$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: dHQO1o5MryXIgrwIoJ8/ktJztoKeHwmYa7gfP9nQa38= Subject key identifier: 34:AD:FC:44:E8:9C:0A:E4:4A:CC:F1:2C:E2:43:6B:1F:1D:95:E5:65 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019EE17958B247DD19A8EB3B45BFFA2742D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 1989 Signing time: Fri 19 Jun 2026 20:01:26 +0000 Manifest this update: Fri 19 Jun 2026 20:01:26 +0000 Manifest next update: Sat 20 Jun 2026 20:01:26 +0000 Files and hashes: 1: 2VGlQCljw9cFJl5EHzBeMDJwXVo.roa (hash: Do0oxRXzURqrwthzVRT/8OMjdF0dAGArF8nmDv/TCrU=) 2: Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa (hash: gQCxAX0kGUP6fOqE0f4xg6Y7BKr1YkDG2KCm3PY3vks=) 3: ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa (hash: 6ABtGMwyDO/6lM571vE9Iuqd9TQr+m5PP3ymm7KdDMo=) 4: FqgScginFUes_17Ndt6kdOrzAkA.roa (hash: a3G9kD/8P4BMkG64yuvOvu/MjxsZVk5qCgCtyW3lY6c=) 5: Ikkeya1yJgRDS-xhPDlnuPLetJs.roa (hash: glwjFgIZfVLfz8kep2uiVu5O3LaEznaNtCEp/lC03fQ=) 6: T6pXE_xgE4WrCZgfLS6PwaHzerg.roa (hash: G4WSUskcjpTP61QhWQEI/av+RXa/41Ip20fNLeEJAoQ=) 7: VLiSP46DJX8Dog7Og_5_Z19OaAw.roa (hash: 3gWIgE8p9hzKRB2RaJcWZL2QSZhVwmUm6N+ESpdKpAQ=) 8: WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa (hash: XiM6tnhPeoo8/I0UsVcX68fQNBFdvSj5FK8MxmFwo94=) 9: b_n3Z3GxujBB68-zb1vahju6Fp0.roa (hash: fBmej85zCOTwohAZSrZlJvl4CdYQMz+WBefO+9bGgMc=) 10: leefmemMjsnYBH_PRIls4mGDQQg.roa (hash: H8hE7idzBRzXS/SDOwJGlem7diQp5JTlS92HhAhqaHk=) 11: oSUSV9XksEu-hj7frAtIPDI4QUc.roa (hash: Ba7z9fv3oVKNrP/ZNMw28ZH2Y9v/Nbz2kHCWUqIYg+s=) 12: sFANASik-wL_AAsMTGDepkCLru8.roa (hash: hsLxQEI+C24jdO2zBJxR+yNy+Qjt/yzfuOvytd9u6lw=) 13: sVlG1_wshTtHh3K3-dmfU3V-ohU.roa (hash: bMT/BHfnv5hKh+kUsN5whSknK8wJI4XccjCUKzZX56c=) 14: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: +/1ZRmMzWn2tUbqwN/U9fYrs+o7mG738PDaSykFYNgs=) 15: y2cm6-exYMkmOGgTU1Cd07TyLP8.roa (hash: VU+nMgrW6E4VxS9BCUWRqC49ToNwPX6PlXdXakhEGJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Jun 2026 19:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:e1:79:58:b2:47:dd:19:a8:eb:3b:45:bf:fa:27:42:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Jun 19 20:01:26 2026 GMT Not After : Jun 20 20:01:26 2026 GMT Subject: CN=34adfc44e89c0ae44accf12ce2436b1f1d95e565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:45:f3:de:36:eb:58:cb:d2:34:1e:1b:f2:a9: 66:11:b9:eb:f5:86:8e:b9:85:f2:52:51:b6:08:36: db:6d:f7:44:b1:1d:b0:ae:f2:3c:bc:1d:19:cb:c2: 49:e1:56:1c:75:90:e4:5d:e0:78:f0:42:1a:eb:d2: 7e:85:7b:e0:94:12:fa:09:4c:ba:a8:fc:08:65:84: 89:2f:2c:a4:bf:af:65:a2:1c:02:c9:d4:cf:2e:cd: 29:2e:16:d4:22:5e:2c:37:a5:1b:5b:84:22:25:ec: 66:1d:21:00:e7:c8:a4:cd:c2:3c:e1:08:5d:e9:cb: ba:8f:b4:d7:9e:d7:8e:a2:c1:05:a9:85:c0:73:5e: ee:7e:27:cf:29:50:c8:35:77:85:96:20:3c:9a:6f: 2a:d0:ac:e1:18:06:a8:17:8b:ae:75:87:ff:4f:b4: 48:20:06:f1:49:cc:d2:e9:b0:a1:9c:37:8c:af:29: 7a:da:e9:6a:f6:7c:ca:a1:7b:96:b9:4c:78:ac:54: be:5d:68:f6:af:82:76:18:e9:1c:d6:4f:da:c4:ba: d6:52:d7:ee:6a:3f:0b:26:10:50:89:93:1f:32:04: 9f:0e:3c:7e:b4:fd:b6:02:9c:26:d6:e9:60:3e:61: d4:23:ef:e6:5a:6c:50:2d:b5:3c:7c:5d:67:a7:07: 9b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AD:FC:44:E8:9C:0A:E4:4A:CC:F1:2C:E2:43:6B:1F:1D:95:E5:65 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:35:2b:e8:ca:5d:66:44:b2:ef:3f:12:83:ec:67:e9:93:0b: 42:b5:b4:b5:17:17:73:0c:31:39:16:52:11:80:a7:2e:39:c7: 20:54:01:10:93:36:c2:1e:2a:29:da:a4:30:46:ea:53:f3:1e: 6f:ae:59:05:66:8a:d4:74:f6:ee:9b:47:dc:aa:e5:c6:ab:56: a6:58:9a:f8:40:76:2a:84:bd:14:40:d0:e3:5e:c4:76:6e:e7: 4f:f6:21:a9:11:67:b4:91:b8:4e:95:12:79:17:53:d9:27:c8: 79:95:e4:10:60:61:e3:f4:c9:75:b5:5f:40:0d:76:ac:89:99: e2:85:3c:db:04:f7:36:50:18:3d:46:ae:0f:8d:3e:63:f9:72: 97:f6:1f:7f:7c:65:45:3c:0f:6e:03:15:c0:b4:ac:ce:b4:6b: e5:da:84:4f:71:33:92:92:3a:22:62:15:7f:5c:65:2e:b2:eb: 0f:7a:66:88:30:98:85:cb:cf:7e:38:54:ab:cb:63:fe:01:ad: c7:91:df:8f:c0:6e:29:92:ec:84:37:f1:13:09:9f:c6:3a:3f: db:ad:a9:39:0b:08:e2:88:02:ca:12:5b:29:d5:14:2b:90:1f: 47:5e:80:aa:5c:4b:5a:1d:e7:c9:2a:5a:59:42:90:a9:1e:54: 08:87:14:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7heViyR90ZqOs7Rb/6J0LXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwNjE5MjAwMTI2WhcNMjYwNjIwMjAwMTI2WjAzMTEwLwYDVQQD EygzNGFkZmM0NGU4OWMwYWU0NGFjY2YxMmNlMjQzNmIxZjFkOTVlNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEXz3jbrWMvSNB4b8qlmEbnr9YaO uYXyUlG2CDbbbfdEsR2wrvI8vB0Zy8JJ4VYcdZDkXeB48EIa69J+hXvglBL6CUy6 qPwIZYSJLyykv69lohwCydTPLs0pLhbUIl4sN6UbW4QiJexmHSEA58ikzcI84Qhd 6cu6j7TXnteOosEFqYXAc17ufifPKVDINXeFliA8mm8q0KzhGAaoF4uudYf/T7RI IAbxSczS6bChnDeMryl62ulq9nzKoXuWuUx4rFS+XWj2r4J2GOkc1k/axLrWUtfu aj8LJhBQiZMfMgSfDjx+tP22Apwm1ulgPmHUI+/mWmxQLbU8fF1npwebqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSt/ETonArkSszxLOJDax8dleVlMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajUr6Mpd ZkSy7z8Sg+xn6ZMLQrW0tRcXcwwxORZSEYCnLjnHIFQBEJM2wh4qKdqkMEbqU/Me b65ZBWaK1HT27ptH3KrlxqtWplia+EB2KoS9FEDQ417Edm7nT/YhqRFntJG4TpUS eRdT2SfIeZXkEGBh4/TJdbVfQA12rImZ4oU82wT3NlAYPUauD40+Y/lyl/Yff3xl RTwPbgMVwLSszrRr5dqET3EzkpI6ImIVf1xlLrLrD3pmiDCYhcvPfjhUq8tj/gGt x5Hfj8BuKZLshDfxEwmfxjo/262pOQsI4ogCyhJbKdUUK5AfR16AqlxLWh3nySpa WUKQqR5UCIcUuQ== -----END CERTIFICATE-----Generated at Sat Jun 20 03:14:10 2026 by rpki-client