$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft File: x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json) Hash identifier: OHEtNUomgiO4dNmHXAOSPyhB7OXPg6U8Ily9OhrQm1o= Subject key identifier: 37:7C:F1:B3:6E:9B:B0:47:F8:B1:F2:5A:47:B1:47:BD:2B:21:48:E2 Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019F84FA8A47F925B21F90088E936C14A101 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft Manifest number: 14FB Signing time: Tue 21 Jul 2026 14:00:39 +0000 Manifest this update: Tue 21 Jul 2026 14:00:39 +0000 Manifest next update: Wed 22 Jul 2026 14:00:39 +0000 Files and hashes: 1: 0-d96R17ltUSy8fr0RUugwI-BVw.roa (hash: T+9pJSDxipOo4VQ90dksmKw5tDBPPo/BiqzTM/apWGc=) 2: 6MXPr8n2FVwdA-Vt6oqBdRGu_Mg.roa (hash: NZX54zdIf0Wm5ZnYmNdMli+Cz2MVmUZnuyAev1D/9/E=) 3: 94VCH5-yUsBwicojbjgImHgRoJA.roa (hash: JkHlAtKE0WPUSQeAnVh91wdkspZbKJDK7LSBm6EyhHc=) 4: BFdJc-7yBxarSw_UwCSCI2_nZzY.roa (hash: Mfwh/Ri4oMFWHDOwaf0KLrBxq/7lyDjZHbminSO7kww=) 5: FlKDqhsB-kDJgOhLmCv4DNUnsd8.roa (hash: JZ21wYzfPfkSwGCQh1OtjrZna2xAaeFagGp1aClwZy0=) 6: GQwQ4NJBvyg0S5cirOINdsK2QUo.roa (hash: hPCA2eD/WAsZM79tgjhqtOTZx90myfRAeK+dN2Vg5Wo=) 7: GWOMCgc6frfuXzWmR3iYp-MVmSA.roa (hash: Anj9LGw2xp0TmbMPDVVyvGqohtYkFBACqEE6N9Y1dWM=) 8: Itg1prYwWRPhF5zNIUnOGVNFGeM.roa (hash: nAsp415Ngb0XOA9HboUId94jZhl5oTnXqu3QjJfj8KU=) 9: KwEEYIOx6dCBO8O6EXuJrP2SxEA.roa (hash: FJXGRBaEUrnNNyE8GBPLymN44URpQA1gYBmnWCwP478=) 10: MtY73m5Dy7Z-8IkMEEvtPhwun6o.asa (hash: YVP7j6bXOWilQyVf5GWPEBF5i8ugo1QMSomNFKB/BjY=) 11: Opa484uAlsVB9CtOuyZoIiqmIy8.roa (hash: 6u4ASe0ldiNjEJ3vKFZgisfLG676P+RimGMZcC3Ur7M=) 12: Tx9FMpngkKKRbOgn_YsDb4v7X18.roa (hash: BOevx6RbQLerHQQRMHC1Yu0hT6Exer/t3dYk9fLXFik=) 13: XpQW9Vko4NnnhhqSe6YnUmv4WzE.roa (hash: 1hl0BmRk0nZLkQjPQnXw86SjORpjVK0UnQhzFB2uADI=) 14: YjIsM4Uno7ILYs53JtLji9bmdRM.roa (hash: T20Rm6nai402HDN+LFukerdCiUhxMnqEcLW4G63DHyI=) 15: _QfreQ9EqD9ss46rDX_UENkjJZk.roa (hash: zfUdwflwTagWZ9n75pKYGfQVwgMmnMON42g7fWb4fZ4=) 16: bjtqDJXlOz7pCpEjOBsxaBiuwec.roa (hash: NF7IuS5ng6fRX6mAKKyUm5b/IR1xDvuUmKt4bVjV978=) 17: c585sEb31KrksO5MlyuNt-hfuHU.roa (hash: fJ78hp+mIYgaOdDbv0g//N4rP8oKIJRANU6rLFZmpT4=) 18: e0CW_4oZRrryGAZlyRnhpcoXNPo.roa (hash: 7QHbtai0zkaLG8Cn4EhJepZwZsFysU2qR4KGXEevHnE=) 19: kd2-Thgfb2MvE6yw6VsCA8zzSfQ.roa (hash: yP3N4xFcOT8W3j9k2ZJ+fBiTsgbDKcU1wngastwJJcc=) 20: qOxZbeQcH3nmMujSCPVKvHl_hII.asa (hash: ASwjCTML65AJz8INpKtIJ9HsxUbvMPMUPCfyNp/UqwE=) 21: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: UQL2Jjpztpb7U3afCKA299vwY6quecuj/o0rLn8eFZE=) 22: xIYF8mI26v6vzxb3X_nxcD6q9Q8.roa (hash: f2x35r/ZRXZy2klzCvK8jZiQ1j2C+y+64vR3ljojbc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:84:fa:8a:47:f9:25:b2:1f:90:08:8e:93:6c:14:a1:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Jul 21 14:00:39 2026 GMT Not After : Jul 22 14:00:39 2026 GMT Subject: CN=377cf1b36e9bb047f8b1f25a47b147bd2b2148e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:c9:5c:ca:f8:34:e4:f8:91:7c:f6:83:13: 92:fa:98:bd:7b:71:d2:df:7b:8a:ea:ac:b1:39:e7: a3:69:09:6e:88:d4:cd:ae:5b:21:06:8e:f1:71:b3: 82:8b:13:2b:07:5c:fa:59:28:f8:1f:67:f1:60:39: d9:47:f1:cc:e1:7c:e2:1f:67:1a:c4:52:0d:48:ba: e0:c4:37:4f:62:46:f1:7b:85:72:1f:da:a2:b9:f2: 1e:b2:02:0d:e9:e0:d1:11:7e:de:44:c7:4d:0c:73: 33:6e:1b:b3:b5:b6:a7:cc:85:5d:00:e0:bd:93:35: bf:cf:a6:94:c2:83:9e:4a:00:68:86:e9:6e:7e:cb: 8e:07:e9:7e:7a:24:be:4e:50:f1:fc:09:6d:6d:60: 87:e1:a3:f8:5e:5e:2f:80:47:93:ab:3d:b6:85:a7: 76:ec:00:c7:de:73:94:38:dd:b2:04:42:c9:39:c0: 64:ba:ea:ed:98:da:73:c2:15:e6:1c:16:91:f8:ab: 51:8a:93:5e:99:16:fd:a1:5a:d3:5f:bf:6c:74:82: 1e:a9:dd:b6:66:d9:16:de:1e:17:c0:4c:5c:e9:d7: a9:c5:f9:13:5d:a9:e9:de:6c:69:c5:fa:33:69:d4: 80:c7:16:ae:24:93:2f:5d:7c:a5:c9:4f:91:2c:ef: e1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7C:F1:B3:6E:9B:B0:47:F8:B1:F2:5A:47:B1:47:BD:2B:21:48:E2 X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:40:7f:39:1f:90:23:4f:64:42:58:ee:90:96:ed:39:fa:c9: 06:3d:5b:5d:44:ea:88:2c:5f:15:67:8c:e7:69:e6:f8:54:0f: 23:c7:59:38:1a:d2:e9:a9:68:47:e3:dd:e8:d5:40:36:d5:05: d6:8e:c9:75:b8:64:76:4b:fa:c6:38:3f:d1:ef:aa:fb:8a:3a: 6f:7f:f6:a0:7b:61:00:50:27:4c:99:0d:85:e8:7b:28:e4:c8: 30:35:98:5d:a2:85:5b:f5:2d:cb:79:fc:1a:4b:7d:1f:50:bf: d2:00:00:b2:73:45:06:11:91:3f:76:85:90:65:f8:4b:24:b5: e1:18:1f:0e:a4:ec:79:93:30:44:a8:ba:3d:c6:b7:a1:4e:be: d3:df:47:ab:df:51:d2:04:9a:de:fd:a5:1f:78:09:83:64:3c: 7b:f8:86:16:ab:f0:62:26:b7:98:e3:0f:73:f4:c4:7c:3e:bd: 31:91:f1:31:3d:b6:0e:8e:c3:c2:29:e9:bc:8b:b8:00:1b:c8: 3d:c3:e6:88:39:61:21:20:e8:da:c4:e9:2d:fc:9c:81:5b:a3: 0c:36:fd:6b:4d:b5:8b:ee:2f:fa:14:6e:7b:07:3e:2a:19:9f: 0a:7f:2d:fb:d1:6e:11:52:2b:39:30:48:44:5b:24:a1:a9:ac: 2c:5a:d3:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+E+opH+SWyH5AIjpNsFKEBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjYwNzIxMTQwMDM5WhcNMjYwNzIyMTQwMDM5WjAzMTEwLwYDVQQD EygzNzdjZjFiMzZlOWJiMDQ3ZjhiMWYyNWE0N2IxNDdiZDJiMjE0OGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutnJXMr4NOT4kXz2gxOS+pi9e3HS 33uK6qyxOeejaQluiNTNrlshBo7xcbOCixMrB1z6WSj4H2fxYDnZR/HM4XziH2ca xFINSLrgxDdPYkbxe4VyH9qiufIesgIN6eDREX7eRMdNDHMzbhuztbanzIVdAOC9 kzW/z6aUwoOeSgBohulufsuOB+l+eiS+TlDx/AltbWCH4aP4Xl4vgEeTqz22had2 7ADH3nOUON2yBELJOcBkuurtmNpzwhXmHBaR+KtRipNemRb9oVrTX79sdIIeqd22 ZtkW3h4XwExc6depxfkTXanp3mxpxfozadSAxxauJJMvXXylyU+RLO/hbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDd88bNum7BH+LHyWkexR70rIUjiMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUB/OR+Q I09kQljukJbtOfrJBj1bXUTqiCxfFWeM52nm+FQPI8dZOBrS6aloR+Pd6NVANtUF 1o7Jdbhkdkv6xjg/0e+q+4o6b3/2oHthAFAnTJkNheh7KOTIMDWYXaKFW/Uty3n8 Gkt9H1C/0gAAsnNFBhGRP3aFkGX4SyS14RgfDqTseZMwRKi6Pca3oU6+099Hq99R 0gSa3v2lH3gJg2Q8e/iGFqvwYia3mOMPc/TEfD69MZHxMT22Do7DwinpvIu4ABvI PcPmiDlhISDo2sTpLfycgVujDDb9a021i+4v+hRuewc+KhmfCn8t+9FuEVIrOTBI RFskoamsLFrTJQ== -----END CERTIFICATE-----Generated at Tue Jul 21 15:05:22 2026 by rpki-client