$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: bU89o7NYEq6S2OK7xcwRVZb7q+OGaSObbx/UU3tnW/Q= Subject key identifier: 5E:B3:80:50:DE:DA:AF:44:7E:63:48:3A:27:77:F1:5C:01:B2:B1:05 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019EB7D83CFDED142996C98A8E77FBD35050 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 198E Signing time: Thu 11 Jun 2026 18:01:02 +0000 Manifest this update: Thu 11 Jun 2026 18:01:02 +0000 Manifest next update: Fri 12 Jun 2026 18:01:02 +0000 Files and hashes: 1: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (hash: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew=) 2: B3OeokPEIHVspK8KnB4E2xEIauA.roa (hash: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4=) 3: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (hash: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os=) 4: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (hash: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs=) 5: KzdQ6MYBCl2ir-P86lDTtzaCt6M.roa (hash: h0pLqI3V5xBNJ0ejZS7hNIXSpXsgRqsYEzH47nvj1rY=) 6: PMhUU73xUVC7raWhgd5q_EKF038.roa (hash: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ=) 7: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (hash: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY=) 8: VWMQVWn-fMxdyDNhNc6f7Kyy09Y.roa (hash: Z09Yv6W87TB4u/fOV8oJx/K3Cijv1Xqstm0UVafkQZs=) 9: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (hash: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8=) 10: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (hash: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws=) 11: re_1WedxziUW08jNtG4jbnB22Hw.roa (hash: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4=) 12: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (hash: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: ebElFwGLcrb6fhUhEsCztFRuBkn10y2OcL16KEZsxU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b7:d8:3c:fd:ed:14:29:96:c9:8a:8e:77:fb:d3:50:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jun 11 18:01:02 2026 GMT Not After : Jun 12 18:01:02 2026 GMT Subject: CN=5eb38050dedaaf447e63483a2777f15c01b2b105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:18:fc:24:b5:92:17:3b:b4:f2:df:33:4f:00: 53:49:b8:a6:91:d0:32:0c:3f:62:f9:5b:3e:aa:6c: d7:71:78:ae:67:02:e1:06:be:9f:78:ef:1e:0d:36: 6f:26:51:b0:ff:32:22:76:5e:38:ad:da:23:4a:bc: dc:e0:a7:59:e6:3b:73:bb:7f:57:56:6d:ee:e5:64: 6e:81:48:47:90:19:c5:1f:3b:35:60:43:5b:84:f1: b0:0e:44:13:bc:5e:6d:80:e2:49:45:b8:99:f5:7d: 71:e0:95:3b:1b:59:67:0a:28:03:89:c2:7c:45:e2: 8b:20:76:fe:6c:fd:f9:3d:7d:de:ca:37:01:fc:80: 02:11:8e:81:1c:72:8e:af:2f:e5:f8:38:4a:25:4b: b8:91:05:7e:b9:92:8c:b4:16:0c:1b:df:7f:c8:3a: 9e:f3:90:4c:c8:ad:3a:17:66:d5:a5:bc:e4:68:1f: a1:2e:6c:2f:f5:4a:8f:10:25:2b:68:82:b9:69:96: da:ae:38:7f:c5:57:eb:ae:25:4a:6a:f5:a1:97:fd: d6:bb:83:3f:2e:19:2f:60:8a:e1:f1:ec:74:ea:da: e6:13:6a:0c:a4:d0:43:3a:29:de:f4:82:45:ea:9e: c0:52:cf:db:a3:1e:68:f3:29:87:cb:5a:4e:a0:08: 82:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B3:80:50:DE:DA:AF:44:7E:63:48:3A:27:77:F1:5C:01:B2:B1:05 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:64:a4:9e:4f:aa:dd:29:f1:fe:44:2f:06:3a:20:21:dc:1c: f0:52:f6:7d:a5:90:18:e1:2f:fa:34:b8:cc:a0:1e:b6:9b:58: 80:65:61:a9:68:47:70:fe:25:c7:ef:c8:28:03:a0:f0:44:d0: a9:74:d0:f6:2a:c0:d9:88:d7:1f:b6:56:1e:22:54:38:9d:e7: 22:ed:4b:80:52:44:e7:0d:ff:43:0f:d9:41:e8:c0:1f:be:63: 2b:4d:b9:4a:c0:c6:83:7d:fe:63:c5:ac:c8:57:12:8b:75:92: 0e:79:77:4b:c5:65:55:1f:02:23:af:78:f3:9e:44:a2:39:66: aa:8a:31:02:0c:19:a4:b1:0d:1d:e1:73:7c:66:bd:6a:ec:ba: 59:ac:03:84:77:cc:ec:7c:94:e0:03:cd:b9:81:8b:15:3a:a9: 7a:1a:0a:ca:ae:3b:8f:07:81:b5:1d:35:92:b2:5e:4c:42:17: 33:4a:9d:e4:04:5b:17:71:2e:68:a8:93:fb:b5:5e:83:6d:75: ed:6e:5d:19:66:37:90:87:ae:0f:e8:bd:83:61:b0:91:40:db: d9:30:d0:e4:35:80:14:0c:42:c9:27:c6:83:a7:66:47:37:2b: 2f:64:97:5a:e0:9b:0a:d9:74:0a:da:b4:e5:f2:b5:45:04:ad: 2b:43:01:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ632Dz97RQplsmKjnf701BQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwNjExMTgwMTAyWhcNMjYwNjEyMTgwMTAyWjAzMTEwLwYDVQQD Eyg1ZWIzODA1MGRlZGFhZjQ0N2U2MzQ4M2EyNzc3ZjE1YzAxYjJiMTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRj8JLWSFzu08t8zTwBTSbimkdAy DD9i+Vs+qmzXcXiuZwLhBr6feO8eDTZvJlGw/zIidl44rdojSrzc4KdZ5jtzu39X Vm3u5WRugUhHkBnFHzs1YENbhPGwDkQTvF5tgOJJRbiZ9X1x4JU7G1lnCigDicJ8 ReKLIHb+bP35PX3eyjcB/IACEY6BHHKOry/l+DhKJUu4kQV+uZKMtBYMG99/yDqe 85BMyK06F2bVpbzkaB+hLmwv9UqPECUraIK5aZbarjh/xVfrriVKavWhl/3Wu4M/ LhkvYIrh8ex06trmE2oMpNBDOine9IJF6p7AUs/box5o8ymHy1pOoAiCGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6zgFDe2q9EfmNIOid38VwBsrEFMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGSknk+q 3Snx/kQvBjogIdwc8FL2faWQGOEv+jS4zKAetptYgGVhqWhHcP4lx+/IKAOg8ETQ qXTQ9irA2YjXH7ZWHiJUOJ3nIu1LgFJE5w3/Qw/ZQejAH75jK025SsDGg33+Y8Ws yFcSi3WSDnl3S8VlVR8CI694855EojlmqooxAgwZpLENHeFzfGa9auy6WawDhHfM 7HyU4APNuYGLFTqpehoKyq47jweBtR01krJeTEIXM0qd5ARbF3EuaKiT+7Veg211 7W5dGWY3kIeuD+i9g2GwkUDb2TDQ5DWAFAxCySfGg6dmRzcrL2SXWuCbCtl0Ctq0 5fK1RQStK0MBWw== -----END CERTIFICATE-----Generated at Thu Jun 11 22:42:32 2026 by rpki-client