$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: +60+AP2604hliUCNs7ypyBQ8ABthTazm2JjJ8o5oS7g= Subject key identifier: 14:2D:CD:C8:E0:B7:6E:E0:33:82:16:E2:17:6D:D7:D5:3D:91:33:C3 Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019E1F7E88A5AF913DC09B4D133B701D107C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 1925 Signing time: Wed 13 May 2026 04:00:46 +0000 Manifest this update: Wed 13 May 2026 04:00:46 +0000 Manifest next update: Thu 14 May 2026 04:00:46 +0000 Files and hashes: 1: 0kNz9-JWERt3abzlaJOUE4NTJO4.roa (hash: 67hyPCPSnaEobnQIj1pQT7pIpy62/SUOtS+52kq/tjI=) 2: 4TKo4hpIgeOaUC4msoLXj79brZw.roa (hash: nEKkT5nayoB6X5C9mnM1stExdpwEue5SpN4elNaZnJg=) 3: HIrm6sRoTksRGtSnmk5VERHaRBI.roa (hash: 5kYVCcz0PvuIcAwPfpXwqKs3H5+iF2EWwV43kAN9Zh8=) 4: Lc1GuVjjApGSdMl5cDRvuL9C63E.roa (hash: j2ZLFcBgyK8+6PD7sIFfqmq1q2LME6wfEuotMkEwgLw=) 5: TBbb52loGUfoyqY4IjSCSNt13F8.roa (hash: 7gXhXE88Dz/LUX1AsHHfFQZ/lUsqoBgQIbupC+dBqCA=) 6: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: Nua6IN0nA0f6f4P0DvzUbkPrLnj2C6S+YvL+yh7v/64=) 7: bwp5bXEghgHr7EYl0KNAFE7mc20.roa (hash: 7u7Zj5oFaGyCqot4J3MzTBt5vDDbem5Ae4vFNHbppfk=) 8: jKcEmRIDilRbegMXDvNfe4imvAk.roa (hash: Z/j4k2QApdwbYRv/hX0sWoy2nITxJs8LZ19RK808A/E=) 9: kAV42zy5ItGrvvbv1krId_7HV5A.roa (hash: yhIVNCh19TC+CSc7taPbV70ViFKCn6sP5Y0H3vfQEDc=) 10: nntHTPnh88EzY_e3kkkRQsK5w7M.roa (hash: aZV+AItfqgNQSbmNx8IbkbUfKGk65poULNn0lqPwxbM=) 11: sZoONX-atX44GreUxrMqc6C9sFQ.roa (hash: OXwYQmgqP66zyYHOv7k9Apd3i8xq7uri5BBqPLyj09A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 04:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:7e:88:a5:af:91:3d:c0:9b:4d:13:3b:70:1d:10:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: May 13 04:00:46 2026 GMT Not After : May 14 04:00:46 2026 GMT Subject: CN=142dcdc8e0b76ee0338216e2176dd7d53d9133c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:43:a0:a3:74:25:09:c6:1b:5e:88:2b:07: f6:01:54:1e:87:76:81:73:a2:5f:87:3a:1d:21:94: 07:7d:8b:5a:45:8b:42:f6:55:61:f0:d2:52:e7:99: 88:bf:0b:a1:c6:2d:34:fa:72:49:69:f3:97:18:87: 07:47:11:57:2e:2b:f1:47:15:fb:ed:33:ee:a6:8e: 31:00:be:8f:54:da:c1:c3:62:e1:91:2a:a5:10:3e: 82:40:11:28:38:e9:c1:a7:f1:97:cf:e7:32:05:9b: b6:65:3e:cf:dc:d7:4d:29:b7:48:16:b4:27:aa:21: a1:01:18:fc:db:d6:9d:ff:1a:19:93:97:d9:19:6d: 38:ab:34:6f:15:e1:93:14:5c:c0:e4:40:ba:b2:43: ce:87:98:40:af:cd:36:b6:b7:3e:e4:0b:72:86:3f: 03:88:ee:4c:50:ba:88:8f:47:7d:8d:8b:82:6b:fe: 84:9c:f4:6a:57:76:de:31:17:5f:a4:c8:58:31:4b: 52:04:71:12:ac:6b:01:d6:48:62:eb:e8:ef:2f:06: 75:45:21:99:4d:c4:0f:08:e9:76:a4:42:f4:67:44: d5:48:d6:11:9d:9c:9a:f9:4b:be:ea:13:f2:58:29: b1:e5:5d:d0:85:48:e6:a1:3f:21:f7:32:9f:8c:ae: 29:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2D:CD:C8:E0:B7:6E:E0:33:82:16:E2:17:6D:D7:D5:3D:91:33:C3 X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3e:31:16:0b:f4:24:45:ca:0b:27:c7:71:ed:03:41:a7:5c: 30:78:4f:04:7c:fc:22:3c:58:2b:38:0a:64:53:a9:c1:5f:ac: 3f:35:fa:e7:63:94:a1:3b:ca:61:9b:b4:83:b5:48:ab:82:e9: 86:fa:d7:05:9c:24:dd:61:7c:09:b3:bf:54:e2:da:8d:3a:b4: c7:4a:56:3b:ab:3b:5c:af:4f:71:cc:de:05:8d:3c:3b:64:aa: 54:49:d8:16:80:e2:79:7b:5d:71:42:7e:39:03:02:a6:9c:7e: c4:4d:bc:3c:03:66:c7:41:c8:ab:a1:9a:57:d9:09:33:c6:19: e1:dd:0b:c5:cd:65:21:56:bc:b5:e6:af:57:bc:91:65:71:eb: 28:18:df:02:b8:e6:eb:2c:c8:78:49:51:b8:4a:b9:e5:94:7e: 57:61:50:a7:3f:fc:3e:de:98:50:41:1c:2f:09:ff:4e:67:04: 41:4a:1e:fb:d4:7b:08:87:85:04:25:dd:c7:a3:90:01:84:f7: 30:f2:84:a4:cf:46:d6:59:6c:36:c6:44:10:77:a4:94:ff:64: bf:d2:1f:16:39:5c:04:c5:b5:43:51:1c:e8:d7:c9:d3:9b:50: 13:e5:e3:24:ac:1e:1c:03:d5:87:ac:93:09:c9:b7:15:54:a6: c9:6f:eb:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ffoilr5E9wJtNEztwHRB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjYwNTEzMDQwMDQ2WhcNMjYwNTE0MDQwMDQ2WjAzMTEwLwYDVQQD EygxNDJkY2RjOGUwYjc2ZWUwMzM4MjE2ZTIxNzZkZDdkNTNkOTEzM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PBDoKN0JQnGG16IKwf2AVQeh3aB c6JfhzodIZQHfYtaRYtC9lVh8NJS55mIvwuhxi00+nJJafOXGIcHRxFXLivxRxX7 7TPupo4xAL6PVNrBw2LhkSqlED6CQBEoOOnBp/GXz+cyBZu2ZT7P3NdNKbdIFrQn qiGhARj829ad/xoZk5fZGW04qzRvFeGTFFzA5EC6skPOh5hAr802trc+5Atyhj8D iO5MULqIj0d9jYuCa/6EnPRqV3beMRdfpMhYMUtSBHESrGsB1khi6+jvLwZ1RSGZ TcQPCOl2pEL0Z0TVSNYRnZya+Uu+6hPyWCmx5V3QhUjmoT8h9zKfjK4pSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQtzcjgt27gM4IW4hdt19U9kTPDMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGT4xFgv0 JEXKCyfHce0DQadcMHhPBHz8IjxYKzgKZFOpwV+sPzX652OUoTvKYZu0g7VIq4Lp hvrXBZwk3WF8CbO/VOLajTq0x0pWO6s7XK9PcczeBY08O2SqVEnYFoDieXtdcUJ+ OQMCppx+xE28PANmx0HIq6GaV9kJM8YZ4d0Lxc1lIVa8teavV7yRZXHrKBjfArjm 6yzIeElRuEq55ZR+V2FQpz/8Pt6YUEEcLwn/TmcEQUoe+9R7CIeFBCXdx6OQAYT3 MPKEpM9G1llsNsZEEHeklP9kv9IfFjlcBMW1Q1Ec6NfJ05tQE+XjJKweHAPVh6yT Ccm3FVSmyW/rEg== -----END CERTIFICATE-----Generated at Wed May 13 12:26:27 2026 by rpki-client