$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: JRoIt6jIKlFQEGY+R9ooounNuUXErB15jZgeMC5PaV0= Subject key identifier: 86:0C:E9:04:84:4F:AA:58:EA:57:FB:28:41:54:B6:BF:FC:F2:8F:CA Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 01A089B11AAE12E1C8BFA1340D7F8756C944 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 1304 Signing time: Thu 10 Sep 2026 05:01:20 +0000 Manifest this update: Thu 10 Sep 2026 05:01:20 +0000 Manifest next update: Fri 11 Sep 2026 05:01:20 +0000 Files and hashes: 1: B3LQrbE0D8oQ4aL3oL7prkhZdyg.roa (hash: DlK6M5zssqdBfWBogBRgB1KWMlUPTeM22cLgGd9OR+E=) 2: EblpiwRL9HlLzK24T8oP9IND1vQ.roa (hash: xm23w0o3y4eEG4Z/X+VeKtyIUdl513KI04Rcim87iI8=) 3: H96_Qc9SsITA0naiCSVL6y7VEJM.roa (hash: Rixat+/GKfD+/Qc5Q1rAIKjAt7zVyl2ONWoiw+w/7aY=) 4: KkqMLgVSOl4C9gkiDIZV5IAys_A.roa (hash: yUWuR1LKMlNOOPlPCHzgsf5Jj1BpkzuEJuF1kFFXOiw=) 5: Rb5hHaoWK42HVqMlLmdL2Q_tqs4.roa (hash: pvzrnsOI9tdcc9ULSntzOOVe3GikcQWZKLx+48F0nCc=) 6: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: z6WXCJpaP8i9GwUmJZK+67JV49vUtzZq9HnYpgGhe0k=) 7: _5dPGZCcsdHmpRhCTkOU-sos5GE.roa (hash: /u2/VDIfFnty31Q0Cg5Ee6PvdpGvq/sk0Sz5/j6Z4z4=) 8: _XOkat_tVbZSyUJD4uuRenyP92k.roa (hash: MO61vUIPE4xYG1HoXyKAbuzO/+H56vWiFpAKuIhdAOU=) 9: pUUovyR_3zQtaWqDGAW7Ac9HvB4.roa (hash: Fe3L3094CE69Fi+Zh6n4NgsG3bWV3oT1EQEavw3p2f4=) 10: qXcS6OI26rFTLi_T2I0DI0xKoyk.roa (hash: 7rGGuHEL+nQFILlUsjH4I+jgvUwVxc2dc664sGkuKo4=) 11: tz7F4eng4GbKZrftZOga_11upMA.roa (hash: pkYGrfaCo0zVxHfUdGVs2eZr/bDW6rBfCQtsQyDfE4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 05:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:89:b1:1a:ae:12:e1:c8:bf:a1:34:0d:7f:87:56:c9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Sep 10 05:01:20 2026 GMT Not After : Sep 11 05:01:20 2026 GMT Subject: CN=860ce904844faa58ea57fb284154b6bffcf28fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c0:ea:99:a5:58:d0:be:92:40:48:a7:cb:4d: 3c:e6:20:99:8e:fd:29:37:46:67:f9:18:30:cb:80: 14:47:74:28:ca:a9:78:34:89:c8:59:26:87:4d:38: ac:e8:e8:c8:fb:5a:0c:f3:35:fd:91:c7:08:01:28: dd:4b:e6:c4:4f:73:41:37:54:33:15:cc:ab:c7:f1: 5c:00:68:3f:43:1a:80:40:69:ff:6c:13:9d:69:c6: 45:2f:7e:18:63:72:8b:6f:8a:f0:9e:8c:ad:dd:a9: 67:2e:c7:65:52:6c:63:78:19:33:7c:e6:d4:21:45: 10:47:c0:32:07:69:a5:a5:9a:51:8d:3b:76:ba:93: b9:d4:10:9a:42:0a:30:ea:e5:1c:d2:ad:d9:50:c9: 71:dc:c4:b7:0e:d7:4e:be:71:7d:be:9d:1c:d8:02: 71:76:c8:a9:0c:21:54:ed:04:3b:da:f6:f4:8c:2f: 51:ff:02:7c:8e:1b:81:2c:d9:7c:cf:f2:e9:4a:d2: b8:a5:87:b8:c8:8c:40:29:b5:45:31:c9:55:a8:06: 26:2b:fc:e9:c7:48:cc:a4:09:d8:e9:06:0d:ef:1c: 9b:46:bc:a8:09:42:3c:93:fb:a4:68:e0:17:39:b6: 59:a3:a5:ab:a8:c4:8f:ec:e4:71:f6:0a:e1:5b:7a: c0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0C:E9:04:84:4F:AA:58:EA:57:FB:28:41:54:B6:BF:FC:F2:8F:CA X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c4:ba:47:eb:8c:77:00:1a:65:bd:11:d5:1c:25:0c:13:c2: e6:d0:43:f6:da:af:e8:89:d7:a1:6e:7c:7a:9b:f0:62:bf:d8: 16:3c:d4:b5:f5:e7:d6:69:22:05:d3:be:b4:d5:53:41:e4:73: 29:38:e0:b3:67:52:5b:d0:d6:86:21:8e:be:0e:3b:95:16:f9: 00:e8:a2:fa:ac:3c:02:5b:5a:e7:66:cd:e8:e9:0c:b4:8a:c9: 06:8a:a7:59:0d:a2:0b:61:cf:1d:fb:ac:17:3f:4d:89:f1:81: 13:06:a8:5f:b0:ea:1f:55:55:8f:88:39:e2:a3:2e:98:8f:47: d5:96:d7:7f:7d:c0:af:63:2c:74:cd:dc:d2:f7:2f:60:27:e6: 80:0a:68:a5:8b:5d:1b:b4:60:ec:73:25:0e:7f:ff:6e:c4:0e: dd:90:ae:6b:3d:d0:70:5e:1d:e2:df:25:90:10:5b:29:75:c6: f7:19:f8:65:89:ef:49:00:e9:03:f1:4c:da:b0:b1:a7:15:be: 38:23:f0:85:5b:ca:44:08:82:65:fd:40:0a:bf:35:e4:62:d4: d9:a9:e1:80:5e:08:52:5f:2b:e5:ae:b9:22:5c:1e:06:fc:bd: 6f:12:01:ac:b0:28:52:ee:4b:72:0f:ce:69:6b:a4:27:7f:7c: 84:85:c4:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCJsRquEuHIv6E0DX+HVslEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwOTEwMDUwMTIwWhcNMjYwOTExMDUwMTIwWjAzMTEwLwYDVQQD Eyg4NjBjZTkwNDg0NGZhYTU4ZWE1N2ZiMjg0MTU0YjZiZmZjZjI4ZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcDqmaVY0L6SQEiny0085iCZjv0p N0Zn+Rgwy4AUR3Qoyql4NInIWSaHTTis6OjI+1oM8zX9kccIASjdS+bET3NBN1Qz Fcyrx/FcAGg/QxqAQGn/bBOdacZFL34YY3KLb4rwnoyt3alnLsdlUmxjeBkzfObU IUUQR8AyB2mlpZpRjTt2upO51BCaQgow6uUc0q3ZUMlx3MS3DtdOvnF9vp0c2AJx dsipDCFU7QQ72vb0jC9R/wJ8jhuBLNl8z/LpStK4pYe4yIxAKbVFMclVqAYmK/zp x0jMpAnY6QYN7xybRryoCUI8k/ukaOAXObZZo6WrqMSP7ORx9grhW3rA3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYM6QSET6pY6lf7KEFUtr/88o/KMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcS6R+uM dwAaZb0R1RwlDBPC5tBD9tqv6InXoW58epvwYr/YFjzUtfXn1mkiBdO+tNVTQeRz KTjgs2dSW9DWhiGOvg47lRb5AOii+qw8Alta52bN6OkMtIrJBoqnWQ2iC2HPHfus Fz9NifGBEwaoX7DqH1VVj4g54qMumI9H1ZbXf33Ar2MsdM3c0vcvYCfmgApopYtd G7Rg7HMlDn//bsQO3ZCuaz3QcF4d4t8lkBBbKXXG9xn4ZYnvSQDpA/FM2rCxpxW+ OCPwhVvKRAiCZf1ACr815GLU2anhgF4IUl8r5a65IlweBvy9bxIBrLAoUu5Lcg/O aWukJ398hIXEEQ== -----END CERTIFICATE-----Generated at Thu Sep 10 15:19:20 2026 by rpki-client