$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: o/bvVI8bPjGyLE88GWevLzQRlPztCVP53pYdHbgVm/g= Subject key identifier: 59:A9:38:CD:67:EC:26:84:70:61:68:9B:24:ED:4C:C2:B0:F6:D1:58 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019D28BBA041521606036742865CBE1A8885 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 1467 Signing time: Thu 26 Mar 2026 06:01:18 +0000 Manifest this update: Thu 26 Mar 2026 06:01:18 +0000 Manifest next update: Fri 27 Mar 2026 06:01:18 +0000 Files and hashes: 1: 6x8_lobLoVhuOkMPbJ37tyo730k.roa (hash: frU4mbSkgCyRaUyYfKiF6eXm6Dyg76kmIZLBN+kqhOQ=) 2: G6j6G54eI6PykBhSQs9rNNcS6hw.roa (hash: laEXgXrT36Ynj7L9LkdaNFFej1PJ+rq5ig2aomYZyl4=) 3: N2mIezuMwglH5z9Sw394yPABh_Y.roa (hash: yGQ16rD5VkDHl88O+y0XucdcYEVXoD+T2CoyV9LtCBE=) 4: RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa (hash: gac1U5GhiAAvsADQW6zIs1K5OYBIIdxw6YN3Rmr6cdo=) 5: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 6: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 7: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: Qc0yRLCeDpqrW3xuYJErmAcr75PhTxZsWLMuW5dAg5A=) 8: _Vz2AEmZ4dDgj8Ud8EDnRZzqDhg.roa (hash: a0HQa5htazrnK7Glu+swssGtSBkAyFnuHUYyfJ+ATNo=) 9: mdwMxB2i4JqGt_2u-3_ShCtSrqY.roa (hash: sXvWRa0cGZ0eH2CssCaF8CgkrXf1U+VjrI6hfvsrHmA=) 10: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 11: ofUllF-dWXHUPtc7vJnGioqPfCY.roa (hash: DKXn87ibX3uXQNhf8bxZ9LKgNiZi6MqVfnjhDNqP0fA=) 12: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:bb:a0:41:52:16:06:03:67:42:86:5c:be:1a:88:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Mar 26 06:01:18 2026 GMT Not After : Mar 27 06:01:18 2026 GMT Subject: CN=59a938cd67ec26847061689b24ed4cc2b0f6d158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a8:3f:e1:d2:75:63:1a:7c:a3:bc:8a:a9:3a: b9:13:b8:96:56:1e:25:57:93:c2:5f:91:cd:47:57: 78:2d:61:a2:b8:ed:ff:ef:0a:40:c0:86:b5:6c:3c: e9:8d:72:97:df:37:0f:90:23:29:98:16:9f:59:14: 92:d9:b1:d5:b4:87:fb:de:18:1a:cc:8c:ea:c6:5f: e9:9a:23:ab:0b:a9:3d:0f:ba:cb:b9:35:6d:e0:81: df:ef:80:42:34:7f:76:3f:fd:47:71:70:b0:c9:7d: 7a:41:51:b9:e1:83:51:da:54:85:6a:18:cc:b4:0d: cf:2c:e9:6c:b9:95:68:ee:3d:4e:41:5a:59:b4:c0: b9:1d:da:89:d6:36:36:17:7f:83:e5:4e:d4:8f:56: 12:88:93:24:f1:55:cb:47:65:e5:87:e8:f6:49:0d: 38:61:9f:8e:fa:ed:6f:7e:c3:fc:38:46:f9:fa:e2: e4:bc:52:ab:6f:cc:a6:c4:b0:3a:de:1f:cf:43:56: 49:d4:6d:7b:92:12:a8:b7:ab:58:86:26:e7:15:6c: b8:f0:b8:02:40:03:e4:41:59:e5:01:f1:af:c9:bf: 86:d1:25:a1:44:a8:3d:6a:73:40:95:94:75:26:4d: 7f:1c:83:d4:d7:9f:e1:11:20:32:d2:ad:e7:d3:0f: 35:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A9:38:CD:67:EC:26:84:70:61:68:9B:24:ED:4C:C2:B0:F6:D1:58 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c4:1a:4d:63:03:92:03:16:5d:07:26:60:02:0b:35:78:a8: 17:e6:fd:e6:ad:e8:50:84:d3:3c:ee:20:25:d3:86:a6:5c:94: be:4b:7c:ca:fe:4d:ee:b3:4c:03:74:ad:df:ab:0b:20:42:0f: fe:d7:94:29:33:c8:10:bd:cb:8f:b7:cd:3c:6a:f1:44:0f:f2: b3:02:e7:e8:e8:ec:98:51:26:bc:fa:66:70:8a:1f:db:89:8b: c2:04:ec:c7:5b:e0:a1:1c:9a:32:cd:dd:00:48:80:db:d6:93: 06:0b:9b:b0:a0:9c:31:fe:51:c7:03:3d:23:99:7a:a5:ee:fb: f7:ed:73:a8:e5:6a:e2:23:a2:85:6a:4d:c4:ca:18:7d:25:69: 06:61:ee:b9:10:8e:82:91:b7:d9:a7:da:f1:10:0a:93:6b:2c: 19:65:00:9c:d2:b2:31:78:fd:1b:4f:60:53:37:fb:d9:b0:a0: 02:8d:90:60:bd:33:e8:6b:3d:14:44:40:d7:6a:1d:a2:f1:2a: 7a:60:db:7c:f8:53:c1:c6:a0:3a:04:c1:b2:9b:af:97:ae:a4: de:3d:2d:e0:7d:0b:b1:b6:03:e7:19:bc:61:4b:1a:86:4b:76: 82:da:89:65:fe:53:43:aa:21:a5:43:5c:5b:1c:d1:83:1d:4c: 16:1b:ec:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ou6BBUhYGA2dChly+GoiFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwMzI2MDYwMTE4WhcNMjYwMzI3MDYwMTE4WjAzMTEwLwYDVQQD Eyg1OWE5MzhjZDY3ZWMyNjg0NzA2MTY4OWIyNGVkNGNjMmIwZjZkMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ag/4dJ1Yxp8o7yKqTq5E7iWVh4l V5PCX5HNR1d4LWGiuO3/7wpAwIa1bDzpjXKX3zcPkCMpmBafWRSS2bHVtIf73hga zIzqxl/pmiOrC6k9D7rLuTVt4IHf74BCNH92P/1HcXCwyX16QVG54YNR2lSFahjM tA3PLOlsuZVo7j1OQVpZtMC5HdqJ1jY2F3+D5U7Uj1YSiJMk8VXLR2Xlh+j2SQ04 YZ+O+u1vfsP8OEb5+uLkvFKrb8ymxLA63h/PQ1ZJ1G17khKot6tYhibnFWy48LgC QAPkQVnlAfGvyb+G0SWhRKg9anNAlZR1Jk1/HIPU15/hESAy0q3n0w81/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmpOM1n7CaEcGFomyTtTMKw9tFYMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMQaTWMD kgMWXQcmYAILNXioF+b95q3oUITTPO4gJdOGplyUvkt8yv5N7rNMA3St36sLIEIP /teUKTPIEL3Lj7fNPGrxRA/yswLn6OjsmFEmvPpmcIof24mLwgTsx1vgoRyaMs3d AEiA29aTBgubsKCcMf5RxwM9I5l6pe779+1zqOVq4iOihWpNxMoYfSVpBmHuuRCO gpG32afa8RAKk2ssGWUAnNKyMXj9G09gUzf72bCgAo2QYL0z6Gs9FERA12odovEq emDbfPhTwcagOgTBspuvl66k3j0t4H0LsbYD5xm8YUsahkt2gtqJZf5TQ6ohpUNc WxzRgx1MFhvspQ== -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:01 2026 by rpki-client