$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft File: XGsMABqZq2KW4kIXO_fn_c8DwBk.mft (raw, json) Hash identifier: Y98vTiWjfduIt1Z/mE2BGPvzcZJzqVzXBKpZuPPAEB0= Subject key identifier: CC:CD:C4:43:2A:E7:F4:E1:6C:84:5C:EC:0A:37:01:17:69:3A:1A:89 Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Certificate serial: 019FFAFF69DC21B8185DE416FE3C124C5CAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft Manifest number: 12A4 Signing time: Thu 13 Aug 2026 12:01:10 +0000 Manifest this update: Thu 13 Aug 2026 12:01:10 +0000 Manifest next update: Fri 14 Aug 2026 12:01:10 +0000 Files and hashes: 1: DZ0MP-yB-k0XdclRi6GSHev-8UI.roa (hash: OLquFioTpRnSbUlRpW26tAjmfT6pteRRo9SnbJKQNlA=) 2: F_efPUkbYJiwgXfhbrfqTy7pzl4.roa (hash: DBFGNPIUNOOmBZc6f7YXGHxHQkj2ijxWbr4/ap8nEM8=) 3: K92PqBwvgEkNne5-6mAr80PsJAQ.roa (hash: 0FAqW4Pbg00noP1bhEV9Gx0WPZ0MqX9JAlOtTUXuyJw=) 4: U0zFycq25PPn0dlxRYsOouqMHlQ.roa (hash: 0/WeAZRiRBLJaCyVnQwSNF+wkwCVBcyTTJkapLynjLs=) 5: V_rKYxhknpgw0_eZF8X41mpWM9E.roa (hash: leGPk+SwJtiixlgMTPD5YmmPKKMoVsiY7W4Pkn2Sz5w=) 6: VhdKFflL6wzVMXCQhX8bkLBALKo.roa (hash: GmQzzs1E/5GYPLQuRjYECvhEeGtOhpZPCBL21n8gXMM=) 7: VllzRPRKTVqoKCv6C6XbpsT1mlw.roa (hash: AwMpFygRvq1JwWMWPLbmaZCSHpec1V7IeWXb7LTJvto=) 8: XGsMABqZq2KW4kIXO_fn_c8DwBk.crl (hash: jaivwXnTQzL+gTR+ZZ8EdSIP3rGIu6k4LFTAEAbLYsg=) 9: _7XaiiyBAJ5Eqd5vKuAqx4PW0hM.roa (hash: iqPKLFA+g5deNUkHvdEQM9uLDsaW9rYQtZs9LzN5kwg=) 10: aBRByi6HtqSTkTwS-fInKVGreVM.roa (hash: L+8L7FrVL2l9rPUgEQqLrjnJQ1XfFBQi0mPOySPHZwc=) 11: ak_zpBeCzF7k-sZZ4UqlvJ4hCyQ.roa (hash: B78IwndzlBG3qE9BrzBg3u/j7NoujFELRCBgQIuL/JU=) 12: d4Bwb6dLFku_UkOvAMMS7FUSUEQ.roa (hash: eeFJoaeGLxOiQz6cXzT6CRHE4Aq6RhN+PQxHj+Phf10=) 13: hzP1qnHmPnnJOM7e8mwB2JQgWlw.roa (hash: P7S5XXCI5WhORMniLgG3Xqv8lUXzGtRjkmzYHiVxmxw=) 14: jSTmw6QNVRai_EuoNhY73OP3VjE.roa (hash: AYD6OFv8HTxuycJJf0ziwoDHoVKLGuICS6c+LYT5M5c=) 15: mCy7hS8qB_vm_oJsB9qaLGKlYEs.roa (hash: Ul861aCSvme8oLj/mvAnopiu+aRS2VSuHznhSML8kVk=) 16: qHgbTLKhQlwyDn4W47Nn2XhrvEQ.roa (hash: e4vTmIa36MwpM5S5DLu7QHR1O71kqBkmpQlt4QzUxjA=) 17: rN4NLaMID6DZ_1Tf-dsWVDuA2X4.roa (hash: 7gf462IZs1uEZ6uPb1SMqjZ8MS74g0QNcTk84kmywms=) 18: rjJfP-cMk7Eo1gcf4GJv-6fZ8wA.roa (hash: X60K0VdLBIECsdh4cUymksKwrOGj9pXkUyJRydUZqtU=) 19: wTiLBx3d6nArSMvvuGONeX8tzoU.roa (hash: wWQ4VBFuaNpyEOuyC6Zr3NF5Y4tz4sd8I+MyslECmcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:fa:ff:69:dc:21:b8:18:5d:e4:16:fe:3c:12:4c:5c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Validity Not Before: Aug 13 12:01:10 2026 GMT Not After : Aug 14 12:01:10 2026 GMT Subject: CN=cccdc4432ae7f4e16c845cec0a370117693a1a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:87:2f:09:35:fc:6a:2b:ce:dd:96:f8:fa:e6: 45:b0:5f:97:69:04:ce:8f:31:eb:1f:d5:e2:99:38: ef:9a:b1:f8:68:cb:83:f9:e9:ed:9d:26:2e:fc:9a: e1:cf:9d:32:37:d6:a9:f5:aa:ad:1d:be:6d:da:09: 88:2f:c5:1f:74:bf:7b:77:d2:fe:0b:c4:b4:3a:8d: 35:49:5a:8e:a1:a5:85:1b:53:ca:fd:26:fd:1c:3b: 0c:46:e8:b3:dc:07:62:b3:4b:f3:15:9e:ef:9f:23: 4e:1f:6a:6c:ce:da:35:e1:bd:21:03:fd:67:74:f5: 7c:dd:d0:9d:e7:47:b1:5b:bd:d0:83:92:1d:4a:bf: d1:92:2c:c6:0e:63:92:18:3d:74:ba:4d:a4:70:16: 3d:b7:0e:2a:f3:e4:49:74:ba:ee:10:3f:dc:51:a5: 19:5d:f1:c3:4d:bc:86:0f:ee:f2:f0:f0:d1:54:4b: 20:f9:26:8f:a4:78:5b:07:b9:02:4e:74:4c:c2:d6: da:55:95:66:53:a2:fd:be:62:4c:88:f6:62:a1:16: 5f:41:07:a7:a3:a2:7f:6c:10:16:69:14:d2:d3:a6: 94:8d:40:78:a7:4a:1c:7b:ee:00:25:7b:0e:24:8b: 4b:1b:ad:21:02:15:e7:7b:5b:7e:cb:4b:98:57:5a: ca:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CD:C4:43:2A:E7:F4:E1:6C:84:5C:EC:0A:37:01:17:69:3A:1A:89 X509v3 Authority Key Identifier: keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:07:d4:73:fb:74:55:0a:b7:10:c4:b2:8b:8d:e6:75:b6:6a: f4:10:42:24:26:05:78:61:41:8e:dc:1b:e2:67:6f:5c:bd:6a: 7d:ab:e0:9c:13:92:a0:8d:c9:45:6f:c3:c5:6c:62:34:cf:98: e6:4b:65:0b:c1:e2:32:e3:91:ab:8a:af:1d:f2:30:92:35:ce: 70:ea:0f:c3:2c:a7:c0:fb:7b:c6:ff:0f:83:b7:2f:9b:9e:ea: 68:12:96:7c:f9:6a:b7:0a:75:91:08:75:fb:30:e1:7b:53:1b: c8:cb:de:19:37:d6:80:55:eb:f7:b6:47:8c:67:a8:5d:5d:3a: 78:40:ae:80:41:0f:76:89:fa:58:b3:b3:0d:08:99:b6:31:50: c9:c6:c9:43:b7:a6:28:a4:a5:f4:ba:97:0d:f3:40:16:e0:88: 70:a6:8e:56:3a:e3:e4:94:f8:1f:4b:ca:91:04:6a:45:b8:00: 2e:53:15:9a:df:d2:ac:3f:64:1d:b7:e7:a2:12:19:7f:0a:81: 09:0f:98:d8:2f:f3:1e:45:c8:12:b6:2f:a1:71:e3:36:ca:95: 99:8b:18:c3:6d:24:aa:21:f0:82:43:c8:e7:7b:81:2e:a5:42: 59:3e:7b:0e:5a:d4:01:35:1b:9b:5b:28:d0:18:82:08:a0:4b: 10:1c:8e:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/6/2ncIbgYXeQW/jwSTFyrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw M2MwMTkwHhcNMjYwODEzMTIwMTEwWhcNMjYwODE0MTIwMTEwWjAzMTEwLwYDVQQD EyhjY2NkYzQ0MzJhZTdmNGUxNmM4NDVjZWMwYTM3MDExNzY5M2ExYTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4cvCTX8aivO3Zb4+uZFsF+XaQTO jzHrH9XimTjvmrH4aMuD+entnSYu/Jrhz50yN9ap9aqtHb5t2gmIL8UfdL97d9L+ C8S0Oo01SVqOoaWFG1PK/Sb9HDsMRuiz3Adis0vzFZ7vnyNOH2pszto14b0hA/1n dPV83dCd50exW73Qg5IdSr/RkizGDmOSGD10uk2kcBY9tw4q8+RJdLruED/cUaUZ XfHDTbyGD+7y8PDRVEsg+SaPpHhbB7kCTnRMwtbaVZVmU6L9vmJMiPZioRZfQQen o6J/bBAWaRTS06aUjUB4p0oce+4AJXsOJItLG60hAhXne1t+y0uYV1rKXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzNxEMq5/ThbIRc7Ao3ARdpOhqJMB8GA1UdIwQY MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt YzE4ZTNjY2M3NDJiLzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQfUc/t0 VQq3EMSyi43mdbZq9BBCJCYFeGFBjtwb4mdvXL1qfavgnBOSoI3JRW/DxWxiNM+Y 5ktlC8HiMuORq4qvHfIwkjXOcOoPwyynwPt7xv8Pg7cvm57qaBKWfPlqtwp1kQh1 +zDhe1MbyMveGTfWgFXr97ZHjGeoXV06eECugEEPdon6WLOzDQiZtjFQycbJQ7em KKSl9LqXDfNAFuCIcKaOVjrj5JT4H0vKkQRqRbgALlMVmt/SrD9kHbfnohIZfwqB CQ+Y2C/zHkXIErYvoXHjNsqVmYsYw20kqiHwgkPI53uBLqVCWT57DlrUATUbm1so 0BiCCKBLEByO5Q== -----END CERTIFICATE-----Generated at Thu Aug 13 17:13:20 2026 by rpki-client