$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft File: XPMa_DbLaVUAf-l-1KXjGF0icbo.mft (raw, json) Hash identifier: VykIPwBei8sCIyJOzXLcGJuvPxTkJc9NRLRsKLPRo1I= Subject key identifier: EA:66:04:F0:A9:C0:93:A8:AC:E0:57:DD:3D:35:F8:91:94:95:01:F9 Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 019F8267CD48037255A13CBB667390973ED5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft Manifest number: 19D7 Signing time: Tue 21 Jul 2026 02:01:08 +0000 Manifest this update: Tue 21 Jul 2026 02:01:08 +0000 Manifest next update: Wed 22 Jul 2026 02:01:08 +0000 Files and hashes: 1: 1-dAYLfzEcuSnLWMiLXXSdIwT4rU.roa (hash: WhA4jtvtbE79AQa3IJODloRRuW4QHZIWAX/A32JL7m4=) 2: GOmV_75Dv1jwn9wiVioc2BSPZTo.roa (hash: pRTwblvRoqzlcA6ZsWJlwN1cr9uhPXOkl31rFqoTMf8=) 3: NklSIVNcNIWeMyDnmkM31BBhz1c.roa (hash: UKSW2BDTyMNTJDzhPRFU+Wzj1R5uLkgmHOPWx5CWEqQ=) 4: W4UHRrBQAt50eiIa0aXkDS2q-jI.roa (hash: wJtHrvfPjqzoQaYOzEJ/TBfUCsO/TaG3P+SEUHqq3Ig=) 5: XPMa_DbLaVUAf-l-1KXjGF0icbo.crl (hash: 4BcyTbdHUsu5miLBHXcUVu6pmxNYcW0ECVIUlTdcXcc=) 6: _5CTbNuX6fLN7jDqdj1oQp0kARc.roa (hash: Ha0LgykvjQP+9qGPn28IFIuJ0yQRLEpHe1bDMbGiuiE=) 7: _YOXL7ZxwGLyAFtXgmbGoGmsxw0.roa (hash: oYcEDHMjBaLjLdS2+cnHZQVD1ORy9f2L160BSTCgJ4c=) 8: itgrIp1NxpdNbAgMEeQKpbEmf5o.roa (hash: Js4lM2igXS9YqpQe0RjS4UXqcJs8/ISJx7M/fH+77eg=) 9: lxIA5T6ig6P82Z6FpI76sa5r9Hk.roa (hash: 3LHUUi612Oq28/k9MVav0SeJK2Lmj7BOxrV2xdjlDis=) 10: szXceV_8JO0f_7ooL6S8iduW9xI.roa (hash: xeJBYCAXDOSNVRxdgWGAZ1ipDc3y7H3KXIsJs1D2FK4=) 11: xnSiVa_Qi8Hl5xGaTydyCAcB4Q4.roa (hash: SWwZIzY753Ls9csZNqAI1seyxm1jJEeEibvAi3lb+6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 02:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:82:67:cd:48:03:72:55:a1:3c:bb:66:73:90:97:3e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: Jul 21 02:01:08 2026 GMT Not After : Jul 22 02:01:08 2026 GMT Subject: CN=ea6604f0a9c093a8ace057dd3d35f891949501f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:fc:31:41:2a:d5:16:e3:e4:ed:e2:77:52: b2:b8:cd:11:f2:0d:15:b0:2c:b2:e8:fa:72:ee:70: 0a:8b:55:8a:64:9b:a2:65:58:5c:bf:1e:c2:0a:a0: 7e:f4:0a:84:b4:c3:b5:d5:20:0e:32:a6:a2:8a:73: e9:d4:f2:a6:01:1b:b8:7a:f1:93:c2:3c:bb:d8:7f: 97:a8:90:ab:ce:24:65:bf:83:ee:4a:db:35:fd:fd: 61:f0:1c:9d:48:10:5b:e2:14:76:b8:8b:e4:32:96: 08:d0:f3:70:7d:b1:a9:f7:b3:8a:0b:df:22:49:4e: 91:fa:9a:4e:c0:b0:bb:b4:1c:c2:1a:bb:3a:86:1c: 3a:52:37:4a:0b:b6:9e:40:42:80:7e:57:94:78:6b: 96:26:f4:87:7a:23:6a:86:34:70:c3:f6:d8:ca:cb: a1:3e:c0:8a:af:f1:2a:70:d9:3e:03:11:65:18:50: d1:d9:44:46:81:5f:57:87:6d:cc:a2:c9:64:cb:3c: f3:28:e8:82:35:50:a8:a2:47:0c:62:bd:6e:72:1f: f1:66:39:30:a3:77:bd:13:b9:50:f2:bb:85:d6:79: 6f:97:91:9e:52:59:90:8b:af:89:ca:f0:53:fa:13: 9b:ab:42:e8:a1:49:3c:c0:34:2a:64:3e:cc:f1:02: 55:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:66:04:F0:A9:C0:93:A8:AC:E0:57:DD:3D:35:F8:91:94:95:01:F9 X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:86:1e:ee:91:da:70:c9:f6:32:6a:81:bf:6f:6a:8a:d1:ed: 8d:09:21:ce:b1:65:de:73:43:6a:1d:82:13:fb:df:8a:55:37: 53:3f:1f:0c:3e:8f:4d:c3:b5:77:76:5c:dd:b3:af:98:c6:c6: 58:30:c9:c8:79:40:46:42:ab:48:e2:2d:9c:32:be:17:a2:2b: be:96:6a:ba:8f:90:3d:c2:b0:de:06:95:3b:ba:90:2c:b6:1a: 8b:c6:b7:4e:af:0f:5a:d2:07:e5:bb:d3:25:e7:32:3c:e9:7a: 3e:d8:c0:ff:49:14:eb:09:fe:cc:59:c6:66:f7:fa:b2:25:17: a7:f6:24:f3:40:33:4f:11:8e:79:35:36:e7:53:ea:06:46:95: 2c:05:72:c9:7f:71:5f:6e:d0:ed:81:02:15:7e:9d:72:bf:be: 1c:dc:e5:bd:c4:66:8c:d5:6c:cd:32:9d:ec:ce:f3:87:3b:97: dd:1b:c6:89:e2:75:bb:d7:8d:e7:47:fa:bc:ab:f6:ea:19:66: 4c:fa:c8:ca:c0:2c:b9:e3:7e:3b:dc:e5:a5:e1:3c:c0:a3:97: a2:ef:81:e4:89:6f:61:1b:0b:fb:01:86:75:06:b7:ed:e0:4d: e8:3f:7f:84:3e:3b:c3:08:51:8e:3a:48:27:a1:ad:08:27:46: 1c:47:56:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+CZ81IA3JVoTy7ZnOQlz7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjYwNzIxMDIwMTA4WhcNMjYwNzIyMDIwMTA4WjAzMTEwLwYDVQQD EyhlYTY2MDRmMGE5YzA5M2E4YWNlMDU3ZGQzZDM1Zjg5MTk0OTUwMWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5b8MUEq1Rbj5O3id1KyuM0R8g0V sCyy6Ppy7nAKi1WKZJuiZVhcvx7CCqB+9AqEtMO11SAOMqaiinPp1PKmARu4evGT wjy72H+XqJCrziRlv4PuSts1/f1h8BydSBBb4hR2uIvkMpYI0PNwfbGp97OKC98i SU6R+ppOwLC7tBzCGrs6hhw6UjdKC7aeQEKAfleUeGuWJvSHeiNqhjRww/bYysuh PsCKr/EqcNk+AxFlGFDR2URGgV9Xh23MoslkyzzzKOiCNVCookcMYr1uch/xZjkw o3e9E7lQ8ruF1nlvl5GeUlmQi6+JyvBT+hObq0LooUk8wDQqZD7M8QJVNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpmBPCpwJOorOBX3T01+JGUlQH5MB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQtNzM2ZDEyODg4Y2E4 LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeoYe7pHa cMn2MmqBv29qitHtjQkhzrFl3nNDah2CE/vfilU3Uz8fDD6PTcO1d3Zc3bOvmMbG WDDJyHlARkKrSOItnDK+F6IrvpZquo+QPcKw3gaVO7qQLLYai8a3Tq8PWtIH5bvT JecyPOl6PtjA/0kU6wn+zFnGZvf6siUXp/Yk80AzTxGOeTU251PqBkaVLAVyyX9x X27Q7YECFX6dcr++HNzlvcRmjNVszTKd7M7zhzuX3RvGieJ1u9eN50f6vKv26hlm TPrIysAsueN+O9zlpeE8wKOXou+B5IlvYRsL+wGGdQa37eBN6D9/hD47wwhRjjpI J6GtCCdGHEdWtA== -----END CERTIFICATE-----Generated at Tue Jul 21 10:04:00 2026 by rpki-client