$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft File: XPMa_DbLaVUAf-l-1KXjGF0icbo.mft (raw, json) Hash identifier: i4FOmCORlGsiuUEuQ6vH46dxEduvZG2IzlfwNevroUQ= Subject key identifier: A3:7D:90:94:0A:4F:98:54:86:D4:2D:74:72:FF:A7:C3:01:AB:BA:56 Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 019E1D22876C7ACC96C0B0E180F766CE8FA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft Manifest number: 191E Signing time: Tue 12 May 2026 17:01:02 +0000 Manifest this update: Tue 12 May 2026 17:01:02 +0000 Manifest next update: Wed 13 May 2026 17:01:02 +0000 Files and hashes: 1: 1-dAYLfzEcuSnLWMiLXXSdIwT4rU.roa (hash: WhA4jtvtbE79AQa3IJODloRRuW4QHZIWAX/A32JL7m4=) 2: GOmV_75Dv1jwn9wiVioc2BSPZTo.roa (hash: pRTwblvRoqzlcA6ZsWJlwN1cr9uhPXOkl31rFqoTMf8=) 3: NklSIVNcNIWeMyDnmkM31BBhz1c.roa (hash: UKSW2BDTyMNTJDzhPRFU+Wzj1R5uLkgmHOPWx5CWEqQ=) 4: W4UHRrBQAt50eiIa0aXkDS2q-jI.roa (hash: wJtHrvfPjqzoQaYOzEJ/TBfUCsO/TaG3P+SEUHqq3Ig=) 5: XPMa_DbLaVUAf-l-1KXjGF0icbo.crl (hash: DQ/3R3LAD5qEpHAQ+SdAqkx6Yk7Al++Abk9zcqsbpF4=) 6: _5CTbNuX6fLN7jDqdj1oQp0kARc.roa (hash: Ha0LgykvjQP+9qGPn28IFIuJ0yQRLEpHe1bDMbGiuiE=) 7: _YOXL7ZxwGLyAFtXgmbGoGmsxw0.roa (hash: oYcEDHMjBaLjLdS2+cnHZQVD1ORy9f2L160BSTCgJ4c=) 8: itgrIp1NxpdNbAgMEeQKpbEmf5o.roa (hash: Js4lM2igXS9YqpQe0RjS4UXqcJs8/ISJx7M/fH+77eg=) 9: lxIA5T6ig6P82Z6FpI76sa5r9Hk.roa (hash: 3LHUUi612Oq28/k9MVav0SeJK2Lmj7BOxrV2xdjlDis=) 10: szXceV_8JO0f_7ooL6S8iduW9xI.roa (hash: xeJBYCAXDOSNVRxdgWGAZ1ipDc3y7H3KXIsJs1D2FK4=) 11: xnSiVa_Qi8Hl5xGaTydyCAcB4Q4.roa (hash: SWwZIzY753Ls9csZNqAI1seyxm1jJEeEibvAi3lb+6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:22:87:6c:7a:cc:96:c0:b0:e1:80:f7:66:ce:8f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: May 12 17:01:02 2026 GMT Not After : May 13 17:01:02 2026 GMT Subject: CN=a37d90940a4f985486d42d7472ffa7c301abba56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:80:2f:27:ac:48:1d:e7:cd:26:c9:18:fb: 5f:0e:37:e4:40:85:9c:db:7f:35:17:9c:2e:8e:dd: de:3d:b3:0e:e4:ee:da:14:07:1e:54:68:b0:9b:01: 82:bb:1f:68:0e:c0:a8:59:77:ff:be:66:b4:99:5b: 8b:b6:ca:fd:b6:8c:55:f7:47:f8:ff:70:31:af:aa: 3d:12:59:44:f0:08:c3:39:90:e1:74:6d:6b:15:7e: 73:21:94:c0:f6:b9:34:6a:0d:3d:0c:44:22:31:df: 0f:23:01:51:37:61:42:84:c0:93:46:71:36:32:f2: 17:98:7e:ed:3f:5d:49:1a:ad:30:0a:93:21:33:c9: 38:d4:6b:d0:9a:18:3f:e9:98:0f:c3:2f:a5:7a:35: 30:33:a2:5c:b5:cb:9f:0d:35:4f:1f:94:71:9a:df: dd:1d:d8:52:aa:8d:70:30:65:85:a9:6d:83:b4:30: 46:bb:91:a7:2c:a0:47:dd:74:fa:eb:80:f0:82:37: 5a:61:c3:a3:93:e5:29:e2:af:74:d9:10:57:58:72: 08:06:17:38:c2:6f:ea:9c:f9:ff:25:d7:b3:7a:71: 7f:ca:9d:bd:f1:f0:bf:ea:4f:46:05:33:5b:36:fc: a2:aa:76:e5:92:98:d7:b1:44:9b:10:cc:6e:20:c9: e2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7D:90:94:0A:4F:98:54:86:D4:2D:74:72:FF:A7:C3:01:AB:BA:56 X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:76:97:50:04:bc:e0:b4:b2:61:4e:74:a9:07:7b:b0:05:7a: 25:2f:08:d6:98:86:9d:28:38:51:3d:83:b7:1e:4f:0e:95:f9: ec:d7:9d:18:73:0d:14:72:1a:9c:27:82:5f:b5:a1:42:d1:ba: eb:e1:bb:8c:85:82:c1:91:ad:97:1d:51:5b:de:4d:fa:03:16: 76:60:b0:3f:24:e4:dd:45:23:4a:fe:67:83:a1:ec:ae:9b:01: 59:3a:ac:38:5d:66:c6:fd:d3:21:16:28:36:75:87:60:aa:8e: f9:9c:8e:a6:86:b9:67:e6:6e:75:19:d7:c3:3f:7c:b4:99:4d: 66:f4:c3:06:28:ae:a4:c6:09:a6:57:c1:6c:f8:cf:c8:05:dc: 53:09:50:bc:1f:46:83:1a:ab:37:b0:0f:87:bc:eb:af:7b:64: 91:17:46:67:d8:25:22:be:b7:b9:2e:3c:b6:bf:a3:a5:a0:cc: 9a:11:dd:34:81:87:c9:a0:82:39:2f:9b:11:7b:25:bd:76:57: 55:7f:fc:2a:b1:45:74:0a:21:4f:38:33:83:3d:79:b0:2c:bf: 1a:33:8f:15:c5:31:39:9c:7d:9f:71:4c:f9:f0:f5:16:13:fe: 4e:2e:51:aa:e0:12:2a:67:cd:98:4b:29:72:fb:97:8a:f9:83: 16:fb:51:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dIodsesyWwLDhgPdmzo+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjYwNTEyMTcwMTAyWhcNMjYwNTEzMTcwMTAyWjAzMTEwLwYDVQQD EyhhMzdkOTA5NDBhNGY5ODU0ODZkNDJkNzQ3MmZmYTdjMzAxYWJiYTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBCALyesSB3nzSbJGPtfDjfkQIWc 2381F5wujt3ePbMO5O7aFAceVGiwmwGCux9oDsCoWXf/vma0mVuLtsr9toxV90f4 /3Axr6o9EllE8AjDOZDhdG1rFX5zIZTA9rk0ag09DEQiMd8PIwFRN2FChMCTRnE2 MvIXmH7tP11JGq0wCpMhM8k41GvQmhg/6ZgPwy+lejUwM6JctcufDTVPH5Rxmt/d HdhSqo1wMGWFqW2DtDBGu5GnLKBH3XT664DwgjdaYcOjk+Up4q902RBXWHIIBhc4 wm/qnPn/JdezenF/yp298fC/6k9GBTNbNvyiqnblkpjXsUSbEMxuIMniQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKN9kJQKT5hUhtQtdHL/p8MBq7pWMB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQtNzM2ZDEyODg4Y2E4 LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHaXUAS8 4LSyYU50qQd7sAV6JS8I1piGnSg4UT2Dtx5PDpX57NedGHMNFHIanCeCX7WhQtG6 6+G7jIWCwZGtlx1RW95N+gMWdmCwPyTk3UUjSv5ng6HsrpsBWTqsOF1mxv3TIRYo NnWHYKqO+ZyOpoa5Z+ZudRnXwz98tJlNZvTDBiiupMYJplfBbPjPyAXcUwlQvB9G gxqrN7APh7zrr3tkkRdGZ9glIr63uS48tr+jpaDMmhHdNIGHyaCCOS+bEXslvXZX VX/8KrFFdAohTzgzgz15sCy/GjOPFcUxOZx9n3FM+fD1FhP+Ti5RquASKmfNmEsp cvuXivmDFvtRFA== -----END CERTIFICATE-----Generated at Wed May 13 01:39:04 2026 by rpki-client