$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: kSnw/jMPwaOKWZ2hbCt2QdFjYptHLiz9dripnXOHjRk= Subject key identifier: 42:07:5A:AC:A5:60:DD:C0:96:B1:66:40:AF:0E:72:6A:CC:89:44:53 Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019E1F109535009872E0CBA36B4B506B38E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 14C8 Signing time: Wed 13 May 2026 02:00:40 +0000 Manifest this update: Wed 13 May 2026 02:00:40 +0000 Manifest next update: Thu 14 May 2026 02:00:40 +0000 Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=) 2: 18Szc_NOHV7yuL-RPwFFVIdly00.roa (hash: ld/2o13pONoCjqn2WT6haOPdokqq4iF1vU3cu4RZBY4=) 3: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=) 4: 7lXBjbngAvV9gHuyOcicow6UdVo.roa (hash: BQCTu2EQ42JTon6DFlUxY4dueGNRFijDWqRTzuT0vfE=) 5: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=) 6: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=) 7: _XQtBPNeW_iuy40orAGtRGhMTSk.roa (hash: LAWDSlOuHdvhK5NcbfNOkabxOshrkg3NCFkUAyd9zsY=) 8: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=) 9: c0DX6GY3TX9xmWCZpKdJEnw99zA.roa (hash: +8IkCXO7va3zumQ/zB3m5nLEyKPvgB/ye9epdlLzV9o=) 10: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=) 11: oSKHmVNGFh3OpJke3WnxdXvCjgc.roa (hash: Jbe/LRuw53xo+FdeFOv1OWeqAR3sX4SCDTXs5bJaUEE=) 12: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: 4cOlJsItvpkUyudNK5wxj1OYZMqz1WxzdYYK8lR5OvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:10:95:35:00:98:72:e0:cb:a3:6b:4b:50:6b:38:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: May 13 02:00:40 2026 GMT Not After : May 14 02:00:40 2026 GMT Subject: CN=42075aaca560ddc096b16640af0e726acc894453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:13:87:95:73:ef:89:7d:01:cb:cf:6b:8f:87: 95:a0:e0:d9:82:aa:67:fa:35:57:05:9d:1b:0a:ff: a5:07:61:8d:82:c1:1a:f4:d2:ff:4d:75:63:ec:7b: 46:c4:70:48:f9:ac:02:72:01:a4:28:ce:ac:22:5a: d1:3d:10:e8:25:5a:17:af:aa:2e:c0:52:7b:ef:be: 61:e4:b5:07:97:95:7e:60:4e:ce:96:32:77:c2:35: 7a:45:f8:59:de:88:6e:a6:02:06:a4:27:8c:6d:94: c5:54:47:e8:b9:cd:88:b4:f4:fe:67:b3:3e:6d:6f: ee:80:2c:41:50:c6:a4:3e:de:88:6f:a4:74:62:ae: a9:8c:44:fb:1e:df:e4:21:9c:16:18:fc:87:c6:bb: d8:9e:a7:79:41:fb:3d:b5:9a:b6:45:c8:34:56:73: ee:38:e9:3f:d9:7c:70:1c:4f:c0:4e:06:44:e8:50: 9a:5b:41:71:8f:82:44:2d:e2:78:be:98:17:ab:02: 75:4c:3a:5d:2f:e4:50:2d:a7:b3:8b:3f:2f:9d:81: 39:2e:eb:fe:8f:96:c9:dc:40:37:4c:28:74:0e:47: 26:b3:79:40:c0:a9:ec:4a:47:cb:bb:21:62:cc:46: 1f:03:84:1e:c7:12:a0:4b:29:fa:4b:e3:f5:2a:a5: 35:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:07:5A:AC:A5:60:DD:C0:96:B1:66:40:AF:0E:72:6A:CC:89:44:53 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6a:d1:88:a2:7e:a9:b2:66:ef:af:06:e2:d4:b3:28:db:05: 67:ee:ea:5e:e3:fb:e2:ea:46:e3:f2:2d:db:e1:b6:eb:01:65: 41:88:10:d4:30:42:b7:87:6b:d1:ce:f8:a9:c8:2a:8e:43:69: 16:f1:0e:d5:5d:14:91:15:c4:cf:dd:bf:b6:a8:e7:59:fb:29: be:57:03:df:59:94:ec:f0:05:81:f4:23:f1:99:cb:27:8a:ad: b6:ec:a4:67:6b:b5:62:1e:25:54:e0:e5:91:e0:b0:a1:8e:6a: ee:9c:ae:11:5c:77:03:9f:44:a3:05:ac:b1:2a:4f:3d:b5:01: d9:d4:34:8a:1a:16:d7:e2:8d:ef:0c:b8:67:69:f1:e3:f1:b5: 0e:50:15:0f:bc:66:f4:79:ba:0a:40:a8:f8:4b:12:cc:b8:9e: fc:43:92:2d:5d:9b:d8:a0:3c:a1:10:e8:b9:6e:f0:77:37:a7: 8d:95:d1:4b:62:e7:7b:4e:0d:14:a1:ac:e9:c3:60:b0:e9:3b: 99:58:ea:37:6d:2c:96:6e:ce:c4:86:0a:13:86:24:f2:48:e8: d2:3e:63:b3:96:eb:ce:02:ed:d9:db:48:de:3b:d5:10:73:87: b8:f1:93:bb:11:16:45:66:70:10:2a:0a:14:06:ec:4a:a2:3a: 8c:59:70:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4fEJU1AJhy4Muja0tQazjlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwNTEzMDIwMDQwWhcNMjYwNTE0MDIwMDQwWjAzMTEwLwYDVQQD Eyg0MjA3NWFhY2E1NjBkZGMwOTZiMTY2NDBhZjBlNzI2YWNjODk0NDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhOHlXPviX0By89rj4eVoODZgqpn +jVXBZ0bCv+lB2GNgsEa9NL/TXVj7HtGxHBI+awCcgGkKM6sIlrRPRDoJVoXr6ou wFJ7775h5LUHl5V+YE7OljJ3wjV6RfhZ3ohupgIGpCeMbZTFVEfouc2ItPT+Z7M+ bW/ugCxBUMakPt6Ib6R0Yq6pjET7Ht/kIZwWGPyHxrvYnqd5Qfs9tZq2Rcg0VnPu OOk/2XxwHE/ATgZE6FCaW0Fxj4JELeJ4vpgXqwJ1TDpdL+RQLaeziz8vnYE5Luv+ j5bJ3EA3TCh0Dkcms3lAwKnsSkfLuyFizEYfA4QexxKgSyn6S+P1KqU1SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIHWqylYN3AlrFmQK8OcmrMiURTMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWrRiKJ+ qbJm768G4tSzKNsFZ+7qXuP74upG4/It2+G26wFlQYgQ1DBCt4dr0c74qcgqjkNp FvEO1V0UkRXEz92/tqjnWfspvlcD31mU7PAFgfQj8ZnLJ4qttuykZ2u1Yh4lVODl keCwoY5q7pyuEVx3A59EowWssSpPPbUB2dQ0ihoW1+KN7wy4Z2nx4/G1DlAVD7xm 9Hm6CkCo+EsSzLie/EOSLV2b2KA8oRDouW7wdzenjZXRS2Lne04NFKGs6cNgsOk7 mVjqN20slm7OxIYKE4Yk8kjo0j5js5brzgLt2dtI3jvVEHOHuPGTuxEWRWZwECoK FAbsSqI6jFlwnA== -----END CERTIFICATE-----Generated at Wed May 13 08:55:07 2026 by rpki-client