$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: iJbGvqSKB/OfWqwFChC7swvhX1dDYbuEBq+p37pXQic= Subject key identifier: B3:11:0F:53:1A:D4:28:6B:94:7E:95:BB:5F:93:20:5E:9B:38:9B:D0 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 01A0D727AB6C841E1FBFE48E33124786EBB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 1658 Signing time: Fri 25 Sep 2026 06:01:36 +0000 Manifest this update: Fri 25 Sep 2026 06:01:36 +0000 Manifest next update: Sat 26 Sep 2026 06:01:36 +0000 Files and hashes: 1: 4xVdYe0gRxz-uE-uYOx9q-_KZCk.roa (hash: AcFtBAJ8L85K3ER5s0exdifY6WeWVCgPuREiTI5SL1o=) 2: DaIOsBAUTocNWtQ487tz4YWipHI.roa (hash: N5y0DRMQWN6Af00LwwQvS7RkqXX2njRLKRlsnfJp9Do=) 3: FsUwTKEoeuKYMmnk_mWWy6-qdAo.roa (hash: kxhMJxapdCPykD+F2D9TyndT9oVuTTd+gUFsUUrezQc=) 4: NjjGyupk2EJG8TJjJA1Myg_WAwA.roa (hash: 1JLpN2xJETUSv+Ius8OCYEkY3ODiPgVoMCOqIZ1UHNY=) 5: R5S--utC9laYMZLaK8e5y0xU4YE.roa (hash: TDBMDGa2/0sxnlzLOujaeEN+d/Z+bRBFPSV66wTIH5k=) 6: Smw8KxULxNV1U3wUVaTgjVcAEN0.roa (hash: xaQVLJNe1R846qUde4wi8d2fl1ASkR/w9PUCNskHzmg=) 7: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 8: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 9: XKGUjZlD7tskIQ5vBU5XUtZBdFU.roa (hash: 4Dp/honokh4JVg16NS/ziIGrcbXgziNFinLk2g3lzv8=) 10: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: O0ZsG6WDRS1Lfe9kVxmPLQrGkYTuItsGHy1HgjXr340=) 11: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 12: ofUllF-dWXHUPtc7vJnGioqPfCY.roa (hash: DKXn87ibX3uXQNhf8bxZ9LKgNiZi6MqVfnjhDNqP0fA=) 13: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 06:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d7:27:ab:6c:84:1e:1f:bf:e4:8e:33:12:47:86:eb:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Sep 25 06:01:36 2026 GMT Not After : Sep 26 06:01:36 2026 GMT Subject: CN=b3110f531ad4286b947e95bb5f93205e9b389bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d0:7f:e1:1b:d3:c9:fe:82:c1:49:79:37:6f: ae:1e:d5:01:b3:30:e0:e0:dd:71:88:a9:e3:38:42: 27:2f:0f:13:df:16:dc:e5:dc:eb:46:43:bb:30:1d: 4d:09:cb:1f:51:c7:11:c0:2d:07:14:13:4e:14:2c: 42:0c:16:29:b7:9d:fc:15:67:85:83:95:71:6e:7b: 3a:a3:5c:15:4c:82:19:4d:47:b6:67:f1:77:8b:92: 28:82:05:f2:29:ca:3c:28:65:fd:2f:1e:91:d3:21: 77:5b:c9:4b:dc:fa:eb:ad:68:fe:95:21:3a:a9:a4: fb:50:8d:75:11:97:b1:93:52:42:9f:54:6a:c6:6b: cc:33:c4:21:f5:0d:60:39:de:46:d0:f7:ed:e9:b9: c9:3b:16:9c:c4:d6:d2:5c:93:5d:e1:0b:a3:f6:dc: 81:6a:e5:bf:0f:35:ab:af:8a:9e:e3:6c:35:cf:f3: cc:e4:69:3a:c9:85:2d:62:50:9d:b2:6d:d8:8b:a0: ed:33:02:d4:db:7f:53:2c:d1:18:9a:52:03:65:41: 49:5f:72:d0:2d:69:e5:03:39:8f:aa:09:40:36:ef: ab:32:fc:f3:ac:83:3f:a7:d4:44:18:49:23:c8:a4: 78:03:85:18:7a:86:0e:f1:5e:82:e5:6a:04:a6:d3: fd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:11:0F:53:1A:D4:28:6B:94:7E:95:BB:5F:93:20:5E:9B:38:9B:D0 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c0:66:55:c9:ea:a5:2f:98:36:f9:05:37:c9:10:a8:7c:56: f0:24:90:c8:04:ea:42:c0:ad:43:e5:47:73:f3:ba:22:0c:ed: a6:39:9d:78:f0:80:25:61:d7:de:55:13:3a:39:0f:df:a6:96: 29:8e:c4:93:72:fc:c0:87:dc:e7:30:ca:1e:00:33:ca:93:84: 20:11:e4:64:60:8d:6e:62:2d:d1:7c:9c:1e:4d:6e:06:07:b8: 18:90:ef:8a:0f:d1:2c:29:04:d3:b1:04:65:07:68:5b:1b:31: 9b:be:5c:54:57:31:ec:8d:0d:c4:5c:53:a4:cb:73:47:0a:0d: e3:64:f6:87:7b:d6:63:30:e7:f8:f0:fe:6f:44:a2:d9:0a:bd: ab:ca:29:10:7c:be:7d:10:66:32:2e:8f:7d:ac:f7:55:58:09: b8:52:c3:97:8e:fc:69:81:e8:cb:c4:fe:99:90:2e:b8:da:88: 29:a6:af:30:85:34:32:92:c1:12:bb:6a:b7:04:ee:d1:e8:ef: 87:7e:3c:b5:b1:76:2c:c0:6c:93:5f:19:98:3d:25:9d:42:41: bd:a8:ab:13:90:4f:c1:66:b0:8e:2e:18:71:b4:65:82:89:5d: ee:8f:c7:57:9f:ad:d1:42:34:cf:52:41:63:cd:73:8a:30:4b: 43:7b:df:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDXJ6tshB4fv+SOMxJHhuuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwOTI1MDYwMTM2WhcNMjYwOTI2MDYwMTM2WjAzMTEwLwYDVQQD EyhiMzExMGY1MzFhZDQyODZiOTQ3ZTk1YmI1ZjkzMjA1ZTliMzg5YmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dB/4RvTyf6CwUl5N2+uHtUBszDg 4N1xiKnjOEInLw8T3xbc5dzrRkO7MB1NCcsfUccRwC0HFBNOFCxCDBYpt538FWeF g5Vxbns6o1wVTIIZTUe2Z/F3i5IoggXyKco8KGX9Lx6R0yF3W8lL3PrrrWj+lSE6 qaT7UI11EZexk1JCn1RqxmvMM8Qh9Q1gOd5G0Pft6bnJOxacxNbSXJNd4Quj9tyB auW/DzWrr4qe42w1z/PM5Gk6yYUtYlCdsm3Yi6DtMwLU239TLNEYmlIDZUFJX3LQ LWnlAzmPqglANu+rMvzzrIM/p9REGEkjyKR4A4UYeoYO8V6C5WoEptP9KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMRD1Ma1ChrlH6Vu1+TIF6bOJvQMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsBmVcnq pS+YNvkFN8kQqHxW8CSQyATqQsCtQ+VHc/O6IgztpjmdePCAJWHX3lUTOjkP36aW KY7Ek3L8wIfc5zDKHgAzypOEIBHkZGCNbmIt0XycHk1uBge4GJDvig/RLCkE07EE ZQdoWxsxm75cVFcx7I0NxFxTpMtzRwoN42T2h3vWYzDn+PD+b0Si2Qq9q8opEHy+ fRBmMi6Pfaz3VVgJuFLDl478aYHoy8T+mZAuuNqIKaavMIU0MpLBErtqtwTu0ejv h348tbF2LMBsk18ZmD0lnUJBvairE5BPwWawji4YcbRlgold7o/HV5+t0UI0z1JB Y81zijBLQ3vfGg== -----END CERTIFICATE-----Generated at Fri Sep 25 13:53:25 2026 by rpki-client