$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: nNeddL8gzoLvOtBUvytDQMAHGQUAguG5+nf+Edupqtg= Subject key identifier: 2D:0D:B7:31:1B:79:E3:7F:C7:12:E4:F0:19:B1:57:42:D1:A3:60:03 Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019D25BABB5935D9420EC236413238458D3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 18A3 Signing time: Wed 25 Mar 2026 16:01:27 +0000 Manifest this update: Wed 25 Mar 2026 16:01:27 +0000 Manifest next update: Thu 26 Mar 2026 16:01:27 +0000 Files and hashes: 1: 4TKo4hpIgeOaUC4msoLXj79brZw.roa (hash: nEKkT5nayoB6X5C9mnM1stExdpwEue5SpN4elNaZnJg=) 2: 5xaOtvdRRcRbWJ7RO2zXZTBbzHo.roa (hash: jVjnXKJCmaM69ihXNF4Fvp6wlNMh49T6+g/No1R59Xw=) 3: HIrm6sRoTksRGtSnmk5VERHaRBI.roa (hash: 5kYVCcz0PvuIcAwPfpXwqKs3H5+iF2EWwV43kAN9Zh8=) 4: Lc1GuVjjApGSdMl5cDRvuL9C63E.roa (hash: j2ZLFcBgyK8+6PD7sIFfqmq1q2LME6wfEuotMkEwgLw=) 5: TBbb52loGUfoyqY4IjSCSNt13F8.roa (hash: 7gXhXE88Dz/LUX1AsHHfFQZ/lUsqoBgQIbupC+dBqCA=) 6: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: 0r0steF5QZnu71X3N0yG28QCB8jM+sOsJLoHiTpsmxU=) 7: bwp5bXEghgHr7EYl0KNAFE7mc20.roa (hash: 7u7Zj5oFaGyCqot4J3MzTBt5vDDbem5Ae4vFNHbppfk=) 8: giCv_eoabdDGNQ76ze62UyFFjv8.roa (hash: CGWpYFajJaXhrm0XFaoEyMaeJXprNddmqt1FMrWwQoA=) 9: jKcEmRIDilRbegMXDvNfe4imvAk.roa (hash: Z/j4k2QApdwbYRv/hX0sWoy2nITxJs8LZ19RK808A/E=) 10: kAV42zy5ItGrvvbv1krId_7HV5A.roa (hash: yhIVNCh19TC+CSc7taPbV70ViFKCn6sP5Y0H3vfQEDc=) 11: nntHTPnh88EzY_e3kkkRQsK5w7M.roa (hash: aZV+AItfqgNQSbmNx8IbkbUfKGk65poULNn0lqPwxbM=) 12: sZoONX-atX44GreUxrMqc6C9sFQ.roa (hash: OXwYQmgqP66zyYHOv7k9Apd3i8xq7uri5BBqPLyj09A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:ba:bb:59:35:d9:42:0e:c2:36:41:32:38:45:8d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Mar 25 16:01:27 2026 GMT Not After : Mar 26 16:01:27 2026 GMT Subject: CN=2d0db7311b79e37fc712e4f019b15742d1a36003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fa:01:1b:48:45:58:f9:06:83:d0:ef:a7:f1: d4:85:b3:20:e9:b0:0d:31:2e:a1:36:19:45:fb:18: 91:ee:5b:04:54:fd:b9:56:60:88:70:7c:3a:11:e5: 4a:fb:66:dc:77:22:95:59:6c:ac:f2:ce:df:d6:45: ce:2e:6a:00:e3:ae:65:31:d0:93:ef:d3:1b:ff:d9: a3:fa:56:35:3c:2d:55:07:71:36:f2:e1:e4:0d:2c: 21:c5:64:76:44:4d:b4:cd:7d:9b:fc:c6:55:95:69: 08:5c:a5:45:a1:1b:6e:98:32:24:3d:4c:43:db:0d: 5b:8a:7d:8f:4e:69:06:54:a8:4b:8f:d9:b7:86:44: 4f:9b:7a:1e:8b:57:22:98:98:dd:47:ca:7f:8c:bd: fc:8d:9c:ed:7d:ba:11:3d:18:e4:c6:7d:1e:cc:83: 7b:d1:37:de:04:be:33:0d:67:e0:25:07:93:98:65: b2:12:68:d1:f7:23:87:22:da:41:5d:0b:e2:25:70: 0c:b3:2b:6c:d8:4d:9b:ea:a2:55:e7:52:0e:8b:01: b2:7d:43:79:15:3e:39:b6:32:b0:57:56:4e:c5:2e: 63:5b:53:be:f1:d0:9e:fb:d5:22:5b:3e:c7:73:9d: 26:29:24:ac:00:dc:be:fc:a1:47:11:70:2d:25:02: db:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0D:B7:31:1B:79:E3:7F:C7:12:E4:F0:19:B1:57:42:D1:A3:60:03 X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4e:bd:6b:61:48:6a:f6:3a:97:fb:4f:a8:cf:dc:c3:5d:c9: bd:52:9a:34:30:05:2b:5b:18:ee:9f:43:f8:a8:0a:f4:05:ad: 47:e1:98:7f:f2:f2:dc:5c:9c:38:b2:7e:62:c2:d7:bc:2e:4f: 58:d8:9a:20:23:04:9f:fa:bf:27:55:fa:72:0c:5b:28:2a:c8: a4:ac:d1:fa:f8:f5:6a:f1:93:a7:f9:a7:01:1d:af:2c:7d:5e: a1:27:da:16:ae:ce:ae:8b:9e:71:2b:3e:de:1e:12:02:3c:a3: cc:cd:3b:4a:5c:89:f9:21:4d:25:1e:f6:1a:a7:55:95:4f:dc: 7c:13:96:60:78:02:5d:ec:9f:d2:71:b9:40:31:42:15:15:55: fb:72:4e:76:8b:47:f9:0a:cd:ae:9b:7c:82:ad:c6:0d:b7:2e: be:ba:60:65:7e:a8:7f:fe:3e:41:92:d3:89:24:f2:4a:24:34: a8:46:c8:4e:8d:b5:45:ad:00:76:31:93:92:51:0c:c8:53:76: e6:2a:23:bf:4a:6c:a8:7e:4c:fa:fc:d0:9b:af:76:55:87:3b: 27:ea:15:26:cc:13:6e:ef:ab:5d:98:6a:53:01:d9:2f:a8:69: a7:b9:f2:7f:9c:95:80:a9:9a:f5:3c:3e:d6:ed:e3:b1:0e:16: d9:72:6b:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lurtZNdlCDsI2QTI4RY0+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjYwMzI1MTYwMTI3WhcNMjYwMzI2MTYwMTI3WjAzMTEwLwYDVQQD EygyZDBkYjczMTFiNzllMzdmYzcxMmU0ZjAxOWIxNTc0MmQxYTM2MDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPoBG0hFWPkGg9Dvp/HUhbMg6bAN MS6hNhlF+xiR7lsEVP25VmCIcHw6EeVK+2bcdyKVWWys8s7f1kXOLmoA465lMdCT 79Mb/9mj+lY1PC1VB3E28uHkDSwhxWR2RE20zX2b/MZVlWkIXKVFoRtumDIkPUxD 2w1bin2PTmkGVKhLj9m3hkRPm3oei1cimJjdR8p/jL38jZztfboRPRjkxn0ezIN7 0TfeBL4zDWfgJQeTmGWyEmjR9yOHItpBXQviJXAMsyts2E2b6qJV51IOiwGyfUN5 FT45tjKwV1ZOxS5jW1O+8dCe+9UiWz7Hc50mKSSsANy+/KFHEXAtJQLbTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0NtzEbeeN/xxLk8BmxV0LRo2ADMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANU69a2FI avY6l/tPqM/cw13JvVKaNDAFK1sY7p9D+KgK9AWtR+GYf/Ly3FycOLJ+YsLXvC5P WNiaICMEn/q/J1X6cgxbKCrIpKzR+vj1avGTp/mnAR2vLH1eoSfaFq7OrouecSs+ 3h4SAjyjzM07SlyJ+SFNJR72GqdVlU/cfBOWYHgCXeyf0nG5QDFCFRVV+3JOdotH +QrNrpt8gq3GDbcuvrpgZX6of/4+QZLTiSTySiQ0qEbITo21Ra0AdjGTklEMyFN2 5iojv0psqH5M+vzQm692VYc7J+oVJswTbu+rXZhqUwHZL6hpp7nyf5yVgKma9Tw+ 1u3jsQ4W2XJrIg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:22:36 2026 by rpki-client