$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: TrfWNkEU+fWGKCcGE8reKE9ADGzokX2B/uMLdhKpE2U= Subject key identifier: 36:46:FC:86:0C:EF:AE:71:41:8D:FE:F3:21:09:84:4A:CB:69:03:D6 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019FCB25FDC8EAEBC4BB38B7A2F4141F737F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 1A02 Signing time: Tue 04 Aug 2026 05:01:32 +0000 Manifest this update: Tue 04 Aug 2026 05:01:32 +0000 Manifest next update: Wed 05 Aug 2026 05:01:32 +0000 Files and hashes: 1: 2VGlQCljw9cFJl5EHzBeMDJwXVo.roa (hash: Do0oxRXzURqrwthzVRT/8OMjdF0dAGArF8nmDv/TCrU=) 2: Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa (hash: gQCxAX0kGUP6fOqE0f4xg6Y7BKr1YkDG2KCm3PY3vks=) 3: ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa (hash: 6ABtGMwyDO/6lM571vE9Iuqd9TQr+m5PP3ymm7KdDMo=) 4: FqgScginFUes_17Ndt6kdOrzAkA.roa (hash: a3G9kD/8P4BMkG64yuvOvu/MjxsZVk5qCgCtyW3lY6c=) 5: Ikkeya1yJgRDS-xhPDlnuPLetJs.roa (hash: glwjFgIZfVLfz8kep2uiVu5O3LaEznaNtCEp/lC03fQ=) 6: T6pXE_xgE4WrCZgfLS6PwaHzerg.roa (hash: G4WSUskcjpTP61QhWQEI/av+RXa/41Ip20fNLeEJAoQ=) 7: VLiSP46DJX8Dog7Og_5_Z19OaAw.roa (hash: 3gWIgE8p9hzKRB2RaJcWZL2QSZhVwmUm6N+ESpdKpAQ=) 8: WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa (hash: XiM6tnhPeoo8/I0UsVcX68fQNBFdvSj5FK8MxmFwo94=) 9: b_n3Z3GxujBB68-zb1vahju6Fp0.roa (hash: fBmej85zCOTwohAZSrZlJvl4CdYQMz+WBefO+9bGgMc=) 10: leefmemMjsnYBH_PRIls4mGDQQg.roa (hash: H8hE7idzBRzXS/SDOwJGlem7diQp5JTlS92HhAhqaHk=) 11: oSUSV9XksEu-hj7frAtIPDI4QUc.roa (hash: Ba7z9fv3oVKNrP/ZNMw28ZH2Y9v/Nbz2kHCWUqIYg+s=) 12: sFANASik-wL_AAsMTGDepkCLru8.roa (hash: hsLxQEI+C24jdO2zBJxR+yNy+Qjt/yzfuOvytd9u6lw=) 13: sVlG1_wshTtHh3K3-dmfU3V-ohU.roa (hash: bMT/BHfnv5hKh+kUsN5whSknK8wJI4XccjCUKzZX56c=) 14: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: 4erLSARyR7Pt/LFNsM1aH5mOO/XULFiIrmM+bjjBa2w=) 15: y2cm6-exYMkmOGgTU1Cd07TyLP8.roa (hash: VU+nMgrW6E4VxS9BCUWRqC49ToNwPX6PlXdXakhEGJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 05:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:cb:25:fd:c8:ea:eb:c4:bb:38:b7:a2:f4:14:1f:73:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Aug 4 05:01:32 2026 GMT Not After : Aug 5 05:01:32 2026 GMT Subject: CN=3646fc860cefae71418dfef32109844acb6903d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:e1:79:88:25:46:8e:60:42:21:57:7f:1a: 51:d1:da:21:65:69:be:ed:95:c2:39:d1:82:5e:ee: 96:f9:a8:f1:63:da:5f:85:fa:66:1e:69:d2:f9:46: f8:9f:1a:73:5d:d9:08:47:ec:5b:8a:c7:69:d5:4f: 5c:3b:19:bc:cb:6f:87:af:56:d3:01:db:1e:3e:49: 59:72:c8:8b:4a:c5:8b:1a:88:3b:9d:eb:ce:d9:e8: eb:9c:1d:60:c9:b2:b2:7b:cc:78:68:9a:9d:58:66: a8:d4:80:81:13:12:15:d4:16:d4:ea:36:01:db:ea: 5c:a6:55:76:9e:c3:e3:4a:f7:c0:86:3e:1c:73:cb: b1:b2:52:cb:f8:48:a0:ee:93:10:1b:e2:10:c2:3c: 50:ae:e1:77:67:aa:5f:42:84:82:a3:f6:bb:0f:a6: fb:2f:ec:dc:33:15:7c:62:a8:9d:89:4d:16:48:54: 27:aa:9c:de:89:28:72:2a:34:4e:dd:dc:f5:a3:c5: e4:47:a0:d4:0a:34:5d:83:f9:e2:1a:ba:7c:ea:86: 10:72:87:7d:52:5b:03:bd:21:aa:28:f3:c9:b6:3e: 4d:90:e1:d7:66:88:61:0b:0b:cd:c7:d4:04:a2:c8: ba:87:ee:e2:97:ac:16:ab:e3:4b:fe:03:ea:33:de: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:46:FC:86:0C:EF:AE:71:41:8D:FE:F3:21:09:84:4A:CB:69:03:D6 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:30:67:1e:da:df:64:a9:17:11:17:89:38:97:34:3f:b6:e8: c0:23:e5:aa:48:4a:25:4e:8b:0e:e0:7f:a3:79:00:c9:55:07: a2:b9:43:7a:74:85:19:3f:53:0f:bc:5a:2f:7c:d5:9b:06:21: d3:e7:b4:ef:27:ff:4b:71:37:6f:e0:bb:79:c6:99:63:72:5e: b9:fb:43:8a:df:f5:1a:52:f9:fe:92:62:fe:6b:df:8e:c1:52: 09:dd:27:c5:b9:04:53:cf:b4:42:e9:88:66:d7:2b:69:47:cb: 93:fc:8a:0f:7c:16:a9:17:d5:a1:4c:f4:29:c8:e9:d1:e6:d4: dc:1c:f6:94:cb:2f:40:c4:1d:b4:84:da:38:58:aa:07:cd:66: b3:86:b9:e7:78:af:ff:33:4f:78:df:ab:cb:8b:19:1f:3f:d8: 83:87:1a:bf:b0:08:08:34:00:8e:ab:7f:1f:ba:29:70:32:f1: ce:33:5b:e8:ad:ba:c8:10:5e:41:23:dc:38:f1:64:49:d7:c7: 6f:54:83:6e:26:1e:49:bd:8a:de:e6:de:98:04:ab:84:74:b0: 1e:52:e7:61:4a:2f:e8:d5:62:5c:7f:8f:ea:c4:6d:e0:0c:a6: 82:48:68:7b:a9:6c:7c:2b:61:a3:0a:54:58:63:11:aa:9e:b4: 2a:15:e2:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/LJf3I6uvEuzi3ovQUH3N/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwODA0MDUwMTMyWhcNMjYwODA1MDUwMTMyWjAzMTEwLwYDVQQD EygzNjQ2ZmM4NjBjZWZhZTcxNDE4ZGZlZjMyMTA5ODQ0YWNiNjkwM2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqfheYglRo5gQiFXfxpR0dohZWm+ 7ZXCOdGCXu6W+ajxY9pfhfpmHmnS+Ub4nxpzXdkIR+xbisdp1U9cOxm8y2+Hr1bT AdsePklZcsiLSsWLGog7nevO2ejrnB1gybKye8x4aJqdWGao1ICBExIV1BbU6jYB 2+pcplV2nsPjSvfAhj4cc8uxslLL+Eig7pMQG+IQwjxQruF3Z6pfQoSCo/a7D6b7 L+zcMxV8YqidiU0WSFQnqpzeiShyKjRO3dz1o8XkR6DUCjRdg/niGrp86oYQcod9 UlsDvSGqKPPJtj5NkOHXZohhCwvNx9QEosi6h+7il6wWq+NL/gPqM941HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZG/IYM765xQY3+8yEJhErLaQPWMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozBnHtrf ZKkXEReJOJc0P7bowCPlqkhKJU6LDuB/o3kAyVUHorlDenSFGT9TD7xaL3zVmwYh 0+e07yf/S3E3b+C7ecaZY3JeuftDit/1GlL5/pJi/mvfjsFSCd0nxbkEU8+0QumI ZtcraUfLk/yKD3wWqRfVoUz0Kcjp0ebU3Bz2lMsvQMQdtITaOFiqB81ms4a553iv /zNPeN+ry4sZHz/Yg4cav7AICDQAjqt/H7opcDLxzjNb6K26yBBeQSPcOPFkSdfH b1SDbiYeSb2K3ubemASrhHSwHlLnYUov6NViXH+P6sRt4Aymgkhoe6lsfCthowpU WGMRqp60KhXiAg== -----END CERTIFICATE-----Generated at Tue Aug 4 12:21:58 2026 by rpki-client