$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: 0Ic/iojqI4biBriSJ2piJJNjQFQJFyKAAjinOUhwse0= Subject key identifier: 44:BA:F8:58:FA:85:2C:29:F8:D2:2E:58:AA:F5:DB:97:17:34:19:5E Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019E1DFEAF4CE121F7D1F9C87CFB0CCBB04F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 1924 Signing time: Tue 12 May 2026 21:01:30 +0000 Manifest this update: Tue 12 May 2026 21:01:30 +0000 Manifest next update: Wed 13 May 2026 21:01:30 +0000 Files and hashes: 1: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (hash: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q=) 2: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (hash: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ=) 3: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (hash: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo=) 4: 5LAgRSl9fFhy_RrY6Y4h_ItS9pw.roa (hash: 9uPoQd7e20GSb4ZNenQ4RHHLA/wWGAuknlkGqZ4eRPg=) 5: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (hash: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI=) 6: AyulhXyOhP2buicHYb4PF6awarA.roa (hash: o1jB5gIRXTUngRxBAxg2DTNhVQcSy127ziFioxQ1PVM=) 7: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (hash: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE=) 8: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (hash: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc=) 9: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (hash: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8=) 10: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (hash: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM=) 11: Mdbc7JKGBe-JSvKB28h6Q_ApLiU.roa (hash: ixbEaYXOURIbpbdcksYTq3QhDvoC08h0/HFaZkHONBA=) 12: N7ElhbVyCmGSjUSh1AxjT63WzYw.roa (hash: W3FJJT1fp/7XCFXKVQfC6wjn61A9LFjVkKvFsdNlvHw=) 13: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (hash: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0=) 14: PoFBrEh2SMRPYVmU_szomrEefgE.roa (hash: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc=) 15: V1PdVFoshW1ar5HpIYyNCl-wxZg.roa (hash: 8JNuhL/a0qXG5i850tam3mN3diEt2c5ox0iX3jf8huA=) 16: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (hash: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8=) 17: XSRfDKJB1vWxhWr5_nnhi8kY_Ro.roa (hash: vbcx865viaCEEplLJzs5WTHypNQpAu7A3ivTLIG9UFw=) 18: XUBXC0DROf8_aCxS_neH8O6J0e4.roa (hash: /C5B3L/2hO5EvNBmbIy9wgx/1sbjdRkGMDg2OXb+bOM=) 19: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (hash: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8=) 20: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (hash: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o=) 21: _X1aB1grD4SEnY0N9BS0XD2icYQ.roa (hash: 8ohwVFQyC0+8LBOZ3vBnB2ZQPF3XbCAWhyBCtY+3UwE=) 22: bNLCkSinXiYwmDqOGOa8s-V6Q3Q.roa (hash: haFcBNVZwKKJJG8if5wj//WNo7O84ixbtXTuzJ5h90o=) 23: da2QfG6A8HePFVhHUZPAybEpN68.roa (hash: TKp47i1BUIPNcl+xrP72HbJ0DwhwhsJyAX+gufSHOcQ=) 24: efwlLLHqb-bdy8PqwUcM4smevIk.roa (hash: dziFMotDF0gnY460BoEIQb6O67mGB4C/hN9W6acAk18=) 25: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (hash: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc=) 26: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (hash: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg=) 27: i39T_sxoePa7FkwXjI2KlpcV9nQ.roa (hash: xjv51Wh2+JZgrJ+iRtvSyXOWKDVobdGo9gsPb02h2X4=) 28: iqnR0QT5Gp1ysbpIbYG1Jx1Dr-A.roa (hash: uT81Q71i5BXjU2YhhS0n8jdqFaplDdaFrFqRykt33OM=) 29: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (hash: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo=) 30: lcn7Wtg6ulEkp1Lc7XKZFro-mds.roa (hash: QCmVx87F8wdoRkStlUnKFmP4R7y7QH8VIpoG6J8hkG4=) 31: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (hash: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw=) 32: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (hash: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ=) 33: r5EQFD61hWzkJjB7v7Y30uUhewc.roa (hash: 6ypgI1gg3G9f0KTPTcY2gQYHH5FXI074w6M2BK68aUs=) 34: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (hash: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM=) 35: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (hash: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg=) 36: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: hXkuGqqsUvanYYUI5E49Le3WS7u//pgzmUFkX7HWXXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:af:4c:e1:21:f7:d1:f9:c8:7c:fb:0c:cb:b0:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: May 12 21:01:30 2026 GMT Not After : May 13 21:01:30 2026 GMT Subject: CN=44baf858fa852c29f8d22e58aaf5db971734195e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:80:bc:c9:05:c8:17:9f:75:d2:f2:fe:c2:c1: 21:8e:b8:2b:eb:7a:8d:32:e8:e8:ca:61:67:47:0d: fe:0f:64:dd:67:37:2d:c2:f6:21:c1:b6:5d:c1:b1: 51:20:31:a4:ab:a4:24:e6:9b:bc:29:90:93:ae:a4: ee:e7:e3:94:fd:dc:d4:6e:90:c1:99:27:59:07:48: b3:90:a6:a4:32:a5:c2:32:54:dc:9c:cf:69:f7:4f: 52:5d:a4:c9:15:51:b3:90:80:86:4e:c7:de:a9:47: 61:bc:18:c6:c6:21:cf:c9:62:11:04:49:e0:f9:78: 92:80:3d:59:4c:ee:69:d2:c8:00:d5:84:0c:69:7f: 27:e6:3b:0d:70:b0:0e:de:78:9e:0b:72:0c:6c:31: 88:08:c2:d5:34:76:54:03:83:10:6e:8e:e7:53:de: 83:f2:c9:5e:d3:95:3f:74:df:02:ae:b8:08:ad:92: ae:82:58:0d:ce:40:f6:85:2b:63:40:5f:61:89:ab: 81:d2:f8:dc:ae:52:b6:c0:75:15:1a:15:ac:de:ad: d4:05:ab:a1:5f:b3:99:24:ef:b3:ff:de:93:05:d7: 96:66:e0:eb:a9:98:36:86:e4:3f:1a:1f:af:f7:cd: 72:73:c1:84:f1:ab:b5:d3:00:67:e1:d7:c4:7e:e0: 6b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BA:F8:58:FA:85:2C:29:F8:D2:2E:58:AA:F5:DB:97:17:34:19:5E X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:07:75:b0:ed:90:ae:cb:22:50:11:fb:ee:38:90:c0:3b:a3: 66:31:10:c8:9e:63:87:5e:52:09:97:20:52:e3:db:e4:1f:46: e8:22:01:37:c4:37:aa:1b:b0:a7:cb:df:79:43:9d:d6:a6:54: 7e:49:bd:1b:e9:a8:3b:f3:16:99:06:e1:72:93:0d:82:43:90: 9a:58:f5:2e:4f:cd:46:5c:5b:40:b8:35:93:58:8e:17:96:65: 31:6d:73:28:1b:cc:0b:74:1f:d5:e4:17:42:6a:1e:6e:4e:a9: da:5a:57:3a:03:64:9f:42:6d:78:8a:83:28:11:77:63:0f:4f: 0f:1e:30:32:36:f1:0f:00:40:c4:97:b9:1f:39:be:e0:fe:18: 38:5e:6a:07:42:6a:28:4f:1e:0c:0b:21:6a:e0:42:5d:c0:25: cc:fe:04:22:cc:39:34:79:3a:36:7a:da:20:11:55:04:44:62: 58:70:d7:4a:eb:80:24:5a:43:86:40:1d:79:10:95:ff:02:20: 78:87:ed:c0:9b:fe:6c:44:3f:06:1a:1b:0d:76:1e:9b:53:5e: ca:e8:6d:db:83:2a:d1:58:58:56:b9:79:3f:63:41:8d:25:a2: 62:a3:07:59:59:31:45:4b:b4:57:98:6e:66:e2:c2:c8:42:52: 2b:d0:d7:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/q9M4SH30fnIfPsMy7BPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwNTEyMjEwMTMwWhcNMjYwNTEzMjEwMTMwWjAzMTEwLwYDVQQD Eyg0NGJhZjg1OGZhODUyYzI5ZjhkMjJlNThhYWY1ZGI5NzE3MzQxOTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIC8yQXIF5910vL+wsEhjrgr63qN MujoymFnRw3+D2TdZzctwvYhwbZdwbFRIDGkq6Qk5pu8KZCTrqTu5+OU/dzUbpDB mSdZB0izkKakMqXCMlTcnM9p909SXaTJFVGzkICGTsfeqUdhvBjGxiHPyWIRBEng +XiSgD1ZTO5p0sgA1YQMaX8n5jsNcLAO3nieC3IMbDGICMLVNHZUA4MQbo7nU96D 8sle05U/dN8CrrgIrZKuglgNzkD2hStjQF9hiauB0vjcrlK2wHUVGhWs3q3UBauh X7OZJO+z/96TBdeWZuDrqZg2huQ/Gh+v981yc8GE8au10wBn4dfEfuBr3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFES6+Fj6hSwp+NIuWKr125cXNBleMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAd1sO2Q rssiUBH77jiQwDujZjEQyJ5jh15SCZcgUuPb5B9G6CIBN8Q3qhuwp8vfeUOd1qZU fkm9G+moO/MWmQbhcpMNgkOQmlj1Lk/NRlxbQLg1k1iOF5ZlMW1zKBvMC3Qf1eQX Qmoebk6p2lpXOgNkn0JteIqDKBF3Yw9PDx4wMjbxDwBAxJe5Hzm+4P4YOF5qB0Jq KE8eDAshauBCXcAlzP4EIsw5NHk6NnraIBFVBERiWHDXSuuAJFpDhkAdeRCV/wIg eIftwJv+bEQ/BhobDXYem1Neyuht24Mq0VhYVrl5P2NBjSWiYqMHWVkxRUu0V5hu ZuLCyEJSK9DXmw== -----END CERTIFICATE-----Generated at Wed May 13 03:22:17 2026 by rpki-client