$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft File: XGsMABqZq2KW4kIXO_fn_c8DwBk.mft (raw, json) Hash identifier: /zWMSh7gzYUFp+WOi8gdP3Mtf9/xw9/gat45IN/5ohs= Subject key identifier: E0:9D:20:0F:F8:5D:21:CF:9F:FE:50:5D:66:90:5F:19:41:85:2E:3E Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Certificate serial: 019E299482AC6717DA48C5541EB71997280C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft Manifest number: 119E Signing time: Fri 15 May 2026 03:00:58 +0000 Manifest this update: Fri 15 May 2026 03:00:58 +0000 Manifest next update: Sat 16 May 2026 03:00:58 +0000 Files and hashes: 1: 4_6jU2h65naygP3NnyjMqJJnZx0.roa (hash: s82jep9t/zYfm07E1BciJjoxkGYTNgdmOJWV+bXV2Qs=) 2: 695CEvCWtd68HcEQ1to_g8bmma8.roa (hash: R7zsyfBzCTHymA5dn78KZaAHJABwh3m1BT2rT0cZOio=) 3: DZ0MP-yB-k0XdclRi6GSHev-8UI.roa (hash: OLquFioTpRnSbUlRpW26tAjmfT6pteRRo9SnbJKQNlA=) 4: K92PqBwvgEkNne5-6mAr80PsJAQ.roa (hash: 0FAqW4Pbg00noP1bhEV9Gx0WPZ0MqX9JAlOtTUXuyJw=) 5: QdihrKmCE1Rh70UAqVYhEifd0TQ.roa (hash: GFJCZGicC3djRWfTbGFC1Be0jS8YAjHvnwA28XAg/XU=) 6: RKY7lmdtb6IZif0ZQO2zEp317ek.roa (hash: MiEE6D3s9DZHsWmRS4CwT7MDH9wPZNxbpSI8mSRJ1pI=) 7: VllzRPRKTVqoKCv6C6XbpsT1mlw.roa (hash: AwMpFygRvq1JwWMWPLbmaZCSHpec1V7IeWXb7LTJvto=) 8: WVnu4rOAM4bAGwLH54E_u1zyp8g.roa (hash: 3TOzV7uynC12YqD5CfAhfDyAScX2wgYqrWrhBjCdAAQ=) 9: XGsMABqZq2KW4kIXO_fn_c8DwBk.crl (hash: wvZGBv80Rrp8qIYh71lJtfRueZBF1+eyFGHXu9pXQC0=) 10: XhmgK9k0SOsCS_OFfFf7ZMsuph4.roa (hash: NnQ4qNdBxaVb0sjnoqmY0qHl2F+ZeA8EdWA8FUpAnMU=) 11: aBRByi6HtqSTkTwS-fInKVGreVM.roa (hash: L+8L7FrVL2l9rPUgEQqLrjnJQ1XfFBQi0mPOySPHZwc=) 12: ak_zpBeCzF7k-sZZ4UqlvJ4hCyQ.roa (hash: B78IwndzlBG3qE9BrzBg3u/j7NoujFELRCBgQIuL/JU=) 13: d4Bwb6dLFku_UkOvAMMS7FUSUEQ.roa (hash: eeFJoaeGLxOiQz6cXzT6CRHE4Aq6RhN+PQxHj+Phf10=) 14: hzP1qnHmPnnJOM7e8mwB2JQgWlw.roa (hash: P7S5XXCI5WhORMniLgG3Xqv8lUXzGtRjkmzYHiVxmxw=) 15: jSTmw6QNVRai_EuoNhY73OP3VjE.roa (hash: AYD6OFv8HTxuycJJf0ziwoDHoVKLGuICS6c+LYT5M5c=) 16: mCy7hS8qB_vm_oJsB9qaLGKlYEs.roa (hash: Ul861aCSvme8oLj/mvAnopiu+aRS2VSuHznhSML8kVk=) 17: rN4NLaMID6DZ_1Tf-dsWVDuA2X4.roa (hash: 7gf462IZs1uEZ6uPb1SMqjZ8MS74g0QNcTk84kmywms=) 18: rjJfP-cMk7Eo1gcf4GJv-6fZ8wA.roa (hash: X60K0VdLBIECsdh4cUymksKwrOGj9pXkUyJRydUZqtU=) 19: sBXE0h-nfhY0aVSr0UrybyFD5aw.roa (hash: tM7b2uWuTencQIn+E0ctaZfEIO5WQmmj9VY8B6PPOxo=) 20: wTiLBx3d6nArSMvvuGONeX8tzoU.roa (hash: wWQ4VBFuaNpyEOuyC6Zr3NF5Y4tz4sd8I+MyslECmcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:29:94:82:ac:67:17:da:48:c5:54:1e:b7:19:97:28:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Validity Not Before: May 15 03:00:58 2026 GMT Not After : May 16 03:00:58 2026 GMT Subject: CN=e09d200ff85d21cf9ffe505d66905f1941852e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6a:18:da:b4:ae:2f:37:dd:6a:ec:68:72:c4: 17:57:1b:ac:a0:a3:5d:17:ce:d6:7b:ad:e9:80:7f: 61:f7:72:f0:2b:d9:37:d3:be:96:82:5b:c9:f7:58: aa:a9:11:ea:9a:32:ff:63:2f:2f:93:cb:b8:29:0d: 6d:d0:e3:1f:45:bc:f8:68:07:a6:0f:5f:14:70:a3: a6:b6:38:af:61:63:39:3a:53:51:4f:1a:67:fc:55: d4:91:2d:d3:d4:69:4a:44:4b:82:c0:77:a5:44:c7: b1:14:b4:70:ba:8a:2f:9e:68:fe:08:9c:25:63:47: e4:50:80:f0:68:0a:8f:87:fe:94:a9:10:7a:63:03: 54:86:d8:55:b0:10:c9:f8:5e:59:e7:02:ed:65:7f: 5f:78:0c:e5:aa:ad:36:c2:9b:cc:6c:b8:ce:ba:0a: 7c:35:a8:52:9c:80:ba:7c:33:b9:5b:d7:2f:d0:17: ed:79:2e:8d:25:b5:82:b2:4e:b5:c8:b9:b6:28:65: 8b:a5:ad:44:67:ba:7d:d9:0c:22:c7:18:ea:65:9d: 23:3b:42:ba:7d:ff:f2:9e:bb:5d:96:ad:7b:72:fa: a6:b5:a9:1a:dc:eb:a2:e2:72:55:56:e3:ad:d0:0d: 8b:38:9f:05:fc:71:95:6a:e1:8a:f3:bf:b9:81:66: 8e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9D:20:0F:F8:5D:21:CF:9F:FE:50:5D:66:90:5F:19:41:85:2E:3E X509v3 Authority Key Identifier: keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:7a:0b:4c:81:cf:94:4f:43:8c:5f:7f:c0:3b:4f:db:cd:29: d7:5e:dd:cd:84:e6:c4:9f:1b:a3:dd:90:36:4d:01:3f:e7:5a: 07:c0:f9:0a:fc:be:20:ce:25:83:f1:e6:95:94:e1:52:5e:c9: b1:a0:8a:79:b5:b8:14:71:38:f6:31:a3:99:72:1e:fb:b6:e6: 35:8b:f9:2a:e4:ed:56:96:57:69:88:be:44:36:c9:f7:52:00: b7:14:e3:7c:1e:70:9b:cb:48:99:01:d1:b8:d7:5e:eb:df:b5: 01:6a:ba:99:1c:14:0b:dd:10:87:06:4c:8e:35:29:ea:7a:75: d9:f4:fb:e1:42:ec:7d:2d:8e:b4:43:11:91:cf:a5:b9:74:dc: d3:50:f6:23:14:71:86:49:54:df:9b:07:64:0e:45:16:c5:73: ce:f7:86:f3:7c:85:52:ae:3a:ea:ec:50:0b:98:ef:e1:70:86: e7:3b:3b:dc:66:8d:10:a7:79:95:e7:20:ba:61:ba:72:a7:0e: 54:e3:2c:ee:0d:58:39:22:c3:52:f1:0e:45:99:4f:7e:0c:90: f7:e3:64:db:43:e2:a2:3e:cf:29:89:2f:d9:e7:af:d6:53:10: 60:76:cd:fc:fa:cd:d6:3e:5c:3b:ce:77:2b:00:22:e2:46:9f: 61:27:79:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4plIKsZxfaSMVUHrcZlygMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw M2MwMTkwHhcNMjYwNTE1MDMwMDU4WhcNMjYwNTE2MDMwMDU4WjAzMTEwLwYDVQQD EyhlMDlkMjAwZmY4NWQyMWNmOWZmZTUwNWQ2NjkwNWYxOTQxODUyZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2oY2rSuLzfdauxocsQXVxusoKNd F87We63pgH9h93LwK9k3076WglvJ91iqqRHqmjL/Yy8vk8u4KQ1t0OMfRbz4aAem D18UcKOmtjivYWM5OlNRTxpn/FXUkS3T1GlKREuCwHelRMexFLRwuoovnmj+CJwl Y0fkUIDwaAqPh/6UqRB6YwNUhthVsBDJ+F5Z5wLtZX9feAzlqq02wpvMbLjOugp8 NahSnIC6fDO5W9cv0BfteS6NJbWCsk61yLm2KGWLpa1EZ7p92QwixxjqZZ0jO0K6 ff/ynrtdlq17cvqmtaka3Oui4nJVVuOt0A2LOJ8F/HGVauGK87+5gWaOlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCdIA/4XSHPn/5QXWaQXxlBhS4+MB8GA1UdIwQY MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt YzE4ZTNjY2M3NDJiLzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwHoLTIHP lE9DjF9/wDtP280p117dzYTmxJ8bo92QNk0BP+daB8D5Cvy+IM4lg/HmlZThUl7J saCKebW4FHE49jGjmXIe+7bmNYv5KuTtVpZXaYi+RDbJ91IAtxTjfB5wm8tImQHR uNde69+1AWq6mRwUC90QhwZMjjUp6np12fT74ULsfS2OtEMRkc+luXTc01D2IxRx hklU35sHZA5FFsVzzveG83yFUq466uxQC5jv4XCG5zs73GaNEKd5lecgumG6cqcO VOMs7g1YOSLDUvEORZlPfgyQ9+Nk20Pioj7PKYkv2eev1lMQYHbN/PrN1j5cO853 KwAi4kafYSd55g== -----END CERTIFICATE-----Generated at Fri May 15 09:07:08 2026 by rpki-client