$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: lOs7HYgnLi8bk01edKAIgaWbGU2n/dwB0uEXGgrJ8gY= Subject key identifier: 36:C8:68:3D:63:E6:0C:BA:D6:4E:65:84:63:66:0D:6D:92:9B:ED:33 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019F9E15AE1FBF287DF98A3D1BA9A4896D03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 128A Signing time: Sun 26 Jul 2026 11:00:48 +0000 Manifest this update: Sun 26 Jul 2026 11:00:48 +0000 Manifest next update: Mon 27 Jul 2026 11:00:48 +0000 Files and hashes: 1: B3LQrbE0D8oQ4aL3oL7prkhZdyg.roa (hash: DlK6M5zssqdBfWBogBRgB1KWMlUPTeM22cLgGd9OR+E=) 2: EblpiwRL9HlLzK24T8oP9IND1vQ.roa (hash: xm23w0o3y4eEG4Z/X+VeKtyIUdl513KI04Rcim87iI8=) 3: H96_Qc9SsITA0naiCSVL6y7VEJM.roa (hash: Rixat+/GKfD+/Qc5Q1rAIKjAt7zVyl2ONWoiw+w/7aY=) 4: KkqMLgVSOl4C9gkiDIZV5IAys_A.roa (hash: yUWuR1LKMlNOOPlPCHzgsf5Jj1BpkzuEJuF1kFFXOiw=) 5: Rb5hHaoWK42HVqMlLmdL2Q_tqs4.roa (hash: pvzrnsOI9tdcc9ULSntzOOVe3GikcQWZKLx+48F0nCc=) 6: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: WtCiABg5+Ol32HqWTdZQ/7DrK6KeVunuPwUaPyNLxJg=) 7: _5dPGZCcsdHmpRhCTkOU-sos5GE.roa (hash: /u2/VDIfFnty31Q0Cg5Ee6PvdpGvq/sk0Sz5/j6Z4z4=) 8: _XOkat_tVbZSyUJD4uuRenyP92k.roa (hash: MO61vUIPE4xYG1HoXyKAbuzO/+H56vWiFpAKuIhdAOU=) 9: pUUovyR_3zQtaWqDGAW7Ac9HvB4.roa (hash: Fe3L3094CE69Fi+Zh6n4NgsG3bWV3oT1EQEavw3p2f4=) 10: qXcS6OI26rFTLi_T2I0DI0xKoyk.roa (hash: 7rGGuHEL+nQFILlUsjH4I+jgvUwVxc2dc664sGkuKo4=) 11: tz7F4eng4GbKZrftZOga_11upMA.roa (hash: pkYGrfaCo0zVxHfUdGVs2eZr/bDW6rBfCQtsQyDfE4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9e:15:ae:1f:bf:28:7d:f9:8a:3d:1b:a9:a4:89:6d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Jul 26 11:00:48 2026 GMT Not After : Jul 27 11:00:48 2026 GMT Subject: CN=36c8683d63e60cbad64e658463660d6d929bed33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e3:d0:e0:e4:f6:cb:41:fb:71:e8:dc:89:cd: 60:91:3a:c9:8c:24:ba:4f:88:40:bc:a1:0f:83:da: 0d:6e:07:ea:b6:c5:10:9c:a0:90:10:b3:8b:d3:20: 3f:58:05:18:3b:ea:22:a4:76:ff:49:03:dd:cc:1c: ee:37:74:90:1b:7b:4e:99:0f:a1:b0:ce:5b:de:d0: 44:bc:09:6d:4e:b3:de:05:c0:e1:94:f6:63:4a:40: 53:03:f5:c4:ea:70:61:2a:ae:3c:e3:d2:04:f6:2f: f6:63:d5:c6:9b:44:05:2f:ab:d7:7c:1e:11:75:b1: d4:60:4c:83:66:23:fa:c9:9c:80:0b:ef:98:4f:02: 0f:4a:fb:53:2e:ec:dd:67:47:22:46:c9:ca:6f:fa: 39:2e:10:21:0d:08:df:ba:65:56:34:f0:f5:20:a6: b3:4c:f7:5b:d3:fb:31:f5:45:54:1b:8a:04:ab:60: e4:71:d0:fa:d7:54:9d:01:05:6e:e1:f6:cc:04:61: e4:39:26:31:ce:88:29:0b:b9:03:cc:59:e6:24:01: 3b:cd:04:79:22:fe:60:8f:cd:f4:30:fd:be:f7:8f: 70:88:df:0c:9f:90:af:b6:79:0b:5c:45:eb:5a:64: 3b:9e:96:cb:8f:ed:1a:00:d3:cd:7e:12:0a:22:7a: 2c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C8:68:3D:63:E6:0C:BA:D6:4E:65:84:63:66:0D:6D:92:9B:ED:33 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:11:09:47:94:1a:d9:19:2d:90:8d:d5:e7:6d:23:4a:ab:bf: a6:d5:3d:8b:52:c4:26:aa:9e:e1:0e:f6:33:8f:ca:6b:e4:d2: f4:91:cc:15:92:a1:e3:5d:aa:97:c3:50:e3:79:05:3f:8f:15: 28:10:a1:40:87:af:f0:a3:62:77:ca:8d:60:67:fa:b0:c5:6a: 0a:3e:28:44:7e:39:86:d0:cf:6c:da:c3:fc:a0:1b:5f:bf:73: 1d:50:e9:bf:78:30:54:1c:94:7b:6a:7e:12:4a:b6:41:7d:43: cd:3c:38:b5:8a:d7:1d:4c:65:ac:bb:45:a8:cc:fc:0c:73:a9: a7:d0:33:c2:f7:dc:71:fe:71:45:61:70:8d:a2:62:e4:b5:61: 9e:9e:43:3b:d2:5a:d3:37:0f:2c:29:d8:27:75:85:4f:fd:09: a0:79:bd:29:7a:71:39:23:81:26:0a:70:e8:09:3b:4e:8c:f0: 18:81:04:48:46:f0:b9:dc:20:e9:75:ad:65:e0:04:af:88:71: e1:59:b3:6c:b1:82:39:0e:42:1c:75:7b:6c:a0:05:67:ef:b1: 72:12:15:12:52:51:c5:0b:12:c3:e9:96:be:b6:63:a2:cc:b2: eb:e5:f9:f3:8f:59:b5:11:70:62:9a:bd:63:0d:51:36:00:d4: 31:66:90:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+eFa4fvyh9+Yo9G6mkiW0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwNzI2MTEwMDQ4WhcNMjYwNzI3MTEwMDQ4WjAzMTEwLwYDVQQD EygzNmM4NjgzZDYzZTYwY2JhZDY0ZTY1ODQ2MzY2MGQ2ZDkyOWJlZDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOPQ4OT2y0H7cejcic1gkTrJjCS6 T4hAvKEPg9oNbgfqtsUQnKCQELOL0yA/WAUYO+oipHb/SQPdzBzuN3SQG3tOmQ+h sM5b3tBEvAltTrPeBcDhlPZjSkBTA/XE6nBhKq4849IE9i/2Y9XGm0QFL6vXfB4R dbHUYEyDZiP6yZyAC++YTwIPSvtTLuzdZ0ciRsnKb/o5LhAhDQjfumVWNPD1IKaz TPdb0/sx9UVUG4oEq2DkcdD611SdAQVu4fbMBGHkOSYxzogpC7kDzFnmJAE7zQR5 Iv5gj830MP2+949wiN8Mn5CvtnkLXEXrWmQ7npbLj+0aANPNfhIKInos+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbIaD1j5gy61k5lhGNmDW2Sm+0zMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohEJR5Qa 2RktkI3V520jSqu/ptU9i1LEJqqe4Q72M4/Ka+TS9JHMFZKh412ql8NQ43kFP48V KBChQIev8KNid8qNYGf6sMVqCj4oRH45htDPbNrD/KAbX79zHVDpv3gwVByUe2p+ Ekq2QX1DzTw4tYrXHUxlrLtFqMz8DHOpp9Azwvfccf5xRWFwjaJi5LVhnp5DO9Ja 0zcPLCnYJ3WFT/0JoHm9KXpxOSOBJgpw6Ak7TozwGIEESEbwudwg6XWtZeAEr4hx 4VmzbLGCOQ5CHHV7bKAFZ++xchIVElJRxQsSw+mWvrZjosyy6+X5849ZtRFwYpq9 Yw1RNgDUMWaQnA== -----END CERTIFICATE-----Generated at Sun Jul 26 20:16:50 2026 by rpki-client