$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json) Hash identifier: lryJ5NymSCb5HbpRKLCmSUeXbbj79B+5DEAEw1s4Wj4= Subject key identifier: A7:88:05:0F:EF:3B:46:6B:CB:30:D0:F5:4A:6C:E9:9A:3D:9A:92:84 Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 019E2A024DF64F5830B7F11B3FAE3F7967F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft Manifest number: 111A Signing time: Fri 15 May 2026 05:00:54 +0000 Manifest this update: Fri 15 May 2026 05:00:54 +0000 Manifest next update: Sat 16 May 2026 05:00:54 +0000 Files and hashes: 1: 0VXk7KxyGNBKoMzTYJumg3MOTyI.roa (hash: OtU0hvX0Vami3LTspcOPpks558imPCiHhI08tCDppGE=) 2: 8S2f0mMNsD7xxV7Ty48Yj_vXc24.roa (hash: bbt0XT/b4GdymMLqxvA9TWB6kuEszEh++apw2K2jMJo=) 3: 8w-IWf2lrtKPBt5qMeYx4vc1wIo.roa (hash: dmXJGV07k4HSNMpFyTWiKNXuMOxONHC1FWpZG/gmuUw=) 4: JaK5nEHPaQ0eg4QVia6pq3nQtT8.asa (hash: zedp2dasOOuQWUFRKt1kDWC26clgR3XYNTuR7fBJPis=) 5: K91Q4lr9fT2_HRFw2W2qOJCfHfw.asa (hash: S3HIvCfdHY15prwrA39u7TMubC1wO10vPZ16cT0joHY=) 6: P3ksiU6dR-MB5dwO9grj0b7EMXU.roa (hash: bIr8a6sPdRjwwSD8CC5kO5ixUwkkeuD93IkwxtBRKV4=) 7: V2_sT2jDOr8MNnfYkhj5mMdvMaM.asa (hash: wVzZdXFDBv7mOQErQUozopppuOlT1ZjyUfEdZpNO8vQ=) 8: oY3gdIV4n1fET7NwlgUgM7E2A58.roa (hash: 2nAz8MBR7//dDF2SyuP46QueU8MfTaGR1aKMQkQHzBo=) 9: plt_9sG7wtfK-X5IzTU2wQwMo9k.roa (hash: jDkUUlBe6ISyETczyYHxkJjtY7ZB3oieA1Lcm/dcjlE=) 10: t1mwU24RWx_QtHlt8VAyAaicScc.asa (hash: qul+FoGF3pEOmc/vqfxBeRQ9gtI1SffvAcYIByELYPs=) 11: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: UONus3QowYbVpKhnuBoeowkHO2eqxB8E/+0LwjRproU=) 12: yjSw7EGM3wf6F5BYX5IX39SdB9g.roa (hash: W5I+pZbCjC+Wm9EnLWz0YxI4s3U4AfirO0LVljkjaHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:2a:02:4d:f6:4f:58:30:b7:f1:1b:3f:ae:3f:79:67:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: May 15 05:00:54 2026 GMT Not After : May 16 05:00:54 2026 GMT Subject: CN=a788050fef3b466bcb30d0f54a6ce99a3d9a9284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4c:b5:8a:f5:71:e9:52:c3:0f:65:6f:3a:74: 86:fd:cc:cb:14:3e:e2:04:da:23:e1:8d:62:68:19: 7a:c1:7d:a1:ea:a5:5f:c7:19:e9:21:c8:2a:5f:dd: dc:0f:e7:bc:85:82:0e:1e:98:e2:85:fb:68:52:41: a8:33:50:b1:9f:45:3b:73:7b:83:e8:4e:f5:c7:a3: 2a:57:9c:42:a1:8f:f6:7b:07:58:59:d1:52:d4:c1: 45:54:d5:90:37:2e:7e:72:d1:f0:b6:f0:df:b4:08: b4:bc:a8:55:bb:fa:d3:ba:06:ff:7a:b9:89:9e:e2: ff:ea:2b:4e:51:72:db:cd:07:53:06:71:7d:15:52: ce:57:73:b7:27:6c:a9:b2:62:2f:37:59:b5:70:46: e5:b6:a5:3d:4f:12:6f:57:ec:db:d6:dc:c7:df:8d: 46:e5:ce:5c:8c:78:b9:71:77:3e:5c:76:b0:4d:14: 52:7d:90:74:97:32:48:0b:11:47:f9:66:fc:e0:6e: d6:cd:a9:0a:37:5c:5b:4b:e7:1c:f6:f4:da:c5:9b: a9:94:5d:a9:c5:6c:3b:d4:63:48:47:18:5d:99:a5: 0c:1e:a6:ef:0e:b7:1b:d4:20:4e:b9:fd:67:45:60: 8b:b6:45:11:02:70:52:9e:7e:37:b5:38:fd:5d:bb: 66:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:88:05:0F:EF:3B:46:6B:CB:30:D0:F5:4A:6C:E9:9A:3D:9A:92:84 X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:51:c4:f0:18:04:63:88:8b:11:ba:de:85:62:ee:dc:dc:b7: bc:1b:be:19:ee:f0:63:73:09:2f:66:10:ce:77:27:87:03:04: 5b:4b:6e:a9:c9:fc:bd:b0:55:ed:f7:b1:41:32:3a:28:fa:58: b6:60:15:61:71:ad:0d:d1:6b:9e:77:5c:24:95:cd:ce:f3:8e: 2d:f2:05:31:4a:ff:d3:ef:79:05:fa:18:fd:84:c3:08:2e:b0: e2:f8:9f:70:45:05:fa:6b:65:e4:4d:5a:8e:56:59:fc:d8:d5: e6:63:82:f7:71:80:be:7b:03:3a:56:a6:29:72:64:ee:04:23: 63:67:51:02:8d:12:80:4d:7c:18:67:52:23:06:6f:13:b5:45: 12:38:46:d3:7c:6f:29:46:5d:d5:e6:f6:d8:fa:d6:6b:0e:52: 3e:20:5a:6c:be:91:c3:aa:e7:93:a9:7e:f4:e6:eb:4b:11:31: 11:17:79:4a:80:a7:97:e1:04:6d:94:14:6a:bd:1f:70:59:b9: 7c:73:38:90:6b:66:71:81:11:38:f0:c8:ac:aa:2d:d0:1a:a4: 4a:8f:ad:f7:74:f1:cf:81:a8:2a:56:f8:13:32:91:9b:a0:fb: c7:5d:c5:ae:28:0a:8a:95:a2:9f:a2:40:1c:3a:21:a2:1b:c7: a4:bf:9d:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4qAk32T1gwt/EbP64/eWfzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjYwNTE1MDUwMDU0WhcNMjYwNTE2MDUwMDU0WjAzMTEwLwYDVQQD EyhhNzg4MDUwZmVmM2I0NjZiY2IzMGQwZjU0YTZjZTk5YTNkOWE5Mjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0y1ivVx6VLDD2VvOnSG/czLFD7i BNoj4Y1iaBl6wX2h6qVfxxnpIcgqX93cD+e8hYIOHpjihftoUkGoM1Cxn0U7c3uD 6E71x6MqV5xCoY/2ewdYWdFS1MFFVNWQNy5+ctHwtvDftAi0vKhVu/rTugb/ermJ nuL/6itOUXLbzQdTBnF9FVLOV3O3J2ypsmIvN1m1cEbltqU9TxJvV+zb1tzH341G 5c5cjHi5cXc+XHawTRRSfZB0lzJICxFH+Wb84G7WzakKN1xbS+cc9vTaxZuplF2p xWw71GNIRxhdmaUMHqbvDrcb1CBOuf1nRWCLtkURAnBSnn43tTj9XbtmbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeIBQ/vO0ZryzDQ9Ups6Zo9mpKEMB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlHE8BgE Y4iLEbrehWLu3Ny3vBu+Ge7wY3MJL2YQzncnhwMEW0tuqcn8vbBV7fexQTI6KPpY tmAVYXGtDdFrnndcJJXNzvOOLfIFMUr/0+95BfoY/YTDCC6w4vifcEUF+mtl5E1a jlZZ/NjV5mOC93GAvnsDOlamKXJk7gQjY2dRAo0SgE18GGdSIwZvE7VFEjhG03xv KUZd1eb22PrWaw5SPiBabL6Rw6rnk6l+9ObrSxExERd5SoCnl+EEbZQUar0fcFm5 fHM4kGtmcYEROPDIrKot0BqkSo+t93Txz4GoKlb4EzKRm6D7x13FrigKipWin6JA HDohohvHpL+dqg== -----END CERTIFICATE-----Generated at Fri May 15 06:21:10 2026 by rpki-client