 12:e0:43:68:1c:ab:69:0d:fe:09:82:ed:70:88:76: 81:15:bb:6c:d0:bd:1d:53:91:d3:f3:2b:2b:79:97: 4b:44:54:30:77:54:c8:47:b2:31:f8:08:47:13:26: bd:e6:29:8c:9a:1f:54:d8:51:7d:70:5d:aa:1d:91: fc:be:16:f7:5a:b5:58:7a:00:2e:ce:ef:67:52:62: 80:64:f6:6d:a2:99:e1:7a:89:26:72:86:69:a5:af: 38:a6:4e:bb:49:c2:35:0f:95:bc:eb:60:07:54:f1: ad:e5:8c:11:d1:16:39:70:fe:5e:76:f7:70:3b:32: 8e:7e:08:59:56:61:6f:8d:0b:43:01:cd:65:2b:15: 07:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:30:7E:ED:B1:3A:15:38:E5:83:82:90:B7:85:90:3F:FC:B3:0E:7C X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:94:81:67:c0:45:13:68:98:e8:3a:5a:53:c2:c4:62:e8:12: 25:92:e3:87:e7:10:e9:3b:e2:49:b1:ee:15:07:0d:48:42:5c: ee:89:62:f6:e2:3a:78:ee:70:46:0b:6b:9a:ab:9c:34:b5:42: ca:06:3e:83:92:e7:3a:bf:95:78:27:f6:9f:b3:5b:c0:19:7c: 78:08:4d:9b:64:80:d7:64:fa:57:16:1f:74:76:95:ef:b9:55: d4:d7:69:b3:f1:b8:6a:de:03:b0:f4:cc:33:e7:b9:e2:de:53: ef:40:6e:aa:64:ed:24:7b:fe:1a:40:33:d9:ed:66:5b:44:a8: b4:57:3d:a3:a4:2e:1c:8b:41:e3:8f:46:b1:77:0f:f5:cc:37: a2:bf:dc:23:32:01:14:eb:83:95:75:30:9d:57:7c:48:0f:3c: 22:83:2b:07:52:5c:90:c5:09:64:5c:39:ce:eb:5b:0a:2d:46: fc:8c:fa:b9:85:ff:a6:58:ad:93:41:e7:29:c4:80:f1:51:40: ef:1a:4d:b3:33:03:bb:f1:b9:09:6b:4b:26:3e:72:28:41:ad: 85:55:bd:91:a9:c3:da:c3:87:1d:9e:52:a2:08:9d:76:b3:fa: 5d:c4:a4:92:74:0b:d5:87:ed:ef:0c:2f:de:53:23:9e:5e:b3: aa:06:b5:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/P3nncaFOoTc4le9mBB9ZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwODA1MDMwMTMxWhcNMjYwODA2MDMwMTMxWjAzMTEwLwYDVQQD Eyg0NDMwN2VlZGIxM2ExNTM4ZTU4MzgyOTBiNzg1OTAzZmZjYjMwZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTww7LS+JW8aTldAnBxY6xGOW73p PmN8YXXWN3LISqx1NG7UmVDwiMVFraykVqt7GiIjwCY6W206108NukKxsVrZoR+P WZ3d9/61F+AnocRxeLLtMT2+XVVmwCniVBdg9oLl30g6ymMvuvs74smOMpW/cFP0 52ES4ENoHKtpDf4Jgu1wiHaBFbts0L0dU5HT8ysreZdLRFQwd1TIR7Ix+AhHEya9 5imMmh9U2FF9cF2qHZH8vhb3WrVYegAuzu9nUmKAZPZtopnheokmcoZppa84pk67 ScI1D5W862AHVPGt5YwR0RY5cP5edvdwOzKOfghZVmFvjQtDAc1lKxUHGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQwfu2xOhU45YOCkLeFkD/8sw58MB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5SBZ8BF E2iY6DpaU8LEYugSJZLjh+cQ6TviSbHuFQcNSEJc7oli9uI6eO5wRgtrmqucNLVC ygY+g5LnOr+VeCf2n7NbwBl8eAhNm2SA12T6VxYfdHaV77lV1Ndps/G4at4DsPTM M+e54t5T70BuqmTtJHv+GkAz2e1mW0SotFc9o6QuHItB449GsXcP9cw3or/cIzIB FOuDlXUwnVd8SA88IoMrB1JckMUJZFw5zutbCi1G/Iz6uYX/plitk0HnKcSA8VFA 7xpNszMDu/G5CWtLJj5yKEGthVW9kanD2sOHHZ5SogiddrP6XcSkknQL1Yft7wwv 3lMjnl6zqga1oA== -----END CERTIFICATE-----Generated at Wed Aug 5 07:36:23 2026 by rpki-client