$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json) Hash identifier: KSdShpVYhhgjhV/4bT85+ZoOJldVLMQZNZSQypSsdEA= Subject key identifier: 77:0D:FD:42:6A:F3:43:B0:59:BB:C7:06:7B:33:87:6F:15:70:02:C2 Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Certificate serial: 019F0CD116D2B8FCA222C94E7347D6AB9B91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft Manifest number: 072A Signing time: Sun 28 Jun 2026 06:00:57 +0000 Manifest this update: Sun 28 Jun 2026 06:00:57 +0000 Manifest next update: Mon 29 Jun 2026 06:00:57 +0000 Files and hashes: 1: 56Kmc-Cz64ulFDN7LZkLpLy2Uyk.roa (hash: M1LxSBYIiPUs1C9HbHfgJfFfNoWmm4ypO8QoHN7KG7k=) 2: Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa (hash: yA+b+JTKhvzBntnbRz8H3TVoNPvRK8TlZDevDFWYPVU=) 3: Gz_1bJto4c1yEF2Q0CAMMKyQM04.roa (hash: XtyCodmY8171cj6WcCGbm/ih1IwcnbUwaLWquFazgPc=) 4: MHUiyig4q2dE9dcejzFeSdppyes.asa (hash: vsGXprjQpMNWSZX1y2syqnGE09eYObc2WoOHBWaktro=) 5: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: lsSBxmRGchg1LE5xwY2rwFD3zfzZ+hUyeOH6o2VEZHA=) 6: Z1V5lwUUrZll1KmPOgWR8Eag8b4.roa (hash: xUsruNjtSsoiCiUtber3+Ze8kadAYwEP/UxnWmjwonA=) 7: Za3vl_jOJ0pGYslBqqMRsVt7h_s.roa (hash: YOFAZhaKlii8wEnPzm8mR4aNFVEe5XwwG7RLJLy04yA=) 8: klZpNcpkOEquqUsO-jju5O69v1E.roa (hash: jxFHJzSImYx8wBjjvdBncxitlUill6En9a34gPRYQtA=) 9: r7okYEliiPaYGayWJrORm3iOHe0.roa (hash: Ry7pFD2VVeVJdZ2ogqW8WamtLwX0AlhiB6D7DLFsEGw=) 10: y7rxPQXdQykP2HWundiTAhRuuNE.roa (hash: kwq12jPHanXZhrxqm5HaXAm17ns+Kl4rOD8Lx3F1wV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Jun 2026 03:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:0c:d1:16:d2:b8:fc:a2:22:c9:4e:73:47:d6:ab:9b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Validity Not Before: Jun 28 06:00:57 2026 GMT Not After : Jun 29 06:00:57 2026 GMT Subject: CN=770dfd426af343b059bbc7067b33876f157002c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:09:f9:05:8e:7d:05:06:04:d5:06:ec:db:24: d5:12:3e:5c:94:13:13:62:12:fe:0a:32:40:b2:96: ea:bd:3a:b7:0e:4c:2a:1a:b5:ff:79:38:78:ce:4a: 09:7a:5a:5d:19:89:9e:24:3c:56:72:be:1e:8c:a0: f2:96:f0:0b:22:46:47:87:e5:95:cf:d6:d8:26:b2: d7:21:09:ef:b3:c4:b3:2c:c2:b8:87:91:93:d2:7d: 00:83:72:99:2a:43:58:6c:5f:cf:bd:5e:9b:0a:fe: 2a:54:f4:04:f9:0c:9a:f9:c3:81:41:c9:d1:70:ed: a6:21:49:20:30:75:39:2c:2d:48:36:ce:b7:d5:01: 7f:a5:dd:4f:7e:9d:ce:c1:8f:a0:8e:68:df:2e:51: 97:a8:65:66:7a:e1:ba:bd:b7:b8:d3:9c:d9:a7:2c: 26:71:ca:3b:fc:a1:db:a5:81:89:d8:00:22:33:b6: ca:62:a8:e3:6b:d5:2a:2f:6c:c1:a1:3c:e2:5b:9f: d9:0a:c2:f5:f5:9b:52:d4:a3:be:9a:a0:02:58:21: da:99:f9:6e:57:3c:d8:30:48:b6:6d:22:38:bf:05: e3:49:5d:db:12:fe:0e:54:69:32:b2:20:a5:85:df: 2f:89:55:0e:43:de:be:9b:c3:3e:f1:34:3f:75:9e: dc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0D:FD:42:6A:F3:43:B0:59:BB:C7:06:7B:33:87:6F:15:70:02:C2 X509v3 Authority Key Identifier: keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:eb:8a:62:67:dd:27:b7:71:df:76:21:fd:e1:49:87:e8:d4: a2:14:90:4f:1e:64:e5:3d:f2:b4:c9:1c:ee:8e:b4:c3:88:c3: be:53:1a:7a:99:7b:d2:04:7a:68:e7:96:92:c2:c9:5e:ec:cf: 31:5e:56:c1:e5:c9:e9:78:ca:2f:d2:d2:19:23:cc:11:48:ad: 45:c6:d7:2f:12:a5:51:a1:44:cd:22:23:4a:23:ba:12:63:28: 49:76:26:06:d0:ee:de:ef:36:9c:e8:49:7a:e1:82:b6:88:13: d2:b0:5a:f3:95:ed:3a:0e:9e:68:d9:55:bd:d7:76:b6:8b:f5: a2:59:41:c2:4c:43:75:90:5d:b0:46:3d:32:28:5b:67:94:81: 88:2c:9e:2d:9e:68:b8:c7:ef:1f:b7:08:67:90:53:1d:e7:77: ba:28:8e:1c:25:5f:d9:05:56:3b:75:a6:37:f1:cf:1c:96:d1: d1:50:ec:36:44:51:6d:01:38:d7:c7:85:cc:87:b5:d6:12:e2: 60:99:0c:f9:c2:9b:c8:e6:b2:a6:8a:04:6a:07:a4:42:e9:cf: 5a:a4:f3:a7:30:33:40:9c:d4:c3:95:02:38:c7:97:53:a1:30: 82:d7:a1:c9:09:e5:9f:c6:0f:5f:27:d0:2c:fc:34:20:97:99: 0e:1a:93:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8M0RbSuPyiIslOc0fWq5uRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh NTc2ZDEwHhcNMjYwNjI4MDYwMDU3WhcNMjYwNjI5MDYwMDU3WjAzMTEwLwYDVQQD Eyg3NzBkZmQ0MjZhZjM0M2IwNTliYmM3MDY3YjMzODc2ZjE1NzAwMmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgn5BY59BQYE1Qbs2yTVEj5clBMT YhL+CjJAspbqvTq3DkwqGrX/eTh4zkoJelpdGYmeJDxWcr4ejKDylvALIkZHh+WV z9bYJrLXIQnvs8SzLMK4h5GT0n0Ag3KZKkNYbF/PvV6bCv4qVPQE+Qya+cOBQcnR cO2mIUkgMHU5LC1INs631QF/pd1Pfp3OwY+gjmjfLlGXqGVmeuG6vbe405zZpywm cco7/KHbpYGJ2AAiM7bKYqjja9UqL2zBoTziW5/ZCsL19ZtS1KO+mqACWCHamflu VzzYMEi2bSI4vwXjSV3bEv4OVGkysiClhd8viVUOQ96+m8M+8TQ/dZ7c6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcN/UJq80OwWbvHBnszh28VcALCMB8GA1UdIwQY MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt YzgzMDJlODJlYTIyLzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguuKYmfd J7dx33Yh/eFJh+jUohSQTx5k5T3ytMkc7o60w4jDvlMaepl70gR6aOeWksLJXuzP MV5WweXJ6XjKL9LSGSPMEUitRcbXLxKlUaFEzSIjSiO6EmMoSXYmBtDu3u82nOhJ euGCtogT0rBa85XtOg6eaNlVvdd2tov1ollBwkxDdZBdsEY9MihbZ5SBiCyeLZ5o uMfvH7cIZ5BTHed3uiiOHCVf2QVWO3WmN/HPHJbR0VDsNkRRbQE418eFzIe11hLi YJkM+cKbyOaypooEagekQunPWqTzpzAzQJzUw5UCOMeXU6EwgtehyQnln8YPXyfQ LPw0IJeZDhqT5Q== -----END CERTIFICATE-----Generated at Sun Jun 28 14:07:22 2026 by rpki-client