$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft File: XPMa_DbLaVUAf-l-1KXjGF0icbo.mft (raw, json) Hash identifier: pts/kc/DzlfFCCHXSmcCuBTD1t9gi1ZUnQQesHXaBd0= Subject key identifier: E5:38:41:D0:EF:FC:55:6C:B5:73:D9:AA:66:C4:34:DA:82:B9:5B:FE Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 019D27DF6BD2A61385B6E645126528DC48B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft Manifest number: 189F Signing time: Thu 26 Mar 2026 02:00:46 +0000 Manifest this update: Thu 26 Mar 2026 02:00:46 +0000 Manifest next update: Fri 27 Mar 2026 02:00:46 +0000 Files and hashes: 1: 1-dAYLfzEcuSnLWMiLXXSdIwT4rU.roa (hash: WhA4jtvtbE79AQa3IJODloRRuW4QHZIWAX/A32JL7m4=) 2: GOmV_75Dv1jwn9wiVioc2BSPZTo.roa (hash: pRTwblvRoqzlcA6ZsWJlwN1cr9uhPXOkl31rFqoTMf8=) 3: NklSIVNcNIWeMyDnmkM31BBhz1c.roa (hash: UKSW2BDTyMNTJDzhPRFU+Wzj1R5uLkgmHOPWx5CWEqQ=) 4: W4UHRrBQAt50eiIa0aXkDS2q-jI.roa (hash: wJtHrvfPjqzoQaYOzEJ/TBfUCsO/TaG3P+SEUHqq3Ig=) 5: XPMa_DbLaVUAf-l-1KXjGF0icbo.crl (hash: y0Dwi6li7I7v/KRRm6cWYsV+xlfmcS3ORVjdBwuAR4M=) 6: _5CTbNuX6fLN7jDqdj1oQp0kARc.roa (hash: Ha0LgykvjQP+9qGPn28IFIuJ0yQRLEpHe1bDMbGiuiE=) 7: _YOXL7ZxwGLyAFtXgmbGoGmsxw0.roa (hash: oYcEDHMjBaLjLdS2+cnHZQVD1ORy9f2L160BSTCgJ4c=) 8: itgrIp1NxpdNbAgMEeQKpbEmf5o.roa (hash: Js4lM2igXS9YqpQe0RjS4UXqcJs8/ISJx7M/fH+77eg=) 9: lxIA5T6ig6P82Z6FpI76sa5r9Hk.roa (hash: 3LHUUi612Oq28/k9MVav0SeJK2Lmj7BOxrV2xdjlDis=) 10: szXceV_8JO0f_7ooL6S8iduW9xI.roa (hash: xeJBYCAXDOSNVRxdgWGAZ1ipDc3y7H3KXIsJs1D2FK4=) 11: xnSiVa_Qi8Hl5xGaTydyCAcB4Q4.roa (hash: SWwZIzY753Ls9csZNqAI1seyxm1jJEeEibvAi3lb+6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:df:6b:d2:a6:13:85:b6:e6:45:12:65:28:dc:48:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: Mar 26 02:00:46 2026 GMT Not After : Mar 27 02:00:46 2026 GMT Subject: CN=e53841d0effc556cb573d9aa66c434da82b95bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ea:06:56:3e:2a:8a:74:bc:6e:ae:b6:7a:90: 80:73:ec:3e:44:6e:89:65:d4:ea:db:30:a9:ad:f9: 2c:d3:7c:40:f8:20:b7:76:03:4d:4b:e9:81:c9:6d: ed:2c:d8:93:95:09:9e:6c:22:52:b9:42:4c:09:1f: 30:18:86:5a:20:fe:de:37:0b:82:3b:55:8b:48:11: 27:45:0e:fd:45:f9:18:01:c6:b4:4b:f4:ec:e9:04: 28:d6:11:39:98:05:09:b6:fc:83:9e:b1:38:40:72: 58:ae:23:c5:5d:a9:05:34:09:d8:7b:37:3f:68:f9: 48:09:48:d5:b6:d3:de:90:87:18:14:98:fb:fe:dc: 0f:29:6d:20:dd:9a:3c:ca:1f:97:59:d1:55:b1:b9: 48:1f:c3:c3:b0:82:23:88:b7:b3:ea:1c:71:05:7a: 38:c9:b7:f7:b0:68:1b:55:5f:97:8e:e5:6c:c1:5d: 48:28:70:47:90:d3:46:e3:5c:32:13:05:2f:81:bc: a1:a7:ba:8b:1f:d2:82:ad:1e:14:69:5a:da:18:fe: f3:97:1b:e6:87:69:6e:cc:e5:c4:85:f6:ca:a4:f2: a5:5b:6a:00:f3:fa:57:d4:02:f3:8c:e9:6b:91:ce: 1c:09:74:bd:09:36:75:0e:42:26:54:9f:84:46:f8: 5c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:38:41:D0:EF:FC:55:6C:B5:73:D9:AA:66:C4:34:DA:82:B9:5B:FE X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:81:cf:ff:75:14:78:51:65:42:18:d1:a3:fe:d1:cb:06:4a: bd:bc:cc:36:f0:85:e1:7b:66:0f:22:41:5b:f9:d6:c5:5f:3b: c5:13:ba:59:71:a9:7b:93:ed:7e:5e:90:49:98:f3:45:fb:4a: 12:c0:f0:c1:d7:8a:09:5a:49:97:8d:fc:47:13:2c:b5:56:82: fb:cf:78:cb:e1:79:27:d0:a5:8a:72:cf:f9:53:d6:57:c4:6b: 6d:7a:02:ac:58:7d:cc:8e:97:60:a0:6f:f5:a0:b9:14:12:05: ac:e0:7a:6b:a5:10:39:e4:f6:f0:7c:f1:b2:b8:89:54:ce:77: 6d:3b:66:e8:85:ed:3f:a1:0d:b3:e2:47:67:ca:36:e1:7e:67: e7:17:5c:9f:d7:10:6c:28:fa:e2:33:ba:c0:70:53:35:bc:27: 88:b0:1a:9d:0c:85:15:be:3b:16:df:46:95:e4:b6:bb:e8:81: 76:f6:e2:d3:96:a0:22:d9:69:e4:4f:de:10:7d:cf:e5:27:dc: c0:3b:4c:65:f0:d4:5a:f5:f6:4e:07:69:07:b3:fd:8a:cf:9c: 67:0c:21:a3:a0:3f:43:87:87:f5:2e:b4:58:60:5a:32:fa:9e: a7:e1:2c:63:ac:8b:76:02:39:9f:5f:c6:3c:47:48:b5:fd:3b: 29:3a:a0:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0n32vSphOFtuZFEmUo3EixMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjYwMzI2MDIwMDQ2WhcNMjYwMzI3MDIwMDQ2WjAzMTEwLwYDVQQD EyhlNTM4NDFkMGVmZmM1NTZjYjU3M2Q5YWE2NmM0MzRkYTgyYjk1YmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OoGVj4qinS8bq62epCAc+w+RG6J ZdTq2zCprfks03xA+CC3dgNNS+mByW3tLNiTlQmebCJSuUJMCR8wGIZaIP7eNwuC O1WLSBEnRQ79RfkYAca0S/Ts6QQo1hE5mAUJtvyDnrE4QHJYriPFXakFNAnYezc/ aPlICUjVttPekIcYFJj7/twPKW0g3Zo8yh+XWdFVsblIH8PDsIIjiLez6hxxBXo4 ybf3sGgbVV+XjuVswV1IKHBHkNNG41wyEwUvgbyhp7qLH9KCrR4UaVraGP7zlxvm h2luzOXEhfbKpPKlW2oA8/pX1ALzjOlrkc4cCXS9CTZ1DkImVJ+ERvhc5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOU4QdDv/FVstXPZqmbENNqCuVv+MB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQtNzM2ZDEyODg4Y2E4 LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYHP/3UU eFFlQhjRo/7RywZKvbzMNvCF4XtmDyJBW/nWxV87xRO6WXGpe5Ptfl6QSZjzRftK EsDwwdeKCVpJl438RxMstVaC+894y+F5J9ClinLP+VPWV8RrbXoCrFh9zI6XYKBv 9aC5FBIFrOB6a6UQOeT28HzxsriJVM53bTtm6IXtP6ENs+JHZ8o24X5n5xdcn9cQ bCj64jO6wHBTNbwniLAanQyFFb47Ft9GleS2u+iBdvbi05agItlp5E/eEH3P5Sfc wDtMZfDUWvX2TgdpB7P9is+cZwwho6A/Q4eH9S60WGBaMvqep+EsY6yLdgI5n1/G PEdItf07KTqgow== -----END CERTIFICATE-----Generated at Thu Mar 26 09:59:39 2026 by rpki-client