$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft File: xCzMCbGKriXcamxXk_m5IMj2oZA.mft (raw, json) Hash identifier: Ug1QeSzpB1XCc/aJD3lpQIyQVKilyJd6srq5XM1gnPg= Subject key identifier: 46:ED:FC:9E:4D:D4:68:F8:BE:4C:99:CA:3E:73:82:53:C8:86:F7:A6 Authority key identifier: C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90 Certificate issuer: /CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190 Certificate serial: 01A06D94C4BE4D7D2BB6429474728DEC4A9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft Manifest number: B2 Signing time: Fri 04 Sep 2026 18:01:01 +0000 Manifest this update: Fri 04 Sep 2026 18:01:01 +0000 Manifest next update: Sat 05 Sep 2026 18:01:01 +0000 Files and hashes: 1: 0EqH53VKbjCBwptRrMrgE491HhQ.roa (hash: hlOlUUZZiEuddmv9KYC5nE6Vh5F6OtggwbOcesZb7ew=) 2: 5o0i3iMYhKiDSsjJw2IO_CJCyRI.roa (hash: cLWDRlb5at0aBAH980evnabI9atanrKNEOAJh0qjBjM=) 3: 9_lEI-YO-xsNbdJzpz_Zj20rYco.roa (hash: oMnrwxFfNZp1LGwhuhUfXcc2UVGqfAbo9ZJKmysRQV0=) 4: E8IDfbPJ-ASUqOO7Y_PebCnfcG8.roa (hash: Y97cV5mLD6OdoMRNkkIiqZ3KZIjQpuOlelMU9OFPxmA=) 5: H9L6_6x2hId55TmALa95rri1bEE.roa (hash: 9r2y4hipyP45iIbJJm1kWRG0SgwtjIdEoYjDvubCc0w=) 6: YpPmYf6zgICwfjz8NuAopnzNieM.roa (hash: Wfroa7HPPkCm63Ywbw+5nQxutBW2wjmxATyJS+4COgo=) 7: Z5KCSZVXGCrp9dNdx67dsrIqMQs.roa (hash: OByLdhjOZ0YIarl8arWqnOnJBvbgrJT1GS2f+GSHfp4=) 8: c4_Bhf2_gp-Hy5KN9JDfGFYxZ78.roa (hash: 1JGwg63mXrikqzD+c6YLgxnjzd6dRLDZcHOVSYL/I9U=) 9: f2uUPGNXC_pxdPQmPP-DpsHFtOQ.roa (hash: mFFk7nFev+G1oGZg2IbBid7J61ARFJ8OWPLRJsrECIA=) 10: w9Z_kQBpH-mdA7iwzKTWMENR2To.roa (hash: rlA3z5HMnFFWQ/5n7/7EQ6au3c+5eK2aDkiGB8PIifk=) 11: xCzMCbGKriXcamxXk_m5IMj2oZA.crl (hash: nVf91UOV6zBp6XO2tUJdXg0boCRvd8k4m8gSLkr1gQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 18:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6d:94:c4:be:4d:7d:2b:b6:42:94:74:72:8d:ec:4a:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190 Validity Not Before: Sep 4 18:01:01 2026 GMT Not After : Sep 5 18:01:01 2026 GMT Subject: CN=46edfc9e4dd468f8be4c99ca3e738253c886f7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:7d:cf:90:36:9a:dc:9a:81:2d:27:fb:6d: 3f:1e:f1:dd:ba:46:8a:b5:97:ba:a5:51:fd:9e:f5: 9c:94:56:26:b9:f1:08:35:19:fe:55:6c:4b:94:67: 6d:17:5f:4c:a4:78:30:5c:ab:30:5f:12:aa:2c:ab: 33:58:ad:c8:ef:e7:b3:b2:27:cd:11:8c:79:c4:c5: e7:d1:31:61:64:0a:d9:06:72:53:36:5a:39:7b:91: 55:b8:e7:d7:93:c1:e2:3f:ab:d0:c5:2a:51:65:cd: f6:52:f8:03:2b:fd:5d:d4:d4:26:2b:31:11:93:4f: b8:5a:82:57:0c:3d:fe:86:a5:6a:63:37:2d:cc:05: 21:71:28:65:38:b2:05:b0:a0:ed:bc:ae:fa:d8:35: a9:6e:c7:85:f4:f6:9c:66:8f:d7:c7:d5:2e:c8:f6: 15:88:98:32:06:f5:dd:2a:3b:9b:1f:0d:00:ba:7a: 6d:dc:69:c1:f2:53:3b:0c:39:91:c8:9d:5c:44:66: d3:e6:f0:bc:96:ea:ef:4e:19:f6:d5:b9:fc:73:d6: 6c:54:17:37:07:88:e1:68:bb:da:8b:21:86:a6:af: 28:08:2c:7d:ef:d4:16:a6:18:e4:0d:8c:62:cf:31: d0:92:89:e6:4a:9c:b7:60:f4:1b:26:76:29:88:cd: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:ED:FC:9E:4D:D4:68:F8:BE:4C:99:CA:3E:73:82:53:C8:86:F7:A6 X509v3 Authority Key Identifier: keyid:C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:22:e5:22:a3:c7:bb:2b:1c:29:9c:26:40:03:86:6d:78:b4: c2:79:6d:3c:14:fc:3e:e8:81:a3:2d:5c:72:ab:db:ca:c1:1a: 49:93:a5:c2:b1:dd:0c:eb:44:76:c8:53:52:b0:7f:d8:5c:84: 8b:54:c0:83:ef:16:4d:98:24:5a:33:97:4b:f2:38:6b:2b:e5: da:95:78:a1:dd:e2:ec:5d:61:d2:25:3e:37:98:de:bd:e6:ff: 6e:d5:2c:f1:da:6c:8d:2f:90:94:6f:3f:d9:14:9a:6f:ca:b2: 4e:21:3b:ca:14:9c:83:cf:d8:99:e3:c1:c2:a6:79:31:9c:3f: 86:0f:e0:10:a9:0f:7c:95:b1:87:18:3f:35:75:79:fe:8d:a6: f9:26:9f:f5:b0:89:32:09:72:55:20:4b:2b:46:ea:44:5b:aa: 37:bc:87:e1:b5:a8:ee:cb:20:8f:f0:79:12:0b:db:71:63:70: 49:16:cb:17:b7:5b:dd:3a:83:64:97:25:e4:27:26:e3:d3:eb: 71:cb:88:a2:57:19:03:99:74:24:a2:79:88:0d:a9:32:75:d2: bb:8c:20:d9:fc:8a:2e:a4:af:67:36:51:72:4b:1d:f1:8b:5e: 13:c7:2f:24:df:ad:d5:aa:62:a5:69:9b:ef:d3:3c:1c:b2:bc: 09:1f:04:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBtlMS+TX0rtkKUdHKN7EqcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MmNjYzA5YjE4YWFlMjVkYzZhNmM1NzkzZjliOTIwYzhm NmExOTAwHhcNMjYwOTA0MTgwMTAxWhcNMjYwOTA1MTgwMTAxWjAzMTEwLwYDVQQD Eyg0NmVkZmM5ZTRkZDQ2OGY4YmU0Yzk5Y2EzZTczODI1M2M4ODZmN2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBR9z5A2mtyagS0n+20/HvHdukaK tZe6pVH9nvWclFYmufEINRn+VWxLlGdtF19MpHgwXKswXxKqLKszWK3I7+ezsifN EYx5xMXn0TFhZArZBnJTNlo5e5FVuOfXk8HiP6vQxSpRZc32UvgDK/1d1NQmKzER k0+4WoJXDD3+hqVqYzctzAUhcShlOLIFsKDtvK762DWpbseF9PacZo/Xx9UuyPYV iJgyBvXdKjubHw0Aunpt3GnB8lM7DDmRyJ1cRGbT5vC8lurvThn21bn8c9ZsVBc3 B4jhaLvaiyGGpq8oCCx979QWphjkDYxizzHQkonmSpy3YPQbJnYpiM27CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbt/J5N1Gj4vkyZyj5zglPIhvemMB8GA1UdIwQY MBaAFMQszAmxiq4l3GpsV5P5uSDI9qGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSLlIqPH uyscKZwmQAOGbXi0wnltPBT8PuiBoy1ccqvbysEaSZOlwrHdDOtEdshTUrB/2FyE i1TAg+8WTZgkWjOXS/I4ayvl2pV4od3i7F1h0iU+N5jeveb/btUs8dpsjS+QlG8/ 2RSab8qyTiE7yhScg8/YmePBwqZ5MZw/hg/gEKkPfJWxhxg/NXV5/o2m+Saf9bCJ MglyVSBLK0bqRFuqN7yH4bWo7ssgj/B5EgvbcWNwSRbLF7db3TqDZJcl5Ccm49Pr ccuIolcZA5l0JKJ5iA2pMnXSu4wg2fyKLqSvZzZRcksd8YteE8cvJN+t1apipWmb 79M8HLK8CR8E4w== -----END CERTIFICATE-----Generated at Sat Sep 5 03:02:53 2026 by rpki-client