$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: GamL/GlwNTGJJVjf/CiMlLyP+AETlLP2DYCaKd6TwVw= Subject key identifier: 87:F2:3E:E9:1F:C4:7F:2C:2D:32:71:AF:FD:CE:8B:F3:7D:AE:9C:B5 Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 01A0C9D8F95ABE3E451B1ABFEBBCE9931FFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 1A87 Signing time: Tue 22 Sep 2026 16:00:35 +0000 Manifest this update: Tue 22 Sep 2026 16:00:35 +0000 Manifest next update: Wed 23 Sep 2026 16:00:35 +0000 Files and hashes: 1: 0kNz9-JWERt3abzlaJOUE4NTJO4.roa (hash: 67hyPCPSnaEobnQIj1pQT7pIpy62/SUOtS+52kq/tjI=) 2: 4TKo4hpIgeOaUC4msoLXj79brZw.roa (hash: nEKkT5nayoB6X5C9mnM1stExdpwEue5SpN4elNaZnJg=) 3: 7keWNGuJWU9cxRe0HNoW84Ifj9k.roa (hash: sPxLFVFyd1CLo0KSVpgvL78Q3f91cF50L3Qj8oDKbuo=) 4: HIrm6sRoTksRGtSnmk5VERHaRBI.roa (hash: 5kYVCcz0PvuIcAwPfpXwqKs3H5+iF2EWwV43kAN9Zh8=) 5: Lc1GuVjjApGSdMl5cDRvuL9C63E.roa (hash: j2ZLFcBgyK8+6PD7sIFfqmq1q2LME6wfEuotMkEwgLw=) 6: TBbb52loGUfoyqY4IjSCSNt13F8.roa (hash: 7gXhXE88Dz/LUX1AsHHfFQZ/lUsqoBgQIbupC+dBqCA=) 7: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: 2L7nG0IlZqS2KHXPLErSKZbLTMt/+tXr5MSUee2Qphw=) 8: bwp5bXEghgHr7EYl0KNAFE7mc20.roa (hash: 7u7Zj5oFaGyCqot4J3MzTBt5vDDbem5Ae4vFNHbppfk=) 9: jKcEmRIDilRbegMXDvNfe4imvAk.roa (hash: Z/j4k2QApdwbYRv/hX0sWoy2nITxJs8LZ19RK808A/E=) 10: kAV42zy5ItGrvvbv1krId_7HV5A.roa (hash: yhIVNCh19TC+CSc7taPbV70ViFKCn6sP5Y0H3vfQEDc=) 11: nntHTPnh88EzY_e3kkkRQsK5w7M.roa (hash: aZV+AItfqgNQSbmNx8IbkbUfKGk65poULNn0lqPwxbM=) 12: sZoONX-atX44GreUxrMqc6C9sFQ.roa (hash: OXwYQmgqP66zyYHOv7k9Apd3i8xq7uri5BBqPLyj09A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c9:d8:f9:5a:be:3e:45:1b:1a:bf:eb:bc:e9:93:1f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Sep 22 16:00:35 2026 GMT Not After : Sep 23 16:00:35 2026 GMT Subject: CN=87f23ee91fc47f2c2d3271affdce8bf37dae9cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:da:c3:84:5a:17:49:12:d5:9a:cf:af:a4: 5e:3a:59:03:54:2b:57:27:a2:3d:95:81:d2:9e:05: 1c:2d:ec:48:03:38:35:48:4c:bd:11:1b:83:a8:b9: 8f:ba:7a:7f:5b:e2:08:0f:81:8c:5c:5d:f2:e9:ab: 2b:cc:fe:ff:a9:44:08:57:5a:a1:e7:30:77:36:1e: 27:59:f7:38:18:db:7f:20:76:61:64:03:ac:f1:d4: 62:56:8e:83:1b:75:5a:1d:29:76:72:00:23:17:32: dd:a6:cb:c5:3a:c2:44:ce:19:25:4a:c8:2b:99:7b: d7:c5:69:ad:e2:59:c7:d7:b5:e7:a1:5e:9b:04:5a: 27:89:e3:b4:7a:9d:9f:10:7e:6f:38:aa:35:7c:e1: 39:3e:2e:29:13:72:34:9d:c9:e8:04:f4:a2:06:76: 41:de:55:84:7a:68:70:4d:b8:a8:33:62:31:50:ec: 90:a6:bb:a1:e5:f5:6f:f1:9a:13:9c:c3:06:bc:e6: 18:ac:ba:75:95:78:a6:db:aa:7f:fd:de:d8:2b:41: 51:92:f2:de:40:e1:2d:20:c1:f5:40:bd:b6:4c:42: a1:9f:20:a1:48:65:86:88:47:ff:55:bc:41:c3:62: 7d:3c:f3:9c:d5:fa:3e:d3:66:c2:75:9c:17:03:95: 7b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F2:3E:E9:1F:C4:7F:2C:2D:32:71:AF:FD:CE:8B:F3:7D:AE:9C:B5 X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:19:59:16:89:87:a8:95:89:f4:19:21:3d:cd:db:da:e3:0c: 54:0d:71:ce:da:8a:25:39:fc:b1:11:cc:2b:94:e7:50:ef:60: ce:ad:de:af:cf:9f:90:c7:cd:50:53:5f:45:d5:89:41:49:97: ac:ba:a9:66:62:05:4c:6b:54:44:4d:30:a2:dc:9f:39:76:82: 3c:60:a8:3f:91:29:fd:4b:d4:11:47:d9:18:92:ac:8e:02:2d: 52:a1:af:0f:dc:7a:92:56:4f:d2:0c:c5:a0:db:c2:7c:cd:6a: a8:05:75:67:d3:b4:fe:1a:38:59:42:86:2f:55:2b:64:40:5f: 82:19:fc:23:03:77:c2:a1:c8:c9:18:1d:b4:63:70:87:e7:2e: a2:a5:fe:52:b7:f1:34:e6:23:28:99:b1:29:04:03:a2:1b:9e: 78:5f:b2:19:d4:f1:a7:36:d7:1f:b0:d2:59:c2:ec:69:5b:c4: d7:68:b2:5c:4b:85:e2:c0:d8:92:e7:81:ba:ab:09:9e:0d:0a: 03:f1:3f:a9:fa:be:74:0c:2d:e6:7c:03:fc:0f:22:72:8a:49: 35:cc:2f:0e:ae:e2:94:9f:c6:88:e9:42:79:f8:57:a0:aa:65: 88:6e:0f:a7:34:80:29:b0:1f:2a:88:86:de:c8:58:cc:7f:ef: cc:53:96:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDJ2Plavj5FGxq/67zpkx/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjYwOTIyMTYwMDM1WhcNMjYwOTIzMTYwMDM1WjAzMTEwLwYDVQQD Eyg4N2YyM2VlOTFmYzQ3ZjJjMmQzMjcxYWZmZGNlOGJmMzdkYWU5Y2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXXaw4RaF0kS1ZrPr6ReOlkDVCtX J6I9lYHSngUcLexIAzg1SEy9ERuDqLmPunp/W+IID4GMXF3y6asrzP7/qUQIV1qh 5zB3Nh4nWfc4GNt/IHZhZAOs8dRiVo6DG3VaHSl2cgAjFzLdpsvFOsJEzhklSsgr mXvXxWmt4lnH17XnoV6bBFonieO0ep2fEH5vOKo1fOE5Pi4pE3I0ncnoBPSiBnZB 3lWEemhwTbioM2IxUOyQpruh5fVv8ZoTnMMGvOYYrLp1lXim26p//d7YK0FRkvLe QOEtIMH1QL22TEKhnyChSGWGiEf/VbxBw2J9PPOc1fo+02bCdZwXA5V7EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfyPukfxH8sLTJxr/3Oi/N9rpy1MB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORlZFomH qJWJ9BkhPc3b2uMMVA1xztqKJTn8sRHMK5TnUO9gzq3er8+fkMfNUFNfRdWJQUmX rLqpZmIFTGtURE0wotyfOXaCPGCoP5Ep/UvUEUfZGJKsjgItUqGvD9x6klZP0gzF oNvCfM1qqAV1Z9O0/ho4WUKGL1UrZEBfghn8IwN3wqHIyRgdtGNwh+cuoqX+Urfx NOYjKJmxKQQDohueeF+yGdTxpzbXH7DSWcLsaVvE12iyXEuF4sDYkueBuqsJng0K A/E/qfq+dAwt5nwD/A8icopJNcwvDq7ilJ/GiOlCefhXoKpliG4PpzSAKbAfKoiG 3shYzH/vzFOWIg== -----END CERTIFICATE-----Generated at Tue Sep 22 22:43:12 2026 by rpki-client