$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: dG6XnihoKfm154lOXnl+CMhAcM3OmrD0nn3zPuhz/dA= Subject key identifier: C0:EA:72:65:02:DC:DC:DF:72:3A:A9:9C:D8:F1:BF:E6:1E:D2:D1:42 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 01A0D804BBD4DCA6AFECC15293D51D5E9D83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 1A91 Signing time: Fri 25 Sep 2026 10:03:03 +0000 Manifest this update: Fri 25 Sep 2026 10:03:03 +0000 Manifest next update: Sat 26 Sep 2026 10:03:03 +0000 Files and hashes: 1: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (hash: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q=) 2: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (hash: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ=) 3: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (hash: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo=) 4: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (hash: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI=) 5: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (hash: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE=) 6: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (hash: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc=) 7: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (hash: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8=) 8: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (hash: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM=) 9: Mdbc7JKGBe-JSvKB28h6Q_ApLiU.roa (hash: ixbEaYXOURIbpbdcksYTq3QhDvoC08h0/HFaZkHONBA=) 10: N7ElhbVyCmGSjUSh1AxjT63WzYw.roa (hash: W3FJJT1fp/7XCFXKVQfC6wjn61A9LFjVkKvFsdNlvHw=) 11: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (hash: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0=) 12: PoFBrEh2SMRPYVmU_szomrEefgE.roa (hash: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc=) 13: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (hash: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8=) 14: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (hash: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8=) 15: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (hash: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o=) 16: _X1aB1grD4SEnY0N9BS0XD2icYQ.roa (hash: 8ohwVFQyC0+8LBOZ3vBnB2ZQPF3XbCAWhyBCtY+3UwE=) 17: bNLCkSinXiYwmDqOGOa8s-V6Q3Q.roa (hash: haFcBNVZwKKJJG8if5wj//WNo7O84ixbtXTuzJ5h90o=) 18: cIzWNeNZbGQqB6PaAUfFk04qwpw.roa (hash: qXYjYaptAMpe3dpSUVYLnaW4A2Txz8KndGthhN4noC0=) 19: da2QfG6A8HePFVhHUZPAybEpN68.roa (hash: TKp47i1BUIPNcl+xrP72HbJ0DwhwhsJyAX+gufSHOcQ=) 20: efwlLLHqb-bdy8PqwUcM4smevIk.roa (hash: dziFMotDF0gnY460BoEIQb6O67mGB4C/hN9W6acAk18=) 21: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (hash: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc=) 22: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (hash: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg=) 23: i39T_sxoePa7FkwXjI2KlpcV9nQ.roa (hash: xjv51Wh2+JZgrJ+iRtvSyXOWKDVobdGo9gsPb02h2X4=) 24: iPKJwckHS7fTX2BYHqvx9q3JA4g.roa (hash: 2bHm3BwYJ52KpSHXTQlcz+x91m3fEq3PirchX6IlyGw=) 25: iqnR0QT5Gp1ysbpIbYG1Jx1Dr-A.roa (hash: uT81Q71i5BXjU2YhhS0n8jdqFaplDdaFrFqRykt33OM=) 26: jXlPjmax2D6xk6xk15LqeUs2Fa8.roa (hash: ZUhfEbcBqZVUtm9r9VeW3nIknnrUSnVpiKVvjVmMjCA=) 27: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (hash: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo=) 28: lcn7Wtg6ulEkp1Lc7XKZFro-mds.roa (hash: QCmVx87F8wdoRkStlUnKFmP4R7y7QH8VIpoG6J8hkG4=) 29: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (hash: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw=) 30: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (hash: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ=) 31: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (hash: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM=) 32: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (hash: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg=) 33: x3ERDAaeO48LeOr6lKQKB6Ey2mM.roa (hash: Y+nAlXRY4txRKWouCnodtOhRL0mCZVwY0SjTTDgCeMQ=) 34: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: JU/z3zLkuje19DYxN0gx0ZJ5Ruai9Yg0V/bmBoaIvq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 10:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d8:04:bb:d4:dc:a6:af:ec:c1:52:93:d5:1d:5e:9d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Sep 25 10:03:03 2026 GMT Not After : Sep 26 10:03:03 2026 GMT Subject: CN=c0ea726502dcdcdf723aa99cd8f1bfe61ed2d142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f1:20:cb:d2:a4:7c:f2:66:f4:59:f4:1b:89: c0:18:42:06:34:89:e1:37:b6:f0:58:f2:a9:65:2a: c5:6f:2f:e9:3f:51:45:be:3a:f6:84:55:2f:ab:86: d9:26:4b:bf:be:5c:a6:b8:32:87:92:38:e6:5f:6d: 25:6b:b6:5b:60:90:58:e8:6a:3a:3d:ab:13:d2:73: aa:69:54:99:74:03:28:53:3a:9a:3b:55:62:28:17: c0:77:79:74:00:2f:2f:6a:28:4f:5d:6a:f5:ec:71: cb:8f:cf:78:49:ce:b2:ad:9b:be:3f:c9:c6:2a:b5: 49:b5:8c:1b:31:5e:35:6c:0c:b9:6e:fe:b5:50:e1: 58:e4:ab:4d:8b:fb:8c:49:d5:38:e8:47:ba:f8:17: 60:42:ee:5d:da:c1:29:f6:ae:59:35:0b:70:ce:12: ff:8f:fa:f5:be:02:c4:52:32:55:26:66:fc:9d:ab: 1d:9e:0b:cb:0e:73:a6:7c:45:80:5b:3c:dd:9f:34: a5:79:d9:85:53:63:04:ed:62:de:db:b5:0d:29:f9: 8e:1e:53:28:50:2c:8b:f0:78:c0:74:f2:21:28:bf: e2:bd:88:7a:24:5a:87:d1:9a:15:d5:4b:77:36:a9: 7c:1c:f9:43:28:b5:6d:1a:c4:9f:45:c5:cd:84:9a: dd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EA:72:65:02:DC:DC:DF:72:3A:A9:9C:D8:F1:BF:E6:1E:D2:D1:42 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d1:bd:2a:16:ce:81:22:83:b5:08:05:08:2c:7a:6e:30:55: 24:6a:75:5c:a7:b9:f1:c9:67:de:0c:b8:bc:47:6f:94:bf:56: 39:04:a4:af:bb:6b:ea:bd:67:9c:7e:f6:79:51:d5:12:d7:fa: 3c:88:c5:9a:7e:3e:a5:52:fd:62:36:d4:55:20:85:46:a5:dd: 21:25:80:ba:16:e3:d9:d1:2a:2f:a0:c4:33:b8:fd:c1:e2:76: c0:75:d3:f4:04:36:55:89:7d:45:ba:5c:dd:d0:8a:56:bc:aa: ba:0a:ae:d2:13:d7:cf:0d:d6:76:00:18:87:6a:e8:ec:13:27: ec:6e:0d:22:8a:c4:2a:e9:3e:3e:7b:84:89:ca:6b:17:5a:af: 53:db:37:28:12:72:1b:11:60:93:d0:27:70:e5:9e:cb:46:26: f7:3a:4b:6b:07:66:2f:cb:4e:26:75:3a:03:b6:62:9d:d3:5e: bb:bc:ab:b5:83:38:c2:9e:7d:20:ad:09:6b:7d:43:32:fa:eb: 72:15:51:35:14:47:05:2c:8a:45:5f:d0:6c:06:50:8d:77:96: d8:17:73:d8:0d:ba:61:35:c1:96:32:1f:9a:b9:af:4f:de:39: f9:59:ee:57:96:cc:f7:bf:8c:52:12:60:28:f9:8d:b7:47:25: c3:9d:5b:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDYBLvU3Kav7MFSk9UdXp2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwOTI1MTAwMzAzWhcNMjYwOTI2MTAwMzAzWjAzMTEwLwYDVQQD EyhjMGVhNzI2NTAyZGNkY2RmNzIzYWE5OWNkOGYxYmZlNjFlZDJkMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fEgy9KkfPJm9Fn0G4nAGEIGNInh N7bwWPKpZSrFby/pP1FFvjr2hFUvq4bZJku/vlymuDKHkjjmX20la7ZbYJBY6Go6 PasT0nOqaVSZdAMoUzqaO1ViKBfAd3l0AC8vaihPXWr17HHLj894Sc6yrZu+P8nG KrVJtYwbMV41bAy5bv61UOFY5KtNi/uMSdU46Ee6+BdgQu5d2sEp9q5ZNQtwzhL/ j/r1vgLEUjJVJmb8nasdngvLDnOmfEWAWzzdnzSledmFU2ME7WLe27UNKfmOHlMo UCyL8HjAdPIhKL/ivYh6JFqH0ZoV1Ut3Nql8HPlDKLVtGsSfRcXNhJrd0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDqcmUC3NzfcjqpnNjxv+Ye0tFCMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktG9KhbO gSKDtQgFCCx6bjBVJGp1XKe58cln3gy4vEdvlL9WOQSkr7tr6r1nnH72eVHVEtf6 PIjFmn4+pVL9YjbUVSCFRqXdISWAuhbj2dEqL6DEM7j9weJ2wHXT9AQ2VYl9Rbpc 3dCKVryqugqu0hPXzw3WdgAYh2ro7BMn7G4NIorEKuk+PnuEicprF1qvU9s3KBJy GxFgk9AncOWey0Ym9zpLawdmL8tOJnU6A7ZindNeu7yrtYM4wp59IK0Ja31DMvrr chVRNRRHBSyKRV/QbAZQjXeW2Bdz2A26YTXBljIfmrmvT945+VnuV5bM97+MUhJg KPmNt0clw51bjQ== -----END CERTIFICATE-----Generated at Fri Sep 25 20:27:08 2026 by rpki-client