$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: OO+oEoc4lixtdA4vfovOevBj3SLxlTSsbV9YYlQlntY= Subject key identifier: A1:32:5F:18:2B:A8:E2:B3:41:6B:C3:27:D1:C5:89:31:C8:FB:C8:34 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019D0DE91AD724FC2E7392FBE183511BF824 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 1895 Signing time: Sat 21 Mar 2026 01:01:13 +0000 Manifest this update: Sat 21 Mar 2026 01:01:13 +0000 Manifest next update: Sun 22 Mar 2026 01:01:13 +0000 Files and hashes: 1: 2VGlQCljw9cFJl5EHzBeMDJwXVo.roa (hash: Do0oxRXzURqrwthzVRT/8OMjdF0dAGArF8nmDv/TCrU=) 2: Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa (hash: gQCxAX0kGUP6fOqE0f4xg6Y7BKr1YkDG2KCm3PY3vks=) 3: ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa (hash: 6ABtGMwyDO/6lM571vE9Iuqd9TQr+m5PP3ymm7KdDMo=) 4: FqgScginFUes_17Ndt6kdOrzAkA.roa (hash: a3G9kD/8P4BMkG64yuvOvu/MjxsZVk5qCgCtyW3lY6c=) 5: IsrXRGLVffEPsnHVbl_BeBHARaA.roa (hash: 2bYUOyrmy0HgRWN9bHIQfD3C31xnJN8Zzbysmp0r1Aw=) 6: T6pXE_xgE4WrCZgfLS6PwaHzerg.roa (hash: G4WSUskcjpTP61QhWQEI/av+RXa/41Ip20fNLeEJAoQ=) 7: VLiSP46DJX8Dog7Og_5_Z19OaAw.roa (hash: 3gWIgE8p9hzKRB2RaJcWZL2QSZhVwmUm6N+ESpdKpAQ=) 8: WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa (hash: XiM6tnhPeoo8/I0UsVcX68fQNBFdvSj5FK8MxmFwo94=) 9: b_n3Z3GxujBB68-zb1vahju6Fp0.roa (hash: fBmej85zCOTwohAZSrZlJvl4CdYQMz+WBefO+9bGgMc=) 10: leefmemMjsnYBH_PRIls4mGDQQg.roa (hash: H8hE7idzBRzXS/SDOwJGlem7diQp5JTlS92HhAhqaHk=) 11: oSUSV9XksEu-hj7frAtIPDI4QUc.roa (hash: Ba7z9fv3oVKNrP/ZNMw28ZH2Y9v/Nbz2kHCWUqIYg+s=) 12: sVlG1_wshTtHh3K3-dmfU3V-ohU.roa (hash: bMT/BHfnv5hKh+kUsN5whSknK8wJI4XccjCUKzZX56c=) 13: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: RJ7o7g/sxtQClOUlSrmIzigr7OkowXM9zJ50mYgFf24=) 14: zGuXwu3v-M9bXZipAlRCLhWgY9Y.roa (hash: q3HTdT+bmIS7eJfWEweBp4+RgfhLQ35j5qT2Y42OjrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:0d:e9:1a:d7:24:fc:2e:73:92:fb:e1:83:51:1b:f8:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Mar 21 01:01:13 2026 GMT Not After : Mar 22 01:01:13 2026 GMT Subject: CN=a1325f182ba8e2b3416bc327d1c58931c8fbc834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:62:7d:82:57:a7:b7:27:d8:63:a4:8d:a3: 1b:ba:21:4c:8d:d9:7b:88:41:34:69:11:28:d9:e3: 5f:67:ad:4e:28:ba:0e:3c:45:fc:43:93:a7:81:1c: a4:a0:bb:86:56:a1:22:25:5a:b2:1f:24:be:7a:a6: 0a:9a:8a:22:e7:79:31:2c:9d:76:a8:ae:0e:1c:6d: b8:a4:7a:6b:16:1e:04:ba:e2:67:0c:bc:4c:80:62: e3:40:dc:ed:28:9b:84:4c:19:bd:47:50:46:cf:c4: f4:c0:c7:69:36:ad:b5:a1:f0:32:98:4a:e6:76:81: 30:e7:f9:8e:02:7b:b5:08:d9:59:7f:62:7f:ad:77: 9c:e4:ab:e0:cd:c6:7f:97:80:2b:6f:b0:c3:c9:97: cc:20:cf:b4:76:6e:c2:79:c2:36:a0:58:03:1f:7b: 53:90:a2:19:99:ee:71:34:ec:c7:0b:3d:48:58:4d: 2b:de:b3:4b:c2:f3:86:a3:24:bc:23:e6:ff:e1:68: 1b:1f:91:d7:13:e6:91:ce:ea:e6:ec:da:20:dc:b7: ee:ce:c1:d4:f8:c2:09:04:3a:26:35:f3:69:73:d0: a6:e8:3f:aa:a0:ec:61:29:ef:0e:7e:57:91:c3:70: 6c:42:b2:7c:59:41:21:48:5f:f4:ad:a4:91:9e:40: 5a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:32:5F:18:2B:A8:E2:B3:41:6B:C3:27:D1:C5:89:31:C8:FB:C8:34 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:0e:e6:cb:8a:5d:74:b2:9e:e3:de:57:e3:90:17:12:68:09: 13:a7:6a:26:13:e3:70:80:87:00:5a:a5:39:13:0a:38:2e:2a: 0f:9f:ef:9c:ec:88:80:6f:64:c0:df:87:2e:6f:25:85:1b:b1: 03:55:cf:5b:58:dc:a4:b1:ca:07:da:d0:7d:f6:88:59:ee:41: eb:5e:eb:45:49:6f:ef:97:fe:1f:8c:61:ed:c3:6d:bf:a8:19: f1:a3:e8:21:64:1c:54:4d:dd:b4:a2:3c:2e:4e:41:06:20:18: e6:41:e5:97:4c:c7:69:77:18:93:5e:5d:84:7a:67:cb:25:78: b8:d3:31:df:5f:83:58:8d:34:69:ed:d4:fc:d7:8e:2d:ea:e2: 62:26:10:68:6d:22:52:2f:f9:a6:fc:2f:23:e7:ab:93:5d:cc: 99:78:72:69:ff:4d:a8:9a:a4:ba:9d:f7:d6:ea:21:56:6a:bb: 00:af:39:57:54:9d:95:f3:2f:0e:3c:04:72:ad:15:85:d7:2c: 0a:2b:13:3d:79:69:ec:77:8e:a5:14:c0:1b:d9:16:7d:3d:60: b4:d9:d8:97:8b:34:9b:44:ff:5e:7a:fb:06:27:2b:2a:43:ed: 23:02:c9:f4:be:16:f2:f8:c3:39:63:df:53:1e:61:0f:bb:08: aa:60:e1:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0N6RrXJPwuc5L74YNRG/gkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwMzIxMDEwMTEzWhcNMjYwMzIyMDEwMTEzWjAzMTEwLwYDVQQD EyhhMTMyNWYxODJiYThlMmIzNDE2YmMzMjdkMWM1ODkzMWM4ZmJjODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBtifYJXp7cn2GOkjaMbuiFMjdl7 iEE0aREo2eNfZ61OKLoOPEX8Q5OngRykoLuGVqEiJVqyHyS+eqYKmooi53kxLJ12 qK4OHG24pHprFh4EuuJnDLxMgGLjQNztKJuETBm9R1BGz8T0wMdpNq21ofAymErm doEw5/mOAnu1CNlZf2J/rXec5KvgzcZ/l4Arb7DDyZfMIM+0dm7CecI2oFgDH3tT kKIZme5xNOzHCz1IWE0r3rNLwvOGoyS8I+b/4WgbH5HXE+aRzurm7Nog3LfuzsHU +MIJBDomNfNpc9Cm6D+qoOxhKe8OfleRw3BsQrJ8WUEhSF/0raSRnkBa9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEyXxgrqOKzQWvDJ9HFiTHI+8g0MB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVA7my4pd dLKe495X45AXEmgJE6dqJhPjcICHAFqlORMKOC4qD5/vnOyIgG9kwN+HLm8lhRux A1XPW1jcpLHKB9rQffaIWe5B617rRUlv75f+H4xh7cNtv6gZ8aPoIWQcVE3dtKI8 Lk5BBiAY5kHll0zHaXcYk15dhHpnyyV4uNMx31+DWI00ae3U/NeOLeriYiYQaG0i Ui/5pvwvI+erk13MmXhyaf9NqJqkup331uohVmq7AK85V1SdlfMvDjwEcq0Vhdcs CisTPXlp7HeOpRTAG9kWfT1gtNnYl4s0m0T/Xnr7BicrKkPtIwLJ9L4W8vjDOWPf Ux5hD7sIqmDhLw== -----END CERTIFICATE-----Generated at Sat Mar 21 08:13:55 2026 by rpki-client