$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: YR+ROVRGxuV+8Ry/uHwe1p+VNaYzIJ10kwsCn6a8LGo= Subject key identifier: D3:58:42:F8:D1:F4:A4:F1:9A:AC:0F:4C:90:DA:3C:28:80:57:11:E8 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019E1EA2D01A983B0317559B42BF0C113F09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 14E8 Signing time: Wed 13 May 2026 00:00:47 +0000 Manifest this update: Wed 13 May 2026 00:00:47 +0000 Manifest next update: Thu 14 May 2026 00:00:47 +0000 Files and hashes: 1: 00oBTfnWdUzIvMRCoDAsBiu6TY0.roa (hash: 2cUMeBAWg056ZrP6AEZcwET0ohxuoFacoijmfCtjIBA=) 2: 6x8_lobLoVhuOkMPbJ37tyo730k.roa (hash: frU4mbSkgCyRaUyYfKiF6eXm6Dyg76kmIZLBN+kqhOQ=) 3: G6j6G54eI6PykBhSQs9rNNcS6hw.roa (hash: laEXgXrT36Ynj7L9LkdaNFFej1PJ+rq5ig2aomYZyl4=) 4: RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa (hash: gac1U5GhiAAvsADQW6zIs1K5OYBIIdxw6YN3Rmr6cdo=) 5: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 6: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 7: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: vuQUJ4SYxvK8jeSuBgvjyp60N6gSGrmchIGTwC6iX9s=) 8: mdwMxB2i4JqGt_2u-3_ShCtSrqY.roa (hash: sXvWRa0cGZ0eH2CssCaF8CgkrXf1U+VjrI6hfvsrHmA=) 9: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 10: ofUllF-dWXHUPtc7vJnGioqPfCY.roa (hash: DKXn87ibX3uXQNhf8bxZ9LKgNiZi6MqVfnjhDNqP0fA=) 11: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:a2:d0:1a:98:3b:03:17:55:9b:42:bf:0c:11:3f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: May 13 00:00:47 2026 GMT Not After : May 14 00:00:47 2026 GMT Subject: CN=d35842f8d1f4a4f19aac0f4c90da3c28805711e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b7:a8:a8:e1:8c:8c:28:49:d0:3c:a0:ea:57: 26:41:65:6b:69:b8:c4:90:52:2d:72:f6:aa:d0:95: 33:61:b4:2c:2f:74:eb:3b:3d:72:97:18:f6:b7:04: 7b:41:f0:82:37:20:25:97:90:52:f5:e4:b4:59:2d: 40:75:18:b3:8d:48:c6:47:5e:c3:c9:7d:e4:14:fc: 66:b0:a0:ec:52:1f:27:98:35:5f:64:81:74:2b:6e: b5:58:80:45:58:2b:e6:9f:7e:69:80:db:42:a0:0f: 5a:12:e2:ee:66:16:df:07:ea:9e:74:c7:d5:c1:6e: db:26:ee:25:00:54:1b:fd:4e:d0:f5:d7:00:34:4e: 1b:bb:3d:9f:b0:cb:b7:21:32:78:71:cb:b9:f4:6c: 85:d6:9b:f1:d0:97:1f:b6:73:57:86:c4:d9:d0:59: 8c:5f:7d:a9:2f:59:06:51:69:7e:0f:97:ba:41:3d: c5:7d:73:95:ec:d3:fe:50:e4:bc:5a:78:4a:e3:c6: 23:d9:00:ed:62:59:c3:38:73:48:20:fe:a1:dc:99: 66:65:0b:b5:79:b2:48:21:54:fc:d4:5f:47:3e:79: 78:1c:03:0b:c5:bb:76:05:53:72:14:90:d9:e3:d5: 4d:b9:28:98:27:4f:2d:e8:6c:fc:27:ea:42:5b:c1: d4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:58:42:F8:D1:F4:A4:F1:9A:AC:0F:4C:90:DA:3C:28:80:57:11:E8 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:fa:9a:cd:15:3b:22:a1:20:4e:0e:f8:58:65:46:f7:ed:d3: 24:3d:8a:35:e8:56:cd:84:98:32:69:39:96:29:63:ca:e0:34: 8a:11:d6:9d:91:8a:39:4e:de:01:a9:6d:83:e1:2e:2a:c0:f2: 56:db:62:b7:92:c5:a2:61:3f:94:58:a3:34:ef:a1:ed:f9:57: 43:8c:25:8f:56:6c:45:12:85:44:2b:ab:c2:ce:7c:46:13:07: b6:72:16:b4:e7:e7:43:de:c3:e7:46:0d:29:0b:1f:17:8f:5e: 9b:7e:25:b3:44:31:03:76:1b:e3:7f:6a:a0:36:10:70:d8:1c: c6:fd:46:52:c8:ba:1e:4f:2e:63:48:87:a4:72:8e:95:94:04: 54:98:ec:b2:55:16:bc:ad:ae:11:c9:68:13:5c:89:a7:96:b5: 98:a9:a8:6b:8e:a4:34:52:ff:5c:bd:b1:eb:29:87:48:e5:52: e9:62:14:a3:25:02:84:06:be:72:84:d3:73:df:78:72:d5:a5: 03:5a:69:d3:0f:4e:a1:0d:8b:9c:fd:e9:9b:65:c1:aa:66:ca: 65:ba:e3:92:14:92:b7:a4:7b:74:09:bb:59:17:dd:eb:a6:6f: 1d:e7:5b:f1:ce:3c:c1:39:87:78:25:4c:9f:ff:9c:f7:81:cc: f9:4a:99:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eotAamDsDF1WbQr8MET8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwNTEzMDAwMDQ3WhcNMjYwNTE0MDAwMDQ3WjAzMTEwLwYDVQQD EyhkMzU4NDJmOGQxZjRhNGYxOWFhYzBmNGM5MGRhM2MyODgwNTcxMWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjreoqOGMjChJ0Dyg6lcmQWVrabjE kFItcvaq0JUzYbQsL3TrOz1ylxj2twR7QfCCNyAll5BS9eS0WS1AdRizjUjGR17D yX3kFPxmsKDsUh8nmDVfZIF0K261WIBFWCvmn35pgNtCoA9aEuLuZhbfB+qedMfV wW7bJu4lAFQb/U7Q9dcANE4buz2fsMu3ITJ4ccu59GyF1pvx0JcftnNXhsTZ0FmM X32pL1kGUWl+D5e6QT3FfXOV7NP+UOS8WnhK48Yj2QDtYlnDOHNIIP6h3JlmZQu1 ebJIIVT81F9HPnl4HAMLxbt2BVNyFJDZ49VNuSiYJ08t6Gz8J+pCW8HUOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNYQvjR9KTxmqwPTJDaPCiAVxHoMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPqazRU7 IqEgTg74WGVG9+3TJD2KNehWzYSYMmk5liljyuA0ihHWnZGKOU7eAaltg+EuKsDy Vttit5LFomE/lFijNO+h7flXQ4wlj1ZsRRKFRCurws58RhMHtnIWtOfnQ97D50YN KQsfF49em34ls0QxA3Yb439qoDYQcNgcxv1GUsi6Hk8uY0iHpHKOlZQEVJjsslUW vK2uEcloE1yJp5a1mKmoa46kNFL/XL2x6ymHSOVS6WIUoyUChAa+coTTc994ctWl A1pp0w9OoQ2LnP3pm2XBqmbKZbrjkhSSt6R7dAm7WRfd66ZvHedb8c48wTmHeCVM n/+c94HM+UqZTQ== -----END CERTIFICATE-----Generated at Wed May 13 02:31:56 2026 by rpki-client