$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft File: XPMa_DbLaVUAf-l-1KXjGF0icbo.mft (raw, json) Hash identifier: QMiwJJGstiSQO6nGG6LPZORQdLuwiFs18B2I0yWg2y0= Subject key identifier: 58:B3:3E:AF:88:3C:69:85:A0:18:3D:A7:78:C1:74:9F:83:E7:38:7C Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 01A0CE9112FC221F7087293E96CABB9B04F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft Manifest number: 1A83 Signing time: Wed 23 Sep 2026 14:00:09 +0000 Manifest this update: Wed 23 Sep 2026 14:00:09 +0000 Manifest next update: Thu 24 Sep 2026 14:00:09 +0000 Files and hashes: 1: 1-dAYLfzEcuSnLWMiLXXSdIwT4rU.roa (hash: WhA4jtvtbE79AQa3IJODloRRuW4QHZIWAX/A32JL7m4=) 2: GOmV_75Dv1jwn9wiVioc2BSPZTo.roa (hash: pRTwblvRoqzlcA6ZsWJlwN1cr9uhPXOkl31rFqoTMf8=) 3: NklSIVNcNIWeMyDnmkM31BBhz1c.roa (hash: UKSW2BDTyMNTJDzhPRFU+Wzj1R5uLkgmHOPWx5CWEqQ=) 4: W4UHRrBQAt50eiIa0aXkDS2q-jI.roa (hash: wJtHrvfPjqzoQaYOzEJ/TBfUCsO/TaG3P+SEUHqq3Ig=) 5: XPMa_DbLaVUAf-l-1KXjGF0icbo.crl (hash: R1d29v/xK1sAl3onrFZsmPNBlIINGJYdn1sBGNZlnVc=) 6: _5CTbNuX6fLN7jDqdj1oQp0kARc.roa (hash: Ha0LgykvjQP+9qGPn28IFIuJ0yQRLEpHe1bDMbGiuiE=) 7: _YOXL7ZxwGLyAFtXgmbGoGmsxw0.roa (hash: oYcEDHMjBaLjLdS2+cnHZQVD1ORy9f2L160BSTCgJ4c=) 8: itgrIp1NxpdNbAgMEeQKpbEmf5o.roa (hash: Js4lM2igXS9YqpQe0RjS4UXqcJs8/ISJx7M/fH+77eg=) 9: lxIA5T6ig6P82Z6FpI76sa5r9Hk.roa (hash: 3LHUUi612Oq28/k9MVav0SeJK2Lmj7BOxrV2xdjlDis=) 10: szXceV_8JO0f_7ooL6S8iduW9xI.roa (hash: xeJBYCAXDOSNVRxdgWGAZ1ipDc3y7H3KXIsJs1D2FK4=) 11: xnSiVa_Qi8Hl5xGaTydyCAcB4Q4.roa (hash: SWwZIzY753Ls9csZNqAI1seyxm1jJEeEibvAi3lb+6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ce:91:12:fc:22:1f:70:87:29:3e:96:ca:bb:9b:04:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: Sep 23 14:00:09 2026 GMT Not After : Sep 24 14:00:09 2026 GMT Subject: CN=58b33eaf883c6985a0183da778c1749f83e7387c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f7:cb:4b:1c:03:f8:a7:47:d1:7b:6d:cb:b2: 93:94:37:d4:5b:b3:38:e5:f9:87:ce:68:ac:7d:ae: 4a:fa:bd:3c:20:20:d2:02:4a:41:d4:d0:6d:f9:4b: a5:6b:e4:96:23:d9:56:95:4b:33:ee:c0:be:e3:3c: b5:37:f6:9a:63:f9:d2:aa:4d:77:27:09:55:f5:6c: 10:f0:88:b1:f5:f9:69:f9:96:ed:b6:83:f7:57:ed: 39:61:ec:a3:a7:e0:54:4f:01:cc:84:7a:d8:49:e9: 9d:bd:ff:7c:8e:d6:b2:52:f1:83:8c:11:43:77:d8: f8:6c:13:68:8e:53:c0:dd:9d:fb:3a:d0:6e:a6:05: cb:03:f4:e9:a4:20:89:a7:e0:18:25:1e:0f:04:f5: 5c:94:d2:a2:25:be:78:46:ee:47:be:13:82:03:05: 56:ae:b5:99:23:77:f2:7b:0f:a0:cf:d5:a5:01:2d: b4:12:bb:f8:67:c1:00:20:93:99:ac:14:6d:e6:a3: 8a:0d:05:36:2f:e9:33:cf:39:7e:d1:5a:82:7e:69: c9:86:b5:e5:a0:ba:cb:00:86:77:83:63:34:7a:fc: f1:73:a2:54:e2:2e:e0:32:49:3a:c2:3a:f3:f4:43: cc:f7:78:7c:12:92:bb:9b:b1:82:ec:af:38:f3:74: 2a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B3:3E:AF:88:3C:69:85:A0:18:3D:A7:78:C1:74:9F:83:E7:38:7C X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:fb:76:2f:e8:c5:49:a3:20:e1:b5:ef:e6:1d:7d:a9:ae:15: c4:96:fe:13:83:65:a2:6b:04:94:bf:61:0c:2f:dc:0b:4f:90: fd:5c:b4:69:6e:07:a8:9d:fb:12:63:3c:70:e6:fb:93:64:ed: f7:0b:29:d9:7c:43:79:7c:98:e3:1b:ff:85:85:3b:4f:37:4c: f2:77:0b:2a:af:cc:b4:0a:72:95:8f:ed:48:b7:26:8d:5d:11: 66:f5:91:9b:c6:9c:d7:74:ec:40:56:9d:5e:08:0d:dc:1f:a2: d3:8d:7c:25:25:e1:8f:31:d7:d1:07:0a:35:76:36:fc:52:2b: 72:45:10:db:e1:e8:4a:e0:80:68:bf:04:a3:5f:6f:47:73:94: ec:42:b5:95:bb:f0:4a:00:19:e6:90:c5:94:3c:41:cb:02:1d: f2:de:42:80:22:37:22:bb:c1:27:68:90:c3:90:8d:40:07:ff: d7:95:85:46:1a:43:92:45:71:12:c6:72:56:6b:3f:86:c6:93: ae:a2:89:e0:34:a4:7c:a2:b9:e7:82:9d:0e:22:cd:75:91:66: a0:77:87:d7:dd:de:40:24:6a:6b:cb:cd:6f:70:ec:0c:75:78: 9b:8e:ee:22:38:43:a7:76:39:d9:13:50:19:55:f8:18:16:a1: 6d:78:c2:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDOkRL8Ih9whyk+lsq7mwT1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjYwOTIzMTQwMDA5WhcNMjYwOTI0MTQwMDA5WjAzMTEwLwYDVQQD Eyg1OGIzM2VhZjg4M2M2OTg1YTAxODNkYTc3OGMxNzQ5ZjgzZTczODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvfLSxwD+KdH0Xtty7KTlDfUW7M4 5fmHzmisfa5K+r08ICDSAkpB1NBt+Uula+SWI9lWlUsz7sC+4zy1N/aaY/nSqk13 JwlV9WwQ8Iix9flp+ZbttoP3V+05Yeyjp+BUTwHMhHrYSemdvf98jtayUvGDjBFD d9j4bBNojlPA3Z37OtBupgXLA/TppCCJp+AYJR4PBPVclNKiJb54Ru5HvhOCAwVW rrWZI3fyew+gz9WlAS20Erv4Z8EAIJOZrBRt5qOKDQU2L+kzzzl+0VqCfmnJhrXl oLrLAIZ3g2M0evzxc6JU4i7gMkk6wjrz9EPM93h8EpK7m7GC7K8483QqJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFizPq+IPGmFoBg9p3jBdJ+D5zh8MB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQtNzM2ZDEyODg4Y2E4 LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/t2L+jF SaMg4bXv5h19qa4VxJb+E4NlomsElL9hDC/cC0+Q/Vy0aW4HqJ37EmM8cOb7k2Tt 9wsp2XxDeXyY4xv/hYU7TzdM8ncLKq/MtApylY/tSLcmjV0RZvWRm8ac13TsQFad XggN3B+i0418JSXhjzHX0QcKNXY2/FIrckUQ2+HoSuCAaL8Eo19vR3OU7EK1lbvw SgAZ5pDFlDxBywId8t5CgCI3IrvBJ2iQw5CNQAf/15WFRhpDkkVxEsZyVms/hsaT rqKJ4DSkfKK554KdDiLNdZFmoHeH193eQCRqa8vNb3DsDHV4m47uIjhDp3Y52RNQ GVX4GBahbXjC1w== -----END CERTIFICATE-----Generated at Thu Sep 24 00:02:07 2026 by rpki-client